F5 F5 Certifications 101 Questions & Answers

• Question 481:

  What is the purpose of floating self-IP addresses?

  A. to define an address that grants administrative access to either system at any time

  B. to define an address that allows either system to initiate communication at any time

  C. to define an address that allows network devices to route traffic via a single IP address

  D. to define an address that gives network devices greater flexibility in choosing a path to forward traffic

  Correct Answer: C

• Question 482:

  The F5 Visual Policy Editor (VPE) is unique to the F5 BIG-IP APM module; no other access management tool has this capability. Select the features that the VPE provides. Select two.

  A. Develop customized reports on user access

  B. Customize landing or login pages

  C. Establish highly detailed policies based on customer business requirements

  D. Configure authentication server objects

  E. Perform multiple factors of authentication

  Correct Answer: CE

• Question 483:

  Which of the following protocol protections is not provided by the Protocol Security Manager?

  A. FTP

  B. SSH

  C. HTTP

  D. SMTP

  Correct Answer: B

• Question 484:

  The Flow Login feature prevents which web vulnerability from occurring?

  A. Buffer overflow

  B. Cookie poisoning

  C. Forceful browsing

  D. Cross site scripting

  Correct Answer: C

• Question 485:

  Which of the following statements about cookie persistence is NOT true?

  A. The cookie's timeout value can be customized.

  B. They are F5'spreferred persistence method.

  C. No persistence information is placed on LTM.

  D. Web servers must be configured to send cookies to clients.

  E. They do not add a performance impact on LTM.

  Correct Answer: D

• Question 486:

  The Web Application Security Administrator user role can perform which of the following functions? (Choose two.)

  A. Modify HTTP class profiles

  B. Create new HTTP class profiles

  C. Create new Attack signature sets

  D. Assign HTTP class profiles to virtual servers

  E. Configure Advanced options within the BIG-IP ASM System

  Correct Answer: CE

• Question 487:

  Which three statements are true about SNATs? (Choose three.)

  A. SNAT s provide bidirectional traffic initiation.

  B. SNAT s support UDP, TCP, and ICMP traffic.

  C. SNAT s provide a many-to-one mapping between IP addresses.

  D. SNAT addresses can be identical to virtual server IP addresses.

  Correct Answer: BC

• Question 488:

  A network administrator tells you that they do NOT need WebAccelerator because their Web application is fine. What is your best response?

  A. Challenge them to run performance testing on their Web site.

  B. Access their Web site with them to display its response.

  C. Request a follow up meeting within the next three months.

  D. Ask for an opportunity to speak with the CIO or a member of their Web application team.

  Correct Answer: D

• Question 489:

  A web client accesses a web application using what protocol?

  A. TCP

  B. XML

  C. HTML

  D. HTTP

  Correct Answer: D

• Question 490:

  A BIG-IP has two load balancing virtual servers at 150.150.10.10:80 and 150.150.10.10:443. The port 80 virtual server has SNAT automap configured. There is also a SNAT configured at 150.150.10.11 set for a source address range of

  200.200.1.0 / 255.255.255.0. All other settings are at their default states.

  If a client with the IP address 200.200.1.1 sends a request to https://150.150.10.10, what is the source IP address when the associated packet is sent to the pool member?

  A. 200.200.1.1

  B. 150.150.10.11

  C. Floating self IP address on VLAN where the packet leaves the system

  D. Floating self IP address on VLAN where the packet arrives on the system

  Correct Answer: B