[2021] 101 PDF Questions - Perfect Prospect To Go With Fast2test Practice Exam
F5 101 Pdf Questions - Outstanding Practice To your Exam
NEW QUESTION 119
Network Security personnel are entirely responsible for web application security.
- A. False
- B. True
Answer: A
NEW QUESTION 120
Which two must be included in a Wide-IP definition for the Wide-IP to resolve a DNS query? (Choose two.)
- A. one or more virtual servers
- B. a load balancing method
- C. a name
- D. a monitor
Answer: B,C
NEW QUESTION 121
When a business is hacked, they often lose more than money. What are the other consequences to a business as a result of being hacked? Select two.
- A. Penalties related to non-compliance with laws and regulations.
- B. Helpful third party reviews of the security needs of the customer's web applications.
- C. Final resolution of all security vulnerabilities of the business' web applications.
- D. Loss of customers when slow connections drive customers to competitor's site.
- E. Valuable free press that occurs as companies address hacking incidents.
Answer: B,C
Explanation:
Explanation/Reference:
NEW QUESTION 122
Data centers often rely on either traditional firewalls or next generation firewalls. Select the core weakness ofthe traditional or next generation firewalls when it comes to DDoS attacks.
- A. They are limited in amount of connections per second and the amount of sustained connections they canhandle
- B. Data center traffic is primarily outbound.
- C. The agility of traditional firewalls is too limited when it comes to DDoS attacks.
- D. The cost performance ratio of next generation firewalls is too high.
Answer: A
NEW QUESTION 123
When initially configuring the BIG-IP System using the config tool, which of the following parameters can be configured? (Choose 3)
- A. Port lockdown of the management port
- B. Default route of the management port
- C. IP address of the management port
- D. Netmask of the management port
- E. System hostname
Answer: B,C,D
NEW QUESTION 124
What we two advantages of using SSL offloading? (Choose two)
- A. encrypts all communications and to end
- B. Offloads the client to SSL processing
- C. allows secure remote access to internal server resources
- D. reduces server load significantly
- E. provides single point of management for private keys
Answer: D,E
NEW QUESTION 125
An organization needs to protect its data center from layer three-based and layer four-based exploits. Which F5 product provides this functionality
- A. ASM
- B. GTM
- C. APM
- D. AFM
Answer: D
Explanation:
https://www.f5.com/producrs/security/advanced-firewall-manager
NEW QUESTION 126
Which three of these are the potential ending options for branches in the Visual Policy Editor?
(Choose three.)
- A. Redirect
- B. Limit
- C. Reject
- D. Fallback
- E. Deny
- F. Allow
Answer: A,E,F
NEW QUESTION 127
After editing and saving changes to the configuration file containing virtual servers, what is the immediate result?
- A. The new configuration is verified and loaded if is it syntactically correct.
- B. The new configuration is loaded but not verified.
- C. The new configuration is verified and loaded.
- D. The new configuration is verified
- E. The new configuration is neither verified nor loaded.
- F. The new configuration is verified not loaded.
Answer: E
NEW QUESTION 128
Since F5 built GTM on the TMOS platform it can exist on the same BIGIP device as LTM:
- A. True
- B. False
Answer: A
NEW QUESTION 129
Which four of these scenarios will benefit from F5's WAN Optimization Module?
- A. An organization with one site but hundreds of Web servers
- B. An organization that expects their Web site usage to double in the next year
- C. An organization that does not want to rely on using tape backup
- D. An organization attempting to lower costs by reducing the number of data centers
- E. An international organization with data centers in different countries
- F. An organization whose users create extremely large files
Answer: C,D,E,F
NEW QUESTION 130
A BIG-IP has a virtual server at 150.150.10.10:80 with SNAT automap configured. This BIG-IP also has a SNAT at 150.150.10.11 set for a source address range of 200.200.1.0 /
255.255.255.0. All other settings are at their default states. If a client with the IP address
200.200.1.1 sends a request to the virtual server, what is the source IP address when the associated packet is sent to the pool member.
- A. Floating self IP address on VLAN where the packet leaves the system
- B. 200.200.1.1
- C. Floating self IP address on VLAN where the packet arrives on the system
- D. 150.150.10.11
Answer: A
NEW QUESTION 131
Which of the following statements about cookie persistence is NOT true?
- A. No persistence information is placed on LTM.
- B. Web servers must be configured to send cookies to clients.
- C. They are F5'spreferred persistence method.
- D. They do not add a performance impact on LTM.
- E. The cookie's timeout value can be customized.
Answer: B
NEW QUESTION 132
Which of the following are correct regarding Wildcard entities? (Choose 2)
- A. Wildcard entities are the basis for positive security logic.
- B. Wildcard entities can be applied to file types, URLs, cookies and parameters.
- C. Wildcard entities require the need to learn only from violations.
- D. Wildcard entities are the basis for negative security logic.
Answer: A,B
NEW QUESTION 133
What does response code HTTP 302 represent?
- A. The requested resource resides temporary under a different URI
- B. The server encountered an unexpected condition that prevented it from Milling the request.
- C. The server has not found anything matching the Request URI
- D. The request has succeeded.
Answer: A
NEW QUESTION 134
Which is a potential result when a trunk is configured on a BIG-IP?
- A. Packets flowing to the VLAN could arrive on any of the interfaces in the trunk
- B. VLAN fail-safe is not available for any VLAN associated with any trunks.
- C. Since any VLANs associated with the trunk are necessarily associated with multiple interfaces, the VLAN using the must use tagged packets.
- D. No additional trunks can be configuration since each BIG-IP is limited to one trunk
Answer: A
NEW QUESTION 135
A monitor has been defined using the HTTP monitor template. The send and receive strings were customized, but all other settings were left at their defaults. Which resources can the monitor be assigned to?
Answer:
NEW QUESTION 136
What is the difference between primary and secondary DNS servers?
- A. Primary servers host the original copy of the zone database file.
- B. Secondary servers act as backups and will respond only if the primary fails.
- C. Only primary servers can issue authoritative responses.
- D. Primary servers resolve names more efficiently than secondary servers.
Answer: A
NEW QUESTION 137
Which three of the following must be done in order for GTM to properly communicate LTM?
- A. Exchange SSL certificates between the two
- B. Connect the GTM and LTM with a network crossover cable
- C. Add the LTM object to the GTM configuration
- D. Configure the GTM and LTM to use MAC masquerading
- E. Ensure that GTM and LTM use the same floating IP address
- F. Synchronize the big3d versions between GTM and LTM
Answer: A,C,F
Explanation:
Explanation/Reference:
Explanation:
Integrating LTMsystems with GTM systems on a network
Running the bigip_add utility
Determine the self IP addresses of the BIG-IP LTM systems that you want to communicate with BIG-IP GTM.
Run the bigip_add utility on BIG-IP GTM. This utility exchanges SSL certificates sothat each system isauthorized to communicate with the other.
When the LTM and GTM systems use the same version of the big3d agent, you run the bigip_add utility toauthorize communications between the systems.
http://support.f5.com/kb/en-us/products/big-ip_gtm/manuals/product/gtm-implementations11-3-0/7.html Note:
The BIG-IP GTM and BIG-IP LTM systems must have TCP port 4353 open through the firewall between the systems. The BIG-IP systems connect and communicate through this port.
NEW QUESTION 138
In order to ensure that a specific file type is never moved down to a secondary file tier, the administrator should:
- A. This is not possible on the ARX.
- B. Set up an automated bot that accesses that file once a week.
- C. Instruct the end users to put the file in a non-tiered directory.
- D. Set a policy that the file type remains on primary storage.
Answer: D
NEW QUESTION 139
After editing and saving changes to the configuration file containing virtual servers, what is the immediate result?
- A. The new configuration is neither verified not loaded.
- B. The new configuration is verified and loaded if is it syntactically correct.
- C. The new configuration is loaded but not verified.
- D. The new configuration is verified and loaded.
- E. The new configuration is verified.
- F. The new configuration is verified not loaded.
Answer: A
NEW QUESTION 140
......
Online Questions - Outstanding Practice To your 101 Exam: https://www.fast2test.com/101-premium-file.html
Practice To 101 - Fast2test Remarkable Practice On your Application Delivery Fundamentals Exam Exam: https://drive.google.com/open?id=1BTEEj7wmKHU2SbG8xaQgg7pMAMmK_vTy