Get Latest [Jan-2022] Conduct effective penetration tests using Fast2test 201
Penetration testers simulate 201 exam PDF
NEW QUESTION 85
A virtual server is listening at 10.10.1.100:any and has the following iRule associated with it: when CLIENT_ACCEPTED { if {[TCP::local_port] equals 80 } { pool pool1 } elseif {[TCP::local_port] equals 443 } { pool pool2 } If a user connects to 10.10.1.100 and port 22, which pool will receive the request.
- A. pool1
- B. None. The request will be dropped.
- C. pool2
- D. Unknown. The pool cannot be determined from the information provided.
Answer: D
NEW QUESTION 86
Refer to the exhibit.
During a planned upgrade lo a BIG-IP HA pair running Active/Standby, an outage to application traffic is reported shortly after the Active unit is forced to Standby Reverting the flower resolves the outage. What should the BIG-IP Administrator modify to avoid an outage during the next for over event?
- A. The interface on the Active device to 1.1
- B. The Interface on the Standby device to 1.1
- C. The Tag value on the Active device
- D. The Tag voice on the Standby device
Answer: D
NEW QUESTION 87
Which cookie persistence method requires the fewest configuration changes on the web servers to be implemented correctly.
- A. rewrite
- B. session
- C. insert
- D. passive
Answer: C
NEW QUESTION 88
A pool of four servers has been partially upgraded for two new servers with more memory and CPU capacity.
The BIG-IP Administrator must change the load balance method to consider more connections for the two new servers. Which load balancing method considers pool member CPU and memory load?
- A. Least Connection
- B. Round Robin
- C. Ratio
- D. Dynamic Ratio
Answer: C
NEW QUESTION 89
A custom HTTP monitor is failing to a pool member 10.10.3.75:8080 that serves up www.example.com.
A ping works to the pool member address.
The SEND string that the monitor is using is: GET/HTTP/l.l/r/n/Host.www.example.com/r/n/Connection Close/r/n/r/n Which CLI tool syntax will show that the web server returns the correct HTTP response?
- A. curl-header 'Host:www.example.com'
http://10.10.3.75:8080/ - B. tracepath 10.10.3.75:8080 GET /index
- C. curlhttp://10.10.10.3.75:8080/www.example.com/index.html
- D. tracepath 'http://www.example.com:80
Answer: A
NEW QUESTION 90
A site has assigned the ICMP monitor to all nodes and a custom monitor, based on the HTTP template, to a pool of web servers. The HTTP based monitor is working in all cases. The ICMP monitor is failing for 2 of the pool member 5 nodes.
All other settings are default. What is the status of the monitor is working in all cases?
- A. All pool members are up since the HTTPbased monitor is successful.
- B. All pool members are down since the ICMPbased monitor is failing in some cases.
- C. The pool members whose nodes are failing the ICMPbased monitor will be marked disabled.
- D. The pool members whose nodes are failing the ICMPbased monitor will be marked unavailable.
Answer: D
NEW QUESTION 91
Some users who connect to a busy Virtual Server have connections reset by the BIG-IP system. Pool member resources are NOT a factor in this behavior. What is a possible cause for this behavior?
- A. The Rewrite Profile has NOT been configured.
- B. The server SSL Profile has NOT been reconfigured.
- C. The Connection Rate Limit is set too high
- D. The Connection Limit is set too low.
Answer: D
Explanation:
Explanation
The topic explains that the connection reset behavior is caused by the vs configuration rather than the server resource problem. The answers B C are all configuration at the service forwarding level. If there is a problem with the configuration, it is all a problem rather than some users. Answer C's Connection Limit will cause a reset behavior when the connection reaches the threshold.
NEW QUESTION 92
A virtual server at 10.10.1.100:80 has the rule listed below applied. when HTTP_REQUEST { if {[HTTP::uri] ends_with "htm" } { pool pool1 } else if {[HTTP::uri] ends_with "xt" } { pool pool2 } If a user connects to http://10.10.1.100/foo.txt which pool will receive the request?
- A. pool2
- B. pool1
- C. Unknown. The pool cannot be determined from the information provided.
- D. None. The request will be dropped.
Answer: A
NEW QUESTION 93
A BIG-IP Administrator suspects that one of the BIG-IP device power supplies is experiencing power outages.
Which log file should the BIG-IP Administrator check to verify the suspicion?
- A. /var/log/kern.log
- B. /war /log/daemon.log
- C. /var/log/audit
- D. /var/log/ltm
Answer: D
NEW QUESTION 94
Which statement is true regarding failElover.
- A. If the hardware failElover cable is disconnected, both BIGElIP devices will always assume the active role.
- B. Hardware failElover can be used in conjunction with network failover.
- C. By default, hardware faElilover detects voltage across the failElover cable and monitors traffic across the internal VLAN.
- D. Hardware failElover is disabled by default.
Answer: B
NEW QUESTION 95
A BIG-IP Administrator adds new Pool Members into an existing, highly utilized pool. Soon after, there are reports that the application is failing to load for some users. What pool level setting should the BIG-IP Administrator check?
- A. Action On Service Down
- B. Availability Requirement
- C. Allow SNAT
- D. Slow Ramp Time
Answer: D
Explanation:
Explanation
Option ABC is a global configuration, has nothing to do with the new pool member, select D after excluding
NEW QUESTION 96
Interface 1.2 on a BIG-IP VE has a status of UNINITIALIZED. What is the reason for this status?
- A. No default route has been created.
- B. Interface 1.2 has been disabled.
- C. Interface 1.2 has NOT been assigned to a VLAN.
- D. Interface 1.2 has been added to a trunk.
Answer: C
Explanation:
Explanation
trunk is a portchannel, you need to add a physical interface.
NEW QUESTION 97
Which two can be a part of a pool's definition. (Choose two.)
- A. persistence type
- B. monitor(s)
- C. profile(s)
- D. rule(s)
- E. loadElbalancing mode
Answer: B,E
NEW QUESTION 98
A standard virtual server is defined with a pool and a SNAT using automap. All other settings for the virtual server are at defaults. When client traffic is processed by the BIG-IP, what will occur to the IP addresses?
- A. Traffic initiated by selected clients, based on their IP address, will have the source address translated to a self-IP address but the destination will only be translated if the traffic is destined to the virtual server.
- B. Traffic initiated to the virtual server will have the destination address translated to a pool member address and the source address translated to a self-IP address. Traffic arriving destined to other destinations will have the source translated to a self-IP address only.
- C. Traffic initiated to the virtual server will have the destination address translated to a pool member address and the source address translated to a self-IP address.
- D. Traffic initiated by the pool members will have the source address translated to a self-IP address but the destination address will not be changed.
Answer: C
NEW QUESTION 99
A Standard Virtual Server for a web application is configured with Automap for the Source Address Translation option. The original source address of the client must be known by the backend servers. What should the BIG-IP Administrator configure to meet this requirement?
- A. An HTTP Transparent profile
- B. A SNAT Pool with the client IP
- C. The Virtual Server type as Performance (HTTP)
- D. An HTTP profile to insert the X-Forward-For header
Answer: D
Explanation:
Explanation
Because it is a web application, you can insert the source IP in the xff field in the http profile.
NEW QUESTION 100
......
Understanding of functional and technical aspects of Troubleshooting basic device management connectivity issues
The following will be discussed in this section:
- Interpret a packet filter rule list in a given situation
- Apply connectivity troubleshooting tools (i.e. ping, traceroute, http/https availability, remote shell access, network based console access) in the appropriate situation
- Check and interpret port lockdown settings and packet filters in order to determine the cause of a management connectivity issue to a Self-IP
- Given the use of a remote authentication server, verify proper DNS and NTP settings in order to diagnose a connectivity issue
Tested Material Used To 201 Test Engine: https://www.fast2test.com/201-premium-file.html
Steps Necessary To Pass The 201 Exam: https://drive.google.com/open?id=1rIG5C-pOIEdlNfFKOl0z-v_8xY0R5zAl