201 Online Practice Questions and Answers

A BIG-IP device is configured with both an internal external and two Corporate VLANs. The virtual server has SNAT enabled and is set to listen on all VLANs Auto Last Hop is disabled. The Corporate users are on 10.0.0.0./24 and 172.16.0.0/12. The BIG-IP has a Self-IP on the 1.0.0.0.0./24 subnet.

Internet users are able to access the virtual server. Only some of the Corporate users are able to connect to the virtual server A BIG-IP Administrator performs a tcpdump on the BIG-IP and verifies that traffic is arriving from users in 10.0.0.0/24.

What should the BIG-IP Administrator do to correct this behaviour?

A. Disable the server on the internal VLAN

B. Add a static route for the 172.16.0.0/12 subnet

C. Change the default route to point to the extra firewall

D. Modify the default route of the servers to point to the BIG-IP device

A standard virtual server is defined with a pool and a SNAT using automap. All other settings for the virtual server are at defaults. When client traffic is processed by the BIG-IP, what will occur to the IP addresses?

A. Traffic initiated by the pool members will have the source address translated to a self-IP address but the destination address will not be changed.

B. Traffic initiated to the virtual server will have the destination address translated to a pool member address and the source address translated to a self-IP address.

C. Traffic initiated by selected clients, based on their IP address, will have the source address translated to a self-IP address but the destination will only be translated if the traffic is destined to the virtual server.

D. Traffic initiated to the virtual server will have the destination address translated to a pool member address and the source address translated to a self-IP address. Traffic arriving destined to other destinations will have the source translated to a self-IP address only.

When network failover is enabled, which of the following is true?

A. The failover cable status is ignored. Failover is determined by the network status only.

B. Either a network failure or loss of voltage across the failover cable will cause a failover.

C. A network failure will not cause a failover as long as there is a voltage across the failover cable.

D. The presence or absence of voltage over the fail over cable takes precedence over network failover.

To increase available bandwidth of an existing Trunk, the BIG-IP Administrator is adding additional interfaces. Which command should the BIG-IP Administrator run from within bosh shell?

A. tmsh create /net trunk trunk_A interfaces add {1.3.1.4}

B. tmsh create/sys trunk trunk_A interfaces add {1.3.1.4}

C. tmsh modify/sys trunk trunk^A interfaces add {1.3.1.4}

D. tmsh modify /net trunk trunk_A interfaces add {1.3.1.4}

The incoming client IP address is 195.64.45.52 and the last five connections have been sent to members A, C, E, D and B. Given the virtual server, pool, and persistence definitions and statistics shown in the above graphic, which member will be used for the next connection?

A. 10.10.20.1:80

B. 10.10.20.2:80

C. 10.10.20.3:80

D. 10.10.20.4:80

E. 10.10.20.5:80

F. It cannot be determined with the information given.

A BIG-IP Administrator applied the latest hotfix to an inactive boot location by mistake, and needs to downgrade back to the previous hotfix. What should the BIG-IP Administrator do to change the boot location to the previous hotfix?

A. Uninstall the newest hotfix and reinstall the previous hotfix

B. Reinstall the base version and install the previous hotfix

C. Reinstall the previous hotfix and re-activate the license

D. Uninstall the base version and restore the UCS

Which method is recommended for creating a new user from the CLI?

A. Run f5adduser username' then 'f5passwd username' from bash or tmsh

B. Run tmsh create auth user username prompt for password' from bash

C. edit bigip.conf to add the new user and the user's clear-text password

D. Run useradd username' then 'passwd username' from bash tmsh

A site wishes to perform source address translation on packets from some clients but not others. The determination is not based on the client's IP address, but on the virtual servers their packets arrive on. What could best accomplish this goal?

A. A SNAT for all addresses could be defined, and then disable the SNAT processing for select VLANs.

B. Some virtual servers could be associated with SNAT pools and others not associated with SNAT pools.

C. The decision to perform source address translation is always based on VLAN. Thus, the goal cannot be achieved.

D. The decision to perform source address translation is always based on a client's address (or network). Thus, this goal cannot be achieved.

Refer to the exhibit

A connection is being established to IP 1.1.1.1 on port 8080. Which virtual server will handle the connection?

A. fwd_8080_vs

B. host_vs

C. host_ 8080_VS

D. fwdvs

A Virtual Server uses an iRule to send traffic to pool members depending on the URI. The BIG-IP Administrator needs to modify the pool member in the iRule. Which event declaration does the BIG-IP Administrator need to change to accomplish this?

A. CLIENT_ACCEPTED

B. HTTP_RESPONSE

C. HTTP_REQUEST

D. SERVER_CONNECTED