F5-Networks 101 Free Practice Questions

NEW QUESTION 1
An administrator needs to protect a web application from cross-site scripting (CSS) exploits. Which F5 protocol provide this functionality

• A. ASM
• B. APM
• C. AFM
• D. GTM

Answer: A

Explanation:
https //devcentral f5.com/articIes/the-big-ip-application-security-managef-part-1-what-is-the-asm

NEW QUESTION 2
10:20: 37 .00749:IP 199.16.255.254.36664>10.0.1.10 http : flags (s) seq 700424862, Win 29200
A website is fronted by a toad balancer that implements a full proxy architecture with SNAT enabled Behind the load balancer there are bro nodes Node 1 and node2
She administrator is debugging an issue on node 1 using icpdump and records the above out about a received packet o watch device does the IP address 192 168 265 254" belong?

• A. node2
• B. node 1
• C. load balancer
• D. web Client

Answer: C

NEW QUESTION 3
A BIG-IP Administrator needs to open a case with F5 Support for a specific issue with an existing HA pair of BIG-IP platform. What should be uploaded to iHealth prior to opening the case to expedite processing of the support case?

• A. UCS file
• B. SCF filo
• C. tcpdump file
• D. Qkview file

Answer: D

NEW QUESTION 4
After all expected HTTP data has been sent from a server to a client, the client does not close connection. The server reaps the connection, but after that the client sends a ‘’Keep alive ‘’packet to the server.
Which type of packet will the server respond with?

• A. FiN
• B. RST
• C. ACK
• D. SYN

Answer: B

NEW QUESTION 5
What is a common use of an iRule?

• A. to modify application traffic between the client and server
• B. to create a reuseable application delivery template
• C. to integrate a BIG IP into an enterprise orchestration tool
• D. to create an accelerated session between two BIG-IP devices

Answer: A

NEW QUESTION 6
A BIG IP virtual Server with an IP address of 10.100.43.108 must be available to public internet users. Which technology should be used to achieve this task?

• A. NDP
• B. DNS
• C. NAT
• D. ARP

Answer: C

Explanation:
10 x.x.x/8 is an RFC 1918 reserved private IP address. It must be NATted from a publicly accessible IP for access from the internet

NEW QUESTION 7
A client needs to learn if a web server supports POST Which HTTP method is used?

• A. OPTIONS
• B. TRACE
• C. LIST
• D. GET

Answer: A

Explanation:
https //developer mozilla.org/en-US/docs/Web/HTTP/Methods/OPTION

NEW QUESTION 8
There is no SFP plugged into the port.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 9
Which FTP mode should be used by a client behind a firewall that has no special configurator?

• A. Passive FTP
• B. Secure FTP
• C. Active FTP
• D. Protected FTP

Answer: A

NEW QUESTION 10
A BIG-IP Administrator is trying to send traffic to a server on the same subnet and sees an incomplete in the BIG-IP devices ARP table. What could cause the incomplete status?

• A. BIG-IP device connection is half-duplex
• B. Router does not have a default gateway
• C. Firewall is blocking ICMP
• D. Server's switch connection is in the wrong VLAN

Answer: D

NEW QUESTION 11
Ethernet frame FCS errors occur when which calculation fails?

• A. FSCM
• B. CRC
• C. CSR
• D. HSTS

Answer: B

NEW QUESTION 12
In which scenario is a full proxy TCP connection required?

• A. TCP routing
• B. IPv4 lo IPv6 gateway
• C. UDP routing
• D. UDP to ICMP gateway

Answer: B

NEW QUESTION 13
An administrator needs to assess an LTM for potential configuration issues and required security updates. Which F5 website con automate this task?

• A. addf5f5.com
• B. ihealth5.com
• C. Devcentral f5.ccom
• D. www.f5.Com

Answer: B

Explanation:
https://www f5.com/services/support/support-offerings/big-ip-ihealth-diagnostic-tool

NEW QUESTION 14
Which security mode. functions by defining what traffic is allowed and rejecting all other traffic?

• A. context-based access control mode!
• B. role-based access control mode!
• C. negative security model
• D. positive security model

Answer: D

NEW QUESTION 15
A BIG IP Administrator is trying to reach the internal web server from a workstation
* The workstation has a MAC address of 00:00 00 00 00 01 and an IP address or 192. 168. 0. 1
* An internal web server has a MAC address of 00 00 00 00 00 02 and an IP address of 10. 10. 1. 1
* The workstations default gateway has a MAC address of 00 00 00 00 00 03 and IP address of 192 168 0 254
What is the destination hardware address of the outbound packet when it leaves the workstation?

• A. 00:00.00:00:00:01
• B. 00:00:00 :00:00:00
• C. 00:00:00:00:00:03
• D. 00:00:00:00:00 02

Answer: C

NEW QUESTION 16
Which OSI layer provides reliable transmission of frames between adjacent nodes and is built on top of the provides reliable transmission of frames adjacent nodes and is built on top of the Physical layer?

• A. Data link
• B. Transport
• C. Network
• D. Application

Answer: A

NEW QUESTION 17
A BIG IP Administrator needs to create a virtual server for a new secure end-to-end web application After change in configuration the virtual server .3 still marked down. The configuration of the virtual server and the pool member are correct. A quick server shows the status.

To fix the issue, what should the BIG-IP Administrator inform the web server administrator to do?

• A. change web server configuration to use SSL/TLS
• B. reboot the server
• C. restart the web service
• D. change web server configuration lo use SSH/SCP

Answer: A

Explanation:
If the application needs to be secure ‘end-to-end’’ the web server needs to use SSL as well. Most web servers will not required to HTTP requests when configured with HTTPS, so the monitor is failing.

NEW QUESTION 18
Without decrypting, what portion of an HTTPS session is visible with a packet capture?

• A. Source IP Address
• B. HTTP Request Headers
• C. Cookies
• D. HTTP Response Headers

Answer: A

NEW QUESTION 19
......