The Secret Of F5-Networks 201 Exam Guide

NEW QUESTION 1
A site needs to terminate client HTTPS traffic at the BIG-IP and forward that traffic unencrypted. Which two are profile types that must be associated with such a virtual server? (Choose two.)

• A. TCP
• B. HTTP
• C. HTTPS
• D. ClientSSL
• E. ServerSSL

Answer: AD

NEW QUESTION 2
A BIG-IP Administrator needs to make sure that the automatic update check feature works properly. What must the administrator configure on the BIG-IP system?

• A. Update Check Schedule
• B. NTP servers
• C. DNS name servers
• D. SMTP servers

Answer: A

NEW QUESTION 3
A set of servers is used for an FTP application as well as an HTTP website via separate BIG-IP Pools. The server support team reports that some servers are receiving a lot more traffic than others.
Which Load Balancing Method should the BIG-IP Administrator apply to even out the connection count?

• A. Ratio (Member)
• B. Least Connections (Member)
• C. Least Connections (Node)
• D. Ratio (Node)

Answer: C

Explanation:
The connection is required to be balanced, and the unit is the server and the application port is the unit, so it is node.

NEW QUESTION 4
Which type of Virtual Server requires the use of a FastL4 profile?

• A. Performance (Layer 4)
• B. Stateless
• C. Performance (HTTP)
• D. Standard

Answer: A

NEW QUESTION 5
A BIG-IP Administrator is unable to connect to the management interface via HTTPS. What is a possible reason for this issue?

• A. The port lockdown setting is configured to Allow None.
• B. An incorrect management route is specified.
• C. The IP address of the device used to access the management interface is NOT included in the "P Allow" list in the Configuration Utility.
• D. The IP address of the device used to access the management interface is NOT included in the "httpd Allow" list in the CLI.

Answer: D

NEW QUESTION 6
A virtual server is defined per the charts. The last five client connections were to members C, D, A, B, B. Given the conditions shown in the above graphic, if a client with IP address 205.12.45.52 opens a connection to the virtual server, which member will be used for the connection.

• A. 172.16.20.1:80
• B. 172.16.20.2:80
• C. 172.16.20.3:80
• D. 172.16.20.4:80
• E. 172.16.20.5:80

Answer: D

NEW QUESTION 7
A new BIG-IP VE is deployed with default settings. The BIG-IP Administrator completes the setup utility in the Configuration Utility. The internal self IP address fails to respond to a ping request. What is a possible cause of this issue?

• A. Port lockdown on internal self IP is set to Allow None
• B. Route is NOT assigned to internal self IP.
• C. Internal interface VLAN is set to untagged
• D. Internal interface VLAN is set to tagged

Answer: D

NEW QUESTION 8
A BIG-IP Administrator discovers malicious brute-force attempts to access the BIG-IP device on the management interface via SSH. The BIG-IP Administrator needs to restrict SSH access to the
management interface.
Where should this be accomplished?

• A. System > Configuration
• B. Network > Interfaces
• C. Network > Self IPs
• D. System > Platform

Answer: D

NEW QUESTION 9
A BIG-IP Administrator finds the following log entry after a report of user issues connecting to a virtual server: 01010201: 2: Inet port exhaustion on 10.70.110.112 to 192.28.123.250:80 (proto 6)
How should the BIG-IP Administrator modify the SNAT pool that is associated with the virtual server?

• A. Remove the SNAT pool and apply SNAT Automap.
• B. Remove an IP address from the SNAT pool.
• C. Add an address to the SNAT pool.
• D. Increase the timeout of the SNAT addresses.

Answer: C

NEW QUESTION 10
What is the purpose of provisioning?

• A. Provisioning allows modules that are not licensed to be fully tested.
• B. Provisioning allows modules that are licensed be granted appropriate resource levels.
• C. Provisioning allows the administrator to activate modules in nonstandard combinations.
• D. Provisioning allows the administrator to see what modules are licensed, but no user action is ever required.

Answer: B

NEW QUESTION 11
An LTM device has a virtual server mapped to www5f.com with a pool assigned. The objects are defined as follows:
Virtual server. Destination 192.168.245.100.443 netmask 255.255.255.0 Persistence: Source address persistence netmask 255.0.0.0 SNAT:AutoMap
Profiles: HnP/TCP
How should the BIG-IP Administrator modify the persistence profile so that each unique IP address creates a persistence record?

• A. netmask 0.0.0.0
• B. netmask 255.255.255.255
• C. netmask 255.255.0.0
• D. netmask 255.256.255.0

Answer: B

NEW QUESTION 12
A BIGJP Administrator needs to load a UCS file but must exclude the license file. How should the administrator perform this task?

• A. From the CLI with command U tmsh load /$ys ucs <ucs filename> no-license
• B. From the GUI, select the UCS file, unchcck the license box, and click restore
• C. From the CLI with command(tmos)« tmsh load /sys ucs <ucs filename> no-license
• D. From the GUI, select the UCS file and click restore

Answer: A

NEW QUESTION 13
Which three methods can be used for initial access to a BIG-IP system? (Choose three.)

• A. CLI access to the serial console port
• B. SSH access to the management port
• C. SSH access to any of the switch ports
• D. HTTP access to the management port
• E. HTTP access to any of the switch ports
• F. HTTPS access to the management port
• G. HTTPS access to any of the switch ports

Answer: ABF

NEW QUESTION 14
Which parameters are set to the same value when a pair of BIG-IP devices are synchronized?

• A. host names
• B. system clocks
• C. profile definitions
• D. VLAN failsafe settings
• E. MAC masquerade addresses

Answer: C

NEW QUESTION 15
As a part of the Setup Utility, the administrator sets the host name for the BIG IP. What would be the result if the two systems in a redundant pair were set to the same host name?

• A. Host names do not matter in redundant pair communication.
• B. In a redundant pair, the two systems will always have the same host nam
• C. The parameter is synchronized between the systems.
• D. The first time the systems are synchronized the receiving system will be assigned the same self-IP addresses as the source system.
• E. When the administrator attempts to access the configuration utility using the host name, they will always connect to the active system.

Answer: C

NEW QUESTION 16
Refer to the exhibit.
A user notifies the BIG-IP Administrator that http://remote company.com is NOT accessible. Remote access to company resources must be encrypted.
What should the BIG-IP Administrator do to fix the issue?

• A. Change the Listening Port on remote.company.com_vs to Port 80
• B. Add a Pool to the Virtual Server remote.company.com_VS
• C. Add an iRule to remote.company.com_vs to redirect Traffic to HTTPS
• D. Change the Type of the Virtual Server remote.company.com_vs to Forwarding

Answer: C

Explanation:
Requiring all traffic to be HTTPS access requires HTTP requests to be redirected directly to HTTPS.

NEW QUESTION 17
A 816-IP Administrator recently deployed an application Users are experiencing slow performance with the application on some remote networks.
Which two modifications can the BIG-IP Administrator make to address this issue? (Choose two)

• A. Apply dest addr profile to the Virtual Server
• B. Apply f5-tcp-wan profile to the Virtual Server
• C. Apply f5-tcp-lan profile to the Virtual Server
• D. Apply source_addr profile to the Virtual Server
• E. Apply fasti_4 profile to the Virtual Server

Answer: BC

NEW QUESTION 18
Refer to the exhibit.
A BIG-IP Administrator configures the Virtual Server to pass HTTP traffic. Users report that they are unable to access the application
What should the administrator do to resolve this issue?

• A. Change the Virtual Server name
• B. Disable .he State
• C. Reconfigure the Source Address
• D. Reconfigure the Pool Members

Answer: D

NEW QUESTION 19
During a maintenance window, an EUD test was executed and the output displayed on the screen. The BIG-IP Administrator did NOT save the screen output. The BIG-IP device is currently handling business critical traffic. The BIG-IP Administrator needs to minimize impact. What should the BIG-IP Administrator do to provide the EUD results to F5 Support?

• A. Boot the device into EUD then collect output from console
• B. Execute EUD from tmsh and collect output from console
• C. Collect file /var/log/messages
• D. Collect file /shared/log/eud.log

Answer: D

NEW QUESTION 20
......