NEW QUESTION 1
Which statement is true concerning SSL termination?

• A. A virtual server that has both ClientSSL and ServerSSL profiles can still support cookie persistence.
• B. Decrypting traffic at the BIG-IP allows the use of iRules for traffic management, but increases the load on the pool member.
• C. When any virtual server uses a ClientSSL profile, all SSL traffic sent to the BIG-IP is decrypted before it is forwarded to servers.
• D. If a virtual server has both a ClientSSL and ServerSSL profile, the pool members have less SSL processing than if the virtual server had only a ClientSSL profile.

Answer: A

NEW QUESTION 2
A BIG-IP Administrator notices that one of the servers that runs an application is NOT receiving any traffic. The BIG-IP Administrator examines the configuration status of the application and observes the displayed monitor configuration and affected Pool Member status.

What is the possible cause of this issue?

• A. The Node Health Monitor is NOT responding.
• B. The application is NOT responding with the expected Receive String.
• C. HTTP 1.1 is NOT appropriate for monitoring purposes.
• D. The BIG-IP device is NOT able to reach the Pool.

Answer: A

NEW QUESTION 3
All pool members are online. All other virtual server settings are at default What might after the load balancing behavior?

• A. enabing SNAT automap
• B. enabing a falback host in the http profile
• C. adding a oneconnect profile
• D. adding a persistence profile

Answer: D

NEW QUESTION 4
How should a BIG-IP Administrator persistent sessions from being sent to a pool member so that the server administrator can perform maintenance?

• A. force the pool member offline
• B. disable the pool member
• C. add an additional monitor to the poor
• D. disable the virtual server

Answer: A

NEW QUESTION 5
Refer to the exhibit.

A BIG-IP Administrator creates a new Virtual Server. The end user is unable to access the page. During troubleshooting, the administrator learns that the connection between the BIG-IP system and server is NOT set up correctly.
What should the administrator do to solve this issue?

• A. Disable Address Translation
• B. Set Address Translation to Auto Map, configure a SNAT pool, and have pool members in the same subnet of the servers
• C. Set Address Translation to SNAT and configure a specific translation address
• D. Set Address Translation to SNAT and have self-IP configured in the same subnet of servers

Answer: C

Explanation:
The status of the pool can be seen that the members are all up, indicating that the network from F5 to the server is no problem, so there is no need to configure selfip on the same subnet. The monitor is normal but the access is not normal, you have to consider the problem of snat, you can configure automap or configure snat and specify snat ip.

NEW QUESTION 6
A 8IG-IP Administrator is making adjustments to an iRule and needs to identify which of the 235 virtual
server configured on the BIG-IP device will be affected.
How should the administrator obtain this information in an effective way?

• A. Local Traffic > Virtual Server
• B. Local traffio Pools
• C. LOCAL Traffic > Network Map
• D. Local traffic > Rules

Answer: C

NEW QUESTION 7
Refer to the exhibit.
Due to a change in application requirements, a BIG-IP Administrator needs to modify the configuration of a Virtual Server to include a Fallback Persistence Profile.
Which persistence profile type should the BIG-IP Administrator use for this purpose?

• A. SSL
• B. Hash
• C. Universal
• D. Source Address Affinity

Answer: D

NEW QUESTION 8
A BIG-IP Administrator uses a device group to share the workload and needs to perform service on a BIG-IP device currently active for a traffic group. The administrator needs to enable the traffic group to run on another BIG-IP device in the device group. What should the administrator do to meet the requirement?

• A. Create a new Traffic Group and then fail to Standby Unit
• B. Select Traffic Group and then select Failover
• C. Select Traffic Group and then select Force to Standby
• D. Select Traffic Group on Primary Unit and then select Demote

Answer: C

NEW QUESTION 9
Which is an advantage of terminating SSL communication at the BIGIP rather than the ultimate web server?

• A. Terminating SSL at the BIG-IP can eliminate SSL processing at the web servers.
• B. Terminating SSL at IP the eliminates BIG all unencrypted traffic from the internal network.
• C. Terminating SSL at the BIG-IP eliminates the need to purchase SSL certificates from a certificate authority.
• D. Terminating SSL at the BIG-IP eliminates the need to use SSL acceleration hardware anywhere in the network.

Answer: A

NEW QUESTION 10
A BIG-IP Administrator needs to configure the BIG-IP system to perform load balancing for FTP servers running passive mode FTP.
How should the administrator configure the Virtual Server to perform this load balancing?

• A. A Standard Virtual Server + FTP profile
• B. A Forwarding Virtual Server
• C. A Performance Layer 4 Virtual Server + FTP profile
• D. A Message Routing Virtual Server

Answer: A

NEW QUESTION 11
When configuring a Virtual Server to use an iRule with an HTTP_REQUEST event, which lists required steps in a proper order to create all necessary objects?

• A. create profiles, create the iRule, create required pools, create the Virtual Server
• B. create the Virtual Server, create required pools, create the iRule, edit the Virtual Server
• C. create a custom HTTP profile, create required pools, create the Virtual Server, create the iRule
• D. create required pools, create a custom HTTP profile, create the iRule, create the Virtual Server

Answer: B

NEW QUESTION 12
Refer to the exhibit.

A user attempts to connect to 10.10.10.1.80 using FTP over SSL with an FTPS client. Which virtual server will match and attempt to process the request?

• A. vsjutps
• B. vs_ftp
• C. vs_http
• D. nvfs

Answer: B

NEW QUESTION 13
New Syslog servers have been deployed in an organization. The BIG-IP Administrator must reconfigure the BIG-IP system to send log messages to these servers.
In which location in the Configuration Utility can the BIG-IP Administrator make the needed configuration changes to accomplish this?

• A. System > Logs > Configuration
• B. System > Configuration > Local Traffic
• C. System > Logs > Audit
• D. System > Configuration > Device

Answer: A

NEW QUESTION 14
A BIG-IP Administrator has configured a BIG-IP cluster with remote user authentication against dcOl f5trn.com. Only local users can successfully log into the system. Configsync is also failing.
Which two tools should the 8IG-IP Administrator use to further investigate these issues? (Choose two)

• A. ntpq
• B. pam_timestamp_check
• C. passwd
• D. pwck
• E. dig

Answer: AC

NEW QUESTION 15
Refer to the exhibit.

A BIG-IP Administrator configures a Virtual Server to handle HTTPS traffic. Users report that the application is NOT working.
Which actional configuration is regard to resolve this issue?

• A. Configure SSL Profile (Client)
• B. Configure Protocol Profile (Server)
• C. Configure Service Profile HTTP
• D. Configure SSL Profile (Server)

Answer: A

NEW QUESTION 16
An LTM device has a virtual server mapped to www.f5.com with a pool assigned. Users report that when browsing, they are periodically required to re-login to /resources/201.1.7.b.2_l.com. The objects are defined as follows:
Virtual server. Destination 192.168.245.100:443 netmask 255.255.255.0 Persistence: SSL session persistence
Profiles: HTTP/TCP
Which persistence method should the BIG-IP Administrator apply to resolve this issue?

• A. Source address affinity
• B. hexadecimal
• C. SIP
• D. Destination address affinity

Answer: A

NEW QUESTION 17
Refer to the exhibit.

The BIG-IP Administrator has modified an iRule on one device of an HA pair. The BIG-IP Administrator notices there is NO traffic on the BIG-IP device in which they are logged into.
What should the BIG-IP Administrator do to verify if the iRule works correctly?

• A. Push configuration from this device to the group and start to monitor traffic on this device
• B. Pull configuration to this device to the cluster and start to monitor traffic on this device
• C. Log in to the other device in the cluster, push configuration from it, and start to monitor traffic on that device
• D. Log in to the other device in the cluster, pull configuration to it, and start to monitor traffic on that device

Answer: D

Explanation:
The device in the picture is a standby machine, of course there is no traffic, you need to log in to the host, and then pull the configuration to the host.

NEW QUESTION 18
Which two can be a part of a virtual server's definition? (Choose two.)

• A. rule(s)
• B. pool(s)
• C. monitor(s)
• D. node address(es)
• E. loadbalancing method(s)

Answer: AB

NEW QUESTION 19
......