F5 101 Practice Test – Cyber Security, Networking, Technology Courses and Blog

Certification Provider: F5

Exam: F5 101

Exam Code: F5 101

Total Question:

Question per Quiz: 80

Updated On: 15 May 2022

Tightening is a feature of which type of entity?

Explicit URLs

Wildcard parameters

Flow login URLs

Attack signatures

Although APM can interoperate with LTM, it is unable to use iRules for advanced processing.

False

True

The SNMP monitor can collect data based on which three metrics? (Choose three.)

memory utilization

content verification

current connections

hops along the network path

packet rate

To make complex access policies easier to manage, an administrator can create a policy containing several policy actions, and then add instances of it within the policy using the ________.

Setup Wizard

Deployment Wizard

Policy Wizard

Visual Wizard

A site needs to terminate client HTTPS traffic at the BIG-IP and forward that traffic unencrypted. Which two are profile types that must be associated with such a virtual server? (Choose two.)

TCP

ServerSSL

HTTP

HTTPS

ClientSSL

What are the two most common methods of placing a BIG-IP device into a network environment?

SNAT configuration

Channeled configuration

VLAN configuration

Asymmetric configuration

NAT configuration

Routed configuration

What percentage of storage in a typical environment is actively used and modified?

10%

90%

50%

25%

A site wishes to perform source address translation on packets from some clients but not others. The determination is not based on the client's IP address, but on the virtual servers their packets arrive on. What could best accomplish this goal?

The decision to perform source address translation is always based on VLAN. Thus, the goal cannot be achieved.

Some virtual servers could be associated with SNAT pools and others not associated with SNAT pools.

The decision to perform source address translation is always based on a client's address (or network). Thus, this goal cannot be achieved.

A SNAT for all addresses could be defined, and then disable the SNAT processing for select VLANs.

When is a Virtual Server hosted by an LTM System defined with two IP addresses?

Two addresses are used to define some Virtual Servers so that the GTM System can choose the better address when resolving the name.

Two addresses are used to define Virtual Servers when the LTM System hosting it is behind a firewall that is translating the Virtual Server address.

Two addresses are used to define a Virtual Server when the Wide-IP should resolve to a different address depending on which LTM System is active.

Two addresses are used to define the Virtual Server when it is managed by redundant LTM Systems.

10.

To make complex access policies easier to manage, an administrator can create a _______ containing several policy actions, and then add instances of it within the policy?

Visual Policy Editor

Policy creator

Visual Editor

Policy Editor

11.

An age-based policy is set up on the ARX that retains only data modified in the last 3 months on tier 1 storage and moves the rest of the data to secondary storage. What happens when the end user tries to access data that has not been touched in 6 months?

A message appears explaining that the file has been archived, and a link to the new secondary storage tier location is provided.

An error message appears saying "File is no longer unavailable."

The networking mapping window appears, allowing the end user to re-establish direct access to the data even though it has been moved to secondary storage.

The end user is unaware that the data has been moved to secondary tier storage and is able to access the data without difficulty.

12.

Why is BIG-IP ASM ideally suited to protect against layer 7 attacks, including HTTP and HTTPS/SSL traffic, when compared to an intrusion prevention system (IPS)?

An IPS can only look at overall traffic patterns; it doesn't understand what applications are in the network.

An IPS only focus on operating system attacks; it doesn't understand what application are in the network.

An intrusion prevention system (IPS) is based on Packet Filtering.

An IPS doesn't have the visibility into HTTPS traffic. it doesn't understand what applications are in the network.

13.

A BIG-IP Administrator needs to create a route to send traffic destined to 10.1.1 1 to another router with an address of 192.168.1.1 Which TMSH command should the administrator use?

create/net route 10. 11. 1/32 gw 192 168. 1. 1

create met route 192 168. 1. 1/32 gw 10. 11. 1

add inet route 10.11.1/32 gw 192. 168.1.1

add met route 192. 168. 1. 1/32 gw 10. 1. 1. 1

14.

An administrator needs to load balance connections to the application server with the lowest number of Which load balancing method meets these requirements?

Least Connections (node)

Least Sessions

Ratio Least Connections (member)

Least Connections (member)

15.

The Policy Builder benefits include:

Only requires limited ASM knowledge

All of the above

Very low administrative impact

Doesn't require in depth web application knowledge