Far Out 101 Exam For Application Delivery Fundamentals Certification

NEW QUESTION 1
The use of attack signature within an intrusion Detection System (IDS) is an application of which security model?

• A. Positive
• B. Context-based
• C. Negative
• D. Role-based

Answer: C

Explanation:
https //www.dosarrpst.com'ddos-blog/the-difference-between-positive-s-negatto-wafi

NEW QUESTION 2
Which three security controls are used in an SSL transaction? (Choose three.)

• A. symmetric encryption
• B. network admission controls
• C. asymmetric encryption
• D. digital certificates
• E. database encryption

Answer: AD

NEW QUESTION 3
An administrator needs to assess an LTM for potential configuration issues and required security updates. Which F5 website con automate this task?

• A. addf5f5.com
• B. ihealth5.com
• C. Devcentral f5.ccom
• D. www.f5.Com

Answer: B

Explanation:
https://www f5.com/services/support/support-offerings/big-ip-ihealth-diagnostic-tool

NEW QUESTION 4
In 200 db8 IPv6 address block is allocated to a load balancer for use as virtual server addresses. The address block balancer set ip address using a static route. What is the representation for the last address in the address block that a virtual server can use?

• A. 2001 db8 :: ffff, ffff, ffff, ffff
• B. 2001 db8::
• C. 2001 db8 :: 255
• D. 2001 db8 ffff, ffff, ffff, ffff

Answer: D

NEW QUESTION 5
Which two functions of AAA does Security Assertion Markup Language (SAML) identity Provider (IdP) offer (Choose two)?

• A. measure usage
• B. provide authentication
• C. provide availability
• D. provide session auditing
• E. filter access

Answer: BD

NEW QUESTION 6
A company would like to create a web service for multiple data centers (US EU, ASia) where each data center uses the same IP address Requests will be routed to the closest data center. Which address type is the appropriate solution?

• A. Broadcast
• B. Unicast
• C. Anycast
• D. Micest

Answer: C

NEW QUESTION 7
An administrator needs to protect a web application from cross-site scripting (CSS) exploits. Which F5 protocol provide this functionality

• A. ASM
• B. APM
• C. AFM
• D. GTM

Answer: A

Explanation:
https //devcentral f5.com/articIes/the-big-ip-application-security-managef-part-1-what-is-the-asm

NEW QUESTION 8
What are two examples of network layer protocols? (Choose two)

• A. ARP
• B. TCP
• C. IPv4
• D. BGP
• E. ICMP

Answer: AE

NEW QUESTION 9
The administrator wants client request to be directed to the same pool member through the session based on the client IP address.
Which persistence method should the administrator choose?

• A. SSL persistence
• B. destination address affinity persistence
• C. cookie persistence
• D. Source address affinity persistence

Answer: D

NEW QUESTION 10
A company deploys F5 load balancers to manage number of secure applications. The company needs to centrally manage certificates.
Which F5 product provides this functionality?

• A. BIG IQ
• B. GTW
• C. iHeath
• D. LTM

Answer: A

NEW QUESTION 11
10:20: 37 .00749:IP 199.16.255.254.36664>10.0.1.10 http : flags (s) seq 700424862, Win 29200
A website is fronted by a toad balancer that implements a full proxy architecture with SNAT enabled Behind the load balancer there are bro nodes Node 1 and node2
She administrator is debugging an issue on node 1 using icpdump and records the above out about a received packet o watch device does the IP address 192 168 265 254" belong?

• A. node2
• B. node 1
• C. load balancer
• D. web Client

Answer: C

NEW QUESTION 12
A new web server VLAN has been created and the IP address 10.1.1.1/24 has been assigned to the BIG IP device. The BIG IP Administrator needs to create the new Self IP and prevent administrator access to the BIG-IP device from the newly created network.
Which TMSH command should be used?

• A. create /net self internal address 10 1.1. 1/24 vlan VLAN 10 allow service none.
• B. add 'net self internal address 10.1.1. 1/24 vlan VLAN 10 allow-service none
• C. create /net self internal address 10. 1. 1. 1/24 vlan VLAN 10 allow service default
• D. add /net self internal address 10 111 mask 265. 255. 2550 vlan VLAN 10 allow

Answer: A

Explanation:
White the default differs from version to version, H typically allows HTTP SSH and iQuety for BIG-IP to BIG-IP communication

NEW QUESTION 13
Which security mode. functions by defining what traffic is allowed and rejecting all other traffic?

• A. context-based access control mode!
• B. role-based access control mode!
• C. negative security model
• D. positive security model

Answer: D

NEW QUESTION 14
If there are multiple applications authenticated against a single identity store, which technology solution will simplify access to all applications?

• A. RADIUS
• B. single sign on
• C. multifactor authentication
• D. LDAP

Answer: B

NEW QUESTION 15
A BIG IP Administrator need to perform a packet capture and identify the source IP that is connecting to the Virtual Server.
Which utility should the administrator use on the BIG IP device?

• A. leinel
• B. traceroute
• C. ping
• D. tcpdump

Answer: D

NEW QUESTION 16
......