F5 F5 Certifications F50-531 Questions & Answers

• Question 71:

  Which event is always triggered when the client sends data to a virtual server using TCP?

  A. HTTP_DATA

  B. CLIENT_DATA

  C. HTTP_REQUEST

  D. VS_CONNECTED

  Correct Answer: B

• Question 72:

  Assume a virtual server has a ServerSSL profile. What SSL certificates are required on the pool members?

  A. No SSL certificates are required on the pool members.

  B. The pool members?SSL certificates must only exist.

  C. The pool members?SSL certificates must be issued from a certificate authority.

  D. The pool members?SSL certificates must be created within the company hosting the BIG-IPs.

  Correct Answer: B

• Question 73:

  Assume a virtual server is configured with a ClientSSL profile. What would the result be if the virtual server's destination port were not 443?

  A. SSL termination could not be performed if the virtual server's port was not port 443.

  B. Virtual servers with a ClientSSL profile are always configured with a destination port of 443.

  C. As long as client traffic was directed to the alternate port, the virtual server would work as intended.

  D. Since the virtual server is associated with a ClientSSL profile, it will always process traffic sent to port

  443.

  Correct Answer: C

• Question 74:

  Which is an advantage of terminating SSL communication at the BIG-IP rather than the ultimate web server?

  A. Terminating SSL at the BIG-IP can eliminate SSL processing at the web servers.

  B. Terminating SSL at the BIG-IP eliminates all UN-encrypted traffic from the internal network.

  C. Terminating SSL at the BIG-IP eliminates the need to purchase SSL certificates from a certificate authority.

  D. Terminating SSL at the BIG-IP eliminates the need to use SSL acceleration hardware anywhere in the network.

  Correct Answer: A

• Question 75:

  Assume a client's traffic is being processed only by a NAT; no SNAT or virtual server processing takes place. Also assume that the NAT definition specifies a NAT address and an origin address while all other settings are left at their defaults. If the origin server were to initiate traffic via the BIG-IP, what changes, if any, would take place when the BIG-IP processes such packets?

  A. The BIG-IP would drop the request since the traffic didn't arrive destined to the NAT address.

  B. The source address would not change, but the destination address would be changed to the NAT address.

  C. The source address would be changed to the NAT address and destination address would be left unchanged.

  D. The source address would not change, but the destination address would be changed to a self- IP of the BIG-IP.

  Correct Answer: C

• Question 76:

  A site wishes to perform source address translation on packets arriving from the Internet for clients using some pools but not others. The determination is not based on the client's IP address, but on the pool they are load balanced to. What could best accomplish this goal?

  A. A SNAT for all addresses could be defined, and then disable the SNAT processing for select pools.

  B. The decision to perform source address translation is always based on VLAN. Thus, the goal cannot be achieved.

  C. For each virtual server, regardless their default load balancing pools, association with SNAT pools could vary dependent upon need.

  D. The decision to perform source address translation is always based on a client's address (or network). Thus, this goal cannot be achieved.

  Correct Answer: A

• Question 77:

  Which two statements are true about SNATs? (Choose two.)

  A. SNAT's are enabled on all VLANs, by default.

  B. SNAT's can be configured within a Profile definition.

  C. SNAT's can be configured within a Virtual Server definition.

  D. SNAT's are enabled only on the VLAN where origin traffic arrives, by default

  Correct Answer: AC

• Question 78:

  A BIG-IP has two load balancing virtual servers at 150.150.10.10:80 and 150.150.10.10:443. The port 80 virtual server has SNAT auto-map configured. There is also a SNAT configured at 150.150.10.11 set for a source address range of 200.200.1.0 / 255.255.255.0. All other settings are at their default states. If a client with the IP address 200.200.1.1 sends a request to https://150.150.10.10, what is the source IP address when the associated packet is sent to the pool member?

  A. 200.200.1.1

  B. 150.150.10.11

  C. Floating self IP address on VLAN where the packet leaves the system

  D. Floating self IP address on VLAN where the packet arrives on the system

  Correct Answer: B

• Question 79:

  Which three statements describe a characteristic of profiles? (Choose three.)

  A. Default profiles cannot be created or deleted.

  B. Custom profiles are always based on a parent profile.

  C. A profile can be a child of one profile and a parent of another.

  D. All changes to parent profiles are propagated to their child profiles.

  E. While most virtual servers have at least one profile associated with them, it is not required.

  Correct Answer: ABC

• Question 80:

  A virtual server is defined using a source-address based persistence profile. The last five connections were A, B, C, A, C. Given the conditions shown in the graphic, if a client with IP address 205.12.45.52 opens a connection to the virtual server, which member will be used for the connection?

  

  A. 10.10.20.1:80

  B. 10.10.20.2:80

  C. 10.10.20.3:80

  D. 10.10.20.4:80

  E. 10.10.20.5:80

  Correct Answer: B