A BIG-IP Administrator is configuring a pool with members who have differing capabilities. Connections
to pool members must be load balanced appropriately.
Which load balancing method should the BIG-IP Administrator use?
- A . Least Sessions
- B . Least Connections (member)
- C . Fastest (node)
- D . Weighted Least Connections (member)
A BIG-IP Administrator needs to restore a UCS file to an F5 device using the Configuration Utility.
Which section of the Configuration Utility should the BIG-IP Administrator access to perform this task?
- A . Local Traffic > Virtual Servers
- B . Local Traffic > Policies
- C . System > Archives
- D . System > Configuration
Which Virtual Server type prevents the use of a default pool?
- A . Performance (Layer 4)
- B . Forwarding (IP)
- C . Performance HTTP
- D . Standard
B
Explanation:
Forwarding (IP) cannot be associated with the pool.
A user needs to determine known security vulnerabilities on an existing BIG-IP appliance and how to
remediate these vulnerabilities.
Which action should the BIG-IP Administrator recommend?
- A . Verify the TMOS version and review the release notes
- B . Create a UCS archive and upload to Health
- C . Create a UCS archive and open an F5 Support request
- D . Generate a view and upload to Heath
The 8IG-IP Administrator generates a qkview using "qkview -SO" and needs to transfer the output file via SCP.
Which directory contains the output file?
- A . /var/log
- B . /var/tmp
- C . /var/local
- D . /var/config
A BIG-IP Administrator notices that one of the servers that runs an application is NOT receiving any traffic. The BIG-IP Administrator examines the configuration status of the application and observes the displayed monitor configuration and affected Pool Member status.
What is the possible cause of this issue?
- A . The Node Health Monitor is NOT responding.
- B . The application is NOT responding with the expected Receive String.
- C . HTTP 1.1 is NOT appropriate for monitoring purposes.
- D . The BIG-IP device is NOT able to reach the Pool.
Which method is recommended for creating a new user from the CLI?
- A . Run f5adduser username’ then ‘f5passwd username’ from bash or tmsh
- B . Run tmsh create auth user username prompt for password’ from bash
- C . edit bigip.conf to add the new user and the user’s clear-text password
- D . Run useradd username’ then ‘passwd username’ from bash tmsh
B
Explanation:
Reference:
The f5adduser commands were removed and tmsh is the recommended way to create users.
https://support.f5.com/csp/article/K11677
A BIG-IP Administrator wants to add a new Self IP to the BIG-IP device.
Which item should be assigned to the new Self IP being configured?
- A . Interface
- B . Route
- C . VLAN
- D . Trunk
Refer to the exhibit.
The BIG-IP Administrator needs to avoid overloading any of the Pool Members with
connections, when they become active.
What should the BIG-IP Administrator configure to meet this requirement?
- A . Different Ratio for each member
- B . Same Priority Group to each member
- C . Action On Service Down to Reselect
- D . Slow Ramp Time to the Pool
Refer to the exhibit.
Which Pool Members are receiving traffic?
- A . Serv1, serv2,serv3, serv4
- B . serv1, serv3
- C . serv1, serv3, serv4
- D . serv1
A BIG-IP device has only LTM and ASM modules provisioned. Both have nominal provisioning level. The BI6-IP Administrator wants to dedicate more resources to the LTM module. The ASM module must remain enabled.
Which tmsh command should the BIG-IP Administrator execute to obtain the desired result?
- A . modify/sys provision asm level minimum
- B . modify /sys provision Itm level dedicated
- C . modify /sys provision asm level none
- D . modify /sys provision Itm level minimum
The BIG-IP appliance fails to boot. The BIG-IP Administrator needs to run the End User Diagnostics (EUD) utility to collect data to send to F5 Support.
Where can the BIG-IP Administrator access this utility?
- A . Console Port
- B . Internal VLAN interface
- C . External VLAN interface
- D . Management Port
Some users who connect to a busy Virtual Server have connections reset by the BIG-IP system. Pool member resources are NOT a factor in this behavior.
What is a possible cause for this behavior?
- A . The Connection Rate Limit is set too high
- B . The server SSL Profile has NOT been reconfigured.
- C . The Connection Limit is set too low.
- D . The Rewrite Profile has NOT been configured.
C
Explanation:
The topic explains that the connection reset behavior is caused by the vs configuration rather than the server resource problem. The answers B C are all configuration at the service forwarding level. If there is a problem with the configuration, it is all a problem rather than some users. Answer C’s Connection Limit will cause a reset behavior when the connection reaches the threshold.
For a given Virtual Server, the BIG-IP must perform SSL Offload and negotiate secure communication
overTLSvl.2only.
What should the BIG-IP Administrator do to meet this requirement?
- A . Configure a custom SSL Profile (Client) and select no TLSvl in the options list
- B . Configure a custom SSL Profile (Client) with a custom TLSV1.2 cipher string
- C . Configure a custom SSL Profile (Server) and select no TLSvl in the options list
- D . Configure a custom SSL Profile (Server) with a custom TLSV1.2 cipher string
B
Explanation:
no TLSvl only disables TLS1.0, TLS1.1 is still used and does not meet the requirements.
A BIG-IP Administrator plans to upgrade a BIG-IP device to the latest TMOS version.
Which two tools could the administrator leverage to verify known issues for the target versions?
(Choose two.)
- A . F5 University
- B . F5 Downloads
- C . F5 End User Diagnostics (EUD)
- D . FSiHealth
- E . F5 Bug Tracker
D,E
Explanation:
F5 University — F5 learning materials
F5 Downloads – iso download page
F5 End User Diagnostics (EUD) — Hardware detection
A BIG-IP Administrator remotely connects to the appliance via out-of-band management using https://mybigip mycompany net. The management portal has been working all week. When the administrator attempts to login today, the connection times out.
Which two aspects should the administrator verify? (Choose two)
- A . DNS is property resolving the FQDN of the device.
- B . The device is NOT redirecting them to http.
- C . The administrator has the latest version of the web browser.
- D . Packet Filters on the device are blocking port 80.
- E . The administrator has TCP connectivity to the device.
Refer to the exhibit.
A user attempts to connect to 10.10.10.1.80 using FTP over SSL with an FTPS client.
Which virtual server will match and attempt to process the request?
- A . vsjutps
- B . vs_ftp
- C . vs_http
- D . nvfs
An ecommerce company is experiencing latency issues with online shops during Black Friday’s peak season.
The BIG-IP Administrator detects an overall high CPU load on the BIG-IP device and wants to move the
top utilized Virtual Servers to a dedicated BIG-IP device.
Where should the BIG-IP Administrator determine the problematic Virtual Servers?
- A . System > Plattform
- B . Local Traffic > Virtual Servers > Virtual Server List
- C . Local Traffic > Network Map
- D . Statistics > Module Statistics > Local Traffic > Virtual Servers
A BIG-IP Administrator applied the latest hotfix to an inactive boot location by mistake, and
needs to downgrade back to the previous hotfix.
What should the BIG-IP Administrator do to change the boot location to the previous hotfix?
- A . Uninstall the newest hotfix and reinstall the previous hotfix
- B . Reinstall the base version and install the previous hotfix
- C . Reinstall the previous hotfix and re-activate the license
- D . Uninstall the base version and restore the UCS
Refer to the exhibit.
A BIG-IP Administrator needs to deploy an application on the BIG-IP system to perform SSL offload and
re-encrypt the traffic to pool members.
During testing, users are unable to connect to the application.
What must the BIG-IP Administrator do to resolve the issue?
- A . Remove the configured SSL Profile (Client)
- B . Configure Protocol Profile (Server) as splitsession-default-tcp
- C . Enable Forward Proxy in the SSL Profile (Client)
- D . Configure an SSL Profile (Server)
D
Explanation:
According to the requirements of the subject, the client and server must be configured with ssl profile.
The BIG-IP Administrator needs to perform a BIG-IP device upgrade to the latest version of TMOS. Where can the administrator obtain F5 documentation on upgrade requirements?
- A . AskF5
- B . DevCentral
- C . Bug Tracker
- D . iHealth
Refer to the exhibit.
Why is the virtual server responsive to incoming connections?
- A . The pool member is disabled
- B . The pool member monitor failed
- C . The node is disabled.
- D . The node monitor failed
Administrative user accounts have been defined on the remote LDAP server and are unable to log in to the BIG-IP device.
Which log file should the BIG-IP Administrator check to find the related messages?
- A . /var/log/secure
- B . /var/log/messages
- C . /Nar/log/ltm
- D . /var/log/user.log
A BIG-IP Administrator is setting up a new BIG-IP device. The network administrator reports that the interface has an incompatible media speed. The BIG-IP Administrator needs to change this setting manually.
From which location should the BIG-IP Administrator perform this task?
- A . On the Front Console
- B . In the TMOS Shell Command line
- C . In the Configuration Utility, Network > Interface
- D . In the Configuration Utility, System > Configuration
An LTM device has a virtual server mapped to www.f5.com with a pool assigned. Users report that when browsing, they are periodically required to re-login to /resources/201.1.7.b.2_l.com.
The objects are defined as follows:
Virtual server. Destination 192.168.245.100:443 netmask 255.255.255.0
Persistence: SSL session persistence
Profiles: HTTP/TCP
Which persistence method should the BIG-IP Administrator apply to resolve this issue?
- A . Source address affinity
- B . hexadecimal
- C . SIP
- D . Destination address affinity
A BIG-IP Administrator defines a device Self IP . The Self IP is NOT reachable from the network.
What should the BIG-IP Administrator verify first?
- A . The correct interface has been selected.
- B . The correct VLAN has been selected.
- C . Verify if auto last hop is disabled.
- D . The correct Trunk has been selected.
A BIG-IP Administrator is receiving intermittent reports from users that SSL connections to the BIG-IP device are failing.
Upon checking the log files, the BIG-IP Administrator notices the following error message:
ere tmm<instance>[<pid>]: 01260008:3: SSL transaction (TPS) rate limit reached
After reviewing statistics, the BIG-IP Administrator notices there are a maximum of 1200 client-side SSL
TPS and a maximum of 800 server-side SSL TPS.
What is the minimum SSL license limit capacity the BIG-IP Administrator should upgrade to handle this
peak?
- A . 2000
- B . 400
- C . 800
- D . 1200
Which type of Virtual Server requires the use of a FastL4 profile?
- A . Performance (Layer 4)
- B . Stateless
- C . Performance (HTTP)
- D . Standard
A BIG-IP Administrator is checking the BIG-IP device for known vulnerabilities.
What should the 8IG-IP Administrator upload to BIG-IP iHealth for further analysis?
- A . QKView
- B . EUD
- C . UCS
- D . tcpdump
The owner of a web application asks the 8IG-IP Administrator to change the port that the BIG-IP device sends traffic to. This change must be made for each member in the server pool named app_pool for their Virtual Server named app_vs.
In which area of the BIG-IP Configuration Utility should the BIG-P Administrator make this change?
- A . Local Traffic > Pools
- B . Local Traffic > Nodes
- C . Network > Interfaces
- D . Local Traffic > Virtual Servers
Refer to the exhibit.
A BIG-IP Administrator creates a new Virtual Server to load balance SSH traffic. Users are unable to log on to the servers.
What should the BIG-IP Administrator do to resolve the issue?
- A . Set Protocol to UDP
- B . Set HTTP Profile to None
- C . Set Source Address to 10.1.1.2
- D . Set Destination Addresses/Mask to 0.0.0.0/0
Which Virtual Server type should be used to load balance HTTP traffic to a pool of servers?
- A . Standard
- B . Stateless
- C . Forwarding (IP)
- D . Forwarding (Layer 2)
A BIG-IP Administrator receives an RMA replacement for a failed F5 device. The BIG-IP Administrator tries to restore a UCS taken from the previous device, but the restore fails.
The following error appears
inthe/var/log/itm.
mcpd [****J: •*****»;0; License is not operational (expired or digital signature does not match contents.)
What should the BIG-IP Administrator do to avoid this error?
- A . Use the appropriate tmsh command with the no-license option
- B . Revoke the license prior to restoring
- C . Reactivate the license on the new device using the manual activation method
- D . Remove the license information from the UCS archive
A BIG-IP Administrator sees the following error message in /var/log/ltm diskmonitor: *******; Disk partition shared has less than 30$ free.
Which section of the Configuration Utility should the BIG-IP Administrator access to investigate this error message?
- A . Statistics > Analytics
- B . System > File Management
- C . Statistics > Module Statistics > System
- D . System > Disk Management
Refer to the exhibit.
A BIG-IP Administrator creates a new Virtual Server. The end user is unable to access the page. During troubleshooting, the administrator learns that the connection between the BIG-IP system and server is NOT set up correctly.
What should the administrator do to solve this issue?
- A . Disable Address Translation
- B . Set Address Translation to Auto Map, configure a SNAT pool, and have pool members in the same subnet of the servers
- C . Set Address Translation to SNAT and configure a specific translation address
- D . Set Address Translation to SNAT and have self-IP configured in the same subnet of
servers
C
Explanation:
The status of the pool can be seen that the members are all up, indicating that the network from F5 to the server is no problem, so there is no need to configure selfip on the same subnet. The monitor is normal but the access is not normal, you have to consider the problem of snat, you can configure automap or configure snat and specify snat ip.
A BIG-IP Administrator plans to resolve a non-critical issue with a BIG-IP device in 2 weeks.
What Severity level should be assigned to this type of F5 support ticket?
- A . 4
- B . 2
- C . 3
- D . 1
A development team needs to apply a software fix and troubleshoot one of its servers. The BIG-IP Administrator needs to immediately remove all connections from the BIG-IP system to the back end server. The BIG-IP Administrator checks the Virtual Server configuration and finds that a persistence profile is assigned to it.
What should the 8IG-IP Administrator do to meet this requirement?
- A . Set the pool member to a Forced Offline state and manually delete easting connections through the command line.
- B . Set the pool member to a Forced Offline state.
- C . Set the pool member to a Disabled state.
- D . Set the pool member to a Disabled state and manually delete existing connections through the command line.
A BIG-IP Administrator is conducting maintenance on one BIG-IP appliance in an HA Pair.
Why should the BIG-IP Administrator put the appliance into FORCED_OFFLINE state?
- A . To preserve existing connections to Virtual Servers and reduce the CPU load
- B . To allow new connections to Virtual Servers and ensure the appliance becomes active
- C . To terminate connections to the management IP and decrease persistent connections
- D . To terminate existing connections to Virtual Servers and prevent the appliance from becoming active
Refer to the exhibit.
A BIG-IP Administrator needs to configure health monitors for a newly configured server pool named Pool_B.
Which health monitor settings will ensure that all pool members will be accurately marked as available or unavailable?
- A . HTTPS, HTTP, FTP, and ICMP, with the Availability Requirement of all health monitors
- B . HTTPS, HTTP, FTP, and SSH, with the Availability Requirement of at least one monitor
- C . HTTPS and HTTP with the Availability Requirement of at least one health monitor
- D . HTTPS, HTTP, FTP, and SSH with the Availability Requirement of all health monitors
B
Explanation:
From the port, the four members are HTTP, FTP, HTTPS, and SSH applications. If you want to monitor at the same time, you must configure at least one.
A set of servers is used for an FTP application as well as an HTTP website via separate BIG-IP Pools. The server support team reports that some servers are receiving a lot more traffic than others.
Which Load Balancing Method should the BIG-IP Administrator apply to even out the connection count?
- A . Ratio (Member)
- B . Least Connections (Member)
- C . Least Connections (Node)
- D . Ratio (Node)
C
Explanation:
The connection is required to be balanced, and the unit is the server and the application port is the unit, so it is node.
A BIG-IP Administrator makes a configuration change to a Virtual Server on the Standby device of an HA pair. The HA pair is currently configured with Auto-Sync Enabled.
What effect will the change have on the HA pair configuration?
- A . The change will be undone when Auto-Sync propagates the config to the HA pair.
- B . The change will be propagated next time a configuration change is made on the Active device.
- C . The change will be undone next time a configuration change is made on the Active device.
- D . The change will take effect when Auto-Sync propagates the config to the HA pair.
Refer to the exhibit.
An LTM device has a virtual server mapped to www.f5.com. Users report that when they connect to /resources/201.1.2h.l_l.com they are unable to receive content.
What is the likely cause of the issue?
- A . The pool associated with the virtual server does not have priority group activation enabled.
- B . The virtual address does not have ARP enabled.
- C . The virtual address does not have route advertising enabled.
- D . The pool associated with the virtual server is falling its health check.
A BIG-IP Administrator finds the following log entry:
tnm tmm[7141]: 011e0002:4: sweeperjjpdate: aggressive mode activated.
Which action should the BIG-IP Administrator to mitigate this memory issue?
- A . Configure the redundant par to be active-active
- B . Decrease the TCP profile ide Timeout value
- C . increase the TCP profile ide Timeout value
- D . Configure the serve to use Connection Mirroring
A VLAN has the following objects configured:
Self-IP 10.10.10.100 with port lockdown set to Allow default
Virtual server 10.10.10.100:443 with UDP profile enabled
Virtual server 10.10.10.0/24 port forwarding virtual server
Global destination NAT forwarding 10.10.10.100 to internal server 172.168.10.100
Which object will process this request when https://10.10.10.100 is entered into a browser?
- A . self-IP 10.10.10.100 with port lockdown set to Allow default
- B . virtual server 10.10.100/24 port o forwarding virtual server
- C . global destination NAT forwarding 10.10.10.100 to internal server 172.168.10.100
- D . virtual server 10.10.10.100.443 with UDP profile enabled
A BIG-IP Administrator needs to remove a pool specific health monitor. There is a pool named Best Pool with two members, one named Best pool member and one named Best pool member2.
In the Local Traffic section of the administrative GUI, which stops should the BIG-IP Administrator take to remove a pool level monitor?
- A . Pool > Pool List > Best Pool > Members > Health Monitors
- B . Nodes > Node List> Best _pool_memberl > Heath Monitors
- C . Monitors > Monitor Name> Instances
- D . Pool > Pool List> Best Pool > Health Monitors
Refer to the exhibit.
A pool member fails the monitor checks for about 30 minutes and then starts passing the monitor
checks. New traffic is Not being sent to the pool member.
What is the likely reason for this problem?
- A . The pool member is disabled
- B . Monitor Type is TCP Half Open
- C . Manual resume is enabled
- D . Time Until Up is zero
A BIG-IP Administrator is unable to connect to the management interface via HTTPS.
What is a possible reason for this issue?
- A . The port lockdown setting is configured to Allow None.
- B . An incorrect management route is specified.
- C . The IP address of the device used to access the management interface is NOT included in the "P Allow" list in the Configuration Utility.
- D . The IP address of the device used to access the management interface is NOT included in the "httpd Allow" list in the CLI.
The BIG-IP Administrator needs to perform a BIG-IP device upgrade to the latest version of TMOS. Where can the administrator obtain F5 documentation on upgrade requirements?
- A . iHealth
- B . Network > Interfaces
- C . Local Traffic > Pools
- D . AsKFS
- E . Local Traffic > Virtual Servers
A BIG-IP Administrator need to ensure that a pool member and down by the monitor the BIG-IP system
sends existing connections to another be pool member.
Which should the BIG-IP Administrator perform to meet this goal?
- A . Set Action on Service Down sing under the server configuration to reselect.
- B . Reconfigure the pool motor members as UP.
- C . Enable mirroring within the persistence profile.
- D . Set Action Service Down setting under the pool configuration to reselect.
Refer to the exhibit
The network team creates a new VLAN on the switches. The BIG-IP Administrator needs to create a configuration on the BIG-IP device. The BIG-IP Administrator creates a new VLAN and Self IP, but the servers on the new VLAN are NOT reachable from the BIG-IP device.
Which action should the BIG-IP Administrators to resolve this issue?
- A . Set Port Lockdown of Set IP to Allow All
- B . Change Auto Last Hop to enabled
- C . Assign a physical interface to the new VLAN
- D . Create a Floating Set IP Address
A BIG-IP device is configured with both an internal external and two Corporate VLANs. The virtual server has SNAT enabled and is set to listen on all VLANs Auto Last Hop is disabled. The Corporate users are on 10.0.0.0./24 and 172.16.0.0/12. The BIG-IP has a Self-IP on the 1.0.0.0.0./24 subnet.
Internet users are able to access the virtual server. Only some of the Corporate users are able to connect to the virtual server A BIG-IP Administrator performs a tcpdump on the BIG-IP and verifies that traffic is arriving from users in 10.0.0.0/24.
What should the BIG-IP Administrator do to correct this behaviour?
- A . Disable the server on the internal VLAN
- B . Add a static route for the 172.16.0.0/12 subnet
- C . Change the default route to point to the extra firewall
- D . Modify the default route of the servers to point to the BIG-IP device
A BIG-IP Administrator adds new Pool Members into an existing, highly utilized pool. Soon after, there are reports that the application is failing to load for some users.
What pool level setting should the BIG-IP Administrator check?
- A . Availability Requirement
- B . Allow SNAT
- C . Action On Service Down
- D . Slow Ramp Time
D
Explanation:
Option ABC is a global configuration, has nothing to do with the new pool member, select D after excluding
Users are unable to reach an application. The BIG-IP Administrator checks the Configuration Utility and observes that the Virtual Server has a red diamond in front of the status.
What is causing this issue?
- A . All pool members are down.
- B . The Virtual Server is receiving HTTPS traffic over HTTP virtual.
- C . The Virtual Server is disabled.
- D . All pool members have been disabled.
A BIG-IP Administrator creates an HTTP Virtual Server using an iApp template. After the Virtual Server is created, the user requests to change the destination IP addresses. The BIG-IP Administrator tries to
change the destination IP address from 10.1.1.1 to 10.2.1.1
in Virtual Server settings, but receives the
following error:
The application service must be updated using an application management interface
What is causing this error?
- A . The Application Service was NOT deleted before making the IP address change.
- B . The IP addresses are already in use.
- C . The Application Services have Strict Updates enabled.
- D . The IP addresses used are NOT from the same subnet as the Self IP.
C
Explanation:
Strict Updates: Indicates whether the application service is tied to the template, so when the template is updated, the application service changes to reflect the updates.
A BIG-IP Administrator suspects that one of the BIG-IP device power supplies is experiencing power outages.
Which log file should the BIG-IP Administrator check to verify the suspicion?
- A . /war /log/daemon.log
- B . /var/log/kern.log
- C . /var/log/ltm
- D . /var/log/audit
DNS queries from two internal DNS servers are being load balanced to external DNS Servers via a Virtual Server on a BIG-P device. The DNS queries originate from 192.168.101.100 and 192.168.101.200 and target 192.168.21.50
All DNS queries destined for the external DNS Servers fail
Which property change should the BIG-IP Administrator make in the Virtual Server to resolve this issue?
- A . Protocol Profile (Client) to DNS-OPTIMZED
- B . Type to Performance (HTTP)
- C . Protocol to UDP
- D . Source Address to 192.168.101.0/24
In the BIG-IP Configuration Utility, a user requests a single screen view to determine the status of all Virtual Servers and associated pool members, as well as any iRules in use. Where should the BIG-IP Administrator instruct the user to find this view?
- A . Local Traffic > Monitors
- B . Local Traffic > Virtual Servers
- C . Local Traffic > Network Map
- D . Statistics
C
Explanation:
Network Map can display vs and its associated pool, pool member, and irule, can be retrieved, and can be quickly linked.
An LTM device has a virtual server mapped to www5f.com with a pool assigned.
The objects are defined as follows:
Virtual server. Destination 192.168.245.100.443 netmask 255.255.255.0
Persistence: Source address persistence netmask 255.0.0.0
SNAT:AutoMap
Profiles: HnP/TCP
How should the BIG-IP Administrator modify the persistence profile so that each unique IP address creates a persistence record?
- A . netmask 0.0.0.0
- B . netmask 255.255.255.255
- C . netmask 255.255.0.0
- D . netmask 255.256.255.0
Which log file should the BIG-IP Administrator check to determine if a specific user tried to log in to the 8IG-IP Configuration by utility?
- A . /var/log/pam/tally/log
- B . /ver/log/secure
- C . /var/log/trn
- D . /var/log/http.d
A new BIG-IP VE is deployed with default settings. The BIG-IP Administrator completes the setup utility in the Configuration Utility. The internal self IP address fails to respond to a ping request.
What is a possible cause of this issue?
- A . Port lockdown on internal self IP is set to Allow None
- B . Route is NOT assigned to internal self IP.
- C . Internal interface VLAN is set to untagged
- D . Internal interface VLAN is set to tagged