F5 F5 Certifications 101 Questions & Answers

• Question 531:

  IP Enforcer blocks IP addresses that have repeatedly and regularly attacked the site.

  A. True

  B. False

  Correct Answer: A

• Question 532:

  What is the main cause of high latency in a Web application?

  A. The version, the client's browser

  B. The distance between the client and Web server

  C. The number of CPUs on the Web server

  D. The size of the objects on the page

  Correct Answer: B

• Question 533:

  A security audit has determined that your web application is vulnerable to a cross site scripting attack. Which of the following measures are appropriate when building a security policy? (Choose two.)

  A. Cookie length must be restricted to 1024 bytes.

  B. Attack signature sets must be applied to any user input parameters.

  C. Parameter data entered for explicit objects must be checked for minimum and maximum values.

  D. Parameter data entered for flow level parameters must allow some metacharacters but not others.

  Correct Answer: BD

• Question 534:

  Which of the following is a language used for content provided by a web server to a web client?

  A. FTP

  B. TCP

  C. HTTP

  D. HTML

  Correct Answer: D

• Question 535:

  Which two ports must be enabled to establish communication between GTM Systems and other BIG IP Systems? (Choose two.)

  A. 22

  B. 53

  C. 443

  D. 4353

  E. 4354

  Correct Answer: AD

• Question 536:

  The BIG-IP full proxy architecture has full visibility from the client to the server and from the server to the client.

  What security benefit does this provide to customers?

  A. Offloads security functionality from other devices such as network firewalls and Intrusion Prevention Systems (IPS), which may experience performance degradation when inspecting DNS queries and responses.

  B. provides enhanced support for DNS servers.

  C. Establishes highly detailed policies based on your customer's business in requirements, performs multiple factors of authentication, detects corporate versus non-corporate devices, checks OS patch levels, and determines antivirus patch levels.

  D. Provides industry-leading knowledge of application behavior as it travels through a network, and it applies that knowledge to security because it knows how an application behaves at any point in the reply request process

  Correct Answer: D

• Question 537:

  Assuming that systems are synchronized, which action could take place if the failover cable is connected correctly and working properly, but the systems cannot communicate over the network due to extern al network problems.

  A. If network failover is enabled, the standby system will assume the active mode.

  B. Whether or not network failover is enabled, the standby system will stay in standby mode.

  C. Whether or not network failover is enabled, the standby system will assume the active mode.

  D. If network failover is enabled, the standby system will go into active mode but only until the network recovers.

  Correct Answer: B

• Question 538:

  Which statement is true concerning the default communication between a redundant pair of BIG-IP devices?

  A. Communication between the systems cannot be effected by port lockdown settings.

  B. Data for both connection and persistence mirroring are shared through the same TCP connection.

  C. Regardless of the configuration, some data is communicated between the systems at regular intervals.

  D. Connection mirroring data is shared through the serial failover cable unless network failover is enabled.

  Correct Answer: B

• Question 539:

  TCP Express is licensed separately from LTM

  A. True

  B. False

  Correct Answer: B

  TCP Express is licensed including in LTM

• Question 540:

  There are many user roles configurable on the BIG-IP ASM System. Which of the following user roles have access to make changes to ASM policies? (Choose three.)

  A. Guest

  B. Operator

  C. Administrator

  D. Web Application Security Editor

  E. Web Application Security Administrator

  Correct Answer: CDE