201 f5

A Virtual Server uses an iRule to send traffic to pool members depending on the URI. The BIG-IP Administrator needs to modify the pool member in the iRule. Which event declaration does the BIG-IP Administrator need to change to accomplish this?. CLIENT_ACCEPTED. HTTP_RESPONSE. HTTP_REQUEST. HTTP_REQUEST.

A BIG-IP Administrator creates a new Virtual Server to load balance SSH traffic. Users are unable to log on to the servers. What should the BIG-IP Administrator do to resolve the issue?. Set Protocol to UDP. Set HTTP Profile to None. Set Source Address to 10.1.1.2. Set Destination Addresses/Mask to 0.0.0.0/0.

A BIG-IP Administrator uses backend servers to host multiple services per server. There are multiple virtual servers and pools defined, referencing the same backend servers. Which load balancing algorithm is most appropriate to have an equal number of connections on each backend server?. Least Connections (member). Least Connections (node). Predictive (member). Predictive (node).

The BIG-IP Administrator needs to perform a BIG-IP device upgrade to the latest version of TMOS. Where can the administrator obtain F5 documentation on upgrade requirements?. AskF5. DevCentral. Bug Tracker. iHealth.

A BIG-IP Administrator makes a configuration change to the BIG-IP device. Which file logs the message regarding the configuration change?. /var/log/messages. /var/log/audit. /var/log/user.log. /var/log/secure.

In the BIG-IP Configuration Utility, a user requests a single screen view to determine the status of all Virtual Servers and associated pool members, as well as any iRules in use. Where should the BIG-IP Administrator instruct the user to find this view?. Local Traffic > Monitors. Local Traffic > Virtual Servers. Local Traffic > Network Map. Statistics.

What is the status of a pool member when manual resume is enabled and a health check first fails and then passes?. Offline (Disabled). Offline (Enabled). Available (Disabled). Available (Enabled).

Some users who connect to a busy Virtual Server have connections reset by the BIG-IP system. Pool member resources are NOT a factor in this behavior. What is a possible cause for this behavior?. The Connection Rate Limit is set too high. The server SSL Profile has NOT been reconfigured. The Connection Limit is set too low. The Rewrite Profile has NOT been configured.

New Syslog servers have been deployed in an organization. The BIG-IP Administrator must reconfigure the BIG-IP system to send log messages to these servers. In which location in the Configuration Utility can the BIG-IP Administrator make the needed configuration changes to accomplish this?. System > Logs > Configuration. System > Configuration > Local Traffic. System > Logs > Audit. System > Configuration > Device.

A BIG-IP Administrator needs to restore a UCS file to an F5 device using the Configuration Utility. Which section of the Configuration Utility should the BIG-IP Administrator access to perform this task?. Local Traffic > Virtual Servers. Local Traffic > Policies. System > Archives. System > Configuration.

Due to a change in application requirements, a BIG-IP Administrator needs to modify the configuration of a Virtual Server to include a Fallback Persistence Profile. Which persistence profile type should the BIG-IP Administrator use for this purpose?. SSL. Hash. Universal. Source Address Affinity.

A BIG-IP device sends out the following SNMP trap: big-ipo.f5.com - bigipExternalLinkChange Link: 1.0 is DOWN Where in the BIG-IP Configuration utility should the BIG-IP Administrator verify the current status of Link 1.0?. System > Platform. Network > Trunks > Trunk List. Statistics > Performance > System. Network > Interfaces > Interface List.

The BIG-IP Administrator is investigating disk utilization on the BIG-IP device. What should the BIG-IP Administrator check next?. Large files on the / file system. Results from the EUD test. Results from the platform diagnostics test. Large files on /usr file system.

Which Virtual Server type prevents the use of a default pool?. Performance (Layer 4). Forwarding (IP). Performance HTTP. Standard.

A BIG-IP Administrator needs to view the CPU utilization of a particular Virtual Server. Which section of the Configuration Utility should the administrator use for this purpose?. Statistics > Module Statistics > Local Traffic > Virtual Addresses. Statistics > Module Statistics > Traffic Summary. Statistics > Analytics > Process CPU Utilization. Statistics > Module Statistics > Local Traffic > Virtual Servers.

A BIG-IP Administrator is setting up a new BIG-IP device. The network administrator reports that the interface has an incompatible media speed. The BIG-IP Administrator needs to change this setting manually. From which location should the BIG-IP Administrator perform this task?. On the Front Console. On the Front Console. In the Configuration Utility, Network > Interface. In the Configuration Utility, System > Configuration.

An organization is reporting slow performance accessing their Intranet website, hosted in a public cloud. All employees use a single Proxy Server with the public IP of 104.219.110.168 to connect to the Internet. What should the BIG-IP Administrator of the Intranet website do to fix this issue?. Change Source Address to 104.219.110.168/32. Change Load Balancing Method to Least Connection. Change Fallback Persistence Profile to source_addr. Change Default Persistence Profile to cookie.

A local user account (Users) on the BIG-IP device is assigned the User Manager role. User1 attempts to modify the properties of another account (User2), but the action fails. The BIG-IP Administrator can successfully modify the User2 account. Assuming the principle of least privilege, what is the correct way to allow User1 to modify User2 properties?. Move User2 to the same partition as User1. Grant User1 administrative privileges. Move User to the same partition as User2. Modify the partition access for User 1.

A BIG-IP Administrator creates an HTTP Virtual Server using an iApp template. After the Virtual Server is created, the user requests to change the destination IP addresses. The BIG-IP Administrator tries to change the destination IP address from 10.1.1.1 to 10.2.1.1 in Virtual Server settings, but receives the following error: The application service must be updated using an application management interface What is causing this error?. The Application Service was NOT deleted before making the IP address change. The IP addresses are already in use. The Application Services have Strict Updates enabled. The IP addresses used are NOT from the same subnet as the Self IP.

A BIG-IP Administrator is informed that traffic on Interface 1.1 is expected to increase over the maximum bandwidth capacity on the link. There is a single VLAN on the Interface. What should the BIG-IP Administrator do to increase the total available bandwidth?. Assign two Interfaces to the VLAN. Set the media speed of Interface 1.1 manually. Create a trunk object with two Interfaces. Increase the MTU on the VLAN using Interface 1.1.

A Standard Virtual Server for a web application is configured with Automap for the Source Address Translation option. The original source address of the client must be known by the backend servers. What should the BIG-IP Administrator configure to meet this requirement?. The Virtual Server type as Performance (HTTP). A HTTP profile to insert the X-Forward-For header. A HTTP Transparent profile. A SNAT Pool with the client IP.

The BIG-IP Administrator runs the command shown and observes a device trust issue between BIGIP devices in a device group. The issue prevents config sync on device bigip3.local. What is preventing the config sync?. Next Active Load factor is 0 on bigip1.local. Both devices are standby. Next Active Load factor is 1 on bigip1.local. Time Delta to local system is 12.

A BIG-IP Administrator makes a configuration change to a Virtual Server on the Standby device of an HA pair. The HA pair is currently configured with Auto-Sync Enabled. What effect will the change have on the HA pair configuration?. The change will be undone when Auto-Sync propagates the config to the HA pair. The change will be propagated next time a configuration change is made on the Active device. The change will be undone next time a configuration change is made on the Active device. The change will take effect when Auto-Sync propagates the config to the HA pair.

A user wants to use the iHealth Upgrade Advisor to determine any issues with upgrading TMOS from 13.0 to 13.1. Where can the user generate the QKView to upload to iHealth?. System > Software Management. System > Archives. System > Configuration. System > Support.

A BIG-IP Administrator is receiving intermittent reports from users that SSL connections to the BIG-IP device are failing. Upon checking the log files, the BIG-IP Administrator notices the following error message: ere tmm<instance>[<pid>]: 01260008:3: SSL transaction (TPS) rate limit reached After reviewing statistics, the BIG-IP Administrator notices there are a maximum of 1200 client-side SSL TPS and a maximum of 800 server-side SSL TPS. What is the minimum SSL license limit capacity the BIG-IP Administrator should upgrade to handle this peak?. 2000. 400. 800. 1200.

Users report that traffic is negatively affected every time a BIG-IP device fails over. The traffic becomess tabilized after a few minutes. What should the BIG-IP Administrator do to reduce the impact of future failovers?. Enable Failover Multicast Configuration. Set up Failover Method to HA Order. Configure MAC Masquerade. Configure a global SNAT Listener.

A BIG-IP Administrator plans to resolve a non-critical issue with a BIG-IP device in 2 weeks. What Severity level should be assigned to this type of F5 support ticket. 4. 2. 3. 1.

A BIG-IP Administrator adds new Pool Members into an existing, highly utilized pool. Soon after, there are reports that the application is failing to load for some users. What pool level setting should the BIG-IP Administrator check?. Availability Requirement. Allow SNAT. Action On Service Down. Slow Ramp Time.

Administrative user accounts have been defined on the remote LDAP server and are unable to log in to the BIG-IP device. Which log file should the BIG-IP Administrator check to find the related messages?. /var/log/secure. /var/log/messages. /Nar/log/ltm. /var/log/user.log.

A BIG-IP Administrator creates a new Virtual Server. The end user is unable to access the page. During troubleshooting, the administrator learns that the connection between the BIG-IP system and server is NOT set up correctly. What should the administrator do to solve this issue?. Disable Address Translation. Set Address Translation to Auto Map, configure a SNAT pool, and have pool members in the same subnet of the servers. Set Address Translation to SNAT and configure a specific translation address. Set Address Translation to SNAT and have self-IP configured in the same subnet of servers.

Which type of Virtual Server requires the use of a FastL4 profile?. Performance (Layer 4). Stateless. Performance (HTTP). Standard.

A BIG-IP Administrator plans to upgrade a BIG-IP device to the latest TMOS version. Which two tools could the administrator leverage to verify known issues for the target versions? (Choose two.). F5 University. F5 Downloads. F5 End User Diagnostics (EUD). F5iHealth. F5 Bug Tracker.

The interface 1.1 of the BIG-IP device has been connected to a link dedicated to traffic on VLAN 120. What should the BIG-IP Administrator do to receive traffic from the VLAN?. Create a new VLAN object and set Customer Tag to 120. Create a new VLAN object and assign the interface 1.1 untagged. Create a new trunk object with interface 1.1 assigned. Create a new trunk object and assign it to the VLAN.

BIG-IP Administrator needs to determine which pool members in a pool have been manually forced offline and are NOT accepting any new traffic. Which status icon indicates this?. Black diamon. Red diamon. Yellow triangle. Black circle.

The BIG-IP Administrator has modified an iRule on one device of an HA pair. The BIG-IP Administrator notices there is NO traffic on the BIG-IP device in which they are logged into. What should the BIG-IP Administrator do to verify if the iRule works correctly?. Push configuration from this device to the group and start to monitor traffic on this device. Pull configuration to this device to the cluster and start to monitor traffic on this devic. Log in to the other device in the cluster, push configuration from it, and start to monitor traffic on that device. Log in to the other device in the cluster, pull configuration to it, and start to monitor traffic on that device.

A configuration change is made on the standby member of a device group. What is displayed as "Recommended Action" on the Device Management Overview screen?. Force active member of device group to standby. Activate device with the most recent configuration. Synchronize the active member configuration to the group. Synchronize the standby member configuration to the group.

What should the BIG-IP Administrator provide when opening a new ticket with F5 Support?. bigip.license file. QKViewfile. Device root password. SSL private keys.

A user notifies the BIG-IP Administrator that http://remote company.com is NOT accessible. Remote access to company resources must be encrypted. What should the BIG-IP Administrator do to fix the issue?. Change the Listening Port on remote.company.com_vs to Port 80. Add a Pool to the Virtual Server remote.company.com_VS. Add an iRule to remote.company.com_vs to redirect Traffic to HTTPS. Change the Type of the Virtual Server remote.company.com_vs to Forwarding.

A node is a member of various pools and hosts different web applications. If a web application isunavailable, the BIG-IP appliance needs to mark the pool member down for that application pool. What should a BIG-IP Administrator deploy at the pool level to accomplish this?. A UDP monitor with a custom interval/timeout. A combination of ICMP + TCP monitor. An HTTP monitor with custom send/receive strings. A TCP monitor with a custom interval/timeout.

A Standard Virtual Server configured for an application reports poor network performance. This application is accessed mainly from computers on the Internet. What should the BIG-IP Administrator configure on the Virtual Server to achieve better network performance?. Protocol Profile (Client) with f5-tcp-wan and Protocol Profile (Server) with f5-tcp-lan. Protocol Profile (Client) with f5-tcp-lan. Protocol Profile (Client) with fS-tcp-lan and Protocol Profile (Server) with f5-tcp-wan. Protocol Profile (Client) with f5-tcp-optimized.

A BIG-IP Administrator discovers malicious brute-force attempts to access the BIG-IP device on the management interface via SSH. The BIG-IP Administrator needs to restrict SSH access to the management interface. Where should this be accomplished?. System > Configuration. Network > Interfaces. Network > Self IPs. System > Platform.

A BIG-IP Administrator is creating a new Trunk on the BIG-IP device. What objects should be added to the new Trunk being created?. Interfaces. Network routes. VLANS. IP addresses.

Interface 1.2 on a BIG-IP VE has a status of UNINITIALIZED. What is the reason for this status?. Interface 1.2 has been added to a trunk. Interface 1.2 has NOT been assigned to a VLAN. Interface 1.2 has been disabled. No default route has been created.

A BIG-IP Administrator is unable to connect to the management interface via HTTPS. What is a possible reason for this issue?. The port lockdown setting is configured to Allow None. An incorrect management route is specified. The IP address of the device used to access the management interface is NOT included in the "IP Allow" list in the Configuration Utility. The IP address of the device used to access the management interface is NOT included in the "http Allow" list in the CLI.

A BIG-IP Administrator needs to purchase new licenses for a BIG-IP appliance. The administrator needs to know if a module is licensed and the memory requirement for that module. Where should the administrator view this information in the System menu?. Resource Provisioning. Configuration > Device. Software Management. Configuration >OVSDB.

A BIG-IP Administrator needs to deploy an application on the BIG-IP system to perform SSL offload and re-encrypt the traffic to pool members. During testing, users are unable to connect to the application. What must the BIG-IP Administrator do to resolve the issue?. Remove the configured SSL Profile (Client). Configure Protocol Profile (Server) as splitsession-default-tcp. Enable Forward Proxy in the SSL Profile (Client). Configure an SSL Profile (Server).

A BIG-IP Administrator configures a new VLAN on an HA pair of devices that does NOT yet have any traffic. This action causes the assigned traffic group to fail over to the standby device. Which VLAN setting should be changed to prevent this issue?. Auto Last Hop. Fail-safe. Customer Tag. Source Check.

During a high-demand traffic event, the BIG-IP Administrator needs to limit the number of new connections per second allowed to a Virtual Server. What should the administrator apply to accomplish this task?. A HTTP Compression profile to the Virtual Server. A connection rate limit to the Virtual Server. A connection limit to the Virtual Server. A OneConnect profile to the Virtual Server.

Users are unable to reach an application. The BIG-IP Administrator checks the Configuration Utility and observes that the Virtual Server has a red diamond in front of the status. What is causing this issue?. All pool members are down. The Virtual Server is receiving HTTPS traffic over HTTP virtual. The Virtual Server is disabled. All pool members have been disabled.

A BIG-IP Administrator is conducting maintenance on one BIG-IP appliance in an HA Pair. Why should the BIG-IP Administrator put the appliance into FORCED_OFFLINE state?. To preserve existing connections to Virtual Servers and reduce the CPU load. To allow new connections to Virtual Servers and ensure the appliance becomes active. To terminate connections to the management IP and decrease persistent connections. To terminate existing connections to Virtual Servers and prevent the appliance from becoming active.

An ecommerce company is experiencing latency issues with online shops during Black Friday's peakseason. The BIG-IP Administrator detects an overall high CPU load on the BIG-IP device and wants to move the top utilized Virtual Servers to a dedicated BIG-IP device. Where should the BIG-IP Administrator determine the problematic Virtual Servers?. System > Plattform. Local Traffic > Virtual Servers > Virtual Server List. Local Traffic > Network Map. Statistics > Module Statistics > Local Traffic > Virtual Servers.

A set of servers is used for an FTP application as well as an HTTP website via separate BIG-IP Pools. The server support team reports that some servers are receiving a lot more traffic than others. Which Load Balancing Method should the BIG-IP Administrator apply to even out the connection count?. Ratio (Member). Least Connections (Member). Least Connections (Node). Ratio (Node).

A BIG-IP Administrator reviews the Plane CPU Usage performance chart and discovers a high percentage of Control Plane utilization. Which type of traffic does this indicate a higher usage of?. Administrative. Tunnel. Accelerated. Application.

One of the two members of a device group has been decommissioned. The BIG-IP Administrator tries to delete the device group, but is unsuccessful. Prior to removing the device group, which action should be performed?. Disable the device group. Remove all members from the device group. Remove the decommissioned device from the device group. Make sure all members of the device group are in sync.

A BIG-IP Administrator is configuring an SSH Pool with five members. Which Health Monitor should be applied to ensure that available pool members are monitored accordingly?. https. udp. http. tcp.

A BIG-IP Administrator needs to configure health monitors for a newly configured server pool named Pool_B. Which health monitor settings will ensure that all pool members will be accurately marked as available or unavailable?. HTTPS, HTTP, FTP, and ICMP, with the Availability Requirement of all health monitors. HTTPS, HTTP, FTP, and SSH, with the Availability Requirement of at least one monitor. HTTPS and HTTP with the Availability Requirement of at least one health monitor. HTTPS, HTTP, FTP, and SSH with the Availability Requirement of all health monitors.

A BIG-IP Administrator is configuring a pool with members who have differing capabilities. Connections to pool members must be load balanced appropriately. Which load balancing method should the BIG-IP Administrator use?. Least Sessions. Least Connections (member). Fastest (node). Weighted Least Connections (member).

The BIG-IP appliance fails to boot. The BIG-IP Administrator needs to run the End User Diagnostics (EUD) utility to collect data to send to F5 Support. Where can the BIG-IP Administrator access this utility?. Console Port. Internal VLAN interface. External VLAN interface. Management Port.

A BIG-IP Administrator configures a node with a standard icmp Health Monitor. The Node shows as DOWN although the Backend Server is configured to answer ICMP requests. Which step should the administrator take next to find the root cause of this issue?. Run a curl Run a qkview. Run a qkview. Run a tcpdump. Run a ssldump.

A BIG-IP Administrator needs to install a HotFix on a standalone BIG-IP device, which has HD1.1 as the Active Boot Location. The BIG-IP Administrator has already re-activated the license and created an UCS archive of the configuration. In which sequence should the BIG-IP Administrator perform the remaining steps?. Install HotFix in HD 1.1, Reboot the BIG-IP device. Install UCS Archive. Install HotFix in HD 1.2, Install base Image in HD 1.2, Activate HD1.2. Install base Image in HD1.2, Install HotFix in HD1.2, Activate HD 1.2. Activate HD 1.2, Install base image in HD 1.2. Install HotFix in HD 1.2.

For a given Virtual Server, the BIG-IP must perform SSL Offload and negotiate secure communication over TLSv2 only. What should the BIG-IP Administrator do to meet this requirement?. Configure a custom SSL Profile (Client) and select no TLSvl in the options list. Configure a custom SSL Profile (Client) with a custom TLSV1.2 cipher string. Configure a custom SSL Profile (Server) and select no TLSvl in the options list. Configure a custom SSL Profile (Server) with a custom TLSV1.2 cipher string.

The BIG-IP Administrator generates a qkview using "qkview -SO" and needs to transfer the output file via SCP. Which directory contains the output file?. /var/log. /var/tmp. /var/local. /var/config.

How many nodes are represented on the network map shown?. 1. 2. 3. 4.

How many nodes are represented on the network map shown?. 1. 2. 3. 4.

A user attempts to connect to 10.10.10.1.80 using FTP over SSL with an FTPS client. Which virtual server will match and attempt to process the request?. vs_https. vs_ftp. vs_http. nvfs.

All pool members are online. All other virtual server settings are at default What might after the load balancing behavior?. enabing SNAT automap. enabing a falback host in the http profile. adding a oneconnect profile. adding a persistence profile.

A custom HTTP monitor is failing to a pool member 10.10.3.75:8080 that serves up www.example.com. A ping works to the pool member address. The SEND string that the monitor is using is: GET/HTTP/l.l/r/n/Host.www.example.com/r/n/ConnectionClose/r/n/r/n Which CLI tool syntax will show that the web server returns the correct HTTP response?. curlhttp://10.10.10.3.75:8080/www.example.com/index.html. curl-header 'Host:www.example.com' http://10.10.3.75:8080/. tracepath 'http://www.example.com:80. tracepath 10.10.3.75:8080 GET /index.

A BIG-IP Administrator reviews the log files to determine the cause of a recent problem and finds the following entry. Mar 27.07.58.48 local/BIG-IP notice mcpd {5140} 010707275 Pool member 172.16.20.1.10029 monitor status down. What is the cause of this log message?. The pool member has been disabled. The pool member has been marked as Down by the BIG-IP Administrator. The monitor attached to the pool member needs a higher timeout value. The monitor attached to the pool member has failed.

Which two pool members should be chosen for a new connection? (Choose two.). 172.16.15.9.80. 172.16.15.4.80. 172.10.15.2.80. 172.16.15.1.80. 172.16.15.7.80.

Which method is recommended for creating a new user from the CLI?. Run f5adduser username' then 'f5passwd username' from bash or tmsh. Run tmsh create auth user username prompt for password' from bash. edit bigip.conf to add the new user and the user's clear-text password. Run useradd username' then 'passwd username' from bash tmsh.

How should a BIG-IP Administrator persistent sessions from being sent to a pool member so that the server administrator can perform maintenance?. force the pool member offline. disable the pool member. add an additional monitor to the pool. disable the virtual server.

A BIG-IP Administrator defines a device Self IP . The Self IP is NOT reachable from the network. What should the BIG-IP Administrator verify first?. The correct interface has been selected. The correct VLAN has been selected. Verify if auto last hop is disabled. The correct Trunk has been selected.

A BIG-IP Administrator upgrades the BIG-IP LTM to a newer software version. After the administrator reboots into the new volume, the Configuration fails to load. Why is the Configuration failing to load?. The license needs to be reactivated before the upgrade. The upgrade was performed on the standby unit. A minimum of at least two reboots is required. Connectivity to the DNS server failed to be established.

A pool member fails the monitor checks for about 30 minutes and then starts passing the monitor checks. New traffic is Not being sent to the pool member. What is the likely reason for this problem?. The pool member is disabled. Monitor Type is TCP Half Open. Manual resume is enabled. Time Until Up is zero.

An LTM device has a virtual server mapped to www.f5.com. Users report that when they connect to /resources/201.1.2h.l_l.com they are unable to receive content. What is the likely cause of the issue?. The pool associated with the virtual server does not have priority group activation enabled. The virtual address does not have ARP enabled. The virtual address does not have route advertising enabled. The pool associated with the virtual server is falling its health check.

A BIGIP Administrator needs to load a UCS file but must exclude the license file. How should the administrator perform this task?. From the CLI with command U tmsh load /$ys ucs <ucs filename> no-license. From the GUI, select the UCS file, unchcck the license box, and click restore. From the CLI with command(tmos)« tmsh load /sys ucs <ucs filename> no-license. From the GUI, select the UCS file and click restore.

The BIG-IP Administrator configures an HTTP monitor with a specific receive string. The status is marked 'down'. Which tool should the administrator use to identify the problem?. Ping. Health. tcpdump. ifconfig.

Which two pool members are eligible to receive new connections? (Choose two). 10.21.0.102.80. 10.21.0.104.80. 10.21.0.105.80. 10.21.0.101.80. 10.21.0.103.80.

A connection is being established to IP 1.1.1.1 on port 8080. Which virtual server will handle the connection?. fwd_8080_vs. host_vs. host_ 8080_VS. fwdvs.

How should a BIG-IP Administrator control the amount of traffic that a newly enabled pool member receives. set the Slow Ramp Time. set a Connection Limit. set the Priority Group Activation. set a Health Monitor.

A BIG-IP Administrator contacts F5 Support, which identifies a suspected hardware failure. Which information should the BIG-IP Administrator provide to F5 Support?. Qkview, EUD output. Qkview, UCS archive, core files. Qkview, part numbers for failed components. Qkview, packet capture, UCS archive.

A BIG-IP Administrator explicitly creates a traffic group on a BIG-IP device. Which two types of configuration objects can be associated with this traffic group? (Choose two.). Pool Members. Virtual Addresses. iRules. VLANS. Application Instances.

A BIG-IP Administrator suspects that one of the BIG-IP device power supplies is experiencing power outages. Which log file should the BIG-IP Administrator check to verify the suspicion?. /var /log/daemon.log. /var/log/kern.log. /var/log/ltm. /var/log/audit.

The BIG-IP Administrator needs to ensure the correct health monitor is being used lor a new HTTP pool named P_example. Where should the BIG-IP Administrator validate these settings in the Configuration Utility?. Local Traffic > Nodes > Default Monitor. Local Traffic > Profiles > Services > HTTP > http. Local Traffic > Monitors > http. Local Traffic > Pools > P_ example.

A BIG-IP Administrator needs to check the memory utilization on a BIG-IP system. Which two methods can the UIG IP Administrator use? (Choose two.). Run the tmsh show/sys memory command. Run the tmsh show/sys traffic command. Go to Statistics > Module Statistics > Traffic Summary in the configuration utility. Go to Statistics > Module Statistics > Memory in the configuration utility. Go to System > Disk Management in the configuration utility.

A BIG-IP Administrator wants to add the ASM Module to an HA pair of BIG-IP devices. The BIG-IP Administrator has already installed a new Add-On License on both devices in the HA pair. What should the BIG-IP Administrator do next to use the module?. Provision the new module on both BIG-IP device's. Synchronize both BIG-IP devices. Reboot both BIG-IP devices. Reactivate the Licenses on both BIG IP devices.

A BIG-IP Administrator notices that one of the servers that runs an application is NOT receiving any traffic. The BIG-IP Administrator examines the configuration status of the application and observes the displayed monitor configuration and affected Pool Member status. What is the possible cause of this issue?. The Node Health Monitor is NOT responding. The application is NOT responding with the expected Receive String. HTTP 1.1 is NOT appropriate for monitoring purposes. The BIG-IP device is NOT able to reach the Pool.

Which Virtual Server type should be used to load balance HTTP traffic to a pool of servers?. Standard. Stateless. Forwarding (IP). Forwarding (Layer 2).

The BIG-IP Administrator generates QKView using tmsh command "qkview -SO". In which directory does the BIG-IP appliance save the QKView?. /etc/tmp. /var/tmp. /shared/qkview. /var /tmp/qkview.

Which TMSH command generated this output?. tmsh list /cm sync-status. tmsh show /sys sync-status. tmsh list /sys sync-status. tmsh show /cm sync status.

Which log file should the BIG-IP Administrator check to determine if a specific user tried to log in to the 8IG-IP Configuration by utility?. /var/log/pam/tally/log. /var/log/secure. /var/log/trn. /var/log/http.d.

A virtual server is configured to offload SSL from a pool of backend servers. When users connect to the virtual server, they successfully establish an SSL connection but no content is displayed. A packet trace performed on the server shows that the server receives and responds to the request. What should a BIG-IP Administrator do to resolve the problem?. enable Server SSL profile. disable Server SSL profile. disable SNAT. enable SNAT.

A BIG-IP Administrator needs to collect HTTP status code and HTTP method for traffic flowing through a virtual server. Which default profile provides this information?. HTTP. Analytics. Request Adapt. Statistics.

DNS queries from two internal DNS servers are being load balanced to external DNS Servers via a Virtual Server on a BIG-P device. The DNS queries originate from 192.168.101.100 and 192.168.101.200 and target 192.168.21.50 All DNS queries destined for the external DNS Servers fail Which property change should the BIG-IP Administrator make in the Virtual Server to resolve this issue?. Protocol Profile (Client) to DNS-OPTIMZED. Type to Performance (HTTP). Protocol to UDP. Source Address to 192.168.101.0/24.

A BIG-IP Administrator recently deployed an application. Users are experiencing slow performance with the application on some remote networks. Which two modifications can the BIG-IP Administrator make to address this issue? (Choose two). Apply dest addr profile to the Virtual Server. Apply f5-tcp-wan profile to the Virtual Server. Apply f5-tcp-lan profile to the Virtual Server. Apply source_addr profile to the Virtual Server. Apply fasti_4 profile to the Virtual Server.

A BIG-IP Administrator needs to fall over the active device. The administrator logs into the Configuration Unity and navigates to Device Management > Traffic Group. However, Force to Standby is greyed out What is causing this issue?. The BIG-IP Administrator is NOT logged into command line to tail over. The BIG-IP Administrator is on the Standby Device. The BIG-IP Administrator is logged in as root. The BIG-IP Administrator is logged in as administrator.

A BIG-IP Administrator is working with a BIG-IP device and discovers that one of the Interfaces on a Trunk is DOWN. What is the reason for this Interface status?. The switch is NOT connected to the Interface. There is NO transceiver installed on the Interface. There is NO default route configured for this trunk. The media speed of the interface has NOT been set.

A BIG-IP Administrator creates a new VLAN on BIG-IP Cluster Member A and attaches an Interface to it. Although the Auto Config Sync is in place, the new VLAN does NOT show up on Cluster Member B. What should the BIG-IP Administrator do to ensure the new VLAN is configured on each Cluster Member?. Configure the new VLAN manually on Cluster Member B. Reset the Device Trust of the BIG-IP Cluster on either Cluster Member. Configure a Default Route for the new VLAN on Cluster Member A. Enable the Interface that is attached to the new VLAN on Cluster Member A.

A BIG-IP Administrator must determine if a Virtual Address is configured to fail over to the standby member of a device group in which area of the Configuration Utility can this be confirmed?. Device Management > Traffic Groups. Device Management > Devices. Local Traffic > Virtual Servers. Device Management > Overview.

A development team needs to apply a software fix and troubleshoot one of its servers. The BIG-IP Administrator needs to immediately remove all connections from the BIG-IP system to the back end server. The BIG-IP Administrator checks the Virtual Server configuration and finds that a persistence profile is assigned to it. What should the BIG-IP Administrator do to meet this requirement?. Set the pool member to a Forced Offline state and manually delete easting connections through the command line. Set the pool member to a Forced Offline stat. Set the pool member to a Disabled state. Set the pool member to a Disabled state and manually delete existing connections through the command line.

The owner of a web application asks the 8IG-IP Administrator to change the port that the BIG-IP device sends traffic to. This change must be made for each member in the server pool named app_pool for their Virtual Server named app_vs. In which area of the BIG-IP Configuration Utility should the BIG-P Administrator make this change?. Local Traffic > Pools. Local Traffic > Nodes. Network > Interfaces. Local Traffic > Virtual Servers.

A BIG-IP Administrator assigns the default http health monitor to a pool that has three members listening on port 80 When the administrator connects to each pool member via the CURL utility, two of the members respond with a status of 404 Not Found while the third responds with 200 OK. What will the pool show for member availability?. All members offline. Two members offline and one member online. Two members online and one member offline. All members online.

A BIG-IP Administrator needs to apply a health monitor for a pool of database servers named DB_Pool that uses TCP port 1521. Where should the BIG-IP Administrator apply this monitor?. Local Traffic > Profiles » Protocol > TCP. Local Traffic > Nodes > Default Monitor. Local Traffic > Pools > De Pool > Members. Local Traffic > Pools > DB Pool > Properties.

A BIG-IP Administrator configures the Virtual Server to pass HTTP traffic. Users report that they are unable to access the application, What should the administrator do to resolve this issue?. Change the Virtual Server name. Disable the state. Reconfigure the Source Address. Reconfigure the Pool Members.

A BIG-IP Administrator finds the following log entry after a report of user issues connecting to a virtual server: 01010201: 2: Inet port exhaustion on 10.70.110.112 to 192.28.123.250:80 (proto 6) How should the BIG-IP Administrator modify the SNAT pool that is associated with the virtual server?. Remove the SNAT pool and apply SNAT Automap. Remove an IP address from the SNAT pool. Add an address to the SNAT pool. Increase the timeout of the SNAT addresses.

A BIG-IP Administrator configures remote authentication and needs to make sure that users can still login even when the remote authentication server is unavailable. Which action should the BIG-IP Administrators in the remote authentication configuration to meet this requirement?. Set partition access to "All". Enable the Fallback to Local option. Configure a remote role grove. Configure a second remote user directory.

During a planned upgrade lo a BIG-IP HA pair running Active/Standby, an outage to application traffic is reported shortly after the Active unit is forced to Standby Reverting the flower resolves the outage. What should the BIG-IP Administrator modify to avoid an outage during the next for over event?. The Tag voice on the Standby device. The interface on the Active device to 1.1. The Tag value on the Active device. The Interface on the Standby device to 1.1.

A BIG-IP device is replaced with an RMA device. The BIG-IP Administrator renews the license and tries to restore the configuration from a previously generated UCS archive on the RMA device. The device configuration is NOT fully loading. What is causing the configuration load to fail?. The Device Group is NOT configured for Full Sync. The US does NOT contain the full config. The clock is NOT set correctly. The Master Key is NOT restored.

To increase available bandwidth of an existing Trunk, the BIG-IP Administrator is adding additional interfaces. Which command should the BIG-IP Administrator run from within bosh shell?. tmsh create /net trunk trunk_A interfaces add {1.3.1.4}. tmsh create/sys trunk trunk_A interfaces add {1.3.1.4}. tmsh modify/sys trunk trunk_A interfaces add {1.3.1.4}. tmsh modify /net trunk trunk_A interfaces add {1.3.1.4}.

A BIG-IP Administrator configures a Virtual Server to handle HTTPS traffic. Users report that the application is NOT working. Which actional configuration is regard to resolve this issue?. Configure SSL Profile (Client). Configure Protocol Profile (Server). Configure Service Profile HTTP. Configure SSL Profile (Server).

Why is the virtual server responsive to incoming connections?. The pool member is disabled. The pool member monitor failed. The node is disabled. The node monitor failed.

A BIG-IP Administrator needs to have a BIG-IP linked to two upstream switches for resilience of the external network. The network engineer who is going to configure the switch instructs the BIG-IP Administrator to configure interface binding with LACP. Which configuration should the administrator use?. A virtual server with an LACP profile and the switches' management IPs as pool members. A virtual server with an LACP profile and the interfaces connected to the switches as pool members. A Trunk listing the allowed VLAN IDs and MAC addresses configured on the switches. A Trunk containing an interface connected to each switch.

A BIG-IP Administrator finds the following log entry: tnm tmm[7141]: 011e0002:4: sweeperjjpdate: aggressive mode activated. Which action should the BIG-IP Administrator to mitigate this memory issue?. Configure the redundant par to be active-active. Decrease the TCP profile ide Timeout value. increase the TCP profile ide Timeout value. Configure the serve to use Connection Mirroring.

A user needs to determine known security vulnerabilities on an existing BIG-IP appliance and how to remediate these vulnerabilities. Which action should the BIG-IP Administrator recommend?. Verify the TMOS version and review the release notes. Create a UCS archive and upload to iHealth. Create a UCS archive and open an F5 Support request. Generate a Qview and upload to iHeath.

Which Pool Members are receiving traffic?. Serv1, serv2,serv3, serv4. serv1, serv3. serv1, serv3, serv4. serv1.

A BIG-IP Administrator needs to apply a license to the BIG-IP system to increase the user count from the base license. Which steps should the BIG-IP Administrator?. System License > Re-activate> Add-On Registration> Edit. System > License > Re-activate > Base Registration> Edit. Device Management > Devices > Select BIG-IP System > Update. System > Configuration >Device > General.

An LTM device has a virtual server mapped to www5f.com with a pool assigned. The objects are defined as follows: Virtual server. Destination 192.168.245.100.443 netmask 255.255.255.0 Persistence: Source address persistence netmask 255.0.0.0 SNAT:AutoMap Profiles: HnP/TCP How should the BIG-IP Administrator modify the persistence profile so that each unique IP address creates a persistence record?. netmask 0.0.0.0. netmask 255.255.255.255. netmask 255.255.0.0. netmask 255.256.255.0.

A BIG-IP device is configured with both an internal external and two Corporate VLANs. The virtual server has SNAT enabled and is set to listen on all VLANs Auto Last Hop is disabled. The Corporate users are on 10.0.0.0./24 and 172.16.0.0/12. The BIG-IP has a Self-IP on the 1.0.0.0.0./24 subnet. Internet users are able to access the virtual server. Only some of the Corporate users are able to connect to the virtual server A BIG-IP Administrator performs a tcpdump on the BIG-IP and verifies that traffic is arriving from users in 10.0.0.0/24. What should the BIG-IP Administrator do to correct this behaviour?. Disable the server on the internal VLAN. Add a static route for the 172.16.0.0/12 subnet. Change the default route to point to the extra firewall. Modify the default route of the servers to point to the BIG-IP device.

A BIG-IP Administrator needs to modify a virtual server that web offload web traffic compression tasks from the target server. Which two profiles must the BIG-IP Administrator apply to a virtual server to enable compression? (Choose two). Server SSL profile. Stream profile. Persistence profile. HTTP profile. Compression profile.

The BIG-IP Administrator disable all pool members in a pool Users are still able to reach the pool members. What is allowing users to continue to reach the disabled pool members?. A slow to time on Pool. A persistence profile on the Virtual Server. A slow ramp time on virtual Server. A persistence profile on the Pool.

A BIG-IP Administrator is making adjustments to an iRule and needs to identify which of the 235 virtual server configured on the BIG-IP device will be affected. How should the administrator obtain this information in an effective way?. Local Traffic > Virtual Server. Local traffic Pools. Local Traffic > Network Map. Local traffic > Rules.

According to the shown Configuration Utility stings What is the setting of the User Directory configuration under the Authentication submenu?. Local. Managed. Remote-TACACS+. Default system configuration.

A web server administrator informs the BIG-IP Administrator that web servers are overloaded. Starting next month, the BIG-IP device will terminate SSL to reduce web server load. The BIG-IP device is ready using client SSL client profile and Rules on HTTP level. What actions should the BIG-IP. What should do the addministrators to achieve the desired configuration?. Remove the server SSL profile and configure the Pool Members to use HTTP. Remove the client SSL profile and configure the Pool Members to use HTTP. Remove the chart SSL profile and change the Virtual Server to accept HTTP. Remove the server SSL profile and change the Virtual Server to accept HTTP traffic.

A BIG-IP Administrator wants to add a new Self IP to the BIG-IP device. Which item should be assigned to the new Self IP being configured?. Interface. Route. VLAN. Trunk.

A BIG-IP Administrator uses a device group to share the workload and needs to perform service on a BIG-IP device currently active for a traffic group. The administrator needs to enable the traffic group to run on another BIG-IP device in the device group. What should the administrator do to meet the requirement?. Create a new Traffic Group and then fail to Standby Unit. Select Traffic Group and then select Failover. Select Traffic Group and then select Force to Standby. Select Traffic Group on Primary Unit and then select Demote.

A BIG-IP Administrator has configured a BIG-IP cluster with remote user authentication against dcOlf5trn.com. Only local users can successfully log into the system. Configsync is also failing. Which two tools should the BIG-IP Administrator use to further investigate these issues? (Choose two). ntpq. pam_timestamp_check. passwd. pwck. dig.

A BIG-IP Administrator receives an RMA replacement for a failed F5 device. The BIG-IP Administrator tries to restore a UCS taken from the previous device, but the restore fails. The following error appears inthe/var/log/itm. mcpd [****J: •*****»;0; License is not operational (expired or digital signature does not match contents.) What should the BIG-IP Administrator do to avoid this error?. Use the appropriate tmsh command with the no-license option. Revoke the license prior to restoring. Reactivate the license on the new device using the manual activation method. Remove the license information from the UCS archive.

A BIG-IP Administrator needs to restore an encrypted UCS archive from the command line using the TMSH utility. Which TMSH command should the BIG-IP Administrator use to accomplish this?. load/sys ucs <filepath> passphrase <password>. load/sys config file <filepath> passphrase <password>. load/sys config file <filepath>. load/sys ucs <filepath> no-license.

On the vCMP system, a BIG-IP host administrator imports a new ISO image into the host's /shared/images folder. The new ISO images that reside on the vCMP host are available for installation on the guest. How should the BIG-IP Administrator install one image from within the guest?. install the new software on the host and wait for it to automatically be installed on all guests. Run the following command on guest tmsh install sys software block-device-image image_name volume < volume_name>. Run the following command on guest tmsh install sys software image image_name volume < volume_name>. Run the following command on host tmsh install sys software block-device-image image_name volume < volume_name>.

A BIG-IP Administrator configures a Virtual Server. Users report that they always receive a TCP RST packet to the BIG-IP system when attempting to connect to it. What is the possible reason for this issue?. The virtual server Type is set to Internal. The virtual server Type is set to Reject. The virtual server Type is set to Drop. The virtual server Type is set to Stateless.

A BIG-IP Administrator needs to remove a pool specific health monitor. There is a pool named Best Pool with two members, one named Best pool member and one named Best pool member2. In the Local Traffic section of the administrative GUI, which stops should the BIG-IP Administrator take to remove a pool level monitor?. Pool > Pool List > Best Pool > Members > Health Monitors. Nodes > Node List> Best _pool_memberl > Heath Monitors. Monitors > Monitor Name> Instances. Pool > Pool List> Best Pool > Health Monitors.

A BIG-IP Administrator need to ensure that a pool member and down by the monitor the BIG-IP system sends existing connections to another be pool member. Which should the BIG-IP Administrator perform to meet this goal?. Set Action on Service Down setting under the server configuration to reselect. Reconfigure the pool motor members as UP. Enable mirroring within the persistence profile. Set Action Service Down setting under the pool configuration to reselect.

The network team creates a new VLAN on the switches. The BIG-IP Administrator needs to create a configuration on the BIG-IP device. The BIG-IP Administrator creates a new VLAN and Self IP, but the servers on the new VLAN are NOT reachable from the BIG-IP device. Which action should the BIG-IP Administrators to resolve this issue?. Set Port Lockdown of Set IP to Allow All. Change Auto Last Hop to enabled. Assign a physical interface to the new VLAN. Create a Floating Set IP Address.

How are new connections load balanced?. To the first two members listed with the same priority group. To the pool member with the least number of connections. To the pool member with a high priority group value defined. To the pool member with a low priority group value defined.

Active connections to pool members are unevenly distributed. The load balancing method is Least Connections (member) Priority Group Activation is disabled. What is a potential cause of the event distribution?. Priority Group Activation is disabled. SSL Profile Server is applied. Persistence profile is applied. Incorrect load balancing method.

A BIG-IP Administrator must configure the BIG-IP device to send system log messages to a remote syslog server In addition, the log messages need to be sent over TCP for guaranteed delivery. What should the BIG-IP Administrator configure?. syslog-ng. Request Logging Profile. HSL Logging. Remote Logging.

A BIG-IP Administrator runs the initial configuration wizard and learns that the NTP servers were invalid. In which area of the Configuration Utility should the BIG-IP Administrator update the list of configured NTP servers?. System > Configuration. System > Services. System > Preferences. System > Platform.

Which file should the BIG-IP Administrator check to determine when a Virtual Server changed its status. /var/log/audit. /var/log/lastlog. /var/log/tm. /var/log/monitors.

During maintenance, the BIG-IP Administrator manually disables a pool member as shown. What is the result?. All pool members continue to process persistent connections. All pool members stop accepting new connections. The disabled pool member stops processing persistent connections. The disabled pool member stops processing existing connections.

During a maintenance window, an EUD test was executed and the output displayed on the screen. The BIG-IP Administrator did NOT save the screen output. The BIG-IP device is currently handling business critical traffic. The BIG-IP Administrator needs to minimize impact. What should the BIG-IP Administrator do to provide the EUD results to F5 Support?. Boot the device into EUD then collect output from console. Execute EUD from tmsh and collect output from console. Collect file /var/log/messages. Collect file /shared/log/eud.log.

An application is configured so that the same pool member must be used for an entire session, aswell as for HTTP and FTP traffic. A user reports that a session has terminated, and the user must restart the session. The BIG-IP Administrator determines that the active BIG-IP device failed over to the standby BIG-IP device. Which configuration settings should the BIG-IP Administrator verify to ensure proper behaviour when BIG-IP failover occurs?. cookie persistence and session timeout. Stateful failover and Network Failover detection. Persistence mirroring and Match Across Services. syn-cookie insertion threshold and connection low-water mark.

A BIG-IP Administrator needs to find which modules have been licensed for use on the BIG-IP system. In which section of the Configuration Utility can the BIG-IP Administrator find this information?. System > Services. System > Resource Provisioning. System > Platform. System > Support.

Refer to the exhibit. The BIG-IP Administrator needs to avoid overloading any of the Pool Members with connections, when they become active. What should the BIG-IP Administrator configure to meet this requirement?. Different Ratio for each member. Same Priority Group to each member. Action On Service Down to Reselect. Slow Ramp Time to the Pool.

A BIG-IP Administrator configures a Virtual Server to load balance traffic between 50 webservers for an ecommerce website Traffic is being load balanced using the Least Connections (node) method. The webserver administrators report that customers are losing the contents from their shopping carts and are unable to complete their orders. What should the BIG-IP Administrator do to resolve the issue?. Change Default Persistence Profile setting to cookie. Change Load Balancing method to Ratio (member). Change Default Persistence Profile setting to sipjnfo. Change Load Balancing method to Ratio (node).

A BIG-IP Administrator sees the following error message in /var/log/ltm diskmonitor: *******; Disk partition shared has less than 30% free. Which section of the Configuration Utility should the BIG-IP Administrator access to investigate this error message?. Statistics > Analytics. System > File Management. Statistics > Module Statistics > System. System > Disk Management.

A new BIG-IP VE is deployed with default settings. The BIG-IP Administrator completes the setup utility in the Configuration Utility. The internal self IP address fails to respond to a ping request. What is a possible cause of this issue?. Port lockdown on internal self IP is set to Allow None. Route is NOT assigned to internal self IP. Internal interface VLAN is set to untagged. Internal interface VLAN is set to tagged.

A BIG-IP Administrator is checking the BIG-IP device for known vulnerabilities. What should the BIGIP Administrator upload to BIG-IP iHealth for further analysis?. QKView. EUD. UCS. tcpdump.

The BIG-IP Administrator is unable to access the management console via Self-IP 10.10 1.33 and port 443. What is the reason for this problem?. Packet Filter needs to be configured to allow a source. Self IP is configured to allow TCP All. Self IP is configured to allow UDP 443. Packet Filter is configured to allow port 443.

A BIG-IP Administrator is performing maintenance on the active BIG-IP device of an HA pair. The BIGIP Administrator needs to minimize traffic disruptions. What should the BIG-IP Administrator do to start the maintenance activity?. Reboot the BIG-IP device. Move resources to a new Traffic Group. Force the BIG-IP device to standby. Disable switch ports of the BIG-IP device.

How long will the persistence record remain in the table?. 180 seconds after the last packet. 180 seconds after the initial table entry. 300 seconds after the initial table entry. 300 seconds after the last packet.

A BIG-IP system has the following configuration: * SNAT is set to Auto Map * There are two VLANs internal and external * Default route is pointed to the gateway on external VLAN * Self P for internal VLAN is 1921.1.2 * Self IP for external VLAN is 192.1.2.2 * Floating IP addresses for internal VLAN is 192.1.1.1 * Floating IP addresses for external VLAN is 192.1.2.1 * The Virtual Server IP address is 192.1.1.100 Which IP address does the BIG-IP system use first when traffic reaches the servers on the internal VLAN?. 192.1.1.100. 192.1.2.2. 192.1.1.1. 192.1.2.1.

A pool of four servers has been partially upgraded for two new servers with more memory and CPU capacity. The BIG-IP Administrator must change the load balance method to consider more connections for the two new servers. Which load balancing method considers pool member CPU and memory load?. Round Robin. Round Robin. Ratio. Least Connection.

A BIG-IP device has only LTM and ASM modules provisioned. Both have nominal provisioning level. The BIG-IP Administrator wants to dedicate more resources to the LTM module. The ASM module must remain enabled. Which tmsh command should the BIG-IP Administrator execute to obtain the desired result?. modify/sys provision asm level minimum. modify /sys provision Itm level dedicated. modify /sys provision asm level none. modify /sys provision Itm level minimum.

A VLAN has the following objects configured: Self-IP 10.10.10.100 with port lockdown set to Allow default Virtual server 10.10.10.100:443 with UDP profile enabled Virtual server 10.10.10.0/24 port forwarding virtual server Global destination NAT forwarding 10.10.10.100 to internal server 172.168.10.100 Which object will process this request when https://10.10.10.100 is entered into a browser?. self-IP 10.10.10.100 with port lockdown set to Allow default. virtual server 10.10.100/24 port o forwarding virtual server. global destination NAT forwarding 10.10.10.100 to internal server 172.168.10.100. virtual server 10.10.10.100.443 with UDP profile enabled.

A BIG-IP Administrator opens a case with F5 Support. The support engineer requests the BIG-IP appliance chassis serial number. Which TMSH command will provide this information?. list /sys software. list /sys software. list/sys diags. show /sys hardware.

A BIG-IP Administrator needs to configure the BIG-IP system to perform load balancing for FTP servers running passive mode FTP. How should the administrator configure the Virtual Server to perform this load balancing?. A Standard Virtual Server + FTP profile. A Forwarding Virtual Server. A Performance Layer 4 Virtual Server + FTP profile. A Message Routing Virtual Server.

A BIG-IP Administrator remotely connects to the appliance via out-of-band management using https://mybigip mycompany net. The management portal has been working all week. When the administrator attempts to login today, the connection times out. Which two aspects should the administrator verify? (Choose two). DNS is property resolving the FQDN of the device. The device is NOT redirecting them to http. The administrator has the latest version of the web browser. Packet Filters on the device are blocking port 80. The administrator has TCP connectivity to the device.

What should the BIG-IP Administrator do to apply and activate a hotfix to a BIG-IP device that is currently running version 11.0.0 on active partition HD1.1?. 1. confirm that 11.0.0 is installed on inactive partition HD1.2 2. apply a hotfix to partition HD 1.2 3. activate partition HD1.2. 1. reactivate the license on partition HD1.1 2. apply a hotfix to partition HD1.1. 1. activate partition HD1.2 2 confirm version 11.0.0 on partition HD1.2 3. install a hotfix on partition HD1.2. 1. set partition HD1.2 active 2. apply a hotfix to partition HD1.2.

An IT support engineer needs to access and modify Virtual Servers in three partitions (Common /Banking and Dev) daily on a BIG-IP device. The company operates a Least Privilege access policy. What level of access does the IT support engineer need to ensure completion of daily roles?. Manager in /common/Banking, and /Dev partitions. Application Editor in /Common, /Banking, and /Dev partitions. Manager in all partitions. Application Editor in all partitions.

An LTM device has a virtual server mapped to www.f5.com with a pool assigned. Users report that when browsing, they are periodically required to re-login to /resources/201.1.7.b.2_l.com. The objects are defined as follows: Virtual server. Destination 192.168.245.100:443 netmask 255.255.255.0 Persistence: SSL session persistence Profiles: HTTP/TCP Which persistence method should the BIG-IP Administrator apply to resolve this issue?. Source address affinity. hexadecimal. SIP. Destination address affinity.

The BIG-IP Administrator needs to perform a BIG-IP device upgrade to the latest version of TMOS. Where can the administrator obtain F5 documentation on upgrade requirements?. iHealth. Network > Interfaces. Local Traffic > Pools. AsKF5. Local Traffic > Virtual Servers.

A BIG-IP Administrator needs to make sure that the automatic update check feature works properly. What must the administrator configure on the BIG-IP system?. Update Check Schedule. NTP servers. DNS name servers. SMTP servers.

A BIG-IP Administrator applied the latest hotfix to an inactive boot location by mistake, and needs to downgrade back to the previous hotfix. What should the BIG-IP Administrator do to change the boot location to the previous hotfix?. Uninstall the newest hotfix and reinstall the previous hotfix. Reinstall the base version and install the previous hotfix. Reinstall the previous hotfix and re-activate the license. Uninstall the base version and restore the UCS.

The BIG-IP Administrator creates a custom iRule that fails to work as expected. Which F5 online resource should the administrator use to help resolve this issue?. DevCentral. Bug Tracker. University. iHealth.

The current status of a given pool is offline (red). Which condition could explain that state? Assume the descriptions below include all monitors assigned for each scenario. No monitors are currently assigned to any pool, member or node. The pool has a monitor assigned to it, and none of the pool members passed the test. The pool has a monitor assigned to it, and only some of the pool's members passed the test. A monitor is assigned to all nodes and all nodes have passed the test. The pool's members have no specific monitor assigned to them.

You need to terminate client SSL traffic at the BIG-IP and also to persist client traffic to the same pool member based on a BIG IP supplied cookie. Which four are profiles that would normally be included in the virtual server's definition? (Choose four.). TCP. HTTP. HTTPS. ClientSSL. ServerSSL. CookieBased Persistence.

A site needs to terminate client HTTPS traffic at the BIG-IP and forward that traffic unencrypted. Which two are profile types that must be associated with such a virtual server? (Choose two.). TCP. HTTP. HTTPS. ClientSSL. ServerSSL.

Which three statements describe a characteristic of profiles? (Choose three.). Default profiles cannot be created or deleted. Custom profiles are always based on a parent profile. A profile can be a child of one profile and a parent of another. All changes to parent profiles are propagated to their child profiles. While most virtual servers have at least one profile associated with them, it is not required.

A virtual server is defined using a source address based persistence profile. The last five connections were A, B, C, A, C . Given the conditions shown in the graphic, if a client with IP address 205.12.45.52 opens a connection to the virtual server, which member will be used for the connection?. 10.10.20.1:80. 10.10.20.2:80. 10.10.20.3:80. 10.10.20.4:80. 10.10.20.5:80.

How is persistence configured?. Persistence is an option within each pool's definition. Persistence is a profile type; an appropriate profile is created and associated with virtual server. Persistence is a global setting; once enabled, loadbalancing choices are superceded by the persistence method that is specified. Persistence is an option for each pool member. When a pool is defined, each member's definition includes the option for persistence.

Which cookie persistence method requires the fewest configuration changes on the web servers to be implemented correctly?. insert. rewrite. passive. session.

Which statement is true concerning cookie persistence?. Cookie persistence allows persistence independent of IP addresses. Cookie persistence allows persistence even if the data are encrypted from client to pool member. Cookie persistence uses a cookie that stores the virtual server, pool name, and member IP address in clear text. If a client's browser accepts cookies, cookie persistence will always cause a cookie to be written to the client's file system.

Assume a virtual server has a ServerSSL profile. What SSL certificates are required on the pool members?. No SSL certificates are required on the pool members. The pool members.SSL certificates must only exist. The pool members.SSL certificates must be issued from a certificate authority. The pool members.SSL certificates must be created within the company hosting the BIGIPs.

When configuring a Virtual Server to use an iRule with an HTTP_REQUEST event, which lists required steps in a proper order to create all necessary objects?. create profiles, create the iRule, create required pools, create the Virtual Server. create the Virtual Server, create required pools, create the iRule, edit the Virtual Server. create a custom HTTP profile, create required pools, create the Virtual Server, create the iRule. create required pools, create a custom HTTP profile, create the iRule, create the Virtual Server.

Which process or system can be monitored by the BIG-IP system and used as a failover trigger in a redundant pair configuration?. bandwidth utilization. duplicate IP address. CPU utilization percentage. VLAN communication ability.

Assuming there are open connections through an active system's NAT and a fail over occurs, by default, what happens to those connections?. All open connections will be lost. All open connections will be maintained. The "Mirror" option must be chosen on the NAT and the setting synchronized prior to the connection establishment. Longlived connections such as Telnet and FTP will be maintained while shortlived connections such as HTTP will be lost. All open connections are lost, but new connections are initiated by the newly active BIG IP, resulting in minimal client downtime.

A virtual server is defined per the charts. The last five client connections were to members C, D, A, B, B. Given the conditions shown in the above graphic, if a client with IP address 205.12.45.52 opens a connection to the virtual server, which member will be used for the connection. 172.16.20.1:80. 172.16.20.2:80. 172.16.20.3:80. 172.16.20.4:80. 172.16.20.5:80.

Under what condition must an appliance license be reactivated?. Licenses only have to be reactivated for RMAs no other situations. Licenses generally have to be reactivated during system software upgrades. Licenses only have to be reactivated when new features are added (IPv6, Routing Modules, etc) no other situations. Never. Licenses are permanent for the platform regardless the version of software installed.

Which three methods can be used for initial access to a BIG-IP system? (Choose three.). CLI access to the serial console port. SSH access to the management port. SSH access to any of the switch ports. HTTP access to the management port. HTTP access to any of the switch ports. HTTPS access to the management port. HTTPS access to any of the switch ports.

What is the purpose of provisioning?. Provisioning allows modules that are not licensed to be fully tested. Provisioning allows modules that are licensed be granted appropriate resource levels. Provisioning allows the administrator to activate modules in nonstandard combinations. Provisioning allows the administrator to see what modules are licensed, but no user action is ever.

Which three properties can be assigned to nodes? (Choose three.). ratio values. priority values. health monitors. connection limits. loadbalancing mode.

Where is the loadbalancing mode specified?. within the pool definition. within the node definition. within the virtual server definition. within the pool member definition.

Which statement accurately describes the difference between two loadbalancing modes specified as "member" and "node"?. There is no difference; the two terms are referenced for backward compatibility purposes. When the loadbalancing choice references "node", priority group activation is unavailable. Loadbalancing options referencing "nodes" are available only when the pool members are defined for the "any" port. When the loadbalancing choice references "node", the addresses' parameters are used to make the loadbalancing choice rather than the member's parameters.

Which two can be a part of a virtual server's definition? (Choose two.). rule(s). pool(s). monitor(s). node address(es). loadbalancing method(s).

Assume a BIG-IP has no NATs or SNATs configured. Which two scenarios are possible when client traffic arrives on a BIG-IP that is NOT destined to a self-IP? (Choose two.). If the destination of the traffic does not match a virtual server, the traffic will be discarded. If the destination of the traffic does not match a virtual server, the traffic will be forwarded based on routing tables. If the destination of the traffic matches a virtual server, the traffic will be processed per the virtual server definition. . If the destination of the traffic matches a virtual server, the traffic will be forwarded, but it cannot be loadbalanced since no SNAT has been configured.

When configuring a pool member's monitor, which three association options are available? (Choose three.). inherit the pool's monitor. inherit the node's monitor. configure a default monitor. assign a monitor to the specific member. do not assign any monitor to the specific member.

The current status of a given pool member is unknown. Which condition could explain that state?. The member has no monitor assigned to it. The member has a monitor assigned to it and the most recent monitor was successful. The member has a monitor assigned to it and the monitor did not succeed during the most recent timeout period. The member's node has a monitor assigned to it and the monitor did not succeed during the most recent timeout period.

The ICMP monitor has been assigned to all nodes. In addition, all pools have been assigned custom monitors. The pool is marked available. If a pool is marked available (green) which situation is sufficient to cause this?. All of the pool member nodes are responding to the ICMP monitor as expected. Less than 50% of the pool member nodes responded to the ICMP echo request. All of the members of the pool have had their content updated recently and their responses no longer match the monitor. Over 25% of the pool members have had their content updated and it no longer matches the receive rule of the custom monitor. The other respond as expected.

Generally speaking, should the monitor templates be used as production monitors or should they be customized prior to use. Most templates, such as http and tcp, are as effective as customized monitors. Monitor template customization is only a matter of preference, not an issue of effectiveness or performance. Most templates, such as https, should have the receive rule customized to make the monitor more robust. While some templates, such as ftp, must be customized, those that can be used without modification are not improved by specific changes.

You have a pool of servers that need to be tested. All of the servers but one should be tested every10 seconds, but one is slower and should only be tested every 20 seconds. How do you proceed?. It cannot be done. All monitors test every five seconds. It can be done, but will require assigning monitors to each pool member. It cannot be done. All of the members of a pool must be tested at the same frequency. It can be done by assigning one monitor to the pool and a different monitor to the slower pool member.

When can a single virtual server be associated with multiple profiles?. Never. Each virtual server has a maximum of one profile. Often. Profiles work on different layers and combining profiles is common. Rarely. One combination, using both the TCP and HTTP profile does occur, but it is the exception. Unlimited. Profiles can work together in any combination to ensure that all traffic types are supported in a given virtual server.

A site needs a virtual server that will use an iRule to parse HTTPS traffic based on HTTP header values. Which two profile types must be associated with such a virtual server? (Choose two.). TCP. HTTP. HTTPS. ServerSSL.

You have created a custom profile named TEST2. The parent profile of TEST2 is named TEST1. If additional changes are made to TEST1, what is the effect on TEST2?. All changes to TEST1 are propagated to TEST2. Some of the changes to TEST1 may propagate to TEST2. Changes to TEST1 cannot affect TEST2 once TEST2 is saved. When TEST1 is changed, the administrator is prompted and can choose whether to propagate changes to TEST2.

If a client's browser does not accept cookies, what occurs when the client connects to a virtual server using cookie persistence?. The connection request is not processed. The connection request is sent to a pology server. The connection request is loadbalanced to an available pool member. The connection request is refused and the client is sent a "server not available" message.

What is the purpose of MAC masquerading?. to prevent ARP cache errors. to minimize ARP entries on routers. to minimize connection loss due to ARP cache refresh delays. to allow both BIGIP devices to simultaneously use the same MAC address.

The incoming client IP address is 195.64.45.52 and the last five connections have been sent to members A, C, E, D and B. Given the virtual server, pool, and persistence definitions and statistics shown in the above graphic, which member will be used for the next connection?. 10.10.20.1:80. 10.10.20.2:80. 10.10.20.3:80. 10.10.20.4:80. 10.10.20.5:80. It cannot be determined with the information given.

Assume a virtual server has a ServerSSL profile. What SSL certificates are required on the BIG-IP?. No SSL certificates are required on the BIG-IP. The BIG-IP's SSL certificates must only exist. The BIG-IP's SSL certificates must be issued from a certificate authority. The BIG-IP's SSL certificates must be created within the company hosting the BIG-IPs.

Assume a virtual server is configured with a ClientSSL profile. What would the result be if the virtual server's destination port were not 443?. SSL termination could not be performed if the virtual server's port was not port 443. Virtual servers with a ClientSSL profile are always configured with a destination port of 443. As long as client traffic was directed to the alternate port, the virtual server would work as intended. Since the virtual server is associated with a ClientSSL profile, it will always process traffic sent to port 443.

Which statement is true concerning SSL termination?. A virtual server that has both ClientSSL and ServerSSL profiles can still support cookie persistence. Decrypting traffic at the BIG-IP allows the use of iRules for traffic management, but increases the load on the pool member. When any virtual server uses a ClientSSL profile, all SSL traffic sent to the BIG-IP is decrypted before it is forwarded to servers. If a virtual server has both a ClientSSL and ServerSSL profile, the pool members have less SSL processing than if the virtual server had only a ClientSSL profile.

A site wishes to perform source address translation on packets from some clients but not others. The determination is not based on the client's IP address, but on the virtual servers their packets arrive on. What could best accomplish this goal?. A SNAT for all addresses could be defined, and then disable the SNAT processing for select VLANs. Some virtual servers could be associated with SNAT pools and others not associated with SNAT pools. The decision to perform source address translation is always based on VLAN. Thus, the goal cannot be achieved. The decision to perform source address translation is always based on a client's address (or network). Thus, this goal cannot be achieved.

Assume a client's traffic is being processed only by a NAT; no SNAT or virtual server processing takes place. Also assume that the NAT definition specifies a NAT address and an origin address while all other settings are left at their defaults. If a client were to initiate traffic to the NAT address, what changes, if any, would take place when the BIG-IP processes such packets?. The source address would not change, but the destination address would be translated to the origin address. The destination address would not change, but the source address would be translated to the origin address. The source address would not change, but the destination address would be translated to the NAT's address. The destination address would not change, but the source address would be translated to the NAT's address.

A standard virtual server is defined with a pool and a SNAT using automap. All other settings for the virtual server are at defaults. When client traffic is processed by the BIG-IP, what will occur to the IP addresses?. Traffic initiated by the pool members will have the source address translated to a self-IP address but the destination address will not be changed. Traffic initiated to the virtual server will have the destination address translated to a pool member address and the source address translated to a self-IP address. Traffic initiated by selected clients, based on their IP address, will have the source address translated to a self-IP address but the destination will only be translated if the traffic is destined to the virtual server. Traffic initiated to the virtual server will have the destination address translated to a pool member address and the source address translated to a self-IP address. Traffic arriving destined to other destinations will have the source translated to a self-IP address only.

Which VLANs must be enabled for a SNAT to perform as desired (translating only desired packets)?. The SNAT must be enabled for all VLANs. The SNAT must be enabled for the VLANs where desired packets leave the BIG-IP. The SNAT must be enabled for the VLANs where desired packets arrive on the BIG-IP. The SNAT must be enabled for the VLANs where desired packets arrive and leave the BIG-IP.

A BIG-IP has a virtual server at 150.150.10.10:80 with SNAT automap configured. This BIG-IP also has a SNAT at 150.150.10.11 set for a source address range of 200.200.1.0 / 255.255.255.0. All other settings are at their default states. If a client with the IP address 200.200.1.1 sends a request to the virtual server, what is the source IP address when the associated packet is sent to the pool member?. 200.200.1.1. 150.150.10.11. Floating self IP address on VLAN where the packet leaves the system. Floating self IP address on VLAN where the packet arrives on the system.

Which IP address will the client address be changed to when SNAT automap is specified within a Virtual Server configuration?. The floating self-IP address on the VLAN where the packet leaves the system. The floating self-IP address on the VLAN where the packet arrives on the system. It will alternate between the floating and non floating self-IP address on the VLAN where the packet leaves the system so that port exhaustion is avoided. . It will alternate between the floating and non floating self-IP address on the VLAN where the packet arrives on the system so that port exhaustion is avoided.

A virtual server at 10.10.1.100:80 has the rule listed below applied. when HTTP_REQUEST { if{[HTTP::uri] ends_with "htm" } { pool pool1 } else if {[HTTP::uri] ends_with "xt" } { pool pool2 } If a user connects to http://10.10.1.100/foo.txt which pool will receive the request?. pool1. pool2. None. The request will be dropped. Unknown. The pool cannot be determined from the information provided.

Which statement is true concerning iRule events?. All iRule events relate to HTTP processes. All client traffic has data that could be used to trigger iRule events. All iRule events are appropriate at any point in the clientserver communication. If an iRule references an event that doesn't occur during the client's communication, the client's connection will be terminated prematurely.

Which three iRule events are likely to be seen in iRules designed to select a pool for load balancing? (Choose three.). CLIENT_DATA. SERVER_DATA. HTTP_REQUEST. HTTP_RESPONSE. CLIENT_ACCEPTED. SERVER_SELECTED.

Which event is always triggered when a client initially connects to a virtual server configured with an HTTP profile?. HTTP_DATA. CLIENT_DATA. HTTP_REQUEST. CLIENT_ACCEPTED.

A virtual server is listening at 10.10.1.100:80 and has the following iRule associated with it: when HTTP_REQUEST { if {[HTTP::uri] ends_with "txt" } { pool pool1 } elseif {[HTTP::uri] ends_with "php" } {pool pool2 } If a user connects to http://10.10.1.100/foo.html, which pool will receive the request?. pool1. pool2. None. The request will be dropped. Unknown. The pool cannot be determined from the information provided.

A virtual server is listening at 10.10.1.100:any and has the following iRule associated with it: when CLIENT_ACCEPTED { if {[TCP::local_port] equals 80 } { pool pool1 } elseif {[TCP::local_port] equals 443} { pool pool2 } If a user connects to 10.10.1.100 and port 22, which pool will receive the request?. pool1. pool2. None. The request will be dropped. Unknown. The pool cannot be determined from the information provided.

Which statement is true about the synchronization process, as performed by the Configuration Utility or by typing b config sync all?. The process should always be run from the standby system. The process should always be run from the system with the latest configuration. The two /config/bigip.conf configuration files are synchronized (made identical) each time the process is run. Multiple files, including /config/bigip.conf and /config/bigip_base.conf, are synchronized (made identical) each time the process is run.

Which statement is true concerning the default communication between a redundant pair of BIG-IP devices?. Communication between the systems cannot be effected by port lockdown settings. Data for both connection and persistence mirroring are shared through the same TCP connection. Regardless of the configuration, some data is communicated between the systems at regular intervals. Connection mirroring data is shared through the serial fail over cable unless network failover is enabled.

When upgrading a BIG-IP redundant pair, what happens when one system has been updated but the other has not?. Synching should not be performed. The first system to be updated will assume the Active role. This is not possible since both systems are updated simultaneously. The older system will issue SNMP traps indicating a communication error with the partner.

When using the setup utility to configure a redundant pair, you are asked to provide a "Failover Peer IP". Which address is this?. an address of the other system in its management network. an address of the other system in a redundant pair configuration. an address on the current system used to listen for failover messages from the partner BIG-IP. an address on the current system used to initiate mirroring and network failover heartbeat messages.

Which two statements describe differences between the active and standby systems? (Choose two.). Monitors are performed only by the active system. Failover triggers only cause changes on the active system. Virtual server addresses are hosted only by the active system. Configuration changes can only be made on the active system. Floating selfIP addresses are hosted only by the active system.

Assuming other failover settings are at their default state, what would occur if the failover cable were to be disconnected for five seconds and then reconnected?. As long as network communication is not lost, no change will occur. Nothing. Failover due to loss of voltage will not occur if the voltage is lost for less than ten seconds. When the cable is disconnected, both systems will become active. When the voltage is restored, unit two will revert to standby mode. When the cable is disconnected, both systems will become active. When the voltage is restored, both systems will maintain active mode.

Where is persistence mirroring configured?. It is always enabled. It is part of a pool definition. It is part of a profile definition. It is part of a virtual server definition.

Given that VLAN failsafe is enabled on the external VLAN and the network that the active BIG-IP's external VLAN is connected to has failed, which statement is always true about the results?. The active system will note the failure in the HA table. The active system will reboot and the standby system will go into active mode. The active system will failover and the standby system will go into active mode. The active system will restart the traffic management module to eliminate the possibility that BIGIP is the cause for the network failure.

Where is connection mirroring configured?. It an option within a TCP profile. It is an optional feature of each pool. It is not configured; it is default behavior. It is an optional feature of each virtual server.

Assume the bigd daemon fails on the active system. Which three are possible results? (Choose three.). The active system will restart the bigd daemon and continue in active mode. The active system will restart the tmm daemon and continue in active mode. The active system will reboot and the standby system will go into active mode. The active system will failover and the standby system will go into active mode. The active system will continue in active mode but gather member and node state information from the standby system.

How is MAC masquerading configured?. Specify the desired MAC address for each VLAN for which you want this feature enabled. Specify the desired MAC address for each selfIP address for which you want this feature enabled. Specify the desired MAC address for each VLAN on the active system and synchronize the systems. Specify the desired MAC address for each floating selfIP address for which you want this feature enabled.

Which action will take place when a failover trigger is detected by the active system?. The active device will take the action specified for the failure. The standby device also detects the failure and assumes the active role. The active device will wait for all connections to terminate and then failover. The standby device will begin processing virtual servers that have failed, but the active device will continue servicing the functional virtual servers.

Assuming that systems are synchronized, which action could take place if the fail over cable is connected correctly and working properly, but the systems cannot communicate over the network due to external network problems?. If network failover is enabled, the standby system will assume the active mode. Whether or not network failover is enabled, the standby system will stay in standby mode. Whether or not network failover is enabled, the standby system will assume the active mode. f network failover is enabled, the standby system will go into active mode but only until the network recovers.

Which must be sent to the license server to generate a new license?. the system's dossier. the system's host name. the system's base license. the system's purchase order number.

When initially configuring the BIG-IP system using the config utility, which two parameters can be set? (Choose two.). the netmask of the SCCP. the IP address of the SCCP. the port lockdown settings for the SCCP. the netmask of the host via the management port. the IP address of the host via the management port. the port lockdown settings for the host via the management port.

A site has six members in a pool. All of the servers have been designed, built, and configured with the same applications. It is known that each client's interactions vary significantly and can affect the performance of the servers. If traffic should be sent to all members on a regular basis, which loadbalancing mode is most effective if the goal is to maintain a relatively even load across all servers?. Ratio. Priority. Observed. Round Robin.

The incoming client IP address is 205.12.45.52. The last five connections have been sent to members C, D, A, B, B. Given the virtual server and pool definitions and the statistics shown in the graphic, which member will be used for the next connection?. 10.10.20.1:80. 10.10.20.2:80. 10.10.20.3:80. 10.10.20.4:80. 10.10.20.5:80.

Which two can be a part of a pool's definition? (Choose two.). rule(s). profile(s). monitor(s). persistence type. loadbalancing mode.

What is required for a virtual server to support clients whose traffic arrives on the internal VLAN and pool members whose traffic arrives on the external VLAN?. That support is never available. The virtual server must be enabled for both VLANs. The virtual server must be enabled on the internal VLAN. The virtual server must be enabled on the external VLAN.

A standard virtual server has been associated with a pool with multiple members. Assuming all other settings are left at their defaults, which statement is always true concerning traffic processed by the virtual server?. The client IP address is unchanged between the client side connection and the serverside connection. The server IP address is unchanged between the client side connection and the serverside connection. The server IP address is unchanged between the client side connection and the serverside connection. The IP addresses used in the clientside connection are the same as the IP addresses used in the serverside connection.

Monitors can be assigned to which three resources? (Choose three.). NATs. pools. iRules. nodes. SNATs. pool members. virtual servers.

A site has assigned the ICMP monitor to all nodes and a custom monitor, based on the HTTP template, to a pool of web servers. The HTTP based monitor is working in all cases. The ICMP monitor is failing for 2 of the pool member 5 nodes. All other settings are default. What is the status of the monitor is working in all cases?. All pool members are up since the HTTP based monitor is successful. All pool members are down since the ICMPbased monitor is failing in some cases. The pool members whose nodes are failing the ICMPbased monitor will be marked disabled. The pool members whose nodes are failing the ICMPbased monitor will be marked unavailable.

A site would like to ensure that a given web server's default page is being served correctly prior to sending it client traffic. They assigned the default HTTP monitor to the pool. What would the member status be if it sent an unexpected response to the GET request.?. The pool member would be marked offline (red). The pool member would be marked online (green). The pool member would be marked unknown (blue). The pool member would alternate between red and green.

A site is load balancing to a pool of web servers. Which statement is true concerning BIG IP's ability to verify whether the web servers are functioning properly or not?. Web server monitors can test the content of any page on the server. Web server monitors always verify the contents of the index.html page. Web server monitors can test whether the server's address is reachable, but cannot test a page's content. Web server monitors can test the content of static web pages, but cannot test pages that would require the web server to dynamically build content.

Which statement is true regarding failover?. Hardware failover is disabled by default. Hardware failover can be used in conjunction with network failover. If the hardware failover cable is disconnected, both BIGIP devices will always assume the active role. By default, hardware fail over detects voltage across the failover cable and monitors traffic across the internal VLAN.

Which is an advantage of terminating SSL communication at the BIGIP rather than the ultimate web server?. Terminating SSL at the BIG-IP can eliminate SSL processing at the web servers. Terminating SSL at IP the eliminates BIG all unencrypted traffic from the internal network. Terminating SSL at the BIG-IP eliminates the need to purchase SSL certificates from a certificate authority. Terminating SSL at the BIG-IP eliminates the need to use SSL acceleration hardware anywhere in the network.

Assume a client's traffic is being processed only by a NAT; no SNAT or virtual server processing takes place. Also assume that the NAT definition specifies a NAT address and an origin address while all other settings are left at their defaults. If the origin server were to initiate traffic via the BIG-IP, What changes, if any, would take place when the BIG-IP processes such packets?. The BIG-IP would drop the request since the traffic didn’t arrive destined to the NAT address. The source address would not change, but the destination address would be changed to the NAT address. The source address would be changed to the NAT address and destination address would be left unchanged. The source address would not change, but the destination address would be changed to a self-IP of the BIG-IP.

Which two statements are true about SNATs? (Choose two.). SNATs are enabled on all VLANs, by default. SNATs can be configured within a Profile definition. SNATs can be configured within a Virtual Server definition. SNAT's are enabled only on the VLAN where origin traffic arrives, by default.

A BIG-IP has two load balancing virtual servers at 150.150.10.10:80 and 150.150.10.10:443. The port 80 virtual server has SNAT automap configured. There is also a SNAT configured at 150.150.10.11 set for a source address range of 200.200.1.0 / 255.255.255.0. All other settings are at their default states. If a client with the IP address 200.200.1.1 sends a request to https://150.150.10.10, What is the source IP address when the associated packet is sent to the pool member?. 200.200.1.1. 150.150.10.11. Floating self IP address on VLAN where the packet leaves the system. Floating self IP address on VLAN where the packet arrives on the system.

Which statement is true concerning SNATs using automap?. Only specified self-IP addresses are used as automap addresses. SNATs using automap will translate all client addresses to an automap address. A SNAT using automap will preferentially use a floating self-IP over a nonfloating self-IP. A SNAT using automap can be used to translate the source address of all outgoing traffic to the same address regardless of which VLAN the traffic is sent through.

Which two statements are true about NATs? (Choose two.). NATs support UDP, TCP, and ICMP traffic. NATs can be configured with mirroring enabled or disabled. NATs provide a one-to-one mapping between IP addresses. NATs provide a many-to-one mapping between IP addresses.

Which statement describes a typical purpose of iRules?. iRules can be used to add individual control characters to an HTTP data stream. iRules can be used to update the timers on monitors as a server load changes. iRules can examine a server response and remove it from a pool if the response is unexpected. iRules can be used to look at client requests and server responses to choose a pool member to select for load balancing.

A virtual server is listening at 10.10.1.100:80 and has the following iRule associated with it: when HTTP_REQUEST { if { [HTTP::header UserAgent] contains "MSIE" } { pool MSIE_pool } else { pool Mozilla_pool } If a user connects to http://10.10.1.100/foo.html and their browser does not specify a UserAgent, which pool will receive the request?. MSIE_pool. Mozilla_pool. None. The request will be dropped. Unknown. The pool cannot be determined from the information provided.

A virtual server is listening at 10.10.1.100:any and has the following iRule associated with it: when CLIENT_ACCEPTED { if {[TCP::local_port] equals 21 } { pool ftppool } elseif {[TCP::local_port] equals 23 } { pool telnetpool } If a user connects to 10.10.1.100 and port 22, which pool will receive the request?. ftppool. telnetpool. None. The request will be dropped. Unknown. The pool cannot be determined from the information provided.

Which statement is true concerning a functional iRule?. iRules use a proprietary syntax language. iRules must contain at least one event declaration. iRules must contain at least one conditional statement. iRules must contain at least one pool assignment statement.

What is the purpose of floating self-IP addresses?. to define an address that grants administrative access to either system at any time. to define an address that allows either system to initiate communication at any time. to define an address that allows network devices to route traffic via a single IP address. to define an address that gives network devices greater flexibility in choosing a path to forward traffic.

Which parameters are set to the same value when a pair of BIG-IP devices are synchronized?. host names. system clocks. profile definitions. VLAN failsafe settings. MAC masquerade addresses.

Which two statements are true concerning the default communication between a redundant pair of BIG-IP systems? (Choose two.). Synchronization occurs via a TCP connection using ports 683 and 684. Connection mirroring data is shared via a TCP connection using port 1028. Persistence mirroring data is shared via a TCP connection using port 1028. Connection mirroring data is shared through the serial fail over cable unless network failover is enabled.

Which two methods can be used to determine which BIG-IP is currently active? (Choose two.). The bigtop command displays the status. Only the active system's configuration screens are active. The status (Active/Standby) is embedded in the command prompt. The ifconfig a command displays the floating addresses on the active system.

As a part of the Setup Utility, the administrator sets the host name for the BIG IP. What would be the result if the two systems in a redundant pair were set to the same host name?. Host names do not matter in redundant pair communication. In a redundant pair, the two systems will always have the same host name. The parameter is synchronized between the systems. The first time the systems are synchronized the receiving system will be assigned the same self-IP addresses as the source system. When the administrator attempts to access the configuration utility using the host name, they will always connect to the active system.

When network failover is enabled, which of the following is true?. The failover cable status is ignored. Failover is determined by the network status only. Either a network failure or loss of voltage across the failover cable will cause a failover. A network failure will not cause a failover as long as there is a voltage across the failover cable. The presence or absence of voltage over the fail over cable takes precedence over network failover.