F5 101 Online Practice Questions and Exam Preparation

F5 101 Online Questions & Answers

• Question 11:

  An administrator needs to rapidly deter e newly discovered security threat to a remote desktop application. Which F5 feature provides this functionality?

  A. iRules
  B. SSL profiles
  C. Proxy SSL
  D. SPDY
  A. iRules

• Question 12:

  In the following configuration, a virtual server has the following HTTP class configuration:

  

  A request arriving for WWW.F5.COM will be matched by which class(es)?

  A. Class 1
  B. Class 2
  C. Both Class 1 and Class 2
  D. The request will be dropped
  B. Class 2

• Question 13:

  The BIG IP device is connected to the same network as a server

  Which communication protocol will the BIG IP device use to discover the link layer address of the server?

  A. Ping
  B. ICMP
  C. RARP
  D. ARP
  D. ARP

• Question 14:

  The APM Dashboard enables administrators to monitor which two of these metrics? (Choose two.)

  A. Number of active sessions
  B. Number of new sessions
  C. Number of denied users
  D. Number of users from each country
  A. Number of active sessions
  B. Number of new sessions

• Question 15:

  The F5 Visual Policy Editor (VPE) is unique to the F5 BIG-IP APM module; no other access management tool has this capability. Select the features that the VPE provides. Select two.

  A. Develop customized reports on user access
  B. Customize landing or login pages
  C. Establish highly detailed policies based on customer business requirements
  D. Configure authentication server objects
  E. Perform multiple factors of authentication
  C. Establish highly detailed policies based on customer business requirements
  E. Perform multiple factors of authentication

• Question 16:

  Which is NOT a function of ASM?

  A. Attack signature enforcement
  B. HTTP protocol enforcement
  C. Network security
  D. Parameter value enforcement
  C. Network security

• Question 17:

  Which of the following is a valid IP address and prefix length?

  A. 192. 168.:0 177/25
  B. 192 168:0. 129/25
  C. 192.168:0 128/25
  D. 192 168 :0 255/25
  B. 192 168:0. 129/25

• Question 18:

  A BIG-IP has the following objects configured: A SNAT pool with 2 members: A virtual server at 150.10.30.30:80 that is associated with both the SNAT pool and the load balancing pool. If a client at IP address 200.10.10.10 initiates a connection to the virtual server, what will the source IP address be in the packets sent to the chosen pool member?

  

  A. 150.10.30.30
  B. 150.10.33.33
  C. 10.10.1.10
  D. It could be any of the addresses of the members of the load balancing pool.
  E. 10.10.1.33
  F. 200.10.10.10
  E. 10.10.1.33

• Question 19:

  Data centers often rely on either traditional firewalls or next generation firewalls. Select the core weakness of the traditional or next generation firewalls when it comes to DDoS attacks.

  A. They are limited in amount of connections per second and the amount of sustained connections they can handle
  B. The cost performance ratio of next generation firewalls is too high.
  C. The agility of traditional firewalls is too limited when it comes to DDoS attacks.
  D. Data center traffic is primarily outbound.
  A. They are limited in amount of connections per second and the amount of sustained connections they can handle

• Question 20:

  which version of SNMP can AuthPriv be used?

  A. 2
  B. 3
  C. 2c
  D. 3c
  B. 3