F5 101 Certification Exam Questions & Study Resources, 101-Application Delivery Fundamentals

Question #1

A failover event is recorded in the log messages: Jan 01 00:00:50 BIG-IP notice sod[5855]: 01140029:5: HA proc_running tmm fails action is go offline and down links. Jan 01 00:00:50 BIG-IP notice sod[5855]: 010c0050:5: Sod requests links down. Jan 01 00:00:50 BIG-IP notice sod[5855]: 010c0054:5: Offline for traffic group /Common/traffic-group-1. Jan 01 00:00:50 BIG-IP notice sod[5855]: 010c003e:5: Offline Jan 01 00:00:50 BIG-IP notice logger: /usr/bin/tmipsecd --tmmcount 4 ==> /usr/bin/ bigstart stop racoon

A. TMM failed, and VLAN fail-safe initiated the failover

B. TMM failed, and system fail-safe initiated the failover

D. A switchboard failure caused system fail-safe to initiate the failover

View answer

Correct Answer: B

Question #2

-- Exhibit -- Exhibit -- A client attempts to connect from a Google Chrome browser to a virtual server on a BIG-IP LTM. The virtual server is SSL Offloaded. When the client connects, the client receives an SSL error. After trying Mozilla Firefox and Internet Explorer browsers, the client still receives the same errors. The LTM Specialist does an ssldump on the virtual server and receives the results as per the exhibit. What is the problem?

A. The SSL key length is incorrect

B. The BIG-IP LTM is NOT serving a certificate

C. The BIG-IP LTM is NOT listening on port 443

D. The client needs to be upgraded to the appropriate cipher-suite

View answer

Correct Answer: C

Question #3

-- Exhibit -- Exhibit -- Which two items can be consolidated to simplify the LTM configuration? (Choose two.)

A. /Common/vs1-https-redirect

B. /Common/vs2-https-redirect

C. /Common/vs3-https-redirect

D. /Common/vs4-https-redirect

E. /Common/vs5-https-redirect

View answer

Correct Answer: B

Question #4

An LTM Specialist has just manually failed the active LTM device over to the standby LTM device. The LTM Specialist notices the newly active LTM device is NOT currently receiving traffic. The LTM Specialist verifies the newly active device is responding to ARP but still no traffic is hitting the virtual servers. The LTM Specialist also notices that the virtual servers eventually start responding. What should be added to the configuration to resolve the problem?

A. vlan failsafe

B. floating self IP

C. network failover

D. MAC masquerading

E. connection mirroring

View answer

Correct Answer: AB

Question #5

A virtual server is defined per the charts. The last five client connections were to members C, D, A, B,

B. Given the conditions shown in the above graphic, if a client with IP address 205

B. 172

C. 172

D. 172

E. 172

View answer

Correct Answer: C

Question #6

Adivinar (?)

A. Any text string within a cookie

C. An IP address

D. The value in the tcp acknowledgement field

View answer

Correct Answer: C

Question #7

-- Exhibit -- Exhibit -- An LTM Specialist is working on an LTM 11.0.0 installation and has identified a security vulnerability as shown in the exhibit. The LTM Specialist is tasked with applying the latest available hotfix to resolve the problem. Which procedure resolves the problem? A. Browse to System > Software Management > Hotfix List. Import TMOS 11.2.0 to the available hotfix images. Select the imported hotfix image and installation location and click Install.

B. Browse to System > Software Management > Hotfix List

C. Browse to System > Software Management > Image List

D. Browse to System > Software Management > Image List

View answer

Correct Answer: E

Question #8

What is a characteristic of iQuery?

A. It uses SSH

B. It uses SSL

C. It uses SCP

D. It uses HTTPS

View answer

Correct Answer: A

Question #9

While investigating the cause of a device failover, an LTM Specialist discovers the following events in /var/log/ltm: 01010029:5: Clock advanced by 518 ticks 01010029:5: Clock advanced by 505 ticks 01010029:5: Clock advanced by 590 ticks 01010029:5: Clock advanced by 568 ticks 01010029:5: Clock advanced by 1681 ticks 01010029:5: Clock advanced by 6584 ticks 01140029:5: HA daemon_heartbeat tmm fails action is failover and restart. 010c0026:5: Failover condition, active attempting to go standby. Which issue c

A. NTP being out of sync

B. TMM being descheduled

C. VLAN Fail-safe heartbeats

D. HA missing heartbeat packets

View answer

Correct Answer: D

Question #10

An HA pair of LTM devices configured in Active-Standby mode stops responding to traffic and causes an outage. The Active device becomes Standby, but the partner device stays in Standby mode instead of taking over as Active. A reboot and restart of the services brings the LTM device to Active mode for a short time, but then it goes into Standby mode again. Which two configuration components caused this condition? (Choose two.)

A. VLAN Fail-safe

B. System Fail-safe

C. Gateway Fail-safe

D. Switch Board Failure E

View answer

Correct Answer: B

Question #11

-- Exhibit -- Exhibit -- An LTM Specialist has uploaded a qkview to F5 iHealth. Within the GUI, what is the correct procedure to comply with the recommendation shown in the exhibit?

A. Obtain product version image from release

B. Obtain product version image from images

C. Obtain product version image from downloads

D. Log a call requesting the product version image via websupport

View answer

Correct Answer: C

Question #12

An LTM Specialist configures two LTM devices in a high-availability pair with trusts established and device groups configured properly using network failover. After several months, the LTM Specialist notices that changes made to one LTM device do NOT cause the synchronization status to update to "changes pending," and this device does NOT synchronize with the device group. Which two steps should the LTM Specialist take to identify the issue? (Choose two.)

A. Verify that NTP is synchronized

B. Verify the network connectivity between the devices

C. Verify that the devices are not using self-signed certificates

D. Verify that ConfigSync is using the management IP address

E. Verify that port lockdown on the ConfigSync interface is set to allow port 1026

View answer

Correct Answer: D

Question #13

-- Exhibit -- Exhibit -- An LTM Specialist is upgrading the LTM devices. Which device should be upgraded first? A. Device A

B. Device B

C. Device C

D. Device D

View answer

Correct Answer: A

Question #14

-- Exhibit -- Exhibit -- Which profile could be removed or changed on this virtual server to reduce CPU load on the LTM device without increasing server side bandwidth usage?

A. tcp

B. http

C. httpcompression

D. optimized-caching

View answer

Correct Answer: C

Question #15

An application is configured on an LTM device: Virtual server: 10.0.0.1:80 (VLAN vlan301) SNAT IP: 10.0.0.1 Pool members: 10.0.1.1:8080, 10.0.1.2:8080, 10.0.1.3:8080 (VLAN vlan302) Which packet capture should the LTM Specialist perform on the LTM device command line interface to capture only server traffic specifically for this application?

A. tcpdump -ni 0

B. tcpdump -ni vlan301 -s 0 'port 80 and host 10

C. tcpdump -ni vlan302 -s 0 'port 8080 and (host 10

D. tcpdump -ni 0

View answer

Correct Answer: B

Question #16

In preparation for a maintenance task, an LTM Specialist performs a "Force to Standby" on LTM device Unit 1. LTM device Unit 2 becomes active as expected. The maintenance task requires the reboot of Unit 1. Shortly after the reboot is complete, the LTM Specialist discovers that Unit 1 has become active and Unit 2 has returned to standby. What would cause this behavior?

A. Unit 1 is set with the redundancy state preference of active in devices groups

B. Unit 1 is set with the redundancy state preference of active in high availability

C. A traffic group is configured with Auto Failback, and Unit 1 is the default device

D. A device group is configured with Auto Failback, and Unit 1 is the default device

View answer

Correct Answer: B

Question #17

-- Exhibit -- Exhibit -- An LTM Specialist is reviewing the 'test' partition. Which objects, in order, can be removed from the partition?

A. delete pool test1_pool, delete node 10

B. delete node 10

C. delete pool test1_pool, delete node 10

D. delete virtual test1_vs, delete pool test2_pool, delete node 10

E. delete pool test1_pool, delete pool test2_pool, delete node 10

View answer

Correct Answer: BC

Question #18

Given a tcpdump on an LTM device from both sides of a connection on the External and Internal VLANs, how should an LTM Specialist determine if SNAT is enabled for a particular pool?

A. by checking to see if the Source IP is carried through from the External Vlan to the Internal Vlan

B. by checking to see if the Destination port is carried through from the External Vlan to the Internal Vlan

C. by checking to see if the Source port is carried through from the External Vlan to the Internal Vlan

D. by checking to see if the Destination IP is carried through from the External Vlan to the Internal Vlan

View answer

Correct Answer: C

Question #19

A virtual server for a set of web services is constructed on an LTM device. The LTM Specialist has created an iRule and applied this iRule to the virtual server: when HTTP_REQUEST { switch [HTTP::uri] { "/WS1/ws.jsp" { log local0. "[HTTP::uri]-Redirected to JSP Pool" pool JSP } default { log local0. "[HTTP::uri]-Redirected to Non-JSP Pool" pool NonJSP } } } However, the iRule is NOT behaving as expected. Below is a snapshot of the log: /WS1/ws.jsp-Redirected to JSP Pool /WS1/ws.jsp-Redirected to JSP Pool /W

A. The condition in the iRule is case sensitive

B. The 'switch' command in the iRule has been used incorrectly

C. The pool members of both pools need to be set up as case-insensitive members

D. The "Process Case-Insensitivity" option for the virtual server needs to be selected

View answer

Correct Answer: B

Question #20

Given this as the first packet displayed of an ssldump: 2 2 1296947622.6313 (0.0001) S>CV3.1(74) Handshake ServerHello Version 3.1 random[32]= 19 21 d7 55 c1 14 65 63 54 23 62 b7 c4 30 a2 f0 b8 c4 20 06 86 ed 9c 1f 9e 46 0f 42 79 45 8a 29 session_id[32]= c4 44 ea 86 e2 ba f5 40 4b 44 b4 c2 3a d8 b4 ad 4c dc 13 0d 6c 48 f2 70 19 c3 05 f4 06 e5 ab a9 cipherSuite TLS_RSA_WITH_RC4_128_SHA compressionMethod NULL In reviewing the rest of the ssldump, the application data is NOT being decrypted. Why is ssldump fai

A. The application data is encrypted with SSLv3

B. The application data is encrypted with TLSv1

C. The data is contained within a resumed TLS session

D. The BigDB Key Log

View answer

Correct Answer: B

Question #21

-- Exhibit -- Exhibit -- An LTM Specialist has a virtual server set up on the LTM device as per the exhibit. The LTM Specialist receives reports of intermittent issues. Some clients are connecting fine while others are failing to connect. The LTM Specialist does a tcpdump on the relevant interfaces, with the following results extracted: What is causing the intermittent issues? A. The firewall is dropping the packets from WS1.

B. The default gateway is inaccessible from WS1

C. The load balancing (LB) method is inappropriate

D. The pool members have been set up as an active/standby pair, with WS1 as the standby

View answer

Correct Answer: B

Question #22

Which statement is true regarding fail-over?

A. Hardware fail-over is disabled by default

B. Hardware fail-over can be used in conjunction with network failover

C. If the hardware fail-over cable is disconnected, both BIG-IP devices will always assume the active role

D. By default, hardware fail-over detects voltage across the fail-over cable and monitors traffic across the internal VLAN

View answer

Correct Answer: C

Question #23

An LTM Specialist is troubleshooting an issue where one LTM device in a three LTM device group is failing to synchronize after a synchronize to group command is issued. The LTM Specialist verifies there are no packet filters, port lock down, or network issues preventing the connection. What are two reasons the synchronization group is having issues? (Choose two.)

A. Certificates expired on all of the peer LTM devices

B. Certificates stored for the device trusts on all of the peer LTM devices are corrupted

C. Admin passwords changed on one of the peer LTM devices that are able to synchronize

D. Admin password changed on the LTM device NOT receiving the synchronized configurations

View answer

Correct Answer: B

Question #24

A device group is made up of four members: LTM-A, LTM-B, LTM-C, and LTM-D. An LTM Specialist makes a configuration change on LTM-B. Later, a different LTM Specialist notices a "changes pending" message on all devices. When logged into LTM-D, the LTM Specialist attempts to config-sync to the device group. The sync operation fails. Why is the LTM Specialist on LTM-D unable to synchronize the configuration to the group?

A. The changes made on LTM-B are invalid

B. LTM-D has the lowest commit-id of the group

C. NTP is NOT configured on the devices in the group

D. LTM-B is the device eligible to initiate a config-sync

View answer

Correct Answer: C

Question #25

Assume the bigd daemon fails on the active system. Which three are possible results? (Choose three.)

A. The active system will restart the bigd daemon and continue in active mode

B. The active system will restart the tmm daemon and continue in active mode

C. The active system will reboot and the standby system will go into active mode

D. The active system will fail-over and the standby system will go into active mode

E. The active system will continue in active mode but gather member and node state information from the standby system

View answer

Correct Answer: D

Question #26

A high-availability (HA) pair configuration uses only the hardwire serial cable connection to determine device state. A power outage occurs to the PDU powering the active unit. The standby unit takes over the active role as expected. How is the peer unit able to determine the active unit is unavailable?

A. voltage loss on serial cable

B. no data stream received on serial port

C. no response on management interface

D. no heartbeat packets received on self IPs

View answer

Correct Answer: C

Question #27

Under what condition must an appliance license be reactivated?

A. Licenses only have to be reactivated for RMAs - no other situations

B. Licenses generally have to be reactivated during system software upgrades

C. Licenses only have to be reactivated when new features are added (IPv6, Routing Modules, etc) - no other situations

View answer

Correct Answer: C

Question #28

-- Exhibit -- Exhibit -- Users receive an error when attempting to connect to the website https://website.com. The website has a DNS record of 195.56.67.90. The upstream ISP has confirmed that there is nothing wrong with the routing between the user and the LTM device. The following tcpdump outputs have been captured: External Vlan, filtered on IP 168.210.232.5 00:25:07.598519 IP 168.210.232.5.33159 > 195.56.67.90.https: S 1920647964:1920647964(0) win 8192 00:25:07.598537 IP 195.56

A. The filters on the tcpdumps are incorrect

B. The DNS entry for website

C. The virtual server 'WEBSERVICES1' is listening on the incorrect port

D. The firewall is dropping the connection coming from the pool members returned to the client

E. The subnet masks of the pool members of pool WebServices1 and the f5 'Internal' Vlan are incorrect

View answer

Correct Answer: AC

Question #29

An LTM Specialist is running the following packet capture on an LTM device: ssldump -Aed -ni vlan301 'port 443' Which two SSL record message details will the ssldump utility display by default? (Choose two.)

A. HTTP Version B

C. ClientHello

D. ServerHello

E. Issuer

View answer

Correct Answer: AC

Question #30

How is traffic flow through transparent virtual servers different from typical virtual servers?

A. Traffic flow through transparent virtual servers must be forwarded through a single routingdevice

B. Traffic flow through transparent virtual servers does not have IP address translationperformed

C. Traffic flow through transparent virtual severs is not load balabced

D. Traffic flow through transparent virtual servers is bridged ( leave IP and lMAC

View answer

Correct Answer: A

Question #31

-- Exhibit -- Exhibit -- A company uses a complex piece of client software that connects to one or more virtual servers (VS) hosted on an LTM device. The client software is experiencing issues. An LTM Specialist is tasked with finding the cause of the problem. The LTM Specialist has the tcpdump extract and knows the client software has at least one connection to a VS on port 1990. However, when a tcpdump runs on the internal VLAN, there is no record of port 1990 in the tcpdump. Why is there no record of por

A. The LTM device drops the connection

B. Port 1990 is a well-known port, so its use is restricted

C. The LTM device performs a Port Address Translation (PAT)

D. The LTM device performs a Network Address Translation (NAT)

View answer

Correct Answer: A

Question #32

-- Exhibit -- Exhibit -- Which pool can be removed without affecting client traffic?

A. ftp_pool

B. http_pool

C. server1_80

D. server_pool

View answer

Correct Answer: AC

Question #33

-- Exhibit -- Exhibit -- Which step should an LTM Specialist take next to finish upgrading to HD1.3?

A. Install image to HD1

B. Install hotfix to HD1

C. Activate HD1

D. Relicense HD1

View answer

Correct Answer: A

Question #34

-- Exhibit -- -- Exhibit -- A company uses a complex piece of client software that connects to one or more virtual servers (VS) hosted on an LTM device. The client software is experiencing issues. An LTM Specialist must determine the cause of the problem. The LTM Specialist has the tcpdump extract. The client loses connection with the LTM device. Where is the reset originating?

A. the local switch

B. the application server

C. the device initiating the connection

D. the destination device of the initial connection

View answer

Correct Answer: A

Question #35

-- Exhibit -- -- Exhibit -- A company uses a complex piece of client software that connects to one or more virtual servers (VS) hosted on an LTM device. The client software is experiencing issues. An LTM Specialist must determine the cause of the problem. The LTM Specialist is seeing a client source IP of 168.210.232.5 in the tcpdump. However, the client source IP is actually 10.123.17.12. Why does the IP address of 10.123.17.12 fail to appear in the tcpdump?

A. The LTM device performed NAT on the individual's IP address

B. The Secure Network Address Translation (SNAT) pool on the virtual server is activated

C. Network Address Translation (NAT) has occurred in the path between the client and the LTM device

D. The individual's data stream is being routed to the LTM device by a means other than the default route

View answer

Correct Answer: B

Question #36

-- Exhibit -- Exhibit -- An LTM device is used to load balance web content over a secure channel. The developers of the web content have done a trace using an HTTP profiler application. They believe that allowing the LTM device to compress traffic to the client will improve performance. The client can utilize GZIP or deflate compression algorithms. An LTM Specialist must implement the compression. The LTM Specialist has completed the following actions: 1. Create the relevant profile. 2. Apply the relevant p

A. The incorrect compression algorithm is applied to the compression profile

B. The LTM device CANNOT SSL offload the traffic in order to read and compress it

C. The Protocol Profile (Client) option of "Allow Compression" needs to be enabled

D. The Protocol Profile (Server) option of "Allow Compression" needs to be enabled

View answer

Correct Answer: B

Question #37

Which process or system can be monitored by the BIG-IP system and used as a fail-over trigger in a redundant pair configuration? A. bandwidth utilization

B. duplicate IP address

C. CPU utilization percentage

D. VLAN communication ability

View answer

Correct Answer: B

Question #38

A site wishes to delegate the name www.mysite.com to a GTM System. Which entry wouldbe appropriate in their current DNS servers?

A. www

B. 15

C. www

D. www

View answer

Correct Answer: AC

Question #39

An LTM Specialist has a OneConnect profile and HTTP profile configured on a virtual server to load balance an HTTP application. The following HTTP headers are seen in a network trace when a client connects to the virtual server: Clientside: GET / HTTP/1.1 Host: 192.168.136.100 User-Agent: Mozilla/5.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-EncodinG.gzip, deflate Connection: keep-alive Serverside: HTTP/1.1 200 OK DatE.5 Jun 1989 17:06:55 GMT Server: Apache/2.2.14 (Ubunt

A. Client must support HTTP/1

B. Client must support HTTP keep-alive

C. Server must support HTTP/0

D. Server must support HTTP keep-alive

View answer

Correct Answer: B

Question #40

With standard DNS, assuming no DNS request failures, which process describes the normalresolution process on a "first time" DNS request? A. Client requests address from root server, root server returns IP address to Authoritative DNS, Authoritative DNS returns requested IP address, LDNS returns requested IPaddress to client.

B. Client requests address from LDNS, LDNS requests from GTM, GTM requests fromAuthoritative DNS, Authoritative DNS returns requested IP address, LDNS returnsrequested IP address to client

C. Client requests address from LDNS, Authoritative DNS receives request from root server,root server returns LDNS address, LDNS returns client address, Authoritative DNSreturns requested IP address, LDNS returns requested IP address to client

D. Client requests address from LDNS, LDNS requests from root server, root server returnsAuthoritative DNS address, LDNS requests from Authoritative DNS, Authoritative DNSreturns requested IP address, LDNS returns requested IP address to client

View answer

Correct Answer: B

Question #41

Specifying three methods allows the GTM System to rotate between the three methods sothat no one method is used too often.

A. The IP address of the server must be added to the wideip

B. The IP address of the server must be added to the syslog-ng

D. The IP address of the server and valid userid/password combination must be added to the syslog-ng

View answer

Correct Answer: B

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now

F5 101 Certification Exam Questions & Study Resources, 101-Application Delivery Fundamentals | SPOTO

View Answers after Submission

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE! Get Now

F5 101 Certification Exam Questions & Study Resources, 101-Application Delivery Fundamentals | SPOTO

View Answers after Submission

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now