2024 F5 101 Exam Prep: Practice Tests & Study Materials, 101-Application Delivery Fundamentals

Question #1

Which statement is true concerning cookie persistence? A. Cookie persistence allows persistence independent of IP addresses.

B. Cookie persistence allows persistence even if the data are encrypted from client to pool member

C. Cookie persistence uses a cookie that stores the virtual server, pool name, and member IP address in clear text

D. If a client's browser accepts cookies, cookie persistence will always cause a cookie to be written to the client's file system

View answer

Correct Answer: B

Question #2

Which iRule will reject any connection originating from a 10.0.0.0/8 network?

A. when CLIENT_ACCEPTED { set remote_ip [IP::addr [IP::remote_addr] mask 8] switch $remote_ip { "10

B. when CLIENT_ACCEPTED { set remote_ip [IP::addr [IP::local_addr] mask 8] switch $remote_ip { "10

C. when CLIENT_ACCEPTED { set remote_ip [IP::addr [IP::client_addr] mask 255

D. when CLIENT_ACCEPTED { set remote_ip [IP::addr [IP::local_addr] mask 255

View answer

Correct Answer: C

Question #3

An LTM device supports two power supplies. The value of the BigDB key "platform.powersupplymonitor" is equal to enable. Where would the error message be visible if one of the power supplies fails or is NOT plugged in?

A. visible only via the console

B. in the /var/log/ltm log file

C. in the /var/log/kern

View answer

Correct Answer: C

Question #4

Which statement is true concerning the default communication between a redundant pair of BIG- IP devices?

A. Communication between the systems cannot be effected by port lockdown settings

B. Data for both connection and persistence mirroring are shared through the same TCP connection

C. Regardless of the configuration, some data is communicated between the systems at regular intervals

View answer

Correct Answer: D

Question #5

A new web application is hosted at www.example.net, but some clients are still pointing to the legacy web application at www.example.com. Which iRule will allow clients referencing www.example.com to access the new application?

A. when HTTP_REQUEST { if {[HTTP::host] equals "www

B. when HTTP_REQUEST { if {[HTTP::host] equals "www

C. when HTTP_DATA { if {[HTTP::host] equals "www

D. when HTTP_RESPONSE { if {[HTTP::host] equals "www

View answer

Correct Answer: AB

Question #6

An LTM Specialist with the Administrator role and terminal access of "tmsh" logs in via ssh and is in the Traffic Manager Shell. The LTM Specialist wants to enter the bash shell to review log files. Which command does the LTM Specialist need to run to access the bash shell?

A. exit

B. quit

C. run /cli bash

D. run /util bash

View answer

Correct Answer: B

Question #7

Which command should an LTM Specialist use on the command line interface to show the health of RAID array hard drives?

A. tmsh show /sys raid disk

B. tmsh show /ltm raid disk

C. tmsh show /sys raid status

D. tmsh show /ltm disk status

View answer

Correct Answer: C

Question #8

An LTM Specialist has just captured trace /var/tmp/trace.cap for site www.example.com while listening on virtual address 10.0.0.1:443 configured on partition ApplicationA. The data payload being captured is SSL encrypted. Which command should the LTM Specialist execute to decrypt the data payload? A. ssldump -Aed -nr /var/tmp/trace.cap -k /config/filestore/files_d/Common_d/certificate_d/:Common:www.example.com.crt_1

B. ssldump -Aed -nr /var/tmp/trace

C. ssldump -Aed -nr /var/tmp/trace

D. ssldump -Aed -nr /var/tmp/trace

View answer

Correct Answer: A

Question #9

GTM can sign a DNS response using DNSSEC only if the DNS request ...

A. Has the S-bit set

B. Is a part of a DNSSEC zone

C. Is for a Wide-IP name on the GTM

View answer

Correct Answer: C

Question #10

An LTM Specialist configured a virtual server to load balance a custom application. The application works when it is tested from within the firewall but it fails when tested externally. The pool member address is 192.168.200.10:80. A capture from an external client shows: GET /index.jsp HTTP/1.1 Host: 207.206.201.100 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:15.0) Gecko/20100101 Firefox/15.0.1 Accept: text/html,application/xhtml+xml,application/ xml;q=0.9,*/*;q=0.8 Connection: keep-alive HTTP/1.1 3

A. Assign a SNAT pool to the virtual server

B. Add a Web Acceleration Profile to the virtual server

C. Configure redirect rewrite option in the HTTP profile

D. Configure a content filter on the backend web server

View answer

Correct Answer: D

Question #11

The ICMP monitor has been assigned to all nodes. In addition, all pools have been assigned custom monitors.The pool is marked available In addition, all pools have been assigned custom monitors. If a pool is markedavailable (green) which situation is sufficient to cause this? A. All of the pool member nodes are responding to the ICMP monitor as expected.

B. Less than 50% of the pool member nodes responded to the ICMP echo request

C. All of the members of the pool have had their content updated recently and their responses no longer matchthe monitor

D. Over 25% of the pool members have had their content updated and it no longer matches the receive rule ofthe custom monitor

View answer

Correct Answer: D

Question #12

A BIG-IP Operator has made a grave error and deleted a few virtual servers on the active LTM device fronting the web browsing proxies. The BIG-IP Operator has NOT yet performed a configuration sync. Which command should the LTM Specialist execute on the active LTM device to force a failover to the standby node and restore web browsing?

A. tmsh /sys failover standby

B. tmsh run /sys failover standby

C. tmsh /sys failover status standby

D. tmsh run /sys failover status standby

View answer

Correct Answer: C

Question #13

Which two can be a part of a virtual server's definition? (Choose two.)

A. rule(s)

B. pool(s)

C. monitor(s)

D. node address(es)

E. load-balancing method(s)

View answer

Correct Answer: C

Question #14

There are three servers in the pool: 172.16.20.1, 172.16.20.2, and 172.16.20.3, with the virtual IP address 10.0.20.88. A user CANNOT connect to an HTTP application. To understand the problem and find a solution, the LTM Specialist runs two concurrent traces on the LTM device, with the following results: Trace on client side: tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on 0.0, link-type EN10MB (Ethernet), capture size 96 bytes 22:22:07.423759 IP 172.16.20.100.53875 >

A. Edit the packet filter rules

B. Modify the monitor of the pool

C. Enable the virtual server

D. Configure the virtual server to use SNAT

View answer

Correct Answer: D

Question #15

These log entries can have different root causes: Jun 28 05:01:21 LTM_A notice mcpd[27545]: 0107143a:5: CMI reconnect timer: enabled Jun 28 05:01:21 LTM_A notice mcpd[27545]: 01071431:5: Attempting to connect to CMI peer 1.1.1.2 port 6699 Jun 28 05:01:21 LTM_A notice mcpd[27545]: 01071432:5: CMI peer connection established to 1.1.1.2 port 6699 Jun 28 05:01:26 LTM_A notice mcpd[27545]: 0107143a:5: CMI reconnect timer: disabled, all peers are connected Which two commands should be used to obtain additional in

A. tmsh show /sys mcpd

B. bigstart status mcpd C

D. tmsh modify /sys db log

View answer

Correct Answer: D

Question #16

Which command will identify the active LTM device currently handling client traffic?

A. b ha table show

B. tmsh list /sys ha-status

C. tmsh show /cm traffic-group

D. tmsh run /sys failover standby

E. tmsh show /sys ha-status all-properties

View answer

Correct Answer: C

Question #17

Assume a virtual server is configured with a ClientSSL profile. What would the result be if the virtual server's destination port were not 443?

A. SSL termination could not be performed if the virtual server's port was not port 443

C. As long as client traffic was directed to the alternate port, the virtual server would work as intended

D. Since the virtual server is associated with a ClientSSL profile, it will always process traffic sent to port 443

View answer

Correct Answer: ACD

Question #18

A customer needs to intercept all of the redirects its application is sending to clients. When a redirect is matched, the customer needs to log a message including the client IP address. Which iRule should be used?

A. when HTTP_RESPONSE { if { [HTTP::is_3xx] } { log local0

B. when HTTP_REQUEST { if { [HTTP::is_301] } { log local0

C. when HTTP_REQUEST { if { [HTTP::is_redirect] } { log local0

D. when HTTP_RESPONSE { if { [HTTP::is_redirect] } { log local0

View answer

Correct Answer: C

Question #19

Generally speaking, should the monitor templates be used as production monitors or should they becustomized prior to use?

A. Most templates, such as http and tcp, are as effective as customized monitors

B. Monitor template customization is only a matter of preference, not an issue of effectiveness or performance

C. Most templates, such as https, should have the receive rule customized to make the monitor more robust

D. While some templates, such as ftp, must be customized, those that can be used without modification arenot improved by specific changes

View answer

Correct Answer: C

Question #20

When configuring monitors for individual pool members, which three options can beselected? (Choose three.) A. Inherit the pool's monitor.

B. Choose a default monitor

C. Inherit the Wide-IP's monitor

D. Assign a monitor to the specific pool member

E. Do not assign any monitor to the specific pool member

View answer

Correct Answer: D

Question #21

Which command line interface command will check if the BIG-IP platform contains a packet velocity ASIC (PVA)?

A. bigpipe platform show | grep -i pva

B. tmsh show /sys hardware pva status

C. tmsh show /sys hardware | grep -i pva

D. tmsh show /ltm hardware | grep -i pva

View answer

Correct Answer: D

Question #22

When upgrading a BIG-IP redundant pair, what happens when one system has been updated but the otherhas not?

A. Synching should not be performed

B. The first system to be updated will assume the Active role

C. This is not possible since both systems are updated simultaneously

D. The older system will issue SNMP traps indicating a communication error with the partner

View answer

Correct Answer: ABD

Question #23

Which facility logs messages concerning GTM System parameters?

A. local0

B. local1

C. local2

D. local3

View answer

Correct Answer: A

Question #24

Assuming there are open connections through an active system's virtual servers and a fail-over occurs, bydefault, what happens to the connections? A. All open connections are lost.

B. All open connections are maintained

C. When persistence mirroring is enabled, open connections are maintained even if a fail-over occurs

D. Long-lived connections such as Telnet and FTP are maintained, but short-lived connections such as HTTPare lost

E. All open connections are lost, but new connections are initiated by the newly active BIG-IP, resulting inminimal client downtime

View answer

Correct Answer: B

Question #25

Assuming other fail-over settings are at their default state, what would occur if the fail-over cable were to bedisconnected for five seconds and then reconnected?

A. As long as network communication is not lost, no change will occur

B. Nothing

C. When the cable is disconnected, both systems will become active

D. When the cable is disconnected, both systems will become active

View answer

Correct Answer: D

Question #26

An LTM Specialist wants to allow access to the Always On Management (AOM) from the network. Which two methods should the LTM Specialist use to configure the AOM interface? (Choose two.)

A. Configure the AOM IP from the front panel buttons and LCD

B. Choose the network configurator in the AOM menu on the serial port

C. Configure the AOM network address in the GUI under System>Platform

D. Log in to the Host via ssh, "ssh aom", and modify the network configuration file

View answer

Correct Answer: A

Question #27

A web application requires knowledge of the client's true IP address for logging and analysis purposes. Instances of the application that can decode X- Forwarded-For HTTP headers reside in pool_a, while pool_b instances assume the source IP is the true address of the client. Which iRule provides the proper functionality?

A. when HTTP_DATA { if {[HTTP::header exists X-Forwarded-For]}{ pool pool_a } else { pool pool_b } }

B. when HTTP_RESPONSE { if {[HTTP::header exists X-Forwarded-For]}{ pool pool_a } else { pool pool_b } }

C. when HTTP_REQUEST { if {[HTTP::header exists X-Forwarded-For]}{ pool pool_a } else { pool pool_b } }

D. when HTTP_OPEN { if {[HTTP::header exists X-Forwarded-For]}{ pool pool_a } else { pool pool_b } }

View answer

Correct Answer: A

Question #28

An IT administrator wants to log which server is being load balanced to by a user with IP address 10.10.10.25. Which iRule should the LTM Specialist use to fulfill the request?

A. when SERVER_CONNECTED { if { [IP::addr [IP::remote_addr]] equals 10

B. when CLIENT_ACCEPTED { if { [IP::addr [clientside [IP::remote_addr]] equals 10

C. when SERVER_CONNECTED { if { [IP::addr [clientside [IP::remote_addr]] equals 10

D. when CLIENT_ACCEPTED { if { [IP::addr [IP::remote_addr] equals 10

View answer

Correct Answer: ADE

Question #29

What is the purpose of Zonerunner?

A. Zonerunner adds a GUI interface for configuration of Wide-IP names

B. Zonerunner adds a GUI interface for configuration of BIND database files for zones wherethe GTM System is a primary name server

C. Zonerunner adds a GUI interface for configuration of BIND database files where the GTM System is not a primary or secondary server

D. Zonerunner adds a GUI interface for configuration of BIND database files for zones wherethe GTM System is a primary or secondary name server

View answer

Correct Answer: D

Question #30

An LTM Specialist is troubleshooting an issue with a new virtual server. When connecting through the virtual server, clients receive the message "Unable to connect" in the browser, although connections directly to the pool member show the application is functioning correctly. The LTM configuration is: ltm virtual /Common/vs_https { destination /Common/10.10.1.110:443 ip-protocol udp mask 255.255.255.255 pool /Common/pool_https profiles { /Common/udp { } } translate-address enabled translate-port enabled vla

B. Add an HTTP profile to the virtual server

C. Enable the pool member on the correct VLAN

D. Select the correct protocol for the virtual server

View answer

Correct Answer: A

Question #31

An LTM Specialist is troubleshooting a problem on an eCommerce website. The user browses the online store using port 80, adding items to the shopping cart. The user then clicks the "Checkout" button on the site, which redirects the user to port 443 for the checkout process. Suddenly, the user's shopping cart is shown as empty. The shopping cart data is stored in memory on the server, and the default source address persistence profile is used on both virtual servers. What is the issue?

A. The port 80 pool member is deleting the user's session cookie

B. The port 443 pool member is deleting the user's session cookie

C. The port 80 and port 443 connections are balanced to the same node

D. The port 80 and port 443 connections are balanced to different nodes

View answer

Correct Answer: B

Question #32

An LTM Specialist needs to rewrite text within an HTML response from a web server. A client is sending the following HTTP request: GET / HTTP/1.1 Host: www.example.com User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:16.0) Gecko/20100101 Firefox/16.0 Accept: text/html,application/xhtml+xml,application/ xml;q=0.9,*/*;q=0.8 Accept-LanguagE.en-US,en;q=0.5 Accept-EncodinG.gzip, deflate Cache-Control: no-cache Connection: keep-alive CookiE.somecookie=1 HTTP/1.1 200 OK Server: Apache/2.2.15 (Unix) Last-ModifieD

B. Cookie content

C. User-Agent Value

D. Accept-Encoding header

View answer

Correct Answer: C

Question #33

An LTM Specialist is troubleshooting a problem on an eCommerce website. The user browses the online store using port 80, adding items to the shopping cart. The user then clicks the "Checkout" button on the site, which redirects the user to port 443 for the checkout process. Suddenly, the user's shopping cart is shown as empty. The shopping cart data is stored in memory on the server, and the default source address persistence profile is used on both virtual servers. How should the LTM Specialist resolve thi

A. Add an HTTP profile to both virtual servers

C. Create a custom persistence profile and enable "Map Proxies

D. Create a custom persistence profile and enable "Match Across Services

View answer

Correct Answer: CE

Question #34

An LTM Specialist troubleshooting an issue looks at the following /var/log/ltm entries: Oct 2 04:52:42 slot1/tmm7 crit tmm7[21734]: 01010201:2: Inet port exhaustion on 10.143.109.5 to 10.143.147.150:53 (proto 17) Oct 2 05:37:16 slot1/tmm7 crit tmm7[21734]: 01010201:2: Inet port exhaustion on 10.143.109.5 to 10.143.147.150:53 (proto 17) Oct 2 05:57:32 slot1/tmm2 crit tmm2[21729]: 01010201:2: Inet port exhaustion on 10.143.109.5 to 10.143.147.150:53 (proto 17) Oct 2 06:30:03 slot1/tmm7 crit tmm7[21734]: 01010

A. SNAT Pool

B. Pool Member C

D. Virtual Server Port Translation

View answer

Correct Answer: A

Question #35

The incoming client IP address is 195.64.45.52 and the last five connections have been sent to members A, C, E, D and

B. B

B. 10

C. 10

D. 10

E. 10

F. It cannot be determined with the information given

View answer

Correct Answer: ABF

Question #36

Which two subsystems could the LTM Specialist utilize to access an LTM device with lost management interface connectivity? (Choose two.)

A. AOM

B. ILO

C. SCCP D

View answer

Correct Answer: C

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now

2024 F5 101 Exam Prep: Practice Tests & Study Materials, 101-Application Delivery Fundamentals | SPOTO

View The Updated F5 101 Exam Questions

View The Updated F5 Exam Questions

View Answers after Submission

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE! Get Now

2024 F5 101 Exam Prep: Practice Tests & Study Materials, 101-Application Delivery Fundamentals | SPOTO

View The Updated F5 101 Exam Questions

View The Updated F5 Exam Questions

View Answers after Submission

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now