F5-201

F5
201
TMOS Administration
Version: 3.0
[ Total Questions: 166]
Web: www.marks4sure.com
Email: [email protected]
IMPORTANT NOTICE
Feedback
We have developed quality product and state-of-art service to ensure our customers interest. If you have any
suggestions, please feel free to contact us at [email protected]
Support
If you have any questions about our product, please provide the following items:
exam code
screenshot of the question
login id/email
please contact us at [email protected] and our technical experts will provide support within 24 hours.
Copyright
The product of each order has its own encryption code, so you should use it independently. Any unauthorized
changes will inflict legal punishment. We reserve the right of final explanation for this statement.
Practice Test F5 - 201
Question #:1
A configuration change is made on the standby member of a device group.
What is displayed as "Recommended Action" on the Device Management Overview screen?
A. Force active member of device group to standby
B. Activate device with the most recent configuration
C. Synchronize the active member configuration to the group.
D. Synchronize the standby member configuration to the group
Answer: D
Question #:2
Refer to the exhibit.
How are new connections load balanced?
A. To the first two members listed with the same priority group
B. To the pool member with the least number of connections
C. To the pool member with a high priority group value defined
D. To the pool member with a low priority group value defined
Answer: B
Question #:3
A web server administrator informs the BIG-IP Administrator that web servers are overloaded Starting next
month, the BIG-IP device will terminate SSL to reduce web server load. The BIG-IP device is ready using
client SSL client profile and Rules on HTTP level. What actions should the BIG-IP Administrators to achieve
the desired configuration?
Pass Your Certification With Marks4sure Guarantee 1 of 81

A. Remove the server SSL profile and configure the Pool Members to use HTTP
B. Remove the client SSL profile and configure the Pool Members to US HTTP
C. Remove the chart SSL profile and change the Virtual Server to accept HTTP
D. Remove the server SSL profile and change the Virtual Server to accept HTTP traffic
Answer: A
Question #:4
An LTM device has a virtual server mapped to www5f.com with a pool assigned. The objects are defined
as follows:
Virtual server. Destination 192.168.245.100.443 netmask 255.255.255.0
Persistence: Source address persistence netmask 255.0.0.0
SNAT:AutoMap
Profiles: HnP/TCP
How should the BIG-IP Administrator modify the persistence profile so that each unique IP address
creates a persistence record?
A. netmask 0.0.0.0
B. netmask 255.255.255.255
C. netmask 255.255.0.0
D. netmask 255.256.255.0
Answer: B
Question #:5
Refer to the exhibit

The network team creates a new VLAN on the switches. The BIG-IP Administrator needs to create a
configuration on the BIG-IP device. The BIG-IP Administrator creates a new VLAN and Self IP, but the
servers on the new VLAN are NOT reachable from the BIG-IP device.
Which action should the BIG-IP Administrators to resolve this issue?

A. Set Port Lockdown of Set IP to Allow All
B. Change Auto Last Hop to enabled
C. Assign a physical interface to the new VLAN
D. Create a Floating Set IP Address
Answer: C
Question #:6
A BIG-IP Administrator needs to restore an encrypted UCS archive from the command line using the
TMSH utility.
Which TMSH command should the BIG-IP Administrator use to accomplish this?
A. load/sys ucs <filepath> passphrase <password>
B. load/sys config file <filepath> passphrase <password>
C. load/sys config file <filepath>
D. load/sys ucs <filepath> no-license
Answer: A
Question #:7
What should the 816-IP Administrator provide when opening a new ticket with F5 Support?
A. bigip.license file
B. QKViewfile
C. Device root password
D. SSL private keys
Answer: B
Question #:8
A 8IG-IP device is replaced with an RMA device. The BIG-IP Administrator renews the license and tries to
restore the configuration from a previously generated UCS archive on the RMA device. The device
configuration is NOT fully loading. What is causing the configuration load to fail?

A. The Device Group is NOT configured for Full Sync.
B. The US does NOT contain the full config
C. The clock is NOT set correctly
D. The Master Key is NOT restored
Answer: D
Question #:9
The BIG-IP Administrator has modified an iRule on one device of an HA pair. The BIG-IP Administrator
notices there is NO traffic on the BIG-IP device in which they are logged into.
What should the BIG-IP Administrator do to verify if the iRule works correctly?
A. Push configuration from this device to the group and start to monitor traffic on this device
B. Pull configuration to this device to the cluster and start to monitor traffic on this device
C. Log in to the other device in the cluster, push configuration from it, and start to monitor traffic on that
device
D. Log in to the other device in the cluster, pull configuration to it, and start to monitor traffic on that
device
Answer: D
Explanation
The device in the picture is a standby machine, of course there is no traffic, you need to log in to the
host, and then pull the configuration to the host.
Question #:10

Which Virtual Server type should be used to load balance HTTP traffic to a pool of servers?
A. Standard
B. Stateless
C. Forwarding (IP)
D. Forwarding (Layer 2)
Answer: A
Question #:11
A BIG-IP Administrator needs to remove a pool specific health monitor. There is a pool named Best Pool with
two members, one named Best pool member and one named Best pool member2. In the Local Traffic section
of the administrative GUI, which stops should the BIG-IP Administrator take to remove a pool level monitor?
A. Pool > Pool List > Best Pool > Members > Health Monitors
B. Nodes > Node List> Best _pool_memberl > Heath Monitors
C. Monitors > Monitor Name> Instances
D. Pool > Pool List> Best Pool > Health Monitors
Answer: D
Question #:12
A BIG-IP Administrator plans to upgrade a BIG-IP device to the latest TMOS version.
Which two tools could the administrator leverage to verify known issues for the target versions?
(Choose two.)
A. F5 University
B. F5 Downloads
C. F5 End User Diagnostics (EUD)
D. FSiHealth
E. F5 Bug Tracker
Answer: D E

Explanation
F5 University -- F5 learning materials
F5 Downloads - iso download page
F5 End User Diagnostics (EUD) -- Hardware detection
Question #:13
A BIG-IP Administrator receives an RMA replacement for a failed F5 device. The BIG-IP Administrator
tries to restore a UCS taken from the previous device, but the restore fails. The following error appears
inthe/var/log/itm.
mcpd [****J: •*****»;0; License is not operational (expired or digital signature does not match
contents.)
What should the BIG-IP Administrator do to avoid this error?
A. Use the appropriate tmsh command with the no-license option
B. Revoke the license prior to restoring
C. Reactivate the license on the new device using the manual activation method
D. Remove the license information from the UCS archive
Answer: A
Question #:14
To increase available bandwidth of an existing Trunk, the BIG-IP Administrator is adding additional
interfaces.
Which command should the BIG-IP Administrator run from within bosh shell?
A. tmsh create /net trunk trunk_A interfaces add {1.3.1.4}
B. tmsh create/sys trunk trunk_A interfaces add {1.3.1.4}
C. tmsh modify/sys trunk trunk^A interfaces add {1.3.1.4}
D. tmsh modify /net trunk trunk_A interfaces add {1.3.1.4}
Answer: D

Question #:15
A BIG-IP Administrator opens a case with F5 Support. The support engineer requests the BIG-IP
appliance chassis serial number.
Which TMSH command will provide this information?
A. . list /sys software
B. show /sys version
C. list/sys diags
D. show /sys hardware
Answer: D
Question #:16
A BIG-IP Administrator adds new Pool Members into an existing, highly utilized pool. Soon after, there are
reports that the application is failing to load for some users. What pool level setting should the BIG-IP
Administrator check?
A. Availability Requirement
B. Allow SNAT
C. Action On Service Down
D. Slow Ramp Time
Answer: D
Explanation
Option ABC is a global configuration, has nothing to do with the new pool member, select D after excluding
Question #:17
A BIG-IP Administrator suspects that one of the BIG-IP device power supplies is experiencing power
outages.
Which log file should the BIG-IP Administrator check to verify the suspicion?
A. /war /log/daemon.log

B. /var/log/kern.log
C. /var/log/ltm
D. /var/log/audit
Answer: C
Question #:18
One of the two members of a device group has been decommissioned. The BIG-IP Administrator tries to
delete the device group, but is unsuccessful.
Prior to removing the device group, which action should be performed?
A. Disable the device group
B. Remove all members from the device group
C. Remove the decommissioned device from the device group
D. Make sure all members of the device group are in sync
Answer: B
Question #:19
The BIG-IP Administrator is unable to access the management console via Self-IP 10.10 1.33 and port 443.
What is the reason for this problem?
A. Packet Filter needs to be configured to allow a source
B. Self IP is configured to allow TCP All
C. Self IP is configured to allow UDP 443
D. Packet Filter is configured to allow port 443
Answer: C
Question #:20

How long will the persistence record remain in the table?
A. 180 seconds after the last packet
B. 180 seconds after the initial table entry
C. 300 seconds after the initial table entry
D. 300 seconds after the last packet
Answer: D
Question #:21
A virtual server is configured to offload SSL from a pool of backend servers. When users connect to the
virtual server, they successfully establish an SSL connection but no content is displayed. A packet trace
performed on the server shows that the server receives and responds to the request. What should a BIG-IP
Administrator do to resolve the problem?
A. enable Server SSL profile
B.

B. disable Server SSL profile
C. disable SNAT
D. enable SNAT
Answer: B
Question #:22
A BIG-IP Administrator needs to determine which pool members in a pool have been manually forced offline
and are NOT accepting any new traffic. Which status icon indicates this?
A)
B)
C)
D)
A. Option
B. Option
C. Option
D. Option
Answer: A
Question #:23
A BIG-IP Administrator reviews the log files to determine the cause of a recent problem and finds the

following entry.
Mar 27.07.58.48 local/BIG-IP notice mcpd {5140} 010707275 Pool member 172.16.20.1.10029 monitor
status down.
What is the cause of this log message?
A. The pool member has been disabled.
B. The pool member has been marked as Down by the BIG-IP Administrator.
C. The monitor attached to the pool member needs a higher timeout value.
D. The monitor attached to the pool member has failed.
Answer: D
Question #:24
The BIG-IP Administrator generates QKView using tmsh command "qkview -SO". In which directory does
the BIG-IP appliance save the QKView?
A. /etc/tmp
B. /var/tmp
C. /shared/qkview
D. /var /tmp/qkview
Answer: B
Question #:25
A BIG-IP device is configured with both an internal external and two Corporate VLANs. The virtual server
has SNAT enabled and is set to listen on all VLANs Auto Last Hop is disabled. The Corporate users are on
10.0.0.0./24 and 172.16.0.0/12. The BIG-IP has a Self-IP on the 1.0.0.0.0./24 subnet.
Internet users are able to access the virtual server. Only some of the Corporate users are able to connect
to the virtual server A BIG-IP Administrator performs a tcpdump on the BIG-IP and verifies that traffic is
arriving from users in 10.0.0.0/24.
What should the BIG-IP Administrator do to correct this behaviour?
A.

A. Disable the server on the internal VLAN
B. Add a static route for the 172.16.0.0/12 subnet
C. Change the default route to point to the extra firewall
D. Modify the default route of the servers to point to the BIG-IP device
Answer: B
Question #:26
A BIG-IP Administrator configures a Virtual Server. Users report that they always receive a TCP RST packet
to the BIG-IP system when attempting to connect to it. What is the possible reason for this issue?
A. The virtual server Type is set to Internal
B. The virtual server Type is set to Reject
C. The virtual server Type is set to Drop
D. The virtual server Type is set to Stateless
Answer: B
Question #:27
Which Pool Members are receiving traffic?
A. Serv1, serv2,serv3, serv4
B. serv1, serv3

C. serv1, serv3, serv4
D. serv1
Answer: C
Question #:28
A BIG-IP Administrator contacts F5 Support, which identifies a suspected hardware failure. Which
information should the BIG-IP Administrator provide to F5 Support?
A. Qkview, EUD output
B. Qkview, UCS archive, core files
C. Qkview, part numbers for failed components
D. Qkview, packet capture, UCS archive
Answer: A
Question #:29
How should a BIG-IP Administrator persistent sessions from being sent to a pool member so that the server
administrator can perform maintenance?
A. force the pool member offline
B. disable the pool member
C. add an additional monitor to the poor
D. disable the virtual server
Answer: A
Question #:30
A BIG-IP Administrator plans to resolve a non-critical issue with a BIG-IP device in 2 weeks. What Severity
level should be assigned to this type of F5 support ticket?
A. 4
B. 2
C. 3
D.

D. 1
Answer: A
Question #:31
A Standard Virtual Server for a web application is configured with Automap for the Source Address
Translation option. The original source address of the client must be known by the backend servers. What
should the BIG-IP Administrator configure to meet this requirement?
A. The Virtual Server type as Performance (HTTP)
B. An HTTP profile to insert the X-Forward-For header
C. An HTTP Transparent profile
D. A SNAT Pool with the client IP
Answer: B
Explanation
Because it is a web application, you can insert the source IP in the xff field in the http profile.
Question #:32
A BIG-IP Administrator runs the initial configuration wizard and learns that the NTP servers were invalid. In
which area of the Configuration Utility should the BIG-IP Administrator update the list of configured NTP
servers?
A. System > Configuration
B. System > Services
C. System > Preferences
D. System > Platform
Answer: A
Question #:33
A local user account (Users) on the BIG-IP device is assigned the User Manager role. Userl attempts to
modify the properties of another account (User2), but the action fails. The BIG-IP Administrator can
successfully modify the User2 account.

Assuming the principle of least privilege, what is the correct way to allow User 1 to modify User2
properties?
A. Move User2 to the same partition as User1
B. Grant User1 administrative privileges
C. Move User to the same partition as User2.
D. Modify the partition access for User 1
Answer: D
Question #:34
A BIG-IP Administrator sees the following error message in /var/log/ltm diskmonitor: *******; Disk partition
shared has less than 30$ free
Which section of the Configuration Utility should the BIG-IP Administrator access to investigate this
error message?
A. Statistics > Analytics
B. System > File Management
C. Statistics > Module Statistics > System
D. System > Disk Management
Answer: D
Question #:35
A BIG-IP Administrator is receiving intermittent reports from users that SSL connections to the BIG-IP device
are failing. Upon checking the log files, the BIG-IP Administrator notices the following error message:
ere tmm<instance>[<pid>]: 01260008:3: SSL transaction (TPS) rate limit reached
After reviewing statistics, the BIG-IP Administrator notices there are a maximum of 1200 client-side SSL
TPS and a maximum of 800 server-side SSL TPS.
What is the minimum SSL license limit capacity the BIG-IP Administrator should upgrade to handle this
peak?

A. 2000
B. 400
C. 800
D. 1200
Answer: D
Question #:36
A set of servers is used for an FTP application as well as an HTTP website via separate BIG-IP Pools. The
server support team reports that some servers are receiving a lot more traffic than others.
Which Load Balancing Method should the BIG-IP Administrator apply to even out the connection count?
A. Ratio (Member)
B. Least Connections (Member)
C. Least Connections (Node)
D. Ratio (Node)
Answer: C
Explanation
The connection is required to be balanced, and the unit is the server and the application port is the unit,
so it is node.
Question #:37
A user needs to determine known security vulnerabilities on an existing BIG-IP appliance and how to
remediate these vulnerabilities.
Which action should the BIG-IP Administrator recommend?
A. Verify the TMOS version and review the release notes
B. Create a UCS archive and upload to Health
C. Create a UCS archive and open an F5 Support request
D.

D. Generate a view and upload to Heath
Answer: D
Question #:38
A new BIG-IP VE is deployed with default settings. The BIG-IP Administrator completes the setup utility in
the Configuration Utility. The internal self IP address fails to respond to a ping request. What is a possible
cause of this issue?
A. Port lockdown on internal self IP is set to Allow None
B. Route is NOT assigned to internal self IP.
C. Internal interface VLAN is set to untagged
D. Internal interface VLAN is set to tagged
Answer: D
Question #:39
A BIG-IP Administrator needs to modify a virtual server that web offload web traffic compression tasks from
the target server.
Which two profiles must the BIG-IP Administrator apply to a virtual server to enable compression? (Choose
two)
A. Server SSL profile
B. Stream profile
C. Persistence profile
D. HITP profile
E. Compression profile
Answer: D E
Question #:40
A BIG-IP Administrator need to ensure that a pool member and down by the monitor the BIG-IP system
sends existing connections to another be pool member.
Which should the BIG-IP Administrator perform to meet this goal?
A.

A. Set Action on Service Down sing under the server configuration to reselect.
B. Reconfigure the pool motor members as UP.
C. Enable mirroring within the persistence profile.
D. Set Action Service Down setting under the pool configuration to reselect.
Answer: D
Question #:41
An IT support engineer needs to access and modify Virtual Servers in three partitions (Common /Banking and
Dev) daily on a BIG-IP device. The company operates a Least Privilege access policy. What level of access
does the IT support engineer need to ensure completion of daily roles?
A. Manager in /common/Banking, and /Dev partitions
B. Application Editor in /Common, /Banking, and /Dev partitions
C. Manager in all partitions
D. Application Editor in all partitions
Answer: A
Question #:42
A BIG-IP Administrator must determine if a Virtual Address is configured to fail over to the standby member
of a device group in which area of the Configuration Utility can this be confirmed?
A. Device Management > Traffic Groups
B. Device Management > Devices
C. Local Traffic > Virtual Servers
D. Device Management > Overview
Answer: C
Question #:43
The BIG-IP appliance fails to boot. The BIG-IP Administrator needs to run the End User Diagnostics (EUD)
utility to collect data to send to F5 Support.

Where can the BIG-IP Administrator access this utility?
A. Console Port
B. Internal VLAN interface
C. External VLAN interface
D. Management Port
Answer: A
Question #:44
A pool of four servers has been partially upgraded for two new servers with more memory and CPU capacity.
The BIG-IP Administrator must change the load balance method to consider more connections for the two new
servers. Which load balancing method considers pool member CPU and memory load?
A. Round Robin
B. Dynamic Ratio
C. Ratio
D. Least Connection
Answer: C
Question #:45
A BIG-IP Administrator creates a new VLAN on BIG-IP Cluster Member A and attaches an Interface to it.
Although the Auto Config Sync is in place, the new VLAN does NOT show up on Cluster Member B. What
should the BIG-IP Administrator do to ensure the new VLAN is configured on each Cluster Member?
A. Configure the new VLAN manually on Cluster Member B.
B. Reset the Device Trust of the BIG-IP Cluster on either Cluster Member.
C. Configure a Default Route for the new VLAN on Cluster Member A.
D. Enable the Interface that is attached to the new VLAN on Cluster Member A.
Answer: A
Question #:46
A BIG-IP Administrator is working with a BIG-IP device and discovers that one of the Interfaces on a

Trunk is DOWN.
What is the reason for this Interface status?
A. The switch is NOT connected to the Interface
B. There is NO transceiver installed on the Interface
C. There is NO default route configured for this trunk
D. The media speed of the interface has NOT been set
Answer: A
Question #:47
A BIG-IP Administrator is configuring an SSH Pool with five members.
Which Health Monitor should be applied to ensure that available pool members are monitored
accordingly?
A. https
B. udp
C. http
D. tcp
Answer: D
Question #:48
A BIG-IP Administrator needs to purchase new licenses for a BIG-IP appliance.
The administrator needs to know if a module is licensed and the memory requirement for that module.
Where should the administrator view this information in the System menu?
A. Resource Provisioning
B. Configuration > Device
C. Software Management
D. Configuration >OVSDB
Answer: A

Question #:49
A BIG-IP system has the following configuration:
* SNAT is set to Auto Map
* There are two VLANs internal and external
* Default route is pointed to the gateway on external VLAN
* Self P for internal VLAN is 1921.1.2
* Self IP for external VLAN is 192.1.2.2
* Floating IP addresses for internal VLAN is 192.1.1.1
* Floating IP addresses for external VLAN is 192.1.2.1
* The Virtual Server IP address is 192.1.1.100
Which IP address does the BIG-IP system use first when traffic reaches the servers on the internal VLAN?
A. 192.1.1.100
B. 192.1.2.2
C. 192.1.1.1
D. 192.1.2.1
Answer: C
Question #:50

According to the shown Configuration Utility stings What is the setting of the User Directory configuration
under the Authentication submenu?
A. Local
B. Managed
C. Remote-TACACS+
D. Default system configuration
Answer: C
Question #:51
A BIG-IP Administrator wants to add a new Self IP to the BIG-IP device. Which item should be assigned to
the new Self IP being configured?
A. Interface
B. Route
C. VLAN
D. Trunk
Answer: C
Question #:52
Which Virtual Server type prevents the use of a default pool?
A. Performance (Layer 4)
B. Forwarding (IP)
C. Performance HTTP
D. Standard
Answer: B
Explanation
Forwarding (IP) cannot be associated with the pool.
Question #:53

Which log file should the BIG-IP Administrator check to determine if a specific user tried to log in to the
8IG-IP Configuration by utility?
A. /var/log/pam/tally/log
B. /ver/log/secure
C. /var/log/trn
D. /var/log/http.d
Answer: B
Question #:54
Interface 1.2 on a BIG-IP VE has a status of UNINITIALIZED. What is the reason for this status?
A. Interface 1.2 has been added to a trunk.
B. Interface 1.2 has NOT been assigned to a VLAN.
C. Interface 1.2 has been disabled.
D. No default route has been created.
Answer: B
Explanation
trunk is a portchannel, you need to add a physical interface.
Question #:55

How many nodes are represented on the network map shown?
A. Four
B. Three
C. One
D. Two
Answer: B
Question #:56
A BIGJP Administrator needs to load a UCS file but must exclude the license file. How should the
administrator perform this task?
A. From the CLI with command U tmsh load /$ys ucs <ucs filename> no-license
B. From the GUI, select the UCS file, unchcck the license box, and click restore
C. From the CLI with command(tmos)« tmsh load /sys ucs <ucs filename> no-license
D. From the GUI, select the UCS file and click restore
Answer: A
Question #:57
A BIG-IP Administrator explicitly creates a traffic group on a BIG-IP device.
Which two types of configuration objects can be associated with this traffic group? (Choose two.)
A. Pool Members
B. Virtual Addresses
C. iRules
D. VLANS
E. Application Instances
Answer: B E
Question #:58
A BIG-IP Administrator is unable to connect to the management interface via HTTPS. What is a possible

reason for this issue?
A. The port lockdown setting is configured to Allow None.
B. An incorrect management route is specified.
C. The IP address of the device used to access the management interface is NOT included in the "P Allow"
list in the Configuration Utility.
D. The IP address of the device used to access the management interface is NOT included in the "httpd
Allow" list in the CLI.
Answer: D
Question #:59
A BIG-IP Administrator configures a Virtual Server to handle HTTPS traffic. Users report that the
application is NOT working.
Which actional configuration is regard to resolve this issue?
A. Configure SSL Profile (Client)
B. Configure Protocol Profile (Server)
C. Configure Service Profile HTTP
D. Configure SSL Profile (Server)
Answer: A
Question #:60

A BIG-IP device has only LTM and ASM modules provisioned. Both have nominal provisioning level. The
BI6-IP Administrator wants to dedicate more resources to the LTM module. The ASM module must remain
enabled. Which tmsh command should the BIG-IP Administrator execute to obtain the desired result?
A. modify/sys provision asm level minimum
B. modify /sys provision Itm level dedicated
C. modify /sys provision asm level none
D. modify /sys provision Itm level minimum
Answer: A
Question #:61
The BIG-IP Administrator creates a custom iRule that fails to work as expected. Which F5 online resource
should the administrator use to help resolve this issue?
A. DevCentral
B. Bug Tracker
C. University
D. Health
Answer: A
Question #:62
A development team needs to apply a software fix and troubleshoot one of its servers. The BIG-IP
Administrator needs to immediately remove all connections from the BIG-IP system to the back end server.
The BIG-IP Administrator checks the Virtual Server configuration and finds that a persistence profile is
assigned to it. What should the 8IG-IP Administrator do to meet this requirement?
A. Set the pool member to a Forced Offline state and manually delete easting connections through the
command line.
B. Set the pool member to a Forced Offline state.
C. Set the pool member to a Disabled state.
D. Set the pool member to a Disabled state and manually delete existing connections through the command
line.
Answer: A

Question #:63
A BIG-IP Administrator needs to have a BIG-IP linked to two upstream switches for resilience of the external
network. The network engineer who is going to configure the switch instructs the BIG-IP Administrator to
configure interface binding with LACP. Which configuration should the administrator use?
A. A virtual server with an LACP profile and the switches' management IPs as pool members.
B. A virtual server with an LACP profile and the interfaces connected to the switches as pool members.
C. A Trunk listing the allowed VLAN IDs and MAC addresses configured on the switches.
D. A Trunk containing an interface connected to each switch.
Answer: D
Question #:64
New Syslog servers have been deployed in an organization. The BIG-IP Administrator must reconfigure the
BIG-IP system to send log messages to these servers.
In which location in the Configuration Utility can the BIG-IP Administrator make the needed configuration
changes to accomplish this?
A. System > Logs > Configuration
B. System > Configuration > Local Traffic
C. System > Logs > Audit
D. System > Configuration > Device
Answer: A
Question #:65

Due to a change in application requirements, a BIG-IP Administrator needs to modify the configuration of a
Virtual Server to include a Fallback Persistence Profile.
Which persistence profile type should the BIG-IP Administrator use for this purpose?
A. SSL
B. Hash
C. Universal
D. Source Address Affinity
Answer: D
Question #:66
A BIG-IP Administrator wants to add the ASM Module to an HA pair of BIG-IP devices. The BIG-IP
Administrator has already installed a new Add-On License on both devices in the HA pair. What should the
BIG-IP Administrator do next to use the module?
A. Provision the new module on both BIG-IP device's
B. Synchronize both BIG-IP devices
C. Reboot both BIG-IP devices
D. Reactivate the Licenses on both BIG IP devices
Answer: A
Question #:67
During a maintenance window, an EUD test was executed and the output displayed on the screen. The BIG-IP
Administrator did NOT save the screen output. The BIG-IP device is currently handling business critical

traffic. The BIG-IP Administrator needs to minimize impact. What should the BIG-IP Administrator do to
provide the EUD results to F5 Support?
A. Boot the device into EUD then collect output from console
B. Execute EUD from tmsh and collect output from console
C. Collect file /var/log/messages
D. Collect file /shared/log/eud.log
Answer: D
Question #:68
Active connections to pool members are unevenly distributed. The load balancing method is Least
Connections (member) Priority Group Activation is disabled. What is a potential cause of the event
distribution?
A. Priority Group Activation is disabled
B. SSL Profile Server is applied
C. Persistence profile is applied
D. incorrect load balancing method
Answer: C
Question #:69
A BIG-IP Administrator configures remote authentication and needs to make sure that users can still
login even when the remote authentication server is unavailable.
Which action should the BIG-IP Administrators in the remote authentication configuration to meet this
requirement?
A. Set partition access to "All"
B. Enable the Fallback to Local option
C. Configure a remote role grove
D. Configure a second remote user directory
Answer: B

Question #:70
A BIG-IP Administrator has configured a BIG-IP cluster with remote user authentication against dcOl
f5trn.com. Only local users can successfully log into the system. Configsync is also failing.
Which two tools should the 8IG-IP Administrator use to further investigate these issues? (Choose two)
A. ntpq
B. pam_timestamp_check
C. passwd
D. pwck
E. dig
Answer: A C
Question #:71
A Virtual Server uses an iRule to send traffic to pool members depending on the URI. The BIG-IP
Administrator needs to modify the pool member in the iRule.
Which event declaration does the BIG-IP Administrator need to change to accomplish this?
A. CLIENT_ACCEPTED
B. HTTP_RESPONSE
C. HTTP_REQUEST
D. SERVER_CONNECTED
Answer: C
Explanation
According to the UR! distribution is the category of HTTP requests, need to trigger HTTP_REQUEST
event.
Question #:72

A connection is being established to IP 1.1.1.1 on port 8080.
Which virtual server will handle the connection?
A. fwd_8080_vs
B. host_vs
C. host_ 8080_VS
D. fwdvs
Answer: B
Question #:73
A BIG-IP Administrator needs to find which modules have been licensed for use on the BIG-IP system. In
which section of the Configuration Utility can the BIG-IP Administrator find this information?
A. System > Services
B. System > Resource Provisioning
C. System > Platform
D. System > Support
Answer: B
Question #:74

A BIG-IP Administrator creates a new Virtual Server. The end user is unable to access the page. During
troubleshooting, the administrator learns that the connection between the BIG-IP system and server is
NOT set up correctly.
What should the administrator do to solve this issue?
A. Disable Address Translation
B. Set Address Translation to Auto Map, configure a SNAT pool, and have pool members in the same
subnet of the servers
C. Set Address Translation to SNAT and configure a specific translation address
D. Set Address Translation to SNAT and have self-IP configured in the same subnet of servers
Answer: C
Explanation
The status of the pool can be seen that the members are all up, indicating that the network from F5 to the
server is no problem, so there is no need to configure selfip on the same subnet. The monitor is normal but the
access is not normal, you have to consider the problem of snat, you can configure automap or configure snat
and specify snat ip.

Question #:75
A BIG-IP Administrator notices that one of the servers that runs an application is NOT receiving any traffic.
The BIG-IP Administrator examines the configuration status of the application and observes the displayed
monitor configuration and affected Pool Member status. What is the possible cause of this issue?
A. The Node Health Monitor is NOT responding.
B. The application is NOT responding with the expected Receive String.
C. HTTP 1.1 is NOT appropriate for monitoring purposes.
D. The BIG-IP device is NOT able to reach the Pool.
Answer: A
Question #:76
In the BIG-IP Configuration Utility, a user requests a single screen view to determine the status of all Virtual
Servers and associated pool members, as well as any iRules in use. Where should the BIG-IP Administrator
instruct the user to find this view?
A. Local Traffic > Monitors
B. Local Traffic > Virtual Servers
C. Local Traffic > Network Map
D. Statistics
Answer: C
Explanation

Network Map can display vs and its associated pool, pool member, and irule, can be retrieved, and can be
quickly linked.
Question #:77
On the VCMP system, a BIG-IP host administrator imports a new ISO image into the host's /shared/images
folder. The new ISO images that reside on the vCMP host are available for installation on the guest. How
should the BIG-IP Administrator install one image from within the guest?
A. Install the new software on the host and wait for it to automatically be installed on all guests.
B. Run the following command on guest
tmsh install sys software block-device-image image_name volume < volume_name>
C. Run the following command on guest
tmsh install sys software image image_name volume < volume_name>
D. Run the following command on host
tmsh install sys software block-device-image image_name volume < volume_name>
Answer: D
Question #:78
Which two pool members are eligible to receive new connections? (Choose two)
A.

A. 10.21.0.102.80
B. 10.21.0.104.80
C. 10.21.0.105.80
D. 10.21.0.101.80
E. 10.21.0.103.80
Answer: B D
Question #:79
A BIG-IP Administrator uses a device group to share the workload and needs to perform service on a BIG-IP
device currently active for a traffic group. The administrator needs to enable the traffic group to run on another
BIG-IP device in the device group. What should the administrator do to meet the requirement?
A. Create a new Traffic Group and then fail to Standby Unit
B. Select Traffic Group and then select Failover
C. Select Traffic Group and then select Force to Standby
D. Select Traffic Group on Primary Unit and then select Demote
Answer: C
Question #:80

An LTM device has a virtual server mapped to www.f5.com. Users report that when they connect to
/resources/201.1.2h.l_l.com they are unable to receive content.
What is the likely cause of the issue?
A. The pool associated with the virtual server does not have priority group activation enabled.
B. The virtual address does not have ARP enabled.
C. The virtual address does not have route advertising enabled.
D. The pool associated with the virtual server is falling its health check.
Answer: B
Question #:81
Refer of the exhibit.

The 816-IP Administrator runs the command shown and observes a device trust issue between BIG-IP
devices in a device group. The issue prevents config sync on device bigip3.local.
What is preventing the config sync?
A. Next Active Load factor is 0 on bigip1.local
B. Both devices are standby
C. Next Active Load factor is 1 on bigip1.local
D. Time Delta to local system is 12
Answer: A
Explanation
Option A should be bioip3.local?. if choose bigip3.local, you should choose A.
Question #:82
DNS queries from two internal DNS servers are being load balanced to external DNS Servers via a Virtual

Server on a BIG-P device. The DNS queries originate from 192.168.101.100 and 192.168.101.200 and
target 192.168.21.50
All DNS queries destined for the external DNS Servers fail
Which property change should the BIG-IP Administrator make in the Virtual Server to resolve this issue?
A. Protocol Profile (Client) to DNS-OPTIMZED
B. Type to Performance (HTTP)
C. Protocol to UDP
D. Source Address to 192.168.101.0/24
Answer: C
Question #:83
The BIG-IP Administrator needs to perform a BIG-IP device upgrade to the latest version of TMOS. Where
can the administrator obtain F5 documentation on upgrade requirements?
A. iHealth
B. Network > Interfaces
C. Local Traffic > Pools
D. AsKFS
E. Local Traffic > Virtual Servers
Answer: C
Question #:84
The BIG-IP Administrator needs to ensure the correct health monitor is being used lor a new HTTP pool
named P_example.
Where should the BIG-IP Administrator validate these settings in the Configuration Utility?
A. Local Traffic > Nodes > Default Monitor
B. Local Traffic > Profiles > Services > HTTP > http
C. Local Traffic > Monitors > http

D. Local Traffic > Pools > P_ example
Answer: D
Question #:85
A BIG-IP Administrator is informed that traffic on Interface 1.1 is expected to increase over the maximum
bandwidth capacity on the link. There is a single VLAN on the Interface. What should the 8IG-IP
Administrator do to increase the total available bandwidth?
A. Assign two Interfaces to the VLAN
B. Set the media speed of Interface 1.1 manually
C. Create a trunk object with two Interfaces
D. Increase the MTU on the VLAN using Interface 1.1
Answer: C
Question #:86

A BIG-IP Administrator creates a new Virtual Server to load balance SSH traffic. Users are unable to log on to
the servers.
What should the BIG-IP Administrator do to resolve the issue?
A. Set Protocol to UDP
B. Set HTTP Profile to None
C. Set Source Address to 10.1.1.2
D. Set Destination Addresses/Mask to 0.0.0.0/0
Answer: B
Question #:87
A BIG-IP Administrator assigns the default http health monitor to a pool that has three members listening on
port 80 When the administrator connects to each pool member via the CURL utility, two of the members
respond with a status of 404 Not Found while the third responds with 200 OK. What will the pool show for
member availability?
A. All members offline.
B. Two members offline and one member online.
C. Two members online and one member offline.
D. All members online.
Answer: D
Question #:88
A BIG-IP Administrator needs to apply a license to the BIG-IP system to increase the user count from the
base license.
Which steps should the BIG-IP Administrator?
A.

A. System License > Re-activate> Add-On Registration> Edit
B. System > License > Re-activate > Base Registration> Edit
C. Device Management > Devices > Select BIG-IP System > Update
D. System > Configuration >Device > General
Answer: A
Question #:89
A BIG-IP Administrator needs to make sure that the automatic update check feature works properly.
What must the administrator configure on the BIG-IP system?
A. Update Check Schedule
B. NTP servers
C. DNS name servers
D. SMTP servers
Answer: A
Question #:90
Which file should the BIG-IP Administrator check to determine when a Virtual Server changed its status
A. /var/log/audit
B. /var/log/lastlog
C. /var/log/tm
D. /var/log/monitors
Answer: C
Question #:91

The BIG-IP Administrator is investigating disk utilization on the BIG-IP device.
What should the BIG-IP Administrator check next?
A. Large files on the / file system
B. Results from the EUD test
C. Results from the platform diagnostics test
D. Large files on /usr file system
Answer: A
Question #:92
A 8IG-IP Administrator is making adjustments to an iRule and needs to identify which of the 235 virtual
server configured on the BIG-IP device will be affected.
How should the administrator obtain this information in an effective way?
A. Local Traffic > Virtual Server
B. Local traffio Pools
C. LOCAL Traffic > Network Map
D. Local traffic > Rules

Answer: C
Question #:93
Some users who connect to a busy Virtual Server have connections reset by the BIG-IP system. Pool member
resources are NOT a factor in this behavior. What is a possible cause for this behavior?
A. The Connection Rate Limit is set too high
B. The server SSL Profile has NOT been reconfigured.
C. The Connection Limit is set too low.
D. The Rewrite Profile has NOT been configured.
Answer: C
Explanation
The topic explains that the connection reset behavior is caused by the vs configuration rather than the server
resource problem. The answers B C are all configuration at the service forwarding level. If there is a problem
with the configuration, it is all a problem rather than some users. Answer C's Connection Limit will cause a
reset behavior when the connection reaches the threshold.
Question #:94
A BIG-IP Administrator reviews the Plane CPU Usage performance chart and discovers a high percentage
of Control Plane utilization.
Which type of traffic does this indicate a higher usage of?
A. Administrative
B. Tunnel
C. Accelerated ,
D. Application
Answer: A
Question #:95
The interface 1.1 of the BIG-IP device has been connected to a link dedicated to traffic on VLAN 120. What
should the BIG-IP Administrator do to receive traffic from the VLAN?
A. Create a new VLAN object and set Customer Tag to 120

B. Create a new VLAN object and assign the interface 1.1 untagged
C. Create a new trunk object with interface 1.1 assigned
D. Create a new trunk object and assign it to the VLAN
Answer: B
Question #:96
A 8IG-IP Administrator configures a node with a standard icmp Health Monitor. The Node shows as DOWN
although the Backend Server is configured to answer ICMP requests. Which step should the administrator take
next to find the root cause of this issue?
A. Run a curl Run a qkview
B. Run a qkview
C. Runatcpdump
D. Runanssldump
Answer: C
Question #:97
A BIG-IP Administrator is checking the BIG-IP device for known vulnerabilities. What should the 8IG-IP
Administrator upload to BIG-IP iHealth for further analysis?
A. QKView
B. EUD
C. UCS
D. tcpdump
Answer: A
Question #:98

Why is the virtual server responsive to incoming connections?
A. The pool member is disabled
B. The pool member monitor failed
C. The node is disabled.
D. The node monitor failed
Answer: B
Question #:99
A BIG-IP Administrator is configuring a pool with members who have differing capabilities. Connections
to pool members must be load balanced appropriately.
Which load balancing method should the BIG-IP Administrator use?
A. Least Sessions
B. Least Connections (member)
C. Fastest (node)
D. Weighted Least Connections (member)
Answer: D
Question #:100
A BIG-IP Administrator needs to configure the BIG-IP system to perform load balancing for FTP servers
running passive mode FTP.
How should the administrator configure the Virtual Server to perform this load balancing?
A. A Standard Virtual Server + FTP profile

B. A Forwarding Virtual Server
C. A Performance Layer 4 Virtual Server + FTP profile
D. A Message Routing Virtual Server
Answer: A
Question #:101
The BIG-IP Administrator needs to perform a BIG-IP device upgrade to the latest version of TMOS. Where
can the administrator obtain F5 documentation on upgrade requirements?
A. AskF5
B. DevCentral
C. Bug Tracker
D. iHealth
Answer: A
Question #:102
How many nodes are represented on the network map shown?
A. Four
B. Three
C. One
D. Two
Answer: B

Question #:103
A BIG-IP Administrator makes a configuration change to a Virtual Server on the Standby device of an HA
pair. The HA pair is currently configured with Auto-Sync Enabled. What effect will the change have on the
HA pair configuration?
A. The change will be undone when Auto-Sync propagates the config to the HA pair.
B. The change will be propagated next time a configuration change is made on the Active device.
C. The change will be undone next time a configuration change is made on the Active device.
D. The change will take effect when Auto-Sync propagates the config to the HA pair.
Answer: D
Question #:104
How should a BIG-IP Administrator control the amount of traffic that a newly enabled pool member receives.
A. set the Slow Ramp Time
B. set a Connection Limit
C. set the Priority Group Activation
D. set a Health Monitor
Answer: A
Explanation
Slow Ramp Time
Specifies the duration during which the system sends less traffic to a newly-enabled pool member. The amount
of traffic is based on the ratio of how long the pool member has been available compared to the slow ramp
time, in seconds. Once the pool member has been online for a time greater than the slow ramp time, the pool
member receives a full proportion of the incoming traffic. Slow ramp time is particularly useful for the least
connections load balancing mode.
Setting this to a nonzero value can cause unexpected Priority Group behavior, such as load balancing to a
low-priority member even with enough high-priority servers.
Question #:105
A BIG-IP Administrator needs to install a HotFix on a standalone BIG-IP device, which has HD1.1 as the
Active Boot Location. The BIG-IP Administrator has already re-activated the license and created an UCS
archive of the configuration. In which sequence should the BIG-IP Administrator perform the remaining steps?

A. Install HotFix in HD 1.1, Reboot the BIG-IP device. Install UCS Archive
B. Install HotFix in HO 1.2, Install base Image in HD 1.2, Activate HD1.2
C. Install base Image in HD1.2, Install HotFix in HD1.2, Activate HD 1.2
D. Activate HD 1.2, Install base image in HD 1.2. Install HotFix in HD 1.2
Answer: C
Question #:106
A custom HTTP monitor is failing to a pool member 10.10.3.75:8080 that serves up www.example.com.
A ping works to the pool member address.
The SEND string that the monitor is using is: GET/HTTP/l.l/r/n/Host.www.example.com/r/n/Connection
Close/r/n/r/n
Which CLI tool syntax will show that the web server returns the correct HTTP response?
A. curlhttp://10.10.10.3.75:8080/www.example.com/index.html
B. curl-header 'Host:www.example.com'
http://10.10.3.75:8080/
C. tracepath 'http://www.example.com:80
D. tracepath 10.10.3.75:8080 GET /index
Answer: B
Question #:107
A BIG-IP Administrator remotely connects to the appliance via out-of-band management using
https://mybigip mycompany net. The management portal has been working all week. When the administrator
attempts to login today, the connection times out. Which two aspects should the administrator verify? (Choose
two)
A. DNS is property resolving the FQDN of the device.
B. The device is NOT redirecting them to http.
C. The administrator has the latest version of the web browser.
D. Packet Filters on the device are blocking port 80.

E. The administrator has TCP connectivity to the device.
Answer: A E
Question #:108
Users report that traffic is negatively affected every time a BIG-IP device fails over. The traffic becomes
stabilized after a few minutes.
What should the BIG-IP Administrator do to reduce the impact of future failovers?
A. Enable Failover Multicast Configuration
B. Set up Failover Method to HA Order
C. Configure MAC Masquerade
D. Configure a global SNAT Listener
Answer: C
Question #:109
A BIG-IP Administrator needs to view the CPU utilization of a particular Virtual Server. Which section of the
Configuration Utility should the administrator use for this purpose?
A. Statistics > Module Statistics > Local Traffic > Virtual Addresses
B. Statistics > Module Statistics > Traffic Summary
C. Statistics > Analytics > Process CPU Utilization
D. Statistics > Module Statistics > Local Traffic > Virtual Servers
Answer: D
Question #:110
A node is a member of various pools and hosts different web applications. If a web application is unavailable,
the BIG-IP appliance needs to mark the pool member down for that application pool. What should a BIG-IP
Administrator deploy at the pool level to accomplish this?
A. A UDP monitor with a custom interval/timeout
B. A combination of ICMP + TCP monitor

C. An HTTP monitor with custom send/receive strings
D. A TCP monitor with a custom interval/timeout
Answer: C
Explanation
Requiring all traffic to be HTTPS access requires HTTP requests to be redirected directly to HTTPS.
Question #:111
All pool members are online. All other virtual server settings are at default What might after the load
balancing behavior?
A. enabing SNAT automap
B. enabing a falback host in the http profile
C. adding a oneconnect profile
D. adding a persistence profile
Answer: D
Question #:112
A BIG-IP Administrator needs to restore a UCS file to an F5 device using the Configuration Utility. Which
section of the Configuration Utility should the BIG-IP Administrator access to perform this task?
A. Local Traffic > Virtual Servers
B. Local Traffic > Policies
C. System > Archives
D. System > Configuration
Answer: C
Question #:113
A Standard Virtual Server configured for an application reports poor network performance. This
application is accessed mainly from computers on the Internet.

What should the BIG-IP Administrator configure on the Virtual Server to achieve better network
performance?
A. Protocol Profile (Client) with f5-tcp-wan and Protocol Profile (Server) with f5-tcp-lan
B. Protocol Profile (Client) with f5-tcp-lan
C. Protocol Profile (Client) with fS-tcp-lan and Protocol Profile (Server) with f5-tcp-wan
D. Protocol Profile (Client) with f5-tcp-optimized
Answer: A
Question #:114
A BIG-IP Administrator needs to collect HTTP status code and HTTP method for traffic flowing through a
virtual server.
Which default profile provides this information?
A. HTTP
B. Analytics
C. Request Adapt
D. Statistics
Answer: A
Question #:115
A BIG-IP Administrator is performing maintenance on the active BIG-IP device of an HA pair. The BIG-IP
Administrator needs to minimize traffic disruptions.
What should the BIG-IP Administrator do to start the maintenance activity?
A. Reboot the BIG-IP device.
B. Move resources to a new Traffic Group.
C. Force the BIG-IP device to standby.
D. Disable switch ports of the BIG-IP device.

Answer: C
Question #:116
A BIG-IP Administrator is creating a new Trunk on the BIG-IP device. What objects should be added to the
new Trunk being created?
A. Interfaces
B. Network routes
C. VLANS
D. IP addresses
Answer: A
Explanation
trunk is a portchannel, you need to add a physical interface.
Question #:117
A BIG-IP Administrator must configure the BIG-IP device to send system log messages to a remote syslog
server In addition, the log messages need to be sent over TCP for guaranteed delivery. What should the
BIG-IP Administrator configure?
A. syslog-ng
B. Request Logging Profile
C. HSL Logging
D. Remote Logging
Answer: D
Question #:118
A BIG-IP Administrator makes a configuration change to the BIG-IP device. Which file logs the message
regarding the configuration change?
A. /var/log/messages
B. /var/log/audit
C. /var/log/user.log
D.

D. /var/log/secure
Answer: B
Explanation
About audit logging
Audit logging is an optional feature that togs messages whenever a BIG-IP® system object, such as a virtual
server or a load balancing pool, is confined (that is. created, modified, or deleted). The BiGIP system logs the
messages for these auditing events in the file /var/log'audit
There are three ways that objects can be configured
• By user action
• By system action
• By loading configuration data
Whenever an object is configured in one of these ways, the BIG-IP system logs a message to the audit log
Question #:119
Which type of Virtual Server requires the use of a FastL4 profile?
A. Performance (Layer 4)
B. Stateless
C. Performance (HTTP)
D. Standard
Answer: A
Question #:120

Which TMSH command generated this output?
A. tmsh list /cm sync-status
B. tmsh show /sys sync-status
C. tmsh list /sys sync-status
D. tmsh show /cm sync status
Answer: D
Question #:121
A user attempts to connect to 10.10.10.1.80 using FTP over SSL with an FTPS client. Which virtual server
will match and attempt to process the request?
A. vsjutps
B. vs_ftp
C. vs_http
D.

D. nvfs
Answer: B
Question #:122
During a planned upgrade lo a BIG-IP HA pair running Active/Standby, an outage to application traffic is
reported shortly after the Active unit is forced to Standby Reverting the flower resolves the outage. What
should the BIG-IP Administrator modify to avoid an outage during the next for over event?
A. The Tag voice on the Standby device
B. The interface on the Active device to 1.1
C. The Tag value on the Active device
D. The Interface on the Standby device to 1.1
Answer: A
Question #:123
A BIG-IP Administrator applied the latest hotfix to an inactive boot location by mistake, and needs to
downgrade back to the previous hotfix.

What should the BIG-IP Administrator do to change the boot location to the previous hotfix?
A. Uninstall the newest hotfix and reinstall the previous hotfix
B. Reinstall the base version and install the previous hotfix
C. Reinstall the previous hotfix and re-activate the license
D. Uninstall the base version and restore the UCS
Answer: B
Question #:124
Which method is recommended for creating a new user from the CLI?
A. Run f5adduser username' then 'f5passwd username' from bash or tmsh
B. Run tmsh create auth user username prompt for password' from bash
C. edit bigip.conf to add the new user and the user's clear-text password
D. Run useradd username' then 'passwd username' from bash tmsh
Answer: B
Question #:125
A 816-IP Administrator recently deployed an application Users are experiencing slow performance with
the application on some remote networks.
Which two modifications can the BIG-IP Administrator make to address this issue? (Choose two)
A. Apply dest addr profile to the Virtual Server
B. Apply f5-tcp-wan profile to the Virtual Server
C. Apply f5-tcp-lan profile to the Virtual Server
D. Apply source_addr profile to the Virtual Server
E. Apply fasti_4 profile to the Virtual Server
Answer: B C
Question #:126
A BIG-IP Administrator finds the following log entry:

tnm tmm[7141]: 011e0002:4: sweeperjjpdate: aggressive mode activated.
Which action should the BIG-IP Administrator to mitigate this memory issue?
A. Configure the redundant par to be active-active
B. Decrease the TCP profile ide Timeout value
C. increase the TCP profile ide Timeout value
D. Configure the serve to use Connection Mirroring
Answer: D
Question #:127
The BIG-IP Administrator disable all pool members in a pool Users are still able to reach the pool
members.
What is allowing users to continue to reach the disabled poo! members?
A. A slow to time on Pool
B. A persistence profile on the Virtual Server
C. A slow ramp time on virtual Server
D. A persistence profile on the Pool
Answer: B
Question #:128
Administrative user accounts have been defined on the remote LDAP server and are unable to log in to
the BIG-IP device.
Which log file should the BIG-IP Administrator check to find the related messages?
A. /var/log/secure
B. /var/log/messages
C. /Nar/log/ltm
D. /var/log/user.log
Answer: A

Question #:129
A user wants to use the iHealth Upgrade Advisor to determine any issues with upgrading TMOS from 13.0 to
13.1.
Where can the user generate the QKView to upload to iHealth?
A. System > Software Management
B. System > Archives
C. System > Configuration
D. System > Support
Answer: D
Question #:130

An organization is reporting slow performance accessing their Intranet website, hosted in a public cloud. All
employees use a single Proxy Server with the public IP of 104.219.110.168 to connect to the Internet. What
should the BIG-IP Administrator of the Intranet website do to fix this issue?
A. Change Source Address to 104.219.110.168/32
B. Change Load Balancing Method to Least Connection
C. Change Fallback Persistence Profile to source_addr
D. Change Default Persistence Profile to cookie
Answer: D
Question #:131

A BIG-IP Administrator defines a device Self IP . The Self IP is NOT reachable from the network. What
should the BIG-IP Administrator verify first?
A. The correct interface has been selected.
B. The correct VLAN has been selected.
C. Verify if auto last hop is disabled.
D. The correct Trunk has been selected.
Answer: B
Question #:132
A BIG-IP Administrator needs to configure health monitors for a newly configured server pool named
Pool_B.
Which health monitor settings will ensure that all pool members will be accurately marked as available
or unavailable?
A. HTTPS, HTTP, FTP, and ICMP, with the Availability Requirement of all health monitors
B. HTTPS, HTTP, FTP, and SSH, with the Availability Requirement of at least one monitor
C. HTTPS and HTTP with the Availability Requirement of at least one health monitor
D. HTTPS, HTTP, FTP, and SSH with the Availability Requirement of all health monitors
Answer: B

Explanation
From the port, the four members are HTTP, FTP, HTTPS, and SSH applications. If you want to monitor at the
same time, you must configure at least one.
Question #:133
An LTM device has a virtual server mapped to www.f5.com with a pool assigned. Users report that when
browsing, they are periodically required to re-login to /resources/201.1.7.b.2_l.com. The objects are defined as
follows:
Virtual server. Destination 192.168.245.100:443 netmask 255.255.255.0
Persistence: SSL session persistence
Profiles: HTTP/TCP
Which persistence method should the BIG-IP Administrator apply to resolve this issue?
A. Source address affinity
B. hexadecimal
C. SIP
D. Destination address affinity
Answer: A
Question #:134
For a given Virtual Server, the BIG-IP must perform SSL Offload and negotiate secure communication
overTLSvl.2only.
What should the BIG-IP Administrator do to meet this requirement?
A. Configure a custom SSL Profile (Client) and select no TLSvl in the options list
B. Configure a custom SSL Profile (Client) with a custom TLSV1.2 cipher string
C. Configure a custom SSL Profile (Server) and select no TLSvl in the options list
D. Configure a custom SSL Profile (Server) with a custom TLSV1.2 cipher string
Answer: B
Explanation

no TLSvl only disables TLS1.0, TLS1.1 is still used and does not meet the requirements.
Question #:135
The network team creates a new VLAN on the switches. The BIG-IP Administrator needs to create a
configuration on the BIG-IP device. The BIG-IP Administrator creates a new VLAN and Self IP, but the
servers on the new VLAN are NOT reachable from the BIG-IP device.
Which action should the BIG-IP Administrators to resolve this issue?
A. Set Port Lockdown of Set IP to Allow All
B. Change Auto Last Hop to enabled
C. Assign a physical interface to the new VLAN
D. Create a Floating Set IP Address
Answer: C
Question #:136
A BIG-IP Administrator discovers malicious brute-force attempts to access the BIG-IP device on the
management interface via SSH. The BIG-IP Administrator needs to restrict SSH access to the
management interface.
Where should this be accomplished?
A. System > Configuration
B. Network > Interfaces
C. Network > Self IPs
D. System > Platform
Answer: D
Question #:137

During maintenance, the BIG-IP Administrator manually disables a pool member as shown.
What is the result?
A. All pool members continue to process persistent connections
B. All pool members stop accepting new connections.
C. The disabled pool member stops processing persistent connections.
D. The disabled pool member stops processing existing connections
Answer: A

Question #:138
A BIG-IP Administrator is setting up a new BIG-IP device. The network administrator reports that the
interface has an incompatible media speed. The BIG-IP Administrator needs to change this setting
manually.
From which location should the BIG-IP Administrator perform this task?
A. On the Front Console
B. In the TMOS Shell Command line
C. In the Configuration Utility, Network > Interface
D. In the Configuration Utility, System > Configuration
Answer: C
Question #:139
A BIG-IP Administrator finds the following log entry after a report of user issues connecting to a virtual
server:
01010201: 2: Inet port exhaustion on 10.70.110.112 to 192.28.123.250:80 (proto 6)
How should the BIG-IP Administrator modify the SNAT pool that is associated with the virtual server?
A. Remove the SNAT pool and apply SNAT Automap.
B. Remove an IP address from the SNAT pool.
C. Add an address to the SNAT pool.
D. Increase the timeout of the SNAT addresses.
Answer: C
Question #:140
An ecommerce company is experiencing latency issues with online shops during Black Friday's peak season.
The BIG-IP Administrator detects an overall high CPU load on the BIG-IP device and wants to move the
top utilized Virtual Servers to a dedicated BIG-IP device.

Where should the BIG-IP Administrator determine the problematic Virtual Servers?
A. System > Plattform
B. Local Traffic > Virtual Servers > Virtual Server List
C. Local Traffic > Network Map
D. Statistics > Module Statistics > Local Traffic > Virtual Servers
Answer: D
Question #:141
A BIG-IP device sends out the following SNMP trap:
big-ipo.f5.com - bigipExternalLinkChange Link: 1.0 is DOWN
Where in the BIG-IP Configuration utility should the BIG-IP Administrator verify the current status of Link
1.0?
A. System > Platform
B. Network > Trunks > Trunk List
C. Statistics > Performance > System
D. Network > Interfaces > Interface List
Answer: D
Explanation
1.0 is a physical interface, you can see the interface status from the physical interface in the network.
Question #:142
What is the status of a pool member when manual resume is enabled and a health check first fails and then
passes?
A. Offline (Disabled)
B. Offline (Enabled)
C. Available (Disabled)
D. Available (Enabled)

Answer: A
Question #:143
A VLAN has the following objects configured:
Self-IP 10.10.10.100 with port lockdown set to Allow default
Virtual server 10.10.10.100:443 with UDP profile enabled
Virtual server 10.10.10.0/24 port forwarding virtual server
Global destination NAT forwarding 10.10.10.100 to internal server 172.168.10.100
Which object will process this request when https://10.10.10.100 is entered into a browser?
A. self-IP 10.10.10.100 with port lockdown set to Allow default
B. virtual server 10.10.100/24 port o forwarding virtual server
C. global destination NAT forwarding 10.10.10.100 to internal server 172.168.10.100
D. virtual server 10.10.10.100.443 with UDP profile enabled
Answer: A
Question #:144
A BIG-IP Administrator needs to check the memory utilization on a BIG-IP system. Which two methods can
the UIG IP Administrator use? (Choose two.)
A. Run the tmsh show/sys memory command
B. Run the tmsh show/sys traffic command
C. Go to Statistics > Module Statistics > Traffic Summary in the configuration utility
D. Go to Statistics > Module Statistics > Memory in the configuration utility
E. Go to System > Disk Management in the configuration utility
Answer: A D
Question #:145
A BIG-IP Administrator uses backend servers to host multiple services per server. There are multiple virtual
servers and pools defined, referencing the same backend servers.

Which load balancing algorithm is most appropriate to have an equal number of connections on each backend
server?
A. Least Connections (member)
B. Least Connections (node)
C. Predictive (member)
D. Predictive (node)
Answer: B
Explanation
The same set of servers provides multiple services, that is, using different ports to provide different services at
the same time. The stem requirement is based on server connection balancing, not server + port, so it is node.
Question #:146
Refer to the exhibit. The BIG-IP Administrator needs to avoid overloading any of the Pool Members with
connections, when they become active.
What should the BIG-IP Administrator configure to meet this requirement?
A. Different Ratio for each member
B. Same Priority Group to each member
C. Action On Service Down to Reselect
D. Slow Ramp Time to the Pool
Answer: D
Question #:147
What should the BIG-IP Administrator do to apply and activate a hotfix to a BIG-IP device that is currently
running version 11.0.0 on active partition HD1.1?
A. 1. confirm that 11.0.0 is installed on inactive partition HD1.2
2. apply a hotfix to partition HD 1.2
3. activate partition HD1.2
B.
B. 1. reactivate the license on partition HD1.1
2. apply a hotfix to partition HD1.1
C. 1. activate partition HD1.2
2 confirm version 11.0.0 on partition HD1.2
3. install a hotfix on partition HD1.2
D. 1. set partition HD1.2 active
2. apply a hotfix to partition HD1.2
Answer: A
Question #:148
A BIG-IP Administrator upgrades the BIG-IP LTM to a newer software version. After the administrator
reboots into the new volume, the Configuration fails to load. Why is the Configuration failing to load?
A. The license needs to be reactivated before the upgrade.
B. The upgrade was performed on the standby unit.
C. A minimum of at least two reboots is required.
D. Connectivity to the DNS server failed to be established.
Answer: A
Question #:149
A 8IG-IP Administrator configures a Virtual Server to load balance traffic between 50 webservers for an
ecommerce website Traffic is being load balanced using the Least Connections (node) method.
The webserver administrators report that customers are losing the contents from their shopping carts
and are unable to complete their orders.
What should the BIG-IP Administrator do to resolve the issue?
A. Change Default Persistence Profile setting to cookie
B. Change Load Balancing method to Ratio (member)
C.

C. Change Default Persistence Profile setting to sipjnfo
D. Change Load Balancing method to Ratio (node)
Answer: A
Question #:150
The 8IG-IP Administrator generates a qkview using "qkview -SO" and needs to transfer the output file via
SCP.
Which directory contains the output file?
A. /var/log
B. /var/tmp
C. /var/local
D. /var/config
Answer: B
Question #:151

A BIG-IP Administrator needs to deploy an application on the BIG-IP system to perform SSL offload and
re-encrypt the traffic to pool members.
During testing, users are unable to connect to the application.
What must the BIG-IP Administrator do to resolve the issue?
A. Remove the configured SSL Profile (Client)
B. Configure Protocol Profile (Server) as splitsession-default-tcp
C. Enable Forward Proxy in the SSL Profile (Client)
D. Configure an SSL Profile (Server)
Answer: D
Explanation

According to the requirements of the subject, the client and server must be configured with ssl profile.
Question #:152
A BIG-IP Administrator needs to fall over the active device. The administrator logs into the Configuration
Unity and navigates to Device Management > Traffic Group. However, Force to Standby is greyed out
What is causing this issue?
A. The BIG-IP Administrator is NOT logged into command line to tail over
B. The BIG-IP Administrator is on the Standby Device
C. The BIG-IP Administrator is logged in as root
D. The BIG-IP Administrator is logged in as administrator
Answer: B
Question #:153
An application is configured so that the same pool member must be used for an entire session, as well as for
HTTP and FTP traffic.
A user reports that a session has terminated, and the user must restart the session. The BIG-IP Administrator

determines that the active BIG-IP device failed over to the standby BIG-IP device. Which configuration
settings should the BIG-IP Administrator verify to ensure proper behaviour when BIG-IP failover occurs?
A. cookie persistence and session timeout
B. Stateful failover and Network Failover detection
C. Persistence mirroring and Match Across Services
D. syn-cookie insertion threshold and connection low-water mark
Answer: C
Question #:154
A BIG-IP Administrator configures a now VLAN on an HA pair of devices that does NOT yet have any

traffic. This action causes the assigned traffic group to fail over to the standby device.
Which VLAN setting should be changed to prevent this issue?
A. Auto Last Hop
B. Fail-safe
C. Customer Tag
D. Source Check
Answer: B
Question #:155
During a high-demand traffic event, the BIG-IP Administrator needs to limit the number of new
connections per second allowed to a Virtual Server.
What should the administrator apply to accomplish this task?
A. An HTTP Compression profile to the Virtual Server
B. A connection rate limit to the Virtual Server
C. A connection limit to the Virtual Server
D. A OneConnect profile to the Virtual Server
Answer: B
Question #:156
The owner of a web application asks the 8IG-IP Administrator to change the port that the BIG-IP device sends
traffic to. This change must be made for each member in the server pool named app_pool for their Virtual
Server named app_vs. In which area of the BIG-IP Configuration Utility should the BIG-P Administrator
make this change?
A. Local Traffic > Pools
B. Local Traffic > Nodes
C. Network > Interfaces
D. Local Traffic > Virtual Servers
Answer: A

Question #:157
user notifies the BIG-IP Administrator that http://remote company.com is NOT accessible. Remote
access to company resources must be encrypted.
What should the BIG-IP Administrator do to fix the issue?
A. Change the Listening Port on remote.company.com_vs to Port 80
B. Add a Pool to the Virtual Server remote.company.com_VS
C. Add an iRule to remote.company.com_vs to redirect Traffic to HTTPS
D. Change the Type of the Virtual Server remote.company.com_vs to Forwarding
Answer: C
Explanation

Requiring all traffic to be HTTPS access requires HTTP requests to be redirected directly to HTTPS.
Question #:158
Which two pool members should be chosen for a new connection? (Choose two.)
A. 172.16.15.9.80
B. 172.16.15.4.80
C. 172.10.15.2.80
D. 172.16.15.1.80
E. 172.16.15.7.80
Answer: B E
Question #:159

A pool member fails the monitor checks for about 30 minutes and then starts passing the monitor
checks. New traffic is Not being sent to the pool member.
What is the likely reason for this problem?
A. The pool member is disabled
B. Monitor Type is TCP Half Open
C. Manual resume is enabled
D. Time Until Up is zero
Answer: C
Question #:160
Users are unable to reach an application. The BIG-IP Administrator checks the Configuration Utility and

observes that the Virtual Server has a red diamond in front of the status. What is causing this issue?
A. All pool members are down.
B. The Virtual Server is receiving HTTPS traffic over HTTP virtual.
C. The Virtual Server is disabled.
D. All pool members have been disabled.
Answer: A
Question #:161
A BIG-IP Administrator needs to apply a health monitor for a pool of database servers named DB_Pool
that uses TCP port 1521.
Where should the BIG-IP Administrator apply this monitor?
A. Local Traffic > Profiles » Protocol > TCP
B. Local Traffic > Nodes > Default Monitor
C. Local Traffic > Pools > De Pool > Members
D. Local Traffic > Pools > DB Pool > Properties
Answer: D
Question #:162
A BIG-IP Administrator suspects that one of the BIG-IP device power supplies is experiencing power
outages.
Which log file should the BIG-IP Administrator check to verify the suspicion?
A. /war /log/daemon.log
B. /var/log/kern.log
C. /var/log/ltm
D. /var/log/audit
Answer: C

Question #:163
The BIG-IP Administrator configures an HTTP monitor with a specific receive string. The status is marked
'down'.
Which tool should the administrator use to identify the problem?
A. Ping
B. Health
C. tcpdump
D. ifconfig
Answer: C
Question #:164
A BIG-IP Administrator configures the Virtual Server to pass HTTP traffic. Users report that they are
unable to access the application
What should the administrator do to resolve this issue?
A. Change the Virtual Server name
B. Disable .he State
C. Reconfigure the Source Address

D. Reconfigure the Pool Members
Answer: D
Question #:165
A BIG-IP Administrator is conducting maintenance on one BIG-IP appliance in an HA Pair. Why should the
BIG-IP Administrator put the appliance into FORCED_OFFLINE state?
A. To preserve existing connections to Virtual Servers and reduce the CPU load
B. To allow new connections to Virtual Servers and ensure the appliance becomes active
C. To terminate connections to the management IP and decrease persistent connections
D. To terminate existing connections to Virtual Servers and prevent the appliance from becoming active
Answer: D
Question #:166
A BIG-IP Administrator creates an HTTP Virtual Server using an iApp template. After the Virtual Server is
created, the user requests to change the destination IP addresses. The BIG-IP Administrator tries to
change the destination IP address from 10.1.1.1 to 10.2.1.1 in Virtual Server settings, but receives the
following error:
The application service must be updated using an application management interface
What is causing this error?
A. The Application Service was NOT deleted before making the IP address change.
B. The IP addresses are already in use.
C. The Application Services have Strict Updates enabled.
D. The IP addresses used are NOT from the same subnet as the Self IP.
Answer: C
Explanation
Strict Updates : Indicates whether the application service is tied to the template, so when the template
is updated, the application service changes to reflect the updates.


About Marks4sure.com
marks4sure.com was founded in 2007. We provide latest & high quality IT / Business Certification Training Exam
Questions, Study Guides, Practice Tests.
We help you pass any IT / Business Certification Exams with 100% Pass Guaranteed or Full Refund. Especially
Cisco, CompTIA, Citrix, EMC, HP, Oracle, VMware, Juniper, Check Point, LPI, Nortel, EXIN and so on.
View list of all certification exams: All vendors
We prepare state-of-the art practice tests for certification exams. You can reach us at any of the email addresses listed
below.
Sales: [email protected]
Feedback: [email protected]
Support: [email protected]
Any problems about IT certification or our products, You can write us back and we will get back to you within 24
hours.

F5-201

Uploaded by

Copyright:

Available Formats

F5-201

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

F5-201

Uploaded by

Copyright:

Available Formats

F5

[ Total Questions: 166]

A configuration change is made on the standby member of a device group.

What is displayed as "Recommended Action" on the Device Management Overview screen?

A. Force active member of device group to standby

B. Activate device with the most recent configuration

C. Synchronize the active member configuration to the group.

D. Synchronize the standby member configuration to the group

Refer to the exhibit.

How are new connections load balanced?

B. To the pool member with the least number of connections

C. To the pool member with a high priority group value defined

D. To the pool member with a low priority group value defined

Pass Your Certification With Marks4sure Guarantee 1 of 81

Virtual server. Destination 192.168.245.100.443 netmask 255.255.255.0

Persistence: Source address persistence netmask 255.0.0.0

creates a persistence record?

Refer to the exhibit

Pass Your Certification With Marks4sure Guarantee 2 of 81

Which action should the BIG-IP Administrators to resolve this issue?

Pass Your Certification With Marks4sure Guarantee 3 of 81

A. Set Port Lockdown of Set IP to Allow All

B. Change Auto Last Hop to enabled

C. Assign a physical interface to the new VLAN

D. Create a Floating Set IP Address

A. load/sys ucs <filepath> passphrase <password>

B. load/sys config file <filepath> passphrase <password>

C. load/sys config file <filepath>

D. load/sys ucs <filepath> no-license

C. Device root password

D. SSL private keys

Pass Your Certification With Marks4sure Guarantee 4 of 81

A. The Device Group is NOT configured for Full Sync.

B. The US does NOT contain the full config

C. The clock is NOT set correctly

D. The Master Key is NOT restored

Refer to the exhibit.

host, and then pull the configuration to the host.

Pass Your Certification With Marks4sure Guarantee 5 of 81

B. Nodes > Node List> Best _pool_memberl > Heath Monitors

C. Monitors > Monitor Name> Instances

D. Pool > Pool List> Best Pool > Health Monitors

C. F5 End User Diagnostics (EUD)

Pass Your Certification With Marks4sure Guarantee 6 of 81

F5 Downloads - iso download page

F5 End User Diagnostics (EUD) -- Hardware detection

What should the BIG-IP Administrator do to avoid this error?

A. Use the appropriate tmsh command with the no-license option

B. Revoke the license prior to restoring

D. Remove the license information from the UCS archive

A. tmsh create /net trunk trunk_A interfaces add {1.3.1.4}

B. tmsh create/sys trunk trunk_A interfaces add {1.3.1.4}

C. tmsh modify/sys trunk trunk^A interfaces add {1.3.1.4}

D. tmsh modify /net trunk trunk_A interfaces add {1.3.1.4}

Pass Your Certification With Marks4sure Guarantee 7 of 81

appliance chassis serial number.

Which TMSH command will provide this information?

A. . list /sys software

B. show /sys version

D. show /sys hardware