NEW QUESTION 1
Refer to the exhibit.

A BIG-IP Administrator needs to deploy an application on the BIG-IP system to perform SSL offload and re-encrypt the traffic to pool members.
During testing, users are unable to connect to the application. What must the BIG-IP Administrator do to resolve the issue?

• A. Remove the configured SSL Profile (Client)
• B. Configure Protocol Profile (Server) as splitsession-default-tcp
• C. Enable Forward Proxy in the SSL Profile (Client)
• D. Configure an SSL Profile (Server)

Answer: D

Explanation:
According to the requirements of the subject, the client and server must be configured with ssl profile.

NEW QUESTION 2
Refer to the exhibit.

Why is the virtual server responsive to incoming connections?

• A. The pool member is disabled
• B. The pool member monitor failed
• C. The node is disabled.
• D. The node monitor failed

Answer: B

NEW QUESTION 3
An IT support engineer needs to access and modify Virtual Servers in three partitions (Common /Banking and Dev) daily on a BIG-IP device. The company operates a Least Privilege access policy. What level of access does the IT support engineer need to ensure completion of daily roles?

• A. Manager in /common/Banking, and /Dev partitions
• B. Application Editor in /Common, /Banking, and /Dev partitions
• C. Manager in all partitions
• D. Application Editor in all partitions

Answer: A

NEW QUESTION 4
Which statement is true concerning SNATs using automap?

• A. Only specified self-IP addresses are used as automap addresses.
• B. SNATs using automap will translate all client addresses to an automap address.
• C. A SNAT using automap will preferentially use a floating self-IP over a nonfloating self-IP.
• D. A SNAT using automap can be used to translate the source address of all outgoing traffic to the same address regardless of which VLAN the traffic is sent through.

Answer: C

NEW QUESTION 5
A site is load balancing to a pool of web servers. Which statement is true concerning BIG IP's ability to verify whether the web servers are functioning properly or not?

• A. Web server monitors can test the content of any page on the server.
• B. Web server monitors always verify the contents of the index.html page.
• C. Web server monitors can test whether the server's address is reachable, but cannot test a page's content.
• D. Web server monitors can test the content of static web pages, but cannot test pages that would require the web server to dynamically build content.

Answer: A

NEW QUESTION 6
Which method is recommended for creating a new user from the CLI?

• A. Run f5adduser username' then 'f5passwd username' from bash or tmsh
• B. Run tmsh create auth user username prompt for password' from bash
• C. edit bigip.conf to add the new user and the user's clear-text password
• D. Run useradd username' then 'passwd username' from bash tmsh

Answer: B

NEW QUESTION 7
Assume a virtual server has a ServerSSL profile. What SSL certificates are required on the pool members?

• A. No SSL certificates are required on the pool members.
• B. The pool members.SSL certificates must only exist.
• C. The pool members.SSL certificates must be issued from a certificate authority.
• D. The pool members.SSL certificates must be created within the company hosting the BIGIPs.

Answer: B

NEW QUESTION 8
What should the 816-IP Administrator provide when opening a new ticket with F5 Support?

• A. bigip.license file
• B. QKViewfile
• C. Device root password
• D. SSL private keys

Answer: B

NEW QUESTION 9
Which Virtual Server type prevents the use of a default pool?

• A. Performance (Layer 4)
• B. Forwarding (IP)
• C. Performance HTTP
• D. Standard

Answer: B

Explanation:
Forwarding (IP) cannot be associated with the pool.

NEW QUESTION 10
Assuming that systems are synchronized, which action could take place if the fail over cable is connected correctly and working properly, but the systems cannot communicate over the network due to external network problems?

• A. If network failover is enabled, the standby system will assume the active mode.
• B. Whether or not network failover is enabled, the standby system will stay in standby mode.
• C. Whether or not network failover is enabled, the standby system will assume the active mode.
• D. If network failover is enabled, the standby system will go into active mode but only until the network recovers.

Answer: B

NEW QUESTION 11
Refer to the exhibit.

How many nodes are represented on the network map shown?

• A. Four
• B. Three
• C. One
• D. Two

Answer: B

NEW QUESTION 12
To increase available bandwidth of an existing Trunk, the BIG-IP Administrator is adding additional interfaces.
Which command should the BIG-IP Administrator run from within bosh shell?

• A. tmsh create /net trunk trunk_A interfaces add {1.3.1.4}
• B. tmsh create/sys trunk trunk_A interfaces add {1.3.1.4}
• C. tmsh modify/sys trunk trunk^A interfaces add {1.3.1.4}
• D. tmsh modify /net trunk trunk_A interfaces add {1.3.1.4}

Answer: D

NEW QUESTION 13
What is the status of a pool member when manual resume is enabled and a health check first fails and then passes?

• A. Offline (Disabled)
• B. Offline (Enabled)
• C. Available (Disabled)
• D. Available (Enabled)

Answer: A

NEW QUESTION 14
A site wishes to perform source address translation on packets from some clients but not others. The determination is not based on the client's IP address, but on the virtual servers their packets arrive on. What could best accomplish this goal?

• A. A SNAT for all addresses could be defined, and then disable the SNAT processing for select VLANs.
• B. Some virtual servers could be associated with SNAT pools and others not associated with SNAT pools.
• C. The decision to perform source address translation is always based on VLA
• D. Thus, the goal cannot be achieved.
• E. The decision to perform source address translation is always based on a client's address (or network).Thus, this goal cannot be achieved.

Answer: B

NEW QUESTION 15
Under what condition must an appliance license be reactivated?

• A. Licenses only have to be reactivated for RMAs no other situations.
• B. Licenses generally have to be reactivated during system software upgrades.
• C. Licenses only have to be reactivated when new features are added (IPv6, Routing Modules, etc) no other situations.
• D. Neve
• E. Licenses are permanent for the platform regardless the version of software installed.

Answer: B

NEW QUESTION 16
Where is the loadbalancing mode specified?

• A. within the pool definition
• B. within the node definition
• C. within the virtual server definition
• D. within the pool member definition

Answer: A

NEW QUESTION 17
A BIG-IP Administrator is configuring an SSH Pool with five members.
Which Health Monitor should be applied to ensure that available pool members are monitored accordingly?

• A. https
• B. udp
• C. http
• D. tcp

Answer: D

NEW QUESTION 18
A standard virtual server is defined with a pool and a SNAT using automap. All other settings for the virtual server are at defaults. When client traffic is processed by the BIG-IP, what will occur to the IP addresses?

• A. Traffic initiated by the pool members will have the source address translated to a self-IP address but the destination address will not be changed.
• B. Traffic initiated to the virtual server will have the destination address translated to a pool member address and the source address translated to a self-IP address.
• C. Traffic initiated by selected clients, based on their IP address, will have the source address translated to a self-IP address but the destination will only be translated if the traffic is destined to the virtual server.
• D. Traffic initiated to the virtual server will have the destination address translated to a pool member address and the source address translated to a self-IP addres
• E. Traffic arriving destined to other destinations will havethe source translated to a self-IP address only.

Answer: B

NEW QUESTION 19
......