F5 F5 Certification 101 Questions & Answers

• Question 21:

  A BIG-IP Administrator needs to create a route to send traffic destined to 10.1.1 1 to another router with an address of 192 168 1 1 Which TMSH command should the administrator use?

  A. create/net route 10. 11. 1/32 gw 192 168. 1. 1

  B. create met route 192 168. 1. 1/32 gw 10. 11. 1

  C. add met route 192. 168. 1. 1/32 gw 10. 1. 1. 1

  D. add inet route 10.11.1/32 gw 192. 168.1.1

  Correct Answer: A

• Question 22:

  A BIG-IP Administrator contacts F5 Support and is asked to upload a Support Snapshot. Which command should be entered to the CLI to generate the requested file?

  A. imsh generate snapshot

  B. tmsh tcpdump

  C. tmsh save sys ucs support

  D. tmsh qkview

  Correct Answer: D

• Question 23:

  ATP administrator recently added a new VLAN and needs to confirm that the BIG IP sees traffic on this VLAN. The VLAN is untagged on interface 1.1 and is named VLAN704 in the BIG IP Configuration Unity. Which tool should be used to generate a packet capture that shows all traffic on this VLAN?

  A. netstat

  B. map

  C. tcpdump

  D. ifconsfig

  Correct Answer: C

• Question 24:

  What is the primary function of a certificate authority?

  A. to expire outdated certificates

  B. to verify and validate certificates

  C. to store security certificates

  D. to sign certificate signing requests

  Correct Answer: D

  https://en Wikipedia.org/wiki/Certificale_authority

• Question 25:

  An administrator finds a new vulnerability in a web application and needs to rapidly mitigate the threat. Which F5 feature provides this functionality?

  A. iCall

  B. iRules

  C. iSession

  D. iControl

  Correct Answer: B

• Question 26:

  The users in a company are unable to send and receive SMTP e-mails using the BIG-IP Virtual Server. The administrator logs into the BIG IP device to verify if the mail pool member with an IP address of 192. 168. 10. 100. 18 is serving SMTP traffic.

  Which command on the BIG-IP device should the administrator use to verify the traffic?

  A. tcpdump - 0 0 host 192 168 10 100 and port 143

  B. curf - 1 smtp1/192 168 10 100

  C. Icpdurnp - 0:0 host 192. 168. 10. 100 and port 25

  D. telnet 192. 168. 10. 100. 143

  Correct Answer: C

• Question 27:

  A messaging system digitally signs messages to ensure non-repudiation of the sender. Which component should the receiver use to validate the message?

  A. Public Key

  B. SSL extension

  C. A negotiated security algorithm

  D. private Key

  Correct Answer: A

• Question 28:

  Which device group type allows a BIG IP system to automatically become active in the event that the current active system fails?

  A. Sync-active

  B. sync-failover

  C. sync-standby

  D. sync-only

  Correct Answer: B

  The sync-failover group allows for failover of a traffic group. The sycn-only will synchronize ASM profiles and some other device information but does not deal with traffic groups

• Question 29:

  What is one way that a application delivery controller lowers the CPU-load on web servers?

  A. use SSL termination at the application delivery controller

  B. make the application delivery controller function as a Firewall

  C. make the application delivery controller a member of both external and internal VLANs

  D. use cookie persistence on the application delivery controller

  Correct Answer: A

• Question 30:

  What does ICMP Time Exceeded'' mean?

  A. The ping command exceeded the time limit.

  B. The traceroute command exceeded the time limit

  C. Remote host did not respond

  D. TTL has reached zero

  Correct Answer: D