201 Online Practice Questions and Answers

Which is an advantage of terminating SSL communication at the BIGIP rather than the ultimate web server?

A. Terminating SSL at the BIG-IP can eliminate SSL processing at the web servers.

B. Terminating SSL at IP the eliminates BIG all unencrypted traffic from the internal network.

C. Terminating SSL at the BIG-IP eliminates the need to purchase SSL certificates from a certificate authority.

D. Terminating SSL at the BIG-IP eliminates the need to use SSL acceleration hardware anywhere in the network.

How should a BIG-IP Administrator control the amount of traffic that a newly enabled pool member receives?

A. set the Slow Ramp Time

B. set a Connection Limit

C. set the Priority Group Activation

D. set a Health Monitor

New Syslog servers have been deployed in an organization. The BIG-IP Administrator must reconfigure the BIG-IP system to send log messages to these servers.

In which location in the Configuration Utility can the BIG-IP Administrator make the needed configuration changes to accomplish this?

A. System > Logs > Configuration

B. System > Configuration > Local Traffic

C. System > Logs > Audit

D. System > Configuration > Device

A web server administrator informs the BIG-IP Administrator that web servers are overloaded Starting next month, the BIG-IP device will terminate SSL to reduce web server load. The BIG-IP device is ready using client SSL client profile and Rules on HTTP level. What actions should the BIG-IP Administrators to achieve the desired configuration?

A. Remove the server SSL profile and configure the Pool Members to use HTTP

B. Remove the client SSL profile and configure the Pool Members to US HTTP

C. Remove the chart SSL profile and change the Virtual Server to accept HTTP

D. Remove the server SSL profile and change the Virtual Server to accept HTTP traffic

A BIG-IP Administrator needs to install a HotFix on a standalone BIG-IP device, which has HD1.1 as the Active Boot Location. The BIG-IP Administrator has already re-activated the license and created an UCS archive of the configuration. In which sequence should the BIG-IP Administrator perform the remaining steps?

A. Install HotFix in HD 1.1, Reboot the BIG-IP device. Install UCS Archive

B. Install HotFix in HO 1.2, Install base Image in HD 1.2, Activate HD1.2

C. Install base Image in HD1.2, Install HotFix in HD1.2, Activate HD 1.2

D. Activate HD 1.2, Install base image in HD 1.2. Install HotFix in HD 1.2

Which Virtual Server type prevents the use of a default pool?

A. Performance (Layer 4)

B. Forwarding (IP)

C. Performance HTTP

D. Standard

A 8IG-IP Administrator configures a Virtual Server to load balance traffic between 50 webservers for an ecommerce website Traffic is being load balanced using the Least Connections (node) method. The webserver administrators report that customers are losing the contents from their shopping carts and are unable to complete their orders.

What should the BIG-IP Administrator do to resolve the issue?

A. Change Default Persistence Profile setting to cookie

B. Change Load Balancing method to Ratio (member)

C. Change Default Persistence Profile setting to sipjnfo

D. Change Load Balancing method to Ratio (node)

Which parameters are set to the same value when a pair of BIG-IP devices are synchronized?

A. host names

B. system clocks

C. profile definitions

D. VLAN failsafe settings E. MAC masquerade addresses

When using the setup utility to configure a redundant pair, you are asked to provide a "Failover Peer IP". Which address is this?

A. an address of the other system in its management network

B. an address of the other system in a redundant pair configuration

C. an address on the current system used to listen for failover messages from the partner BIG-IP

D. an address on the current system used to initiate mirroring and network failover heartbeat messages

How should a BIG-IP Administrator persistent sessions from being sent to a pool member so that the server administrator can perform maintenance?

A. force the pool member offline

B. disable the pool member

C. add an additional monitor to the poor

D. disable the virtual server

A local user account (Users) on the BIG-IP device is assigned the User Manager role.

Userl attempts to modify the properties of another account (User2), but the action fails. The BIG-IP Administrator can successfully modify the User2 account.

Assuming the principle of least privilege, what is the correct way to allow User 1 to modify User2 properties?

A. Move User2 to the same partition as User1

B. Grant User1 administrative privileges

C. Move User to the same partition as User2.

D. Modify the partition access for User 1

A virtual server is listening at 10.10.1.100:any and has the following iRule associated with it:

when CLIENT_ACCEPTED { if {[TCP::local_port] equals 21 } { pool

ftppool } elseif {[TCP::local_port] equals 23 } { pool telnetpool }

If a user connects to 10.10.1.100 and port 22, which pool will receive the request?

A. ftppool

B. telnetpool

C. None. The request will be dropped.

D. Unknown. The pool cannot be determined from the information provided.

A virtual server is defined per the charts. The last five client connections were to members C, D, A, B, B. Given the conditions shown in the above graphic, if a client with IP address 205.12.45.52 opens a connection to the virtual server, which member will be used for the connection.

A. 172.16.20.1:80

B. 172.16.20.2:80

C. 172.16.20.3:80

D. 172.16.20.4:80

E. 172.16.20.5:80

A BIG-IP Administrator needs to restore a UCS file to an F5 device using the Configuration Utility. Which section of the Configuration Utility should the BIG-IP Administrator access to perform this task?

A. Local Traffic > Virtual Servers

B. Local Traffic > Policies

C. System > Archives

D. System > Configuration

Some users who connect to a busy Virtual Server have connections reset by the BIG-IP system. Pool member resources are NOT a factor in this behavior. What is a possible cause for this behavior?

A. The Connection Rate Limit is set too high

B. The server SSL Profile has NOT been reconfigured.

C. The Connection Limit is set too low.

D. The Rewrite Profile has NOT been configured.