NEW QUESTION 1
A company is creating a new department for Security Engineering and needs to create a segregated network segment with only 24 IPS.
What should be configured?

• A. configure a new VLAN and assign a netmask of /29
• B. use an existing VLAN and assign a netmask of /28
• C. use an existing VLAN and assign a netmask of /30
• D. configure a new VLAN and assign a netmask of /27

Answer: D

Explanation:
a /28contains 14 usable IPs and a 127contains 30 usable IPs

NEW QUESTION 2
What are the two primary functions of the OSI 7-layer model? (Choose two)

• A. to group communications into logical layers
• B. to define host-to-host communications
• C. to standardize HTTP communications between different vendors
• D. to go interoperability between products made by different vendors
• E. to define protocol behavior

Answer: AE

NEW QUESTION 3
An administrator is given the IP Address of 192.168.100.124 and needs 64 subnets. How many hosts per network are allowed?

• A. 4
• B. 8
• C. 6
• D. 2

Answer: D

NEW QUESTION 4
Which function does a caching profile provide on the BIG IP server?

• A. caches client IP addresses to improve response times
• B. caches HTTP headers lo improve server load times.
• C. caches selected pool members to improve load balancing times.
• D. caches data for reuse to cut down on transfer time for future requests

Answer: D

Explanation:
The Itmcache profile is a memory cache of data from pool members

NEW QUESTION 5
An administrator configures secure remote access to a server's shell Given the netstal output, what did the administrator configure?

• A. teinet
• B. allowing connections only from IP address 10 .1. 10.46
• C. ssh
• D. listening on IP address 10. 1. 10.46
• E. ssh
• F. allowing connections only from IP address 10.1. 10. 46
• G. teinetd listening on IP address 10.1. 10. 46

Answer: B

Explanation:
Although it appears telnet is configured in this example (!) it is listening on all IP addresses of the system while ssh (port 22) is only on the 10.1.10.46 address.

NEW QUESTION 6
What is an advantage of packet forwarding architecture?

• A. allows for SSL offload
• B. reduces latency
• C. allows for manipulation of HTTP headers
• D. handles larger packet sizes

Answer: B

Explanation:
https://devcentral f5.com/questions/packet-and proxy-based-56526

NEW QUESTION 7
An administrator needs to selectively compress HTTP traffic based on geographical location Which FS Feature should the administrator use?

• A. One Connect
• B. iRules
• C. SPDY profile
• D. iSessions

Answer: B

NEW QUESTION 8
What advantage does an active-standby configuration have over an active-active configurations?

• A. Active-standby configuration allows for the backup of the peer configuration
• B. Active-standby utilizes the hardware more efficiently
• C. Active standby Uses significantly less power consumption than active-active
• D. Active-standby is less complex to troubleshoot

Answer: D

NEW QUESTION 9
An administrator needs to lower .he amount of new TCP connections to help with network congest? How should the administrator accomplish this?

• A. Use HTTP keep-alive
• B. set a larger receive window
• C. Enable delayed ACKs
• D. use an indefinite timeout

Answer: A

NEW QUESTION 10
ATP administrator recently added a new VLAN and needs to confirm that the BIG IP sees traffic on this VLAN. The VLAN is untagged on interface 1.1 and is named VLAN704 in the BIG IP Configuration Unity.
Which tool should be used to generate a packet capture that shows all traffic on this VLAN?

• A. netstat
• B. map
• C. tcpdump
• D. ifconsfig

Answer: C

NEW QUESTION 11
In the context of load balancing, what does the term persistence" refer to?

• A. Ensuring requests from a single source always end up being handled by the same server.
• B. the ability to associate different HTTP requests to a single user so that activity can be tracked.
• C. Keeping TLS session key information in memory so sessions can be quickly resumed
• D. the ability to keep idle connections open as long as possible by sending dummy traffic periodically

Answer: A

NEW QUESTION 12
in which scenario is a full proxy TCP connection required?

• A. when DNS load balancing is performed
• B. When source NAT is demanded
• C. when the client source IP address is sent to the server
• D. when the client and server connection are decoupled

Answer: D

NEW QUESTION 13
Which protocol Authenticates network traffic between hosts end without encryption?

• A. PPTP
• B. GRE
• C. IPSec AH
• D. iPSec ESP

Answer: C

Explanation:
https//developer.ibmxom/answers.questions/37253/what-is-the-difference-between-the-ah-and- esp-port/

NEW QUESTION 14
Tl SISSL prides which functionary when a web browser connects to web site using the HTTPS protocol?

• A. delivers secure communication over a network connection
• B. prevents the web server from being compromised
• C. protects network packets from interception by intermedianes
• D. stop the web browser from automatically downloading malware

Answer: A

NEW QUESTION 15
When is the server also a client?

• A. during a passive FTP session
• B. during an active FTP session
• C. While receiving email
• D. While uploading files

Answer: B

NEW QUESTION 16
VLAN test-vlan" is configured on interface 1 1 instead of interface 1.2. Which TMSH command should be used to correct this issue?

• A. modify /net test vlan interfaces {1.2}
• B. modify /net test-vlan interfaces replace all with {1 2}
• C. modify /net vlan test-vlan interfaces replace all with {12}
• D. modify /net sian test-vlan interfaces {1 2}

Answer: C

NEW QUESTION 17
A BIG-IP Administrator needs to upgrade an HA pair to a more recent TMOS version. The administrator is unsure if the BlG-IP is currently supported How should the administrator verity that the HA pair is under a valid support contract?

• A. confirm that License OK" is set to yes in the applied license
• B. confirm that the "Service Check Date" specified in the applied license has not passed
• C. Check the status of the license under the Platform menu of the F5 Configuration Unity
• D. review /var/log/license for messages that indicate an expired license

Answer: C

NEW QUESTION 18
A BIG-IP Administrator needs to make sure that requests from a single user are directed to the server that was initially selected (unless that server is marked down). What should the administrator configure?

• A. caching profile
• B. TCP profile
• C. persistence profile
• D. security policy

Answer: C

NEW QUESTION 19
Web application http://www.example.com at 10.10.1.1.110, is unresponsive. A recent change migrated DNS to a new platform

• A. telnet www example com 80
• B. curl http //www example com
• C. dig www example com
• D. telnet 10.10.1. 110. 80

Answer: C

Explanation:
Telnet will open a socket to the http server, but the request would need to be manually input Curlwill send a request and output the response.

NEW QUESTION 20
Which FTP mode should be used by a client behind a firewall that has no special configurator?

• A. Passive FTP
• B. Secure FTP
• C. Active FTP
• D. Protected FTP

Answer: A

NEW QUESTION 21
......