F5 201 - Questions & Answers
Free preview · every answer includes a full explanation
Product page: https://prepkeys.com/201.html
A user needs to determine known security vulnerabilities on an existing BIG-IP appliance and how to remediate these vulnerabilities.
Which action should the BIG-IP Administrator recommend?
Refer to the exhibit.
A BIG-IP Administrator needs to deploy an application on the BIG-IP system to perform SSL offload and re-encrypt the traffic to pool members.
During testing, users are unable to connect to the application.
What must the BIG-IP Administrator do to resolve the issue?
A BIG-IP device is configured with both an internal external and two Corporate VLANs. The virtual server has SNAT enabled and is set to listen on all VLANs Auto Last Hop is disabled. The Corporate users are on 10.0.0.0./24 and 172.16.0.0/12. The BIG-IP has a Self-IP on the 1.0.0.0.0./24 subnet.
Internet users are able to access the virtual server. Only some of the Corporate users are able to connect to the virtual server A BIG-IP Administrator performs a tcpdump on the BIG-IP and verifies that traffic is arriving from users in 10.0.0.0/24.
What should the BIG-IP Administrator do to correct this behaviour?
A node is a member of various pools and hosts different web applications. If a web application is unavailable, the BIG-IP appliance needs to mark the pool member down for that application pool.
What should a BIG-IP Administrator deploy at the pool level to accomplish this?
The ICMP monitor has been assigned to all nodes. In addition, all pools have been assigned custom monitors. The pool is marked available.
If a pool is marked available (green) which situation is sufficient to cause this?
A BIG-IP Administrator wants to add a new Self IP to the BIG-IP device.
Which item should be assigned to the new Self IP being configured?
You need to terminate client SSL traffic at the BIG-IP and also to persist client traffic to the same pool member based on a BIG IP supplied cookie.
Which four are profiles that would normally be included in the virtual server's definition? (Choose four.)
A BIG-IP system has the following configuration:
* SNAT is set to Auto Map
* There are two VLANs internal and external
* Default route is pointed to the gateway on external VLAN
* Self P for internal VLAN is 1921.1.2
* Self IP for external VLAN is 192.1.2.2
* Floating IP addresses for internal VLAN is 192.1.1.1
* Floating IP addresses for external VLAN is 192.1.2.1
* The Virtual Server IP address is 192.1.1.100
Which IP address does the BIG-IP system use first when traffic reaches the servers on the internal VLAN?
Refer to the exhibit.
How many nodes are represented on the network map shown?
A site has assigned the ICMP monitor to all nodes and a custom monitor, based on the HTTP template, to a pool of web servers. The HTTP based monitor is working in all cases.
The ICMP monitor is failing for 2 of the pool member 5 nodes. All other settings are default.
What is the status of the monitor is working in all cases?