(Nov-2022) Get professional help from our 201 Dumps PDF [Q67-Q86]

5/5 - (1 vote)

(Nov-2022) Get professional help from our 201 Dumps PDF

Give You Free Regular Updates on 201 Exam Questions

NO.67 A BIG-IP has two load balancing virtual servers at 150.150.10.10:80 and 150.150.10.10:443. The port 80 virtual server has SNAT automap configured. There is also a SNAT configured at 150.150.10.11 set for a source address range of 200.200.1.0 / 255.255.255.0. All other settings are at their default states. If a client with the IP address 200.200.1.1 sends a request to https://150.150.10.10, What is the source IP address when the associated packet is sent to the pool member?

200.200.1.1

150.150.10.11

Floating self IP address on VLAN where the packet leaves the system

Floating self IP address on VLAN where the packet arrives on the system

NO.68 Refer to the exhibit.

Which TMSH command generated this output?

tmsh list /cm sync-status

tmsh show /sys sync-status

tmsh list /sys sync-status

tmsh show /cm sync status

NO.69 A virtual server is listening at 10.10.1.100:80 and has the following iRule associated with it: when HTTP_REQUEST { if {[HTTP::uri] ends_with “txt” } { pool pool1 } elseif {[HTTP::uri] ends_with “php” } { pool pool2 } If a user connects to http://10.10.1.100/foo.html, which pool will receive the request?

pool1

pool2

None. The request will be dropped.

Unknown. The pool cannot be determined from the information provided.

NO.70 The incoming client IP address is 205.12.45.52. The last five connections have been sent to members C, D, A, B, B. Given the virtual server and pool definitions and the statistics shown in the graphic, which member will be used for the next connection?

10.10.20.1:80

10.10.20.2:80

10.10.20.3:80

10.10.20.4:80

10.10.20.5:80

NO.71 A new BIG-IP VE is deployed with default settings. The BIG-IP Administrator completes the setup utility in the Configuration Utility. The internal self IP address fails to respond to a ping request. What is a possible cause of this issue?

Port lockdown on internal self IP is set to Allow None

Route is NOT assigned to internal self IP.

Internal interface VLAN is set to untagged

Internal interface VLAN is set to tagged

NO.72 Which two can be a part of a pool’s definition. (Choose two.)

rule(s)

profile(s)

monitor(s)

persistence type

loadElbalancing mode

NO.73 A virtual server is listening at 10.10.1.100:80 and has the following
iRule associated with it: when HTTP_REQUEST { if {[HTTP::uri] ends_with “txt” } { pool pool1 } elseif {[HTTP::uri] ends_with “php” } { pool pool2 } If a user connects to http://10.10.1.100/foo.html, which pool will receive the request.

pool1

pool2

None. The request will be dropped.

Unknown. The pool cannot be determined from the information provided.

NO.74 A set of servers is used for an FTP application as well as an HTTP website via separate BIG-IP Pools. The server support team reports that some servers are receiving a lot more traffic than others.
Which Load Balancing Method should the BIG-IP Administrator apply to even out the connection count?

Ratio (Member)

Least Connections (Member)

Least Connections (Node)

Ratio (Node)

NO.75 An application is configured so that the same pool member must be used for an entire session, as well as for HTTP and FTP traffic.
A user reports that a session has terminated, and the user must restart the session. The BIG-IP Administrator determines that the active BIG-IP device failed over to the standby BIG-IP device. Which configuration settings should the BIG-IP Administrator verify to ensure proper behaviour when BIG-IP failover occurs?

cookie persistence and session timeout

Stateful failover and Network Failover detection

Persistence mirroring and Match Across Services

syn-cookie insertion threshold and connection low-water mark

NO.76 One of the two members of a device group has been decommissioned. The BIG-IP Administrator tries to delete the device group, but is unsuccessful.
Prior to removing the device group, which action should be performed?

Disable the device group

Remove all members from the device group

Remove the decommissioned device from the device group

Make sure all members of the device group are in sync

NO.77 A BIG-IP Administrator receives an RMA replacement for a failed F5 device. The BIG-IP Administrator tries to restore a UCS taken from the previous device, but the restore fails. The following error appears inthe/var/log/itm.
mcpd [****J: ******;0; License is not operational (expired or digital signature does not match contents.) What should the BIG-IP Administrator do to avoid this error?

Use the appropriate tmsh command with the no-license option

Revoke the license prior to restoring

Reactivate the license on the new device using the manual activation method

Remove the license information from the UCS archive

NO.78 A standard virtual server is defined with a pool and a SNAT using automap. All other settings for the virtual server are at defaults. When client traffic is processed by the BIG-IP, what will occur to the IP addresses?

Traffic initiated by the pool members will have the source address translated to a self-IP address but the destination address will not be changed.

Traffic initiated to the virtual server will have the destination address translated to a pool member address and the source address translated to a self-IP address.

Traffic initiated by selected clients, based on their IP address, will have the source address translated to a self-IP address but the destination will only be translated if the traffic is destined to the virtual server.

Traffic initiated to the virtual server will have the destination address translated to a pool member address and the source address translated to a self-IP address. Traffic arriving destined to other destinations will have the source translated to a self-IP address only.

NO.79 A site wishes to perform source address translation on packets from some clients but not others. The determination is not based on the client’s IP address, but on the virtual servers their packets arrive on. What could best accomplish this goal?

A SNAT for all addresses could be defined, and then disable the SNAT processing for select VLANs.

Some virtual servers could be associated with SNAT pools and others not associated with SNAT pools.

The decision to perform source address translation is always based on VLAN. Thus, the goal cannot be achieved.

The decision to perform source address translation is always based on a client’s address (or network). Thus, this goal cannot be achieved.

NO.80 Which Virtual Server type should be used to load balance HTTP traffic to a pool of servers?

Standard

Stateless

Forwarding (IP)

Forwarding (Layer 2)

NO.81 Which method is recommended for creating a new user from the CLI?

Run f5adduser username’ then ‘f5passwd username’ from bash or tmsh

Run tmsh create auth user username prompt for password’ from bash

edit bigip.conf to add the new user and the user’s clear-text password

Run useradd username’ then ‘passwd username’ from bash tmsh

NO.82 A local user account (Users) on the BIG-IP device is assigned the User Manager role. Userl attempts to modify the properties of another account (User2), but the action fails. The BIG-IP Administrator can successfully modify the User2 account.
Assuming the principle of least privilege, what is the correct way to allow User 1 to modify User2 properties?

Move User2 to the same partition as User1

Grant User1 administrative privileges

Move User to the same partition as User2.

Modify the partition access for User 1

NO.83 Refer to the exhibit.

Due to a change in application requirements, a BIG-IP Administrator needs to modify the configuration of a Virtual Server to include a Fallback Persistence Profile.
Which persistence profile type should the BIG-IP Administrator use for this purpose?

SSL

Hash

Universal

Source Address Affinity

NO.84 Refer to the exhibit.

How many nodes are represented on the network map shown?

Four

Three

One

Two

NO.85 Which is an advantage of terminating SSL communication at the BIGElIP rather than the ultimate web server.

Terminating SSL at the BIGElIP can eliminate SSL processing at the web servers.

Terminating SSL at thElIP e B eli Im Ginates all unElencrypted traffic from the nternal.network.Terminating
SSL at the
BEl IGP
eliminates all unElencrypted traffic
from the .nternal.network.

Terminating
SSL at the BIGElIP
eliminates
the need
to purchase
SSL certificates from a certificate authority.

Terminating SSL at the BIGElIP eliminates the need to use SSL acceleration hardware anywhere in the network.

NO.86 An LTM device has a virtual server mapped to www5f.com with a pool assigned. The objects are defined as follows:
Virtual server. Destination 192.168.245.100.443 netmask 255.255.255.0
Persistence: Source address persistence netmask 255.0.0.0
SNAT:AutoMap
Profiles: HnP/TCP
How should the BIG-IP Administrator modify the persistence profile so that each unique IP address creates a persistence record?

netmask 0.0.0.0

netmask 255.255.255.255

netmask 255.255.0.0

netmask 255.256.255.0