201 Online Practice Questions and Answers

The ICMP monitor has been assigned to all nodes. In addition, all pools have been assigned custom monitors. The pool is marked available. If a pool is marked available (green) which situation is sufficient to cause this?

A. All of the pool member nodes are responding to the ICMP monitor as expected.

B. Less than 50% of the pool member nodes responded to the ICMP echo request.

C. All of the members of the pool have had their content updated recently and their responses no longer match the monitor.

D. Over 25% of the pool members have had their content updated and it no longer matches the receive rule of the custom monitor. The other respond as expected.

The BIG-IP Administrator needs to avoid overloading any of the Pool Members with connections, when they become active. What should the BIG-IP Administrator configure to meet this requirement?

A. Different Ratio for each member

B. Same Priority Group to each member

C. Action On Service Down to Reselect

D. Slow Ramp Time to the Pool

A virtual server is listening at 10.10.1.100:any and has the following iRule associated with it: when CLIENT_ACCEPTED { if {[TCP::local_port] equals 80 } { pool pool1 } elseif {[TCP::local_port] equals 443} { pool pool2 }

If a user connects to 10.10.1.100 and port 22, which pool will receive the request?

A. pool1

B. pool2

C. None. The request will be dropped.

D. Unknown. The pool cannot be determined from the information provided.

Which statement is true concerning SSL termination?

A. A virtual server that has both ClientSSL and ServerSSL profiles can still support cookie persistence.

B. Decrypting traffic at the BIG-IP allows the use of iRules for traffic management, but increases the load on the pool member.

C. When any virtual server uses a ClientSSL profile, all SSL traffic sent to the BIG-IP is decrypted before it is forwarded to servers.

D. If a virtual server has both a ClientSSL and ServerSSL profile, the pool members have less SSL processing than if the virtual server had only a ClientSSL profile.

A BIG-IP Administrator plans to resolve a non-critical issue with a BIG-IP device in 2 weeks. What Severity level should be assigned to this type of F5 support ticket?

A. 4

B. 2

C. 3

D. 1

To increase available bandwidth of an existing Trunk, the BIG-IP Administrator is adding additional interfaces. Which command should the BIG-IP Administrator run from within bosh shell?

A. tmsh create /net trunk trunk_A interfaces add {1.3.1.4}

B. tmsh create/sys trunk trunk_A interfaces add {1.3.1.4}

C. tmsh modify/sys trunk trunk^A interfaces add {1.3.1.4}

D. tmsh modify /net trunk trunk_A interfaces add {1.3.1.4}

The incoming client IP address is 195.64.45.52 and the last five connections have been sent to members A, C, E, D and B. Given the virtual server, pool, and persistence definitions and statistics shown in the above graphic, which member will be used for the next connection?

A. 10.10.20.1:80

B. 10.10.20.2:80

C. 10.10.20.3:80

D. 10.10.20.4:80

E. 10.10.20.5:80

F. It cannot be determined with the information given.

Which method is recommended for creating a new user from the CLI?

A. Run f5adduser username' then 'f5passwd username' from bash or tmsh

B. Run tmsh create auth user username prompt for password' from bash

C. edit bigip.conf to add the new user and the user's clear-text password

D. Run useradd username' then 'passwd username' from bash tmsh

A custom HTTP monitor is failing to a pool member 10.10.3.75:8080 that serves up www.example.com.

A ping works to the pool member address.

The SEND string that the monitor is using is:

GET/HTTP/l.l/r/n/Host.www.example.com/r/n/Connection

Close/r/n/r/n

Which CLI tool syntax will show that the web server returns the correct HTTP response?

A. curlhttp://10.10.10.3.75:8080/www.example.com/index.html

B. curl-header 'Host:www.example.com' http://10.10.3.75:8080/

C. tracepath 'http://www.example.com:80

D. tracepath 10.10.3.75:8080 GET /index

A BIG-IP Administrator is unable to connect to the management interface via HTTPS. What is a possible reason for this issue?

A. The port lockdown setting is configured to Allow None.

B. An incorrect management route is specified.

C. The IP address of the device used to access the management interface is NOT included in the "P Allow" list in the Configuration Utility.

D. The IP address of the device used to access the management interface is NOT included in the "httpd Allow" list in the CLI.