[Aug 23, 2022] 101 Exam Dumps - 100% Marks In 101 Exam!
Exam Dumps Use Real F5 Networks Certification Study Materials Dumps With 240 Questions!
NEW QUESTION 26
Select the key question you would use to ask your customer related to DNS attacks?
- A. Do you rely on your network firewall to protect your DNS server?
- B. How do you secure your DNS infrastructure against attacks?
- C. Do you over-provision your DNS infrastructure?
- D. Do you regularly update BIND or some other DNS application to the latest release?
Answer: B
Explanation:
Explanation/Reference:
Explanation:
NEW QUESTION 27
The incoming client IP address is 195.64.45.52 and the last five connections have been sent to members A, C, E, D and B.
The incoming client IP address is 195.64.45.52 and the last five connections have been sent to members A, C, E, D and B.
Given the virtual server, pool, and persistence definitions and statistics shown in the above graphic, which member will be used for the next connection.
- A. 10.10.20.3:8010.10.20.3:80
- B. 10.10.20.1:80
- C. 10.10.20.4:8010.10.20.4:80
- D. It cannot be determined with the information given.
- E. 10.10.20.5:8010.10.20.5:80
- F. 10.10.20.2:8010.10.20.2:80
Answer: A
NEW QUESTION 28
What is NOT a benefit of using a SNAT?
- A. Fail open is easy to add
- B. Higher performance than other configurations
- C. No changes are needed on the servers
- D. ASM can be deployed easily
Answer: B
NEW QUESTION 29
An LTM has the 3 virtual servers, a SNAT, four self IP addresses defined and the networks shown in the exhibit. Selected options for each object are shown below. Settings not shown are at their defaults.
A connection attempt is made with a source IP and port of 10.20.100.50:2222 and a destination IP and port of 10.10.2.102:80.
When the request is processed, what will be the destination IP address?
- A. Destination IP: 10.10.2.10
- B. The request will be dropped.
- C. Destination IP: pool member in the 192.168/16 network.
- D. Destination IP: pool member in the 172.16/16 network
Answer: A
NEW QUESTION 30
The SNMP monitor can collect data based on which three metrics? (Choose three.)
- A. content verification
- B. memory utilization
- C. current connections
- D. hops along the network path
- E. packet rate
Answer: B,C,E
NEW QUESTION 31
The Protected Workspace client-side action provides more client-side security than the Cache and Session Control action.
- A. True
- B. False
Answer: A
Explanation:
Explanation/Reference:
NEW QUESTION 32
An administrator needs to assess an LTM for potential configuration issues and required security updates.
Which F5 website con automate this task?
- A. ihealth5.com
- B. addf5f5.com
- C. Devcentral f5.ccom
- D. www.f5.Com
Answer: A
Explanation:
https://www f5.com/services/support/support-offerings/big-ip-ihealth-diagnostic-tool
NEW QUESTION 33
Administrators can customize APM to resemble other internal Web applications in the organization.
- A. True
- B. False
Answer: A
NEW QUESTION 34
If the GTM System receives a packet destined for one of its Listener addresses the GTM will process the request
- A. through BIND processing and may process it through Wide-IP processing
- B. through Wide-IP processing and BIND processing and choose the best answer between the two
- C. through Wide-IP processing and may process it through BIND processing
- D. either through Wide-IP processing or BIND processing
Answer: C
NEW QUESTION 35
The Policy Builder benefits include:
- A. Doesn't require in depth web application knowledge
- B. Very low administrative impact
- C. Only requires limited ASM knowledge
- D. All of the above
Answer: D
NEW QUESTION 36
Which of the following is NOT included on the F5 DevCentral site?
- A. Subscription purchasing options
- B. The F5 iRule editor
- C. Forums
- D. Actual iRules written by other customers
- E. iRules reference materials
Answer: A
Explanation:
Subscription purchasing options is in Partner Resource Center
NEW QUESTION 37
What does the nsert XForwarded For?
option in an HTTP profile do?
What does the ?nsert XForwarded For?option in an HTTP profile do?
- A. The client IP addresses are inserted into messages sent to remote syslog servers.
- B. A BIG-IP self-IP is inserted in the source address field on the clint-side connection.
- C. The client IP addresses are inserted into HTTP header.
- D. A BIG-IP self-IP is inserted in the source address field on the server-sid connection.
Answer: C
NEW QUESTION 38
User A and User B's workload are on the same VLAN, but connected through a transparent layer 2 bridge in use B's ARP table. Which MAC address is reported for user A's workstation?
- A. The MAC address of the 12 bridge
- B. The physical port MAC address on the bridge for user B*s workstation
- C. The MAC address of User A's workstation
- D. The physical port MAC address on the bridge for user A's workstation
Answer: B
NEW QUESTION 39
When configuring a pool member's monitor, which three association options are available? (Choose three.)
- A. configure a default monitor
- B. do not assign any monitor to the specific member
- C. inherit the node's monitor
- D. assign a monitor to the specific member
- E. inherit the pool's monitor
Answer: B,D,E
NEW QUESTION 40
In most cases, F5 recommends using round robin load balancing.
- A. True
- B. False
Answer: B
Explanation:
Explanation/Reference:
Usinground robin load balancing is recommended when Server is not so strong and using
easy WebApplication!
NEW QUESTION 41
A monitor has been defined with an alias port of 443. All other options are left at their defaults.
The administrator wishes to assign it to a pool of members where the members' ports vary. Which is the result?
- A. For each member, the monitor will test member node at port 443. For each member, the monitor will test the member ? node at port 443.
- B. This assignment is not allowed since the port do not match.
- C. For each member. If it is running an SSL service at the member port, the monitor may work.
Otherwise, the monitor will fail and the member for each member, if it is running an SSL service at the member port, the monitor may work. Otherwise, the monitor will fail and the member will be marked down. - D. For each member, if the member port is not 443, the member will be marked down. For each member,if the member? Port is not 443, the member will be marked down.
Answer: A
NEW QUESTION 42
The Protected Workspace client-side action provides more client-side security than the Cache and Session Control action.
- A. True
- B. False
Answer: A
NEW QUESTION 43
What occurs when a load?command is issued?What occurs when a ? load?command is issued?
- A. rootBIG-IPsystem[Active][tmos.Itm.pool]#create pooh members add {172.16.20.1:80{} }
- B. rootBIG-IPsystem[Active][tmos.Itm.pool]#create pooh members add {172.16.20.1:80{priority group 2}}
- C. rootBIG-IPsystem[Active][tmos.Itm.pool]#create pooh members add {170.16.20.1:80}
- D. rootBIG-IPsystem[Active][tmos.Itm.pool]#create pooh members add {172.16.20.1:80}
Answer: C
NEW QUESTION 44
iQuery is a proprietary protocol that distributes metrics gathered from which three sources?
(Choose three.)
- A. SNMP
- B. monitors from LTM Systems
- C. DNS root servers
- D. path probes such as ICMP
- E. monitors from Generic Host Servers
Answer: A,B,D
NEW QUESTION 45
Select the keyquestionyou would use to ask your customer related to DNS attacks?
- A. Do you rely on your network firewall to protect your DNS server?
- B. How do you secure your DNS infrastructure against attacks?
- C. Do you over-provision your DNS infrastructure?
- D. Do you regularly update BIND or some other DNS application to the latest release?
Answer: B
NEW QUESTION 46
DRAG DROP
Match the security-related term with the correct definition.
1. OWASP Top 10
2. Secure Socket Layer (SSL)
3. Bot
4. Certificate
5. Content scrubbing
Select and Place:
Answer:
Explanation:
NEW QUESTION 47
An LTM object that represents a downstream server contains the IP address 192.168.9.250 and no port. What is this object?
- A. Node
- B. Pool member
- C. Virtual server
- D. Self IP
- E. Pool
Answer: A
Explanation:
Explanation/Reference:
NEW QUESTION 48
......
Pass Your 101 Exam Easily With 100% Exam Passing Guarantee: https://passguide.validtorrent.com/101-valid-exam-torrent.html