New Year Special Limited Time Flat 70% Discount offer - Ends in 0d 00h 00m 00s - Coupon code: 70spcl

F5 201 TMOS Administration Exam Practice Test

Page: 1 / 25
Total 254 questions

TMOS Administration Questions and Answers

Question 1

A BIG-IP Administrator is unable to connect to the management interface via HTTPS. What is a possible reason for this issue?

Options:

A.

The port lockdown setting is configured to Allow None.

B.

An incorrect management route is specified.

C.

The IP address of the device used to access the management interface is NOT included in the "P Allow" list in the Configuration Utility.

D.

The IP address of the device used to access the management interface is NOT included in the "httpd Allow" list in the CLI.

Question 2

A BIG-IP Administrator needs to apply a license to the BIG-IP system to increase the user count from the

base license.

Which steps should the BIG-IP Administrator?

Options:

A.

System License > Re-activate> Add-On Registration> Edit

B.

System > License > Re-activate > Base Registration> Edit

C.

Device Management > Devices > Select BIG-IP System > Update

D.

System > Configuration >Device > General

Question 3

A BIG-IP Administrator needs to collect HTTP status code and HTTP method for traffic flowing through a

virtual server.

Which default profile provides this information?

Options:

A.

HTTP

B.

Analytics

C.

Request Adapt

D.

Statistics

Question 4

Which process or system can be monitored by the BIG-IP system and used as a failover trigger in a redundant pair configuration?

Options:

A.

bandwidth utilization

B.

duplicate IP address

C.

CPU utilization percentage

D.

VLAN communication ability

Question 5

During a high-demand traffic event, the BIG-IP Administrator needs to limit the number of new

connections per second allowed to a Virtual Server.

What should the administrator apply to accomplish this task?

Options:

A.

An HTTP Compression profile to the Virtual Server

B.

A connection rate limit to the Virtual Server

C.

A connection limit to the Virtual Server

D.

A OneConnect profile to the Virtual Server

Question 6

You need to terminate client SSL traffic at the BIG-IP and also to persist client traffic to the same pool member based on a BIG IP supplied cookie. Which four are profiles that would normally be included in the virtual

server's definition? (Choose four.)

Options:

A.

TCP

B.

HTTP

C.

HTTPS

D.

ClientSSL

E.

ServerSSL

F.

CookieBased Persistence

Question 7

Refer to the exhibit.

Question # 7

A BIG-IP Administrator configures a Virtual Server to handle HTTPS traffic. Users report that the

application is NOT working.

Which actional configuration is regard to resolve this issue?

Options:

A.

Configure SSL Profile (Client)

B.

Configure Protocol Profile (Server)

C.

Configure Service Profile HTTP

D.

Configure SSL Profile (Server)

Question 8

How should a BIG-IP Administrator persistent sessions from being sent to a pool member so that the server administrator can perform maintenance?

Options:

A.

force the pool member offline

B.

disable the pool member

C.

add an additional monitor to the poor

D.

disable the virtual server

Question 9

Refer to the exhibit.

Question # 9

Why is the virtual server responsive to incoming connections?

Options:

A.

The pool member is disabled

B.

The pool member monitor failed

C.

The node is disabled.

D.

The node monitor failed

Question 10

Which log file should the BIG-IP Administrator check to determine if a specific user tried to log in to the 8IG-IP Configuration by utility?

Options:

A.

/var/log/pam/tally/log

B.

/ver/log/secure

C.

/var/log/trn

D.

/var/log/http.d

Question 11

Given that VLAN failsafe is enabled on the external VLAN and the network that the active BIG-IP's external VLAN is connected to has failed, which statement is always true about the results?

Options:

A.

The active system will note the failure in the HA table.

B.

The active system will reboot and the standby system will go into active mode.

C.

The active system will failover and the standby system will go into active mode.

D.

The active system will restart the traffic management module to eliminate the possibility that BIG-IP is the

cause for the network failure.

Question 12

Refer to the exhibit.

Question # 12

Which Pool Members are receiving traffic?

Options:

A.

Serv1, serv2,serv3, serv4

B.

serv1, serv3

C.

serv1, serv3, serv4

D.

serv1

Question 13

Assume a virtual server has a ServerSSL profile. What SSL certificates are required on the pool members?

Options:

A.

No SSL certificates are required on the pool members.

B.

The pool members.SSL certificates must only exist.

C.

The pool members.SSL certificates must be issued from a certificate authority.

D.

The pool members.SSL certificates must be created within the company hosting the BIGIPs.

Question 14

Which is an advantage of terminating SSL communication at the BIGIP rather than the ultimate web server?

Options:

A.

Terminating SSL at the BIG-IP can eliminate SSL processing at the web servers.

B.

Terminating SSL at IP the eliminates BIG all unencrypted traffic from the internal network.

C.

Terminating SSL at the BIG-IP eliminates the need to purchase SSL certificates from a certificate authority.

D.

Terminating SSL at the BIG-IP eliminates the need to use SSL acceleration hardware anywhere in the network.

Question 15

A BIG-IP Administrator creates a new VLAN on BIG-IP Cluster Member A and attaches an Interface to it. Although the Auto Config Sync is in place, the new VLAN does NOT show up on Cluster Member B. What should the BIG-IP Administrator do to ensure the new VLAN is configured on each Cluster Member?

Options:

A.

Configure the new VLAN manually on Cluster Member B.

B.

Reset the Device Trust of the BIG-IP Cluster on either Cluster Member.

C.

Configure a Default Route for the new VLAN on Cluster Member A.

D.

Enable the Interface that is attached to the new VLAN on Cluster Member A.

Question 16

A BIG-IP Administrator needs to have a BIG-IP linked to two upstream switches for resilience of the external network. The network engineer who is going to configure the switch instructs the BIG-IP Administrator to configure interface binding with LACP. Which configuration should the administrator use?

Options:

A.

A virtual server with an LACP profile and the switches' management IPs as pool members.

B.

A virtual server with an LACP profile and the interfaces connected to the switches as pool members.

C.

A Trunk listing the allowed VLAN IDs and MAC addresses configured on the switches.

D.

A Trunk containing an interface connected to each switch.

Question 17

New Syslog servers have been deployed in an organization. The BIG-IP Administrator must reconfigure the BIG-IP system to send log messages to these servers.

In which location in the Configuration Utility can the BIG-IP Administrator make the needed configuration changes to accomplish this?

Options:

A.

System > Logs > Configuration

B.

System > Configuration > Local Traffic

C.

System > Logs > Audit

D.

System > Configuration > Device

Question 18

A BIG-IP Administrator needs to purchase new licenses for a BIG-IP appliance.

The administrator needs to know if a module is licensed and the memory requirement for that module.

Where should the administrator view this information in the System menu?

Options:

A.

Resource Provisioning

B.

Configuration > Device

C.

Software Management

D.

Configuration >OVSDB

Question 19

Which two methods can be used to determine which BIG-IP is currently active? (Choose two.)

Options:

A.

The bigtop command displays the status.

B.

Only the active system's configuration screens are active.

C.

The status (Active/Standby) is embedded in the command prompt.

D.

The ifconfig a command displays the floating addresses on the active system.

Question 20

What should the BIG-IP Administrator do to apply and activate a hotfix to a BIG-IP device that is currently running version 11.0.0 on active partition HD1.1?

Options:

A.

1. confirm that 11.0.0 is installed on inactive partition HD1.2

2. apply a hotfix to partition HD 1.2

3. activate partition HD1.2

B.

1. reactivate the license on partition HD1.1

2. apply a hotfix to partition HD1.1

C.

1. activate partition HD1.2

2 confirm version 11.0.0 on partition HD1.2

3. install a hotfix on partition HD1.2

D.

1. set partition HD1.2 active

2. apply a hotfix to partition HD1.2

Question 21

Which three iRule events are likely to be seen in iRules designed to select a pool for load balancing? (Choose three.)

Options:

A.

CLIENT_DATA

B.

SERVER_DATA

C.

HTTP_REQUEST

D.

HTTP_RESPONSE

E.

CLIENT_ACCEPTED

F.

SERVER_SELECTED

G.

SERVER_CONNECTED

Question 22

A node is a member of various pools and hosts different web applications. If a web application is unavailable, the BIG-IP appliance needs to mark the pool member down for that application pool. What should a BIG-IP Administrator deploy at the pool level to accomplish this?

Options:

A.

A UDP monitor with a custom interval/timeout

B.

A combination of ICMP + TCP monitor

C.

An HTTP monitor with custom send/receive strings

D.

A TCP monitor with a custom interval/timeout

Question 23

A BIG-IP Administrator needs to install a HotFix on a standalone BIG-IP device, which has HD1.1 as the Active Boot Location. The BIG-IP Administrator has already re-activated the license and created an UCS archive of the configuration. In which sequence should the BIG-IP Administrator perform the remaining steps?

Options:

A.

Install HotFix in HD 1.1, Reboot the BIG-IP device. Install UCS Archive

B.

Install HotFix in HO 1.2, Install base Image in HD 1.2, Activate HD1.2

C.

Install base Image in HD1.2, Install HotFix in HD1.2, Activate HD 1.2

D.

Activate HD 1.2, Install base image in HD 1.2. Install HotFix in HD 1.2

Question 24

A BIG-IP Administrator defines a device Self IP . The Self IP is NOT reachable from the network. What should the BIG-IP Administrator verify first?

Options:

A.

The correct interface has been selected.

B.

The correct VLAN has been selected.

C.

Verify if auto last hop is disabled.

D.

The correct Trunk has been selected.

Question 25

A BIG-IP Administrator must determine if a Virtual Address is configured to fail over to the standby member of a device group in which area of the Configuration Utility can this be confirmed?

Options:

A.

Device Management > Traffic Groups

B.

Device Management > Devices

C.

Local Traffic > Virtual Servers

D.

Device Management > Overview

Question 26

The BIG-IP Administrator disable all pool members in a pool Users are still able to reach the pool

members.

What is allowing users to continue to reach the disabled poo! members?

Options:

A.

A slow to time on Pool

B.

A persistence profile on the Virtual Server

C.

A slow ramp time on virtual Server

D.

A persistence profile on the Pool

Question 27

Some users who connect to a busy Virtual Server have connections reset by the BIG-IP system. Pool member resources are NOT a factor in this behavior. What is a possible cause for this behavior?

Options:

A.

The Connection Rate Limit is set too high

B.

The server SSL Profile has NOT been reconfigured.

C.

The Connection Limit is set too low.

D.

The Rewrite Profile has NOT been configured.

Question 28

A BIG-IP has two load balancing virtual servers at 150.150.10.10:80 and 150.150.10.10:443. The port 80 virtual server has SNAT automap configured. There is also a SNAT configured at 150.150.10.11 set for a source

address range of 200.200.1.0 / 255.255.255.0. All other settings are at their default states. If a client with the IP address 200.200.1.1 sends a request to https://150.150.10.10, what is the source IP address when the

associated packet is sent to the pool member?

Options:

A.

200.200.1.1

B.

150.150.10.11

C.

Floating self IP address on VLAN where the packet leaves the system

D.

Floating self IP address on VLAN where the packet arrives on the system

Question 29

A Virtual Server uses an iRule to send traffic to pool members depending on the URI. The BIG-IP

Administrator needs to modify the pool member in the iRule.

Which event declaration does the BIG-IP Administrator need to change to accomplish this?

Options:

A.

CLIENT_ACCEPTED

B.

HTTP_RESPONSE

C.

HTTP_REQUEST

D.

SERVER_CONNECTED

Question 30

One of the two members of a device group has been decommissioned. The BIG-IP Administrator tries to

delete the device group, but is unsuccessful.

Prior to removing the device group, which action should be performed?

Options:

A.

Disable the device group

B.

Remove all members from the device group

C.

Remove the decommissioned device from the device group

D.

Make sure all members of the device group are in sync

Question 31

A BIG-IP Administrator upgrades the BIG-IP LTM to a newer software version. After the administrator reboots into the new volume, the Configuration fails to load. Why is the Configuration failing to load?

Options:

A.

The license needs to be reactivated before the upgrade.

B.

The upgrade was performed on the standby unit.

C.

A minimum of at least two reboots is required.

D.

Connectivity to the DNS server failed to be established.

Question 32

Refer to the exhibit

The network team creates a new VLAN on the switches. The BIG-IP Administrator needs to create a

configuration on the BIG-IP device. The BIG-IP Administrator creates a new VLAN and Self IP, but the

servers on the new VLAN are NOT reachable from the BIG-IP device.

Which action should the BIG-IP Administrators to resolve this issue?

Options:

A.

Set Port Lockdown of Set IP to Allow All

B.

Change Auto Last Hop to enabled

C.

Assign a physical interface to the new VLAN

D.

Create a Floating Set IP Address

Question 33

A BIG-IP Administrator reviews the log files to determine the cause of a recent problem and finds the

following entry.

Mar 27.07.58.48 local/BIG-IP notice mcpd {5140} 010707275 Pool member 172.16.20.1.10029 monitor

status down.

What is the cause of this log message?

Options:

A.

The pool member has been disabled.

B.

The pool member has been marked as Down by the BIG-IP Administrator.

C.

The monitor attached to the pool member needs a higher timeout value.

D.

The monitor attached to the pool member has failed.

Question 34

A BIG-IP Administrator needs to restore a UCS file to an F5 device using the Configuration Utility. Which section of the Configuration Utility should the BIG-IP Administrator access to perform this task?

Options:

A.

Local Traffic > Virtual Servers

B.

Local Traffic > Policies

C.

System > Archives

D.

System > Configuration

Question 35

Active connections to pool members are unevenly distributed. The load balancing method is Least Connections (member) Priority Group Activation is disabled. What is a potential cause of the event distribution?

Options:

A.

Priority Group Activation is disabled

B.

SSL Profile Server is applied

C.

Persistence profile is applied

D.

incorrect load balancing method

Question 36

An application is configured so that the same pool member must be used for an entire session, as well as for HTTP and FTP traffic.

A user reports that a session has terminated, and the user must restart the session. The BIG-IP Administrator determines that the active BIG-IP device failed over to the standby BIG-IP device. Which configuration settings should the BIG-IP Administrator verify to ensure proper behaviour when BIG-IP failover occurs?

Options:

A.

cookie persistence and session timeout

B.

Stateful failover and Network Failover detection

C.

Persistence mirroring and Match Across Services

D.

syn-cookie insertion threshold and connection low-water mark

Question 37

What is required for a virtual server to support clients whose traffic arrives on the internal VLAN and pool members whose traffic arrives on the external VLAN?

Options:

A.

That support is never available.

B.

The virtual server must be enabled for both VLANs.

C.

The virtual server must be enabled on the internal VLAN.

D.

The virtual server must be enabled on the external VLAN.

Question 38

An LTM device has a virtual server mapped to www5f.com with a pool assigned. The objects are defined

as follows:

Virtual server. Destination 192.168.245.100.443 netmask 255.255.255.0

Persistence: Source address persistence netmask 255.0.0.0

SNAT:AutoMap

Profiles: HnP/TCP

How should the BIG-IP Administrator modify the persistence profile so that each unique IP address

creates a persistence record?

Options:

A.

netmask 0.0.0.0

B.

netmask 255.255.255.255

C.

netmask 255.255.0.0

D.

netmask 255.256.255.0

Page: 1 / 25
Total 254 questions