How Many Questions Of 101 Preparation

NEW QUESTION 1
in which scenario is a full proxy TCP connection required?

• A. when SSL offloading is used
• B. when Traffic is routed
• C. when administrators manage the servers directly
• D. when 3 server responds directly to the client

Answer: A

NEW QUESTION 2
A BIG IP Administrator needs to create a virtual server for a new secure end-to-end web application After change in configuration the virtual server .3 still marked down. The configuration of the virtual server and the pool member are correct. A quick server shows the status.

To fix the issue, what should the BIG-IP Administrator inform the web server administrator to do?

• A. change web server configuration to use SSL/TLS
• B. reboot the server
• C. restart the web service
• D. change web server configuration lo use SSH/SCP

Answer: A

Explanation:
If the application needs to be secure ‘end-to-end’’ the web server needs to use SSL as well. Most web servers will not required to HTTP requests when configured with HTTPS, so the monitor is failing.

NEW QUESTION 3
An administrator needs to do the following
* install a load balancer in front of an existing application
* test application performance
* avoid reconfiguration of the application server
* avoid interruption of users accessing the application

• A. modify the test client's local host file
• B. modify the DNS Server A-record for the application
• C. configure IP Anycasting
• D. configure Port Address Translation

Answer: A

NEW QUESTION 4
In an administrator's environment, the administrator wants to inspect a high volume of SSL traffic What should be used for this task?

• A. Big-IP Global Traffic Manager appliance
• B. Big-lP standard virtual edition
• C. Big-IP Local Traffic Manager appliance
• D. Big-IP virtual edition with FIPS

Answer: C

NEW QUESTION 5
A BIG IP Administrator is trying to reach the internal web server from a workstation
* The workstation has a MAC address of 00:00 00 00 00 01 and an IP address or 192. 168. 0. 1
* An internal web server has a MAC address of 00 00 00 00 00 02 and an IP address of 10. 10. 1. 1
* The workstations default gateway has a MAC address of 00 00 00 00 00 03 and IP address of 192 168 0 254
What is the destination hardware address of the outbound packet when it leaves the workstation?

• A. 00:00.00:00:00:01
• B. 00:00:00 :00:00:00
• C. 00:00:00:00:00:03
• D. 00:00:00:00:00 02

Answer: C

NEW QUESTION 6
Which HTTP response code is returned when a web server requires authentication to access a resource?

• A. 500
• B. 401
• C. 302
• D. 100

Answer: B

NEW QUESTION 7
A BIG-IP Administrator needs to configure a MAC masquerade address for traffic-group 1. Where on the GUI should this configuration be performed?

• A. System > Configuration Device General > lraffic-group-1
• B. Local Traffic > Traffic Class > traffic -group-1
• C. Device Management > Traffic Groups > traffic-group-1
• D. Network > ARP Static List > traffic-group-1

Answer: C

NEW QUESTION 8
Which two functions of AAA does Security Assertion Markup Language (SAML) identity Provider (IdP) offer (Choose two)?

• A. measure usage
• B. provide authentication
• C. provide availability
• D. provide session auditing
• E. filter access

Answer: BD

NEW QUESTION 9
A client receives all of the expected data from a server and sends a FIN packet signaling the end of communication. What will the server do when it receives the FIN Packet from the client?

• A. send a SYN packet
• B. send an RST packet
• C. Send both FIN and RST packets
• D. send an ACK Packet

Answer: D

Explanation:
https://www.geeksforgeeks.org/computer-networ-tcp-connection-termination/

NEW QUESTION 10
Which protocol emphasizes reduced latency over reliability?

• A. TCP
• B. UDP
• C. GRE
• D. RSVP

Answer: B

NEW QUESTION 11
What is a benefit of configuring BIG-IP devicesin active-active high availabilitymode?

• A. avoid Overload on the BIG-P system in theevent of a failover
• B. allows full utilization of hardware purchased
• C. reduces troubleshooting complexity
• D. provides ability to upgrade a member of the pair without disruption

Answer: B

NEW QUESTION 12
Where is the MAC masquerade address configured?

• A. Virtual Server
• B. Virtual Address
• C. Device Groups
• D. Traffic Groups

Answer: D

NEW QUESTION 13
A BIG IP administrator is testing a web server behind ADC. The connection to a Virtual Server is successful but the page is still not loading Where should the administrator test to determine if theserver is available?

• A. from server-side interface in ADC.
• B. from client side interface in ADC
• C. from Workstation client
• D. from switch connected to ADC and Server

Answer: A

NEW QUESTION 14
BIG-IP Administrator runs the command ITconfig from the BIG-IP command the line end sees a high number of collisions. What is the likely cause?

• A. There is a duplicate IP address on the network
• B. A crossover cable has been used
• C. The interface is set to hall duplex
• D. Spanning Tree Protocols biochang the con

Answer: D

NEW QUESTION 15
A BIO IP Administrator is troubleshooting a slow web application. A packet capture shows that some of the packets coming from a window size of zero A packet capture shows that som a window size of zero
What does this mean?

• A. The client is trying to close the TCP connection
• B. The server is trying to close the TCP connection
• C. The server is temporary unable to receive any more data
• D. The client is temporarily unable to receive any more data

Answer: C

NEW QUESTION 16
An organization needs to cryptographically sign its domains. Which F5 product provides this functionality?

• A. GTM
• B. LTM
• C. ASM
• D. APM

Answer: A

Explanation:
https //devcentral f5 com/articles/the-tNg-ip gtm-configuring-dnssec

NEW QUESTION 17
What does ICMP Time Exceeded'' mean?

• A. The ping command exceeded the time limit.
• B. The traceroute command exceeded the time limit
• C. Remote host did not respond
• D. TTL has reached zero

Answer: D

NEW QUESTION 18
A BIG-IP Administrator needs to open a case with F5 Support for a specific issue with an existing HA pair of BIG-IP platform. What should be uploaded to iHealth prior to opening the case to expedite processing of the support case?

• A. UCS file
• B. SCF filo
• C. tcpdump file
• D. Qkview file

Answer: D

NEW QUESTION 19
An administrator needs to protect a web application from cross-site scripting (CSS) exploits. Which F5 protocol provide this functionality

• A. ASM
• B. APM
• C. AFM
• D. GTM

Answer: A

Explanation:
https //devcentral f5.com/articIes/the-big-ip-application-security-managef-part-1-what-is-the-asm

NEW QUESTION 20
......