F5 F5 Certifications 201 Questions & Answers

• Question 121:

  Refer to the exhibit.

  

  Which two pool members are eligible to receive new connections? (Choose two)

  A. 10.21.0.102.80

  B. 10.21.0.104.80

  C. 10.21.0.105.80

  D. 10.21.0.101.80

  E. 10.21.0.103.80

  Correct Answer: BD

• Question 122:

  Where is persistence mirroring configured?

  A. It is always enabled.

  B. It is part of a pool definition.

  C. It is part of a profile definition.

  D. It is part of a virtual server definition.

  Correct Answer: C

• Question 123:

  A site wishes to perform source address translation on packets from some clients but not others. The determination is not based on the client's IP address, but on the virtual servers their packets arrive on. What could best accomplish this goal?

  A. A SNAT for all addresses could be defined, and then disable the SNAT processing for select VLANs.

  B. Some virtual servers could be associated with SNAT pools and others not associated with SNAT pools.

  C. The decision to perform source address translation is always based on VLAN. Thus, the goal cannot be achieved.

  D. The decision to perform source address translation is always based on a client's address (or network). Thus, this goal cannot be achieved.

  Correct Answer: B

• Question 124:

  Refer to the exhibit.

  

  The BIG-IP Administrator has modified an iRule on one device of an HA pair. The BIG-IP Administrator notices there is NO traffic on the BIG-IP device in which they are logged into. What should the BIG-IP Administrator do to verify if the iRule works correctly?

  A. Push configuration from this device to the group and start to monitor traffic on this device

  B. Pull configuration to this device to the cluster and start to monitor traffic on this device

  C. Log in to the other device in the cluster, push configuration from it, and start to monitor traffic on that device

  D. Log in to the other device in the cluster, pull configuration to it, and start to monitor traffic on that device

  Correct Answer: D

  The device in the picture is a standby machine, of course there is no traffic, you need to log in to the host, and then pull the configuration to the host.

• Question 125:

  How is MAC masquerading configured?

  A. Specify the desired MAC address for each VLAN for which you want this feature enabled.

  B. Specify the desired MAC address for each selfIP address for which you want this feature enabled.

  C. Specify the desired MAC address for each VLAN on the active system and synchronize the systems.

  D. Specify the desired MAC address for each floating selfIP address for which you want this feature enabled.

  Correct Answer: A

• Question 126:

  A BIG-IP device sends out the following SNMP trap:

  big-ipo.f5.com - bigipExternalLinkChange Link: 1.0 is DOWN

  Where in the BIG-IP Configuration utility should the BIG-IP Administrator verify the current status of Link 1.0?

  A. System > Platform

  B. Network > Trunks > Trunk List

  C. Statistics > Performance > System

  D. Network > Interfaces > Interface List

  Correct Answer: D

  Explanation: 1.0 is a physical interface, you can see the interface status from the physical interface in the network.

• Question 127:

  A BIG-IP Administrator applied the latest hotfix to an inactive boot location by mistake, and needs to downgrade back to the previous hotfix. What should the BIG-IP Administrator do to change the boot location to the previous hotfix?

  A. Uninstall the newest hotfix and reinstall the previous hotfix

  B. Reinstall the base version and install the previous hotfix

  C. Reinstall the previous hotfix and re-activate the license

  D. Uninstall the base version and restore the UCS

  Correct Answer: B

• Question 128:

  Which method is recommended for creating a new user from the CLI?

  A. Run f5adduser username' then 'f5passwd username' from bash or tmsh

  B. Run tmsh create auth user username prompt for password' from bash

  C. edit bigip.conf to add the new user and the user's clear-text password

  D. Run useradd username' then 'passwd username' from bash tmsh

  Correct Answer: B

  Reference:

  The f5adduser commands were removed and tmsh is the recommended way to create users.

  https://support.f5.com/csp/article/K11677

• Question 129:

  When using the setup utility to configure a redundant pair, you are asked to provide a "Failover Peer IP". Which address is this?

  A. an address of the other system in its management network

  B. an address of the other system in a redundant pair configuration

  C. an address on the current system used to listen for failover messages from the partner BIG-IP

  D. an address on the current system used to initiate mirroring and network failover heartbeat messages

  Correct Answer: B

• Question 130:

  What is the purpose of floating self-IP addresses?

  A. to define an address that grants administrative access to either system at any time

  B. to define an address that allows either system to initiate communication at any time

  C. to define an address that allows network devices to route traffic via a single IP address

  D. to define an address that gives network devices greater flexibility in choosing a path to forward traffic

  Correct Answer: C