Home / F5 / 201

F5 201 Practice Test - Questions Answers, Page 20

Question list

List of questions

Question 191

(0)

Assume a virtual server is configured with a ClientSSL profile. What would the result be if the virtual server's destination port were not 443?

Question 192

(0)

A BIG-IP Administrator needs to restore an encrypted UCS archive from the command line using the TMSH utility. Which TMSH command should the BIG-IP Administrator use to accomplish this?

Question 193

(0)

On the VCMP system, a BIG-IP host administrator imports a new ISO image into the host's /shared/images folder. The new ISO images that reside on the vCMP host are available for installation on the g

Question 194

(0)

A BIG-IP Administrator configures a Virtual Server. Users report that they always receive a TCP RST packet to the BIG-IP system when attempting to connect to it. What is the possible reason for this

Question 195

(0)

A BIG-IP Administrator needs to remove a pool specific health monitor. There is a pool named Best Pool with two members, one named Best pool member and one named Best pool member2. In the Local Traf

Question 196

(0)

Which statement is true concerning SSL termination?

Question 197

(0)

A site wishes to perform source address translation on packets from some clients but not others. The determination is not based on the client's IP address, but on the virtual servers their packets a

Question 198

(0)

Assume a client's traffic is being processed only by a NAT; no SNAT or virtual server processing takes place. Also assume that the NAT definition specifies a NAT address and an origin address while

Question 199

(0)

A standard virtual server is defined with a pool and a SNAT using automap. All other settings for the virtual server are at defaults. When client traffic is processed by the BIG-IP, what will occur

Question 200

(0)

Which VLANs must be enabled for a SNAT to perform as desired (translating only desired packets)?

Question 191

Assume a virtual server is configured with a ClientSSL profile. What would the result be if the virtual server's destination port were not 443?

SSL termination could not be performed if the virtual server's port was not port 443.

Virtual servers with a ClientSSL profile are always configured with a destination port of 443.

As long as client traffic was directed to the alternate port, the virtual server would work as intended.

Since the virtual server is associated with a ClientSSL profile, it will always process traffic sent to port 443.

Show Answer Comment (0)

Question 192

A BIG-IP Administrator needs to restore an encrypted UCS archive from the command line using the TMSH utility.

Which TMSH command should the BIG-IP Administrator use to accomplish this?

load/sys ucs <filepath> passphrase

load/sys config file <filepath> passphrase

load/sys config file <filepath>

load/sys ucs <filepath> no-license

Show Answer Comment (0)

On the VCMP system, a BIG-IP host administrator imports a new ISO image into the host's /shared/images folder. The new ISO images that reside on the vCMP host are available for installation on the guest. How should the BIG-IP Administrator install one image from within the guest?

Install the new software on the host and wait for it to automatically be installed on all guests.

Run the following command on guest tmsh install sys software block-device-image image_name volume < volume_name>

Run the following command on guest tmsh install sys software image image_name volume < volume_name>

Run the following command on host tmsh install sys software block-device-image image_name volume < volume_name>

Show Answer Comment (0)

Question 194

A BIG-IP Administrator configures a Virtual Server. Users report that they always receive a TCP RST packet to the BIG-IP system when attempting to connect to it. What is the possible reason for this issue?

The virtual server Type is set to Internal

The virtual server Type is set to Reject

The virtual server Type is set to Drop

The virtual server Type is set to Stateless

Show Answer Comment (0)

Question 195

A BIG-IP Administrator needs to remove a pool specific health monitor. There is a pool named Best Pool with two members, one named Best pool member and one named Best pool member2. In the Local Traffic section of the administrative GUI, which stops should the BIG-IP Administrator take to remove a pool level monitor?

Pool > Pool List > Best Pool > Members > Health Monitors

Nodes > Node List> Best _pool_memberl > Heath Monitors

Monitors > Monitor Name> Instances

Pool > Pool List> Best Pool > Health Monitors

Show Answer Comment (0)

Question 196

Which statement is true concerning SSL termination?

A virtual server that has both ClientSSL and ServerSSL profiles can still support cookie persistence.

Decrypting traffic at the BIG-IP allows the use of iRules for traffic management, but increases the load on the pool member.

When any virtual server uses a ClientSSL profile, all SSL traffic sent to the BIG-IP is decrypted before it is forwarded to servers.

If a virtual server has both a ClientSSL and ServerSSL profile, the pool members have less SSL processing than if the virtual server had only a ClientSSL profile.

Show Answer Comment (0)

Question 197

A site wishes to perform source address translation on packets from some clients but not others. The determination is not based on the client's IP address, but on the virtual servers their packets arrive on. What could best accomplish this goal?

A SNAT for all addresses could be defined, and then disable the SNAT processing for select VLANs.

Some virtual servers could be associated with SNAT pools and others not associated with SNAT pools.

The decision to perform source address translation is always based on VLAN. Thus, the goal cannot be achieved.

The decision to perform source address translation is always based on a client's address (or network). Thus, this goal cannot be achieved.

Show Answer Comment (0)

Question 198

Assume a client's traffic is being processed only by a NAT; no SNAT or virtual server processing takes place. Also assume that the NAT definition specifies a NAT address and an origin address while all other settings are left at their defaults. If a client were to initiate traffic to the NAT address, what changes, if any, would take place when the BIG-IP processes such packets?

The source address would not change, but the destination address would be translated to the origin address.

The destination address would not change, but the source address would be translated to the origin address.

The source address would not change, but the destination address would be translated to the NAT's address.

The destination address would not change, but the source address would be translated to the NAT's address.

Show Answer Comment (0)

Question 199

A standard virtual server is defined with a pool and a SNAT using automap. All other settings for the virtual server are at defaults. When client traffic is processed by the BIG-IP, what will occur to the IP addresses?

Traffic initiated by the pool members will have the source address translated to a self-IP address but the destination address will not be changed.

Traffic initiated to the virtual server will have the destination address translated to a pool member address and the source address translated to a self-IP address.

Traffic initiated by selected clients, based on their IP address, will have the source address translated to a self-IP address but the destination will only be translated if the traffic is destined to the virtual server.

Traffic initiated to the virtual server will have the destination address translated to a pool member address and the source address translated to a self-IP address. Traffic arriving destined to other destinations will have the source translated to a self-IP address only.

Show Answer Comment (0)