[Nov 19, 2021] New Updated 101 Exam Questions 2021
Updated Free F5 101 Test Engine Questions with 240 Q&As
NEW QUESTION 55
Which of these statements about a stream profile is false?
- A. It applies to both inbound and outbound traffic
- B. It can replace one data string for another for all traffic going through a virtual server
- C. It is applied to an HTTP class profile
- D. It is not recommended for telnet traffic
- E. It will not inspect HTTP headers when an HTTP profile is present
Answer: C
Explanation:
Explanation/Reference:
Explanation:
NEW QUESTION 56
BIG-IP Administrator runs the command ITconfig from the BIG-IP command the line end sees a high number of collisions. What is the likely cause?
- A. Spanning Tree Protocols biochang the con
- B. A crossover cable has been used
- C. There is a duplicate IP address on the network
- D. The interface is set to hall duplex
Answer: A
NEW QUESTION 57
A BIG-IP has the following objects configured: A SNAT pool with 2 members:
A virtual server at 150.10.30.30:80 that is associated with both the SNAT pool and the load balancing pool. If a client at IP address 200.10.10.10 initiates a connection to the virtual server, what will the source IP address be in the packets sent to the chosen pool member?
- A. 10.10.1.10
- B. 10.10.1.33
- C. 200.10.10.10
- D. 150.10.30.30
- E. 150.10.33.33
- F. It could be any of the addresses of the members of the load balancing pool.
Answer: B
NEW QUESTION 58
An LTM has the 3 virtual servers, 2 SNATs, four self IP addresses defined and the networks shown in the graphic below. Selected options for each object are shown below. Settings not shown are at their defaults. Assume port exhaustion has not been reached. VirtualServerl Destination: 10.10.2.102:80 netmask 255.255.255.255 Pool: Pool with 3 members in the 172.16/16 network SNAT Automap configured VirtualServer2 Destination: 10.10.2.102:* netmask 255.255.255.255 Pool: Pool with 3 members in the 192.168/16 network VirtualServer3 Destination: 10.10.2.0:80 netmask 255.255.255.0 Type: IP Forwarding SNATI Source IP: 10.10.0.0 netmask 255.255.0.0 SNATAddress: SNAT Pool with 2 members-172.16.20.50 and 192.168.10.50 SNAT2 Source IP: All Addresses SNAT Address:
10.10.2.102 Floating Self IPs 192.168.1.1; 172.16.1.1; 10.10.2.1; 10.10.1.1
A connection attempt is made with a source IP and port of 10.20.10.50:2222 and a destination IP and port of 10.10.2.102:80.
When the request is processed, what will be the source and destination IP addresses?
- A. Source IP: 10.20.10.50; Destination IP: pool member in the 192.168/16 network
- B. Source IP: 172316.20.50; Destination IP: pool member in the 182.16/16 network
- C. Source IP: 192.168.10.50; Destination IP: pool member in the 192.168/16 network
- D. Source IP: 182.16.1.1; Destination IP: pool member in the 172316/16 network
- E. Source IP: 192.168.1.1; Destination IP: pool member in the 192.168/16 network
- F. The request will be dropped.
- G. Source IP: 10.20.10.50; Destination IP: pool member in the 172.16/16 network
- H. Source IP: 192.168.10.50; Destination IP: pool member in the 192.168./16 network
Answer: D
NEW QUESTION 59
Since F5 built GTM on the TMOS platform it can exist on the same BIGIP device as LTM:
- A. True
- B. False
Answer: A
Explanation:
Explanation/Reference:
Explanation:
NEW QUESTION 60
For an IP of 192 168 10.10 with a subnet mask of 255 255.240 0 an administrator is asked to provide
* The first network address
* The broadcast address, and
* The number of hosts available per subnet host
What should be the administrator's response'?
- A. 192. 168. 0. 1 is the network address. 192.168.10 255 is the broadcast address. There are 16382 addressable hosts
- B. 192. 168.16. 0 is the network address, 192 168 31 255 is the broadcast address. There are 409J addressable hosts
- C. 192. 168. 0. 0 is the network address 192 168 15 255 is the broadcast address. There are 4094 addressable hosts
- D. 192.168. 0.0 is the network address. 192 168 16 255 is the broadcast address. There are 1022 addressable hosts
Answer: C
NEW QUESTION 61
Which HTTP response code indicates an OK status?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: C
NEW QUESTION 62
Information leakage is a major obstacle to achieving PCI DSS compliance.
- A. True
- B. False
Answer: A
Explanation:
Explanation/Reference:
Explanation:
NEW QUESTION 63
Which statement is true concerning iRule events.
- A. All iRule events are appropriate at any point in the client-server communication.
- B. If an iRule references an event that doesn't occur during the client's communication, the client's connection will be terminated prematurely.
- C. All iRule events relate to HTTP processes.
- D. All client traffic has data that could be used to trigger iRule events.
Answer: D
NEW QUESTION 64
Administrators can configure which three of the following load balancing options in GTM?
- A. Preferred
- B. Required
- C. Alternate
- D. Optional
- E. Fallback
- F. Backup
Answer: A,C,E
NEW QUESTION 65
Which statement about Generic Host Servers is true?
- A. GTM Systems can monitor a Generic Host Server but cannot cause a Generic Host Server to act as a Statistics Collection Server.
- B. GTM Systems can monitor a Generic Host Server and can cause a Generic Host Server to act as a Statistics Collection Server.
- C. GTM Systems cannot provide path metrics for Virtual Servers managed by a Generic Host Server.
- D. GTM Systems can initiate a big3d agent on Generic Host Servers.
Answer: A
NEW QUESTION 66
In a routed configuration, what does LTM do with the packet before sending it to the pool member?
- A. Leave it unchanged and forward it
- B. Change the source IP and the destination IP address
- C. Change the destination IP address
- D. Change the source IP address
Answer: C
Explanation:
Explanation/Reference:
NEW QUESTION 67
Although not all modules run on all platforms, each F5 hardware platform can run LTM plus at least one additional software module.
- A. True
- B. False
Answer: A
Explanation:
Explanation/Reference:
Explanation:
NEW QUESTION 68
Which two F5 platforms include specialized compression hardware? (Choose two.)
- A. 0
- B. 1
- C. 2
- D. 3
- E. 4
- F. 5
Answer: C,D
Explanation:
Explanation/Reference:
NEW QUESTION 69
CSRF is difficult to detect because:
- A. The attacks are requests a user should be allowed to make
- B. The attacks always utilize obfuscation
- C. All of the above
- D. The attacks are always encrypted
Answer: A
NEW QUESTION 70
Assume a virtual server has a ServerSSL profile. What SSL certificates are required on the pool members.
- A. The pool members.SSL certificates must only exist.
- B. No SSL certificates are required on the pool members.
- C. The pool members.SSL certificates must be created within the company hosting the BIG-IPs.
- D. The pool members.SSL certificates must be issued from a certificate authority.
Answer: A
NEW QUESTION 71
GTM solves which three of these standard DNS limitations?
- A. It can ensure that clients remain at the same data center for stateful applications
- B. It can verify that a host is available before resolving a host name for a client
- C. It can use HTTPS for the connection between itself and the client
- D. It can verify that a client does not have any viruses before sending the IP address
- E. It has more complex load balancing methods
Answer: A,B,E
Explanation:
Explanation/Reference: GTM solves three of these standard DNS limitations It can verify that a host is available before resolving a host name for a client It can ensure that clients remain at the same data center for stateful applications It has more complex load balancing methods
NEW QUESTION 72
Which of the following methods of protection operates on server responses?
- A. Dynamic parameter protection
- B. HTTP RFC compliancy check and meta-character enforcement
- C. Response code validation and HTTP method validation
- D. Response code validation and response scrubbing
Answer: D
NEW QUESTION 73
Given that VLAN failsafe is enabled on the external VLAN and the network that the active BIG- IP's external VLAN is connected to has failed, which statement is always true about the results.
- A. The active system will restart the traffic management module to eliminate the possibility that BIG- IP is the cause for the network failure.
- B. The active system will failover and the standby system will go into active mode.
- C. The active system will note the failure in the HA table.
- D. The active system will reboot and the standby system will go into active mode.
Answer: C
NEW QUESTION 74
What will likely happen if you were to define a LTM System in the wrong Data Center?
- A. The GTM System would not be able to resolve Wide-IPs to the addresses associated with that LTM System's Virtual Servers.
- B. There would be no effect if the LTM System is defined in the wrong Data Center.
- C. The GTM System would not be able to communicate with that LTM System.
- D. Data from probes from that LTM System might result in inaccurate path metrics and load balancing decisions.
Answer: D
NEW QUESTION 75
What should a BIGIP Administrator configure to provide remote access and ensure data privacy?
- A. VPN
- B. Packet filter
- C. Security policy
- D. GRE
Answer: A
NEW QUESTION 76
Which four F5 products are on the TMOS platform? (Choose four.)
- A. ARX
- B. GTM
- C. Firepass
- D. APM
- E. WOM
- F. ASM
Answer: B,D,E,F
Explanation:
Explanation
Explanation/Reference:
NEW QUESTION 77
If LTM uses the least connections load balancing method, which pool member in the following diagramreceives the next request?
- A. D
- B. A
- C. C
- D. B
Answer: D
NEW QUESTION 78
Which of the following statements are correct regarding positive and negative security models? (Choose 2)
- A. Negative security model denies all transactions by default.
- B. Positive security model allows all transactions by default.
- C. Positive security model denies all transactions by default and uses rules that allow only those transactions that are considered safe and valid.
- D. Negative security model allows all transactions by default and rejects only transactions that contain attacks.
Answer: C,D
NEW QUESTION 79
......
Difficulty in writing F5 101 Exam
All Candidates wants to get success in the F5 101 exam in the just first attempt but mostly not been able to get success in it due to poor selection of their F5 101 training material. TestValid F5 101 exam dumps are the perfect way to prepare F5 101 exam to get good grades in the just first attempt. TestValid has quality F5 101 pdf dumps and their F5 Certified professionals designed them emphatically than others. TestValid is renowned across the globe just because of their quality study material So if candidates want instant success in the F5 101 exam with quality F5 101 training material then TestValid is the best option for you because our management is well trained in it and we update each question of all exams on regular basis after consulting recent updates with their F5 certified professionals. It is very easy for the candidates to download F5 101 exam dumps pdf from TestValid. With the help of F5 101 dumps, candidates will get all the latest questions and answers for F5 101 exam. We are confident that candidates can get a high score with excellent grades for the F5 101 exam.
Try 100% Updated 101 Exam Questions [2021]: https://pass4sure.testvalid.com/101-valid-exam-test.html