Works Examcollection 201 Dumps 2022-Feb-13 by Dominic 86q Vce

Welcome to download the Newest 2passeasy 201 dumps
https://www.2passeasy.com/dumps/201/ (254 New Questions)
Exam Questions 201

TMOS Administration
https://www.2passeasy.com/dumps/201/
Passing Certification Exams Made Easy visit - https://www.2PassEasy.com

NEW QUESTION 1
A BIG-IP Administrator adds new Pool Members into an existing, highly utilized pool. Soon after, there are reports that the application is failing to load for some
users. What pool level setting should the BIG-IP Administrator check?
A. Availability Requirement
B. Allow SNAT
C. Action On Service Down
D. Slow Ramp Time
Answer: D
Explanation:
Option ABC is a global configuration, has nothing to do with the new pool member, select D after excluding
NEW QUESTION 2
Administrative user accounts have been defined on the remote LDAP server and are unable to log in to the BIG-IP device.
Which log file should the BIG-IP Administrator check to find the related messages?
A. /var/log/secure
B. /var/log/messages
C. /Nar/log/ltm
D. /var/log/user.log
Answer: A
NEW QUESTION 3
Interface 1.2 on a BIG-IP VE has a status of UNINITIALIZED. What is the reason for this status?
A. Interface 1.2 has been added to a trunk.

B. Interface 1.2 has NOT been assigned to a VLAN.
C. Interface 1.2 has been disabled.
D. No default route has been created.
Answer: B
Explanation:
trunk is a portchannel, you need to add a physical interface.
NEW QUESTION 4
A virtual server is defined per the charts. The last five client connections were to members C, D, A, B, B. Given the conditions shown in the above graphic, if a
client with IP address 205.12.45.52 opens a connection to the virtual server, which member will be used for the connection.
A. 172.16.20.1:80
B. 172.16.20.2:80
C. 172.16.20.3:80
D. 172.16.20.4:80
E. 172.16.20.5:80
Answer: D
NEW QUESTION 5
A virtual server is listening at 10.10.1.100:any and has the following iRule associated with it:
when CLIENT_ACCEPTED { if {[TCP::local_port] equals 80 } { pool pool1 } elseif {[TCP::local_port] equals 443} { pool pool2 }
If a user connects to 10.10.1.100 and port 22, which pool will receive the request?
A. pool1
B. pool2
C. Non
D. The request will be dropped.
E. Unknow
F. The pool cannot be determined from the information provided.
Answer: D
NEW QUESTION 6
Some users who connect to a busy Virtual Server have connections reset by the BIG-IP system. Pool member resources are NOT a factor in this behavior. What is
a possible cause for this behavior?
A. The Connection Rate Limit is set too high

B. The server SSL Profile has NOT been reconfigured.
C. The Connection Limit is set too low.
D. The Rewrite Profile has NOT been configured.
Answer: C

Explanation:
The topic explains that the connection reset behavior is caused by the vs configuration rather than the server resource problem. The answers B C are all
configuration at the service forwarding level. If there is a problem with the configuration, it is all a problem rather than some users. Answer C's Connection Limit will
cause a reset behavior when the connection reaches the threshold.
NEW QUESTION 7
A BIGJP Administrator needs to load a UCS file but must exclude the license file. How should the administrator perform this task?
A. From the CLI with command U tmsh load /$ys ucs <ucs filename> no-license
B. From the GUI, select the UCS file, unchcck the license box, and click restore
C. From the CLI with command(tmos)« tmsh load /sys ucs <ucs filename> no-license
D. From the GUI, select the UCS file and click restore
Answer: A
NEW QUESTION 8
What is the status of a pool member when manual resume is enabled and a health check first fails and then passes?
A. Offline (Disabled)
B. Offline (Enabled)
C. Available (Disabled)
D. Available (Enabled)
Answer: A
NEW QUESTION 9
Which statement is true concerning a functional iRule?
A. iRules use a proprietary syntax language.

B. iRules must contain at least one event declaration.
C. iRules must contain at least one conditional statement.
D. iRules must contain at least one pool assignment statement.
Answer: B
NEW QUESTION 10
When configuring a pool member's monitor, which three association options are available? (Choose three.)
A. inherit the pool's monitor

B. inherit the node's monitor
C. configure a default monitor
D. assign a monitor to the specific member
E. do not assign any monitor to the specific member
Answer: ADE
NEW QUESTION 10
A BIG-IP Administrator upgrades the BIG-IP LTM to a newer software version. After the administrator reboots into the new volume, the Configuration fails to load.
Why is the Configuration failing to load?
A. The license needs to be reactivated before the upgrade.

B. The upgrade was performed on the standby unit.
C. A minimum of at least two reboots is required.
D. Connectivity to the DNS server failed to be established.
Answer: A
NEW QUESTION 15
Refer to the exhibit.
Why is the virtual server responsive to incoming connections?
A. The pool member is disabled

B. The pool member monitor failed
C. The node is disabled.
D. The node monitor failed
Answer: B
NEW QUESTION 16
A BIG-IP Administrator suspects that one of the BIG-IP device power supplies is experiencing power outages.
Which log file should the BIG-IP Administrator check to verify the suspicion?
A. /war /log/daemon.log
B. /var/log/kern.log

C. /var/log/ltm
D. /var/log/audit
Answer: C
NEW QUESTION 18
During a planned upgrade lo a BIG-IP HA pair running Active/Standby, an outage to application traffic is reported shortly after the Active unit is forced to Standby
Reverting the flower resolves the outage. What should the BIG-IP Administrator modify to avoid an outage during the next for over event?
A. The Tag voice on the Standby device

B. The interface on the Active device to 1.1
C. The Tag value on the Active device
D. The Interface on the Standby device to 1.1
Answer: A
NEW QUESTION 19
A BIG-IP Administrator configures remote authentication and needs to make sure that users can still login even when the remote authentication server is
unavailable.
Which action should the BIG-IP Administrators in the remote authentication configuration to meet this requirement?
A. Set partition access to "All"

B. Enable the Fallback to Local option
C. Configure a remote role grove
D. Configure a second remote user directory
Answer: B
NEW QUESTION 24
A site has six members in a pool. All of the servers have been designed, built, and configured with the same applications. It is known that each client's interactions
vary significantly and can affect the performance of the servers. If traffic should be sent to all members on a regular basis, which loadbalancing mode is most
effective if the goal is to maintain a relatively even load across all servers?
A. Ratio
B. Priority
C. Observed
D. Round Robin
Answer: C
NEW QUESTION 27
A BIG-IP Administrator is conducting maintenance on one BIG-IP appliance in an HA Pair. Why should the BIG-IP Administrator put the appliance into
FORCED_OFFLINE state?
A. To preserve existing connections to Virtual Servers and reduce the CPU load
B. To allow new connections to Virtual Servers and ensure the appliance becomes active
C. To terminate connections to the management IP and decrease persistent connections
D. To terminate existing connections to Virtual Servers and prevent the appliance from becoming active
Answer: D
NEW QUESTION 29
Under what condition must an appliance license be reactivated?
A. Licenses only have to be reactivated for RMAs no other situations.

B. Licenses generally have to be reactivated during system software upgrades.
C. Licenses only have to be reactivated when new features are added (IPv6, Routing Modules, etc) no other situations.
D. Neve
E. Licenses are permanent for the platform regardless the version of software installed.
Answer: B
NEW QUESTION 30
To increase available bandwidth of an existing Trunk, the BIG-IP Administrator is adding additional interfaces.
Which command should the BIG-IP Administrator run from within bosh shell?
A. tmsh create /net trunk trunk_A interfaces add {1.3.1.4}

B. tmsh create/sys trunk trunk_A interfaces add {1.3.1.4}
C. tmsh modify/sys trunk trunk^A interfaces add {1.3.1.4}
D. tmsh modify /net trunk trunk_A interfaces add {1.3.1.4}
Answer: D
NEW QUESTION 31

A 816-IP Administrator recently deployed an application Users are experiencing slow performance with the application on some remote networks.
Which two modifications can the BIG-IP Administrator make to address this issue? (Choose two)
A. Apply dest addr profile to the Virtual Server

B. Apply f5-tcp-wan profile to the Virtual Server
C. Apply f5-tcp-lan profile to the Virtual Server
D. Apply source_addr profile to the Virtual Server
E. Apply fasti_4 profile to the Virtual Server
Answer: BC
NEW QUESTION 32
A BIG-IP Administrator need to ensure that a pool member and down by the monitor the BIG-IP system sends existing connections to another be pool member.
Which should the BIG-IP Administrator perform to meet this goal?
A. Set Action on Service Down sing under the server configuration to reselect.
B. Reconfigure the pool motor members as UP.
C. Enable mirroring within the persistence profile.
D. Set Action Service Down setting under the pool configuration to reselect.
Answer: D
NEW QUESTION 33
A BIG-IP Administrator finds the following log entry after a report of user issues connecting to a virtual server: 01010201: 2: Inet port exhaustion on 10.70.110.112
to 192.28.123.250:80 (proto 6)
How should the BIG-IP Administrator modify the SNAT pool that is associated with the virtual server?
A. Remove the SNAT pool and apply SNAT Automap.

B. Remove an IP address from the SNAT pool.
C. Add an address to the SNAT pool.
D. Increase the timeout of the SNAT addresses.
Answer: C
NEW QUESTION 34
How is persistence configured?
A. Persistence is an option within each pool's definition.

B. Persistence is a profile type; an appropriate profile is created and associated with virtual server.
C. Persistence is a global setting; once enabled, loadbalancing choices are superceded by the persistence method that is specified.
D. Persistence is an option for each pool membe
E. When a pool is defined, each member's definition includes the option for persistence.
Answer: B
NEW QUESTION 35
DNS queries from two internal DNS servers are being load balanced to external DNS Servers via a Virtual Server on a BIG-P device. The DNS queries originate
from 192.168.101.100 and 192.168.101.200 and target 192.168.21.50
All DNS queries destined for the external DNS Servers fail
Which property change should the BIG-IP Administrator make in the Virtual Server to resolve this issue?
A. Protocol Profile (Client) to DNS-OPTIMZED

B. Type to Performance (HTTP)
C. Protocol to UDP
D. Source Address to 192.168.101.0/24
Answer: C
NEW QUESTION 37
Which statement is true concerning cookie persistence?
A. Cookie persistence allows persistence independent of IP addresses.

B. Cookie persistence allows persistence even if the data are encrypted from client to pool member.
C. Cookie persistence uses a cookie that stores the virtual server, pool name, and member IP address in clear text.
D. If a client's browser accepts cookies, cookie persistence will always cause a cookie to be written to the client's file system.
Answer: A
NEW QUESTION 41
A BIG-IP Administrator needs to restore an encrypted UCS archive from the command line using the TMSH utility.
Which TMSH command should the BIG-IP Administrator use to accomplish this?
A. load/sys ucs <filepath> passphrase <password>

B. load/sys config file <filepath> passphrase <password>
C. load/sys config file <filepath>
D. load/sys ucs <filepath> no-license

Answer: A
NEW QUESTION 43
A Standard Virtual Server configured for an application reports poor network performance. This application is accessed mainly from computers on the Internet.
What should the BIG-IP Administrator configure on the Virtual Server to achieve better network performance?
A. Protocol Profile (Client) with f5-tcp-wan and Protocol Profile (Server) with f5-tcp-lan
B. Protocol Profile (Client) with f5-tcp-lan
C. Protocol Profile (Client) with fS-tcp-lan and Protocol Profile (Server) with f5-tcp-wan
D. Protocol Profile (Client) with f5-tcp-optimized
Answer: A
NEW QUESTION 44
Which two can be a part of a virtual server's definition? (Choose two.)
A. rule(s)
B. pool(s)
C. monitor(s)
D. node address(es)
E. loadbalancing method(s)
Answer: AB
NEW QUESTION 46
The BIG-IP Administrator has modified an iRule on one device of an HA pair. The BIG-IP Administrator notices there is NO traffic on the BIG-IP device in which
they are logged into.
What should the BIG-IP Administrator do to verify if the iRule works correctly?
A. Push configuration from this device to the group and start to monitor traffic on this device
B. Pull configuration to this device to the cluster and start to monitor traffic on this device
C. Log in to the other device in the cluster, push configuration from it, and start to monitor traffic on that device
D. Log in to the other device in the cluster, pull configuration to it, and start to monitor traffic on that device
Answer: D
Explanation:
The device in the picture is a standby machine, of course there is no traffic, you need to log in to the host, and then pull the configuration to the host.
NEW QUESTION 51
A BIG-IP Administrator creates a new Virtual Server to load balance SSH traffic. Users are unable to log on to the servers.
What should the BIG-IP Administrator do to resolve the issue?
A. Set Protocol to UDP

B. Set HTTP Profile to None
C. Set Source Address to 10.1.1.2
D. Set Destination Addresses/Mask to 0.0.0.0/0
Answer: B
NEW QUESTION 52
An LTM device has a virtual server mapped to www.f5.com with a pool assigned. Users report that when browsing, they are periodically required to re-login to
/resources/201.1.7.b.2_l.com. The objects are defined as follows:
Virtual server. Destination 192.168.245.100:443 netmask 255.255.255.0 Persistence: SSL session persistence
Profiles: HTTP/TCP
Which persistence method should the BIG-IP Administrator apply to resolve this issue?
A. Source address affinity

B. hexadecimal
C. SIP
D. Destination address affinity

Answer: A
NEW QUESTION 55
A virtual server at 10.10.1.100:80 has the rule listed below applied.
when HTTP_REQUEST { if {[HTTP::uri] ends_with "htm" } { pool pool1 } else if {[HTTP::uri] ends_with "xt" } { pool pool2 }
If a user connects to http://10.10.1.100/foo.txt which pool will receive the request?
A. pool1
B. pool2
C. Non
E. Unknow
Answer: B
NEW QUESTION 58
A BIG-IP Administrator wants to add the ASM Module to an HA pair of BIG-IP devices. The BIG-IP Administrator has already installed a new Add-On License on
both devices in the HA pair. What should the BIG-IP Administrator do next to use the module?
A. Provision the new module on both BIG-IP device's

B. Synchronize both BIG-IP devices
C. Reboot both BIG-IP devices
D. Reactivate the Licenses on both BIG IP devices
Answer: A
NEW QUESTION 62
During a maintenance window, an EUD test was executed and the output displayed on the screen. The BIG-IP Administrator did NOT save the screen output. The
BIG-IP device is currently handling business critical traffic. The BIG-IP Administrator needs to minimize impact. What should the BIG-IP Administrator do to provide
the EUD results to F5 Support?
A. Boot the device into EUD then collect output from console
B. Execute EUD from tmsh and collect output from console
C. Collect file /var/log/messages
D. Collect file /shared/log/eud.log
Answer: D
NEW QUESTION 67
A BIG-IP Administrator needs to remove a pool specific health monitor. There is a pool named Best Pool with two members, one named Best pool member and
one named Best pool member2. In the Local Traffic section of the administrative GUI, which stops should the BIG-IP Administrator take to remove a pool level
monitor?
A. Pool > Pool List > Best Pool > Members > Health Monitors
B. Nodes > Node List> Best _pool_memberl > Heath Monitors
C. Monitors > Monitor Name> Instances
D. Pool > Pool List> Best Pool > Health Monitors
Answer: D
NEW QUESTION 69
A pool of four servers has been partially upgraded for two new servers with more memory and CPU capacity. The BIG-IP Administrator must change the load
balance method to consider more connections for the two new servers. Which load balancing method considers pool member CPU and memory load?
A. Round Robin
B. Dynamic Ratio
C. Ratio
D. Least Connection
Answer: C
NEW QUESTION 73
What is the purpose of MAC masquerading?
A. to prevent ARP cache errors

B. to minimize ARP entries on routers
C. to minimize connection loss due to ARP cache refresh delays
D. to allow both BIGIP devices to simultaneously use the same MAC address
Answer: C
NEW QUESTION 76
You have a pool of servers that need to be tested. All of the servers but one should be tested every 10 seconds, but one is slower and should only be tested every
20 seconds. How do you proceed?

A. It cannot be don
B. All monitors test every five seconds.
C. It can be done, but will require assigning monitors to each pool member.
D. It cannot be don
E. All of the members of a pool must be tested at the same frequency.
F. It can be done by assigning one monitor to the pool and a different monitor to the slower pool member.
Answer: D
NEW QUESTION 77
A node is a member of various pools and hosts different web applications. If a web application is unavailable, the BIG-IP appliance needs to mark the pool member
down for that application pool. What should a BIG-IP Administrator deploy at the pool level to accomplish this?
A. A UDP monitor with a custom interval/timeout

B. A combination of ICMP + TCP monitor
C. An HTTP monitor with custom send/receive strings
D. A TCP monitor with a custom interval/timeout
Answer: C
Explanation:
Requiring all traffic to be HTTPS access requires HTTP requests to be redirected directly to HTTPS.
NEW QUESTION 82
A BIG-IP Administrator is checking the BIG-IP device for known vulnerabilities. What should the 8IG-IP Administrator upload to BIG-IP iHealth for further analysis?
A. QKView
B. EUD
C. UCS
D. tcpdump
Answer: A
NEW QUESTION 86
A BIG-IP Administrator suspects that one of the BIG-IP device power supplies is experiencing power outages.
Which log file should the BIG-IP Administrator check to verify the suspicion?
A. /war /log/daemon.log
B. /var/log/kern.log
C. /var/log/ltm
D. /var/log/audit
Answer: C
NEW QUESTION 87
A BIG-IP Administrator needs to collect HTTP status code and HTTP method for traffic flowing through a virtual server.
Which default profile provides this information?
A. HTTP
B. Analytics
C. Request Adapt
D. Statistics
Answer: A
NEW QUESTION 91
When initially configuring the BIG-IP system using the config utility, which two parameters can be set? (Choose two.)
A. the netmask of the SCCP

B. the IP address of the SCCP
C. the port lockdown settings for the SCCP
D. the netmask of the host via the management port
E. the IP address of the host via the management port
F. the port lockdown settings for the host via the management port
Answer: DE
NEW QUESTION 95
All pool members are online. All other virtual server settings are at default What might after the load balancing behavior?
A. enabing SNAT automap

B. enabing a falback host in the http profile
C. adding a oneconnect profile
D. adding a persistence profile
Answer: D

NEW QUESTION 100

Assume a BIG-IP has no NATs or SNATs configured. Which two scenarios are possible when client traffic arrives on a BIG-IP that is NOT destined to a self-IP?
(Choose two.)
A. If the destination of the traffic does not match a virtual server, the traffic will be discarded.
B. If the destination of the traffic does not match a virtual server, the traffic will be forwarded based on routing tables.
C. If the destination of the traffic matches a virtual server, the traffic will be processed per the virtual server definition.
D. If the destination of the traffic matches a virtual server, the traffic will be forwarded, but it cannot be loadbalanced since no SNAT has been configured.
Answer: AC
NEW QUESTION 105

A virtual server is listening at 10.10.1.100:any and has the following iRule associated with it: when CLIENT_ACCEPTED { if {[TCP::local_port] equals 21 } { pool
ftppool } elseif {[TCP::local_port] equals 23 } { pool telnetpool }
If a user connects to 10.10.1.100 and port 22, which pool will receive the request?
A. ftppool
B. telnetpool
C. Non
E. Unknow
Answer: D
NEW QUESTION 107

When can a single virtual server be associated with multiple profiles?
A. Neve
B. Each virtual server has a maximum of one profile.
C. Ofte
D. Profiles work on different layers and combining profiles is common.
E. Rarel
F. One combination, using both the TCP and HTTP profile does occur, but it is the exception.
G. Unlimite
H. Profiles can work together in any combination to ensure that all traffic types are supported in a given virtual server.
Answer: B
NEW QUESTION 111

The interface 1.1 of the BIG-IP device has been connected to a link dedicated to traffic on VLAN 120. What should the BIG-IP Administrator do to receive traffic
from the VLAN?
A. Create a new VLAN object and set Customer Tag to 120

B. Create a new VLAN object and assign the interface 1.1 untagged
C. Create a new trunk object with interface 1.1 assigned
D. Create a new trunk object and assign it to the VLAN
Answer: B
NEW QUESTION 115

A new BIG-IP VE is deployed with default settings. The BIG-IP Administrator completes the setup utility in the Configuration Utility. The internal self IP address fails
to respond to a ping request. What is a possible cause of this issue?
A. Port lockdown on internal self IP is set to Allow None

B. Route is NOT assigned to internal self IP.
C. Internal interface VLAN is set to untagged
D. Internal interface VLAN is set to tagged
Answer: D
NEW QUESTION 119

A BIG-IP system has the following configuration:
* SNAT is set to Auto Map
* There are two VLANs internal and external
* Default route is pointed to the gateway on external VLAN
* Self P for internal VLAN is 1921.1.2
* Self IP for external VLAN is 192.1.2.2
* Floating IP addresses for internal VLAN is 192.1.1.1
* Floating IP addresses for external VLAN is 192.1.2.1
* The Virtual Server IP address is 192.1.1.100
Which IP address does the BIG-IP system use first when traffic reaches the servers on the internal VLAN?
A. 192.1.1.100
B. 192.1.2.2
C. 192.1.1.1
D. 192.1.2.1

Answer: C
NEW QUESTION 121

Users are unable to reach an application. The BIG-IP Administrator checks the Configuration Utility and observes that the Virtual Server has a red diamond in front
of the status. What is causing this issue?
A. All pool members are down.

B. The Virtual Server is receiving HTTPS traffic over HTTP virtual.
C. The Virtual Server is disabled.
D. All pool members have been disabled.
Answer: A
NEW QUESTION 122

The ICMP monitor has been assigned to all nodes. In addition, all pools have been assigned custom monitors. The pool is marked available. If a pool is marked
available (green) which situation is sufficient to cause this?
A. All of the pool member nodes are responding to the ICMP monitor as expected.
B. Less than 50% of the pool member nodes responded to the ICMP echo request.
C. All of the members of the pool have had their content updated recently and their responses no longer match the monitor.
D. Over 25% of the pool members have had their content updated and it no longer matches the receive rule of the custom monito
E. The other respond as expected.
Answer: D
NEW QUESTION 125

According to the shown Configuration Utility stings What is the setting of the User Directory configuration under the Authentication submenu?
A. Local
B. Managed
C. Remote-TACACS+
D. Default system configuration
Answer: C
NEW QUESTION 127

Assume a virtual server has a ServerSSL profile. What SSL certificates are required on the pool members?
A. No SSL certificates are required on the pool members.

B. The pool members.SSL certificates must only exist.
C. The pool members.SSL certificates must be issued from a certificate authority.
D. The pool members.SSL certificates must be created within the company hosting the BIGIPs.
Answer: B
NEW QUESTION 128

Which three methods can be used for initial access to a BIG-IP system? (Choose three.)
A. CLI access to the serial console port

B. SSH access to the management port
C. SSH access to any of the switch ports
D. HTTP access to the management port
E. HTTP access to any of the switch ports
F. HTTPS access to the management port
G. HTTPS access to any of the switch ports
Answer: ABF
NEW QUESTION 132

What should the 816-IP Administrator provide when opening a new ticket with F5 Support?
A. bigip.license file
B. QKViewfile
C. Device root password

D. SSL private keys
Answer: B
NEW QUESTION 136

A user wants to use the iHealth Upgrade Advisor to determine any issues with upgrading TMOS from 13.0 to 13.1.
Where can the user generate the QKView to upload to iHealth?
A. System > Software Management

B. System > Archives
C. System > Configuration
D. System > Support
Answer: D
NEW QUESTION 139

A Virtual Server uses an iRule to send traffic to pool members depending on the URI. The BIG-IP Administrator needs to modify the pool member in the iRule.
Which event declaration does the BIG-IP Administrator need to change to accomplish this?
A. CLIENT_ACCEPTED
B. HTTP_RESPONSE
C. HTTP_REQUEST
D. SERVER_CONNECTED
Answer: C
Explanation:
According to the UR! distribution is the category of HTTP requests, need to trigger HTTP_REQUEST event.
NEW QUESTION 144

Given that VLAN failsafe is enabled on the external VLAN and the network that the active BIG-IP's external VLAN is connected to has failed, which statement is
always true about the results?
A. The active system will note the failure in the HA table.

B. The active system will reboot and the standby system will go into active mode.
C. The active system will failover and the standby system will go into active mode.
D. The active system will restart the traffic management module to eliminate the possibility that BIG-IP is the cause for the network failure.
Answer: A
NEW QUESTION 148

Active connections to pool members are unevenly distributed. The load balancing method is Least Connections (member) Priority Group Activation is disabled.
What is a potential cause of the event distribution?
A. Priority Group Activation is disabled

B. SSL Profile Server is applied
C. Persistence profile is applied
D. incorrect load balancing method
Answer: C
NEW QUESTION 151

A BIG-IP Administrator uses a device group to share the workload and needs to perform service on a BIG-IP device currently active for a traffic group. The
administrator needs to enable the traffic group to run on another BIG-IP device in the device group. What should the administrator do to meet the requirement?
A. Create a new Traffic Group and then fail to Standby Unit

B. Select Traffic Group and then select Failover
C. Select Traffic Group and then select Force to Standby
D. Select Traffic Group on Primary Unit and then select Demote
Answer: C
NEW QUESTION 152

You need to terminate client SSL traffic at the BIG-IP and also to persist client traffic to the same pool member based on a BIG IP supplied cookie. Which four are
profiles that would normally be included in the virtual server's definition? (Choose four.)
A. TCP
B. HTTP
C. HTTPS
D. ClientSSL
E. ServerSSL
F. CookieBased Persistence
Answer: ABDF

NEW QUESTION 156

A BIG-IP Administrator creates a new Virtual Server. The end user is unable to access the page. During troubleshooting, the administrator learns that the
connection between the BIG-IP system and server is NOT set up correctly.
What should the administrator do to solve this issue?
A. Disable Address Translation

B. Set Address Translation to Auto Map, configure a SNAT pool, and have pool members in the same subnet of the servers
C. Set Address Translation to SNAT and configure a specific translation address
D. Set Address Translation to SNAT and have self-IP configured in the same subnet of servers
Answer: C
Explanation:
The status of the pool can be seen that the members are all up, indicating that the network from F5 to the server is no problem, so there is no need to configure
selfip on the same subnet. The monitor is normal but the access is not normal, you have to consider the problem of snat, you can configure automap or configure
snat and specify snat ip.
NEW QUESTION 160

A BIG-IP Administrator needs to have a BIG-IP linked to two upstream switches for resilience of the external network. The network engineer who is going to
configure the switch instructs the BIG-IP Administrator to configure interface binding with LACP. Which configuration should the administrator use?
A. A virtual server with an LACP profile and the switches' management IPs as pool members.
B. A virtual server with an LACP profile and the interfaces connected to the switches as pool members.
C. A Trunk listing the allowed VLAN IDs and MAC addresses configured on the switches.
D. A Trunk containing an interface connected to each switch.
Answer: D
NEW QUESTION 165

Which is an advantage of terminating SSL communication at the BIGIP rather than the ultimate web server?
A. Terminating SSL at the BIG-IP can eliminate SSL processing at the web servers.
B. Terminating SSL at IP the eliminates BIG all unencrypted traffic from the internal network.
C. Terminating SSL at the BIG-IP eliminates the need to purchase SSL certificates from a certificate authority.
D. Terminating SSL at the BIG-IP eliminates the need to use SSL acceleration hardware anywhere in the network.
Answer: A
NEW QUESTION 166

Assume a virtual server has a ServerSSL profile. What SSL certificates are required on the BIG-IP?
A. No SSL certificates are required on the BIG-IP.

B. The BIG-IP's SSL certificates must only exist.
C. The BIG-IP's SSL certificates must be issued from a certificate authority.
D. The BIG-IP's SSL certificates must be created within the company hosting the BIG-IPs.
Answer: A
NEW QUESTION 169

Refer of the exhibit.
The 816-IP Administrator runs the command shown and observes a device trust issue between BIG-IP devices in a device group. The issue prevents config sync
on device bigip3.local.
What is preventing the config sync?
A. Next Active Load factor is 0 on bigip1.local

B. Both devices are standby
C. Next Active Load factor is 1 on bigip1.local
D. Time Delta to local system is 12
Answer: A
Explanation:
Option A should be bioip3.local?. if choose bigip3.local, you should choose A.
NEW QUESTION 172

A BIG-IP Administrator is performing maintenance on the active BIG-IP device of an HA pair. The BIG-IP Administrator needs to minimize traffic disruptions.
What should the BIG-IP Administrator do to start the maintenance activity?
A. Reboot the BIG-IP device.

B. Move resources to a new Traffic Group.
C. Force the BIG-IP device to standby.
D. Disable switch ports of the BIG-IP device.
Answer: C
NEW QUESTION 177

When upgrading a BIG-IP redundant pair, what happens when one system has been updated but the other has not?
A. Synching should not be performed.

B. The first system to be updated will assume the Active role.
C. This is not possible since both systems are updated simultaneously.
D. The older system will issue SNMP traps indicating a communication error with the partner.
Answer: A
NEW QUESTION 181

Assume the bigd daemon fails on the active system. Which three are possible results? (Choose three.)

A. The active system will restart the bigd daemon and continue in active mode.
B. The active system will restart the tmm daemon and continue in active mode.
C. The active system will reboot and the standby system will go into active mode.
D. The active system will failover and the standby system will go into active mode.
E. The active system will continue in active mode but gather member and node state information from the standby system.
Answer: ACD
NEW QUESTION 184

Assume a client's traffic is being processed only by a NAT; no SNAT or virtual server processing takes place. Also assume that the NAT definition specifies a NAT
address and an origin address while all other settings are left at their defaults. If a client were to initiate traffic to the NAT address, what changes, if any, would take
place when the BIG-IP processes such packets?
A. The source address would not change, but the destination address would be translated to the origin address.
B. The destination address would not change, but the source address would be translated to the origin address.
C. The source address would not change, but the destination address would be translated to the NAT's address.
D. The destination address would not change, but the source address would be translated to the NAT's address.
Answer: A
NEW QUESTION 185

A standard virtual server has been associated with a pool with multiple members. Assuming all other settings are left at their defaults, which statement is always
true concerning traffic processed by the virtual server?
A. The client IP address is unchanged between the client side connection and the serverside connection.
B. The server IP address is unchanged between the client side connection and the serverside connection.
C. The TCP ports used in the client side connection are the same as the TCP ports serverside connection.
D. The IP addresses used in the clientside connection are the same as the IP addresses used in the serverside connection.
Answer: A
NEW QUESTION 188

A BIG-IP Administrator needs to apply a health monitor for a pool of database servers named DB_Pool that uses TCP port 1521.
Where should the BIG-IP Administrator apply this monitor?
A. Local Traffic > Profiles » Protocol > TCP

B. Local Traffic > Nodes > Default Monitor
C. Local Traffic > Pools > De Pool > Members
D. Local Traffic > Pools > DB Pool > Properties
Answer: D
NEW QUESTION 192

Refer to the exhibit
The network team creates a new VLAN on the switches. The BIG-IP Administrator needs to create a configuration on the BIG-IP device. The BIG-IP Administrator
creates a new VLAN and Self IP, but the servers on the new VLAN are NOT reachable from the BIG-IP device.
Which action should the BIG-IP Administrators to resolve this issue?
A. Set Port Lockdown of Set IP to Allow All

B. Change Auto Last Hop to enabled
C. Assign a physical interface to the new VLAN
D. Create a Floating Set IP Address
Answer: C
NEW QUESTION 197

Which method is recommended for creating a new user from the CLI?
A. Run f5adduser username' then 'f5passwd username' from bash or tmsh

B. Run tmsh create auth user username prompt for password' from bash
C. edit bigip.conf to add the new user and the user's clear-text password
D. Run useradd username' then 'passwd username' from bash tmsh
Answer: B
NEW QUESTION 201

Refer to the exhibit
A connection is being established to IP 1.1.1.1 on port 8080. Which virtual server will handle the connection?
A. fwd_8080_vs
B. host_vs
C. host_ 8080_VS
D. fwdvs

Answer: B
NEW QUESTION 204

Which TMSH command generated this output?
A. tmsh list /cm sync-status

B. tmsh show /sys sync-status
C. tmsh list /sys sync-status
D. tmsh show /cm sync status
Answer: D
NEW QUESTION 208

An LTM device has a virtual server mapped to www.f5.com. Users report that when they connect to
/resources/201.1.2h.l_l.com they are unable to receive content. What is the likely cause of the issue?
A. The pool associated with the virtual server does not have priority group activation enabled.
B. The virtual address does not have ARP enabled.
C. The virtual address does not have route advertising enabled.
D. The pool associated with the virtual server is falling its health check.
Answer: B
NEW QUESTION 212

A Standard Virtual Server for a web application is configured with Automap for the Source Address Translation option. The original source address of the client
must be known by the backend servers. What should the BIG-IP Administrator configure to meet this requirement?
A. The Virtual Server type as Performance (HTTP)

B. An HTTP profile to insert the X-Forward-For header
C. An HTTP Transparent profile
D. A SNAT Pool with the client IP
Answer: B
Explanation:
Because it is a web application, you can insert the source IP in the xff field in the http profile.
NEW QUESTION 217

Assuming other failover settings are at their default state, what would occur if the failover cable were to be disconnected for five seconds and then reconnected?
A. As long as network communication is not lost, no change will occur.

B. Nothin
C. Failover due to loss of voltage will not occur if the voltage is lost for less than ten seconds.
D. When the cable is disconnected, both systems will become activ
E. When the voltage is restored, unit two will revert to standby mode.
F. When the cable is disconnected, both systems will become activ
G. When the voltage is restored, both systems will maintain active mode.
Answer: C
NEW QUESTION 218

How many nodes are represented on the network map shown?
A. Four
B. Three
C. One
D. Two
Answer: B
NEW QUESTION 221

A BIG-IP Administrator configures a now VLAN on an HA pair of devices that does NOT yet have any traffic. This action causes the assigned traffic group to fail
over to the standby device.
Which VLAN setting should be changed to prevent this issue?
A. Auto Last Hop

B. Fail-safe
C. Customer Tag
D. Source Check
Answer: B
NEW QUESTION 223

Which process or system can be monitored by the BIG-IP system and used as a failover trigger in a redundant pair configuration?
A. bandwidth utilization
B. duplicate IP address
C. CPU utilization percentage
D. VLAN communication ability
Answer: D
NEW QUESTION 227

A BIG-IP Administrator is creating a new Trunk on the BIG-IP device. What objects should be added to the new Trunk being created?
A. Interfaces
B. Network routes

C. VLANS
D. IP addresses
Answer: A
Explanation:
trunk is a portchannel, you need to add a physical interface.
NEW QUESTION 230

A BIG-IP Administrator needs to find which modules have been licensed for use on the BIG-IP system. In which section of the Configuration Utility can the BIG-IP
Administrator find this information?
A. System > Services

B. System > Resource Provisioning
C. System > Platform
D. System > Support
Answer: B
NEW QUESTION 234

A BIG-IP Administrator creates a new VLAN on BIG-IP Cluster Member A and attaches an Interface to it. Although the Auto Config Sync is in place, the new VLAN
does NOT show up on Cluster Member B. What should the BIG-IP Administrator do to ensure the new VLAN is configured on each Cluster Member?
A. Configure the new VLAN manually on Cluster Member B.

B. Reset the Device Trust of the BIG-IP Cluster on either Cluster Member.
C. Configure a Default Route for the new VLAN on Cluster Member A.
D. Enable the Interface that is attached to the new VLAN on Cluster Member A.
Answer: A
NEW QUESTION 236

One of the two members of a device group has been decommissioned. The BIG-IP Administrator tries to delete the device group, but is unsuccessful.
Prior to removing the device group, which action should be performed?
A. Disable the device group

B. Remove all members from the device group
C. Remove the decommissioned device from the device group
D. Make sure all members of the device group are in sync
Answer: B
NEW QUESTION 241

Which three statements describe a characteristic of profiles? (Choose three.)
A. Default profiles cannot be created or deleted.

B. Custom profiles are always based on a parent profile.
C. A profile can be a child of one profile and a parent of another.
D. All changes to parent profiles are propagated to their child profiles.
E. While most virtual servers have at least one profile associated with them, it is not required.
Answer: ABC
NEW QUESTION 246

Which action will take place when a failover trigger is detected by the active system?
A. The active device will take the action specified for the failure.
B. The standby device also detects the failure and assumes the active role.
C. The active device will wait for all connections to terminate and then failover.
D. The standby device will begin processing virtual servers that have failed, but the active device will continue servicing the functional virtual servers.
Answer: A
NEW QUESTION 247

Assume a virtual server is configured with a ClientSSL profile. What would the result be if the virtual server's destination port were not 443?
A. SSL termination could not be performed if the virtual server's port was not port 443.
B. Virtual servers with a ClientSSL profile are always configured with a destination port of 443.
C. As long as client traffic was directed to the alternate port, the virtual server would work as intended.
D. Since the virtual server is associated with a ClientSSL profile, it will always process traffic sent to port 443.
Answer: C
NEW QUESTION 251

A BIG-IP Administrator needs to restore a UCS file to an F5 device using the Configuration Utility. Which section of the Configuration Utility should the BIG-IP
Administrator access to perform this task?

A. Local Traffic > Virtual Servers

B. Local Traffic > Policies
C. System > Archives
D. System > Configuration
Answer: C
NEW QUESTION 256

Which two statements describe differences between the active and standby systems? (Choose two.)
A. Monitors are performed only by the active system.

B. Failover triggers only cause changes on the active system.
C. Virtual server addresses are hosted only by the active system.
D. Configuration changes can only be made on the active system.
E. Floating selfIP addresses are hosted only by the active system.
Answer: CE
NEW QUESTION 261

A BIG-IP Administrator needs to determine which pool members in a pool have been manually forced offline and are NOT accepting any new traffic. Which status
icon indicates this?
A)
B)
C)
D)
A. Option A
B. Option B
C. Option C
D. Option D
Answer: A
NEW QUESTION 265

A BIG-IP Administrator needs to configure the BIG-IP system to perform load balancing for FTP servers running passive mode FTP.
How should the administrator configure the Virtual Server to perform this load balancing?
A. A Standard Virtual Server + FTP profile

B. A Forwarding Virtual Server
C. A Performance Layer 4 Virtual Server + FTP profile
D. A Message Routing Virtual Server
Answer: A
NEW QUESTION 270

A BIG-IP Administrator is configuring a pool with members who have differing capabilities. Connections to pool members must be load balanced appropriately.
Which load balancing method should the BIG-IP Administrator use?
A. Least Sessions
B. Least Connections (member)
C. Fastest (node)
D. Weighted Least Connections (member)
Answer: D
NEW QUESTION 275

A BIG-IP Administrator needs to install a HotFix on a standalone BIG-IP device, which has HD1.1 as the Active Boot Location. The BIG-IP Administrator has
already re-activated the license and created an UCS archive of the configuration. In which sequence should the BIG-IP Administrator perform the remaining steps?
A. Install HotFix in HD 1.1, Reboot the BIG-IP devic

B. Install UCS Archive
C. Install HotFix in HO 1.2, Install base Image in HD 1.2, Activate HD1.2
D. Install base Image in HD1.2, Install HotFix in HD1.2, Activate HD 1.2
E. Activate HD 1.2, Install base image in HD 1.2. Install HotFix in HD 1.2
Answer: C
NEW QUESTION 277

The BIG-IP Administrator disable all pool members in a pool Users are still able to reach the pool members.
What is allowing users to continue to reach the disabled poo! members?
A. A slow to time on Pool

B. A persistence profile on the Virtual Server
C. A slow ramp time on virtual Server
D. A persistence profile on the Pool
Answer: B

NEW QUESTION 279

......

THANKS FOR TRYING THE DEMO OF OUR PRODUCT
Visit Our Site to Purchase the Full Set of Actual 201 Exam Questions With Answers.
We Also Provide Practice Exam Software That Simulates Real Exam Environment And Has Many Self-Assessment Features. Order the 201
Product From:
https://www.2passeasy.com/dumps/201/
Money Back Guarantee
201 Practice Exam Features:
* 201 Questions and Answers Updated Frequently
* 201 Practice Questions Verified by Expert Senior Certified Staff
* 201 Most Realistic Questions that Guarantee you a Pass on Your FirstTry
* 201 Practice Test Questions in Multiple Choice Formats and Updatesfor 1 Year

Powered by TCPDF (www.tcpdf.org)

Works Examcollection 201 Dumps 2022-Feb-13 by Dominic 86q Vce

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Works Examcollection 201 Dumps 2022-Feb-13 by Dominic 86q Vce

Uploaded by

Copyright:

Available Formats

Welcome to download the Newest 2passeasy 201 dumps

https://www.2passeasy.com/dumps/201/ (254 New Questions)

Exam Questions 201

Passing Certification Exams Made Easy visit - https://www.2PassEasy.com

A. Interface 1.2 has been added to a trunk.

A. The Connection Rate Limit is set too high

Passing Certification Exams Made Easy visit - https://www.2PassEasy.com

A. iRules use a proprietary syntax language.

A. inherit the pool's monitor

A. The license needs to be reactivated before the upgrade.

Why is the virtual server responsive to incoming connections?

A. The pool member is disabled

Passing Certification Exams Made Easy visit - https://www.2PassEasy.com

A. The Tag voice on the Standby device

A. Set partition access to "All"

A. Licenses only have to be reactivated for RMAs no other situations.

A. tmsh create /net trunk trunk_A interfaces add {1.3.1.4}

Passing Certification Exams Made Easy visit - https://www.2PassEasy.com

A. Apply dest addr profile to the Virtual Server

A. Remove the SNAT pool and apply SNAT Automap.

A. Persistence is an option within each pool's definition.

A. Protocol Profile (Client) to DNS-OPTIMZED

A. Cookie persistence allows persistence independent of IP addresses.

A. load/sys ucs <filepath> passphrase <password>

Passing Certification Exams Made Easy visit - https://www.2PassEasy.com

A. Set Protocol to UDP

A. Source address affinity

Passing Certification Exams Made Easy visit - https://www.2PassEasy.com

A. Provision the new module on both BIG-IP device's

A. to prevent ARP cache errors

Passing Certification Exams Made Easy visit - https://www.2PassEasy.com

A. A UDP monitor with a custom interval/timeout

A. the netmask of the SCCP

A. enabing SNAT automap

Passing Certification Exams Made Easy visit - https://www.2PassEasy.com

NEW QUESTION 100

NEW QUESTION 105

NEW QUESTION 107

NEW QUESTION 111

A. Create a new VLAN object and set Customer Tag to 120

NEW QUESTION 115

A. Port lockdown on internal self IP is set to Allow None

NEW QUESTION 119

Passing Certification Exams Made Easy visit - https://www.2PassEasy.com

NEW QUESTION 121

A. All pool members are down.

NEW QUESTION 122

NEW QUESTION 125

NEW QUESTION 127

A. No SSL certificates are required on the pool members.

NEW QUESTION 128

A. CLI access to the serial console port

NEW QUESTION 132

Passing Certification Exams Made Easy visit - https://www.2PassEasy.com

D. SSL private keys

NEW QUESTION 136

A. System > Software Management

NEW QUESTION 139

NEW QUESTION 144

A. The active system will note the failure in the HA table.

NEW QUESTION 148

A. Priority Group Activation is disabled

NEW QUESTION 151