Full 201 Practice Test and 255 Unique Questions, Get it Now!
The Best 201 Exam Study Material Premium Files and Preparation Tool
F5 201: BIG-IP Administrator exam is a certification program designed for network administrators who want to demonstrate their expertise in managing and configuring the BIG-IP platform. 201 exam is intended to assess the candidate's knowledge and skills in deploying, configuring, and managing BIG-IP devices and solutions. It is a comprehensive exam that covers various topics related to F5 BIG-IP administration.
NEW QUESTION # 125
For a given Virtual Server, the BIG-IP must perform SSL Offload and negotiate secure communication overTLSvl.2only.
What should the BIG-IP Administrator do to meet this requirement?
- A. Configure a custom SSL Profile (Server) and select no TLSvl in the options list
- B. Configure a custom SSL Profile (Client) with a custom TLSV1.2 cipher string
- C. Configure a custom SSL Profile (Client) and select no TLSvl in the options list
- D. Configure a custom SSL Profile (Server) with a custom TLSV1.2 cipher string
Answer: B
Explanation:
no TLSvl only disables TLS1.0, TLS1.1 is still used and does not meet the requirements.
NEW QUESTION # 126
A BIG-IP Administrator needs to have a BIG-IP linked to two upstream switches for resilience of the external network. The network engineer who is going to configure the switch instructs the BIG-IP Administrator to configure interface binding with LACP. Which configuration should the administrator use?
- A. A virtual server with an LACP profile and the interfaces connected to the switches as pool members.
- B. A Trunk listing the allowed VLAN IDs and MAC addresses configured on the switches.
- C. A Trunk containing an interface connected to each switch.
- D. A virtual server with an LACP profile and the switches' management IPs as pool members.
Answer: C
NEW QUESTION # 127
What is the purpose of provisioning?
- A. Provisioning allows the administrator to see what modules are licensed, but no user action is ever required.
- B. Provisioning allows modules that are not licensed to be fully tested.
- C. Provisioning allows modules that are licensed be granted appropriate resource levels.
- D. Provisioning allows the administrator to activate modules in nonstandard combinations.
Answer: C
NEW QUESTION # 128
Which three statements describe a characteristic of profiles? (Choose three.)
- A. While most virtual servers have at least one profile associated with them, it is not required.
- B. Custom profiles are always based on a parent profile.
- C. All changes to parent profiles are propagated to their child profiles.
- D. Default profiles cannot be created or deleted.
- E. A profile can be a child of one profile and a parent of another.
Answer: B,D,E
NEW QUESTION # 129
A BIG-IP Administrator finds the following log entry:
tnm tmm[7141]: 011e0002:4: sweeperjjpdate: aggressive mode activated.
Which action should the BIG-IP Administrator to mitigate this memory issue?
- A. Decrease the TCP profile ide Timeout value
- B. Configure the serve to use Connection Mirroring
- C. increase the TCP profile ide Timeout value
- D. Configure the redundant par to be active-active
Answer: B
NEW QUESTION # 130
Which statement is true concerning SSL termination.
- A. When any virtual server uses a ClientSSL profile, all SSL traffic sent to theElI BIP G is decrypted before it is forwarded to servers.
- B. If a virtual server has both a ClientSSL and ServerSSL profile, the pool members have less SSL processing than if the virtual server had only a ClientSSL profile
- C. A virtual server that has both ClientSSL and ServerSSL profiles can still support cookie persistence.
- D. Decrypting traffic at the BIGElIP allows the use of iRules for traffic management, but increases the load on the pool member.
Answer: C
NEW QUESTION # 131
Which two statements are true concerning the default communication between a redundant pair of BIG-IP systems? (Choose two.)
- A. Synchronization occurs via a TCP connection using ports 683 and 684.
- B. Connection mirroring data is shared through the serial fail over cable unless network failover is enabled.
- C. Persistence mirroring data is shared via a TCP connection using port 1028.
- D. Connection mirroring data is shared via a TCP connection using port 1028.
Answer: C,D
NEW QUESTION # 132
Assuming there are open connections through an active system's virtual servers and aEl fo av ielr occurs, by default, what happens to the connections.
- A. LongEllived connections such as Telnet and FTP are maintained,
but shortEllived connections such as HTTP are lost. - B. All open connections are maintained.
- C. All open connections are lost, but new connections are initiated by the newly active BIGElIP, resulting in minimal client downtime.
- D. When persistence mirroring is enabled, open connections are maintained even if a fEl aoilver occurs.
- E. All open connections are lost.
Answer: E
NEW QUESTION # 133
A BIG-IP Administrator configures a Virtual Server. Users report that they always receive a TCP RST packet to the BIG-IP system when attempting to connect to it. What is the possible reason for this issue?
- A. The virtual server Type is set to Internal
- B. The virtual server Type is set to Drop
- C. The virtual server Type is set to Stateless
- D. The virtual server Type is set to Reject
Answer: D
NEW QUESTION # 134
Which process or system can be monitored by the BIG-IP system and used as a failover trigger in a redundant pair configuration?
- A. duplicate IP address
- B. bandwidth utilization
- C. CPU utilization percentage
- D. VLAN communication ability
Answer: D
NEW QUESTION # 135
A configuration change is made on the standby member of a device group.
What is displayed as "Recommended Action" on the Device Management Overview screen?
- A. Activate device with the most recent configuration
- B. Synchronize the active member configuration to the group.
- C. Force active member of device group to standby
- D. Synchronize the standby member configuration to the group
Answer: D
NEW QUESTION # 136
A BIG-IP Administrator makes a configuration change to the BIG-IP device. Which file logs the message regarding the configuration change?
- A. /var/log/secure
- B. /var/log/audit
- C. /var/log/messages
- D. /var/log/user.log
Answer: B
Explanation:
About audit logging
Audit logging is an optional feature that togs messages whenever a BIG-IP® system object, such as a virtual server or a load balancing pool, is confined (that is. created, modified, or deleted). The BiGIP system logs the messages for these auditing events in the file /var/log'audit There are three ways that objects can be configured
* By user action
* By system action
* By loading configuration data
Whenever an object is configured in one of these ways, the BIG-IP system logs a message to the audit log
NEW QUESTION # 137
Which method is recommended for creating a new user from the CLI?
- A. Run f5adduser username' then 'f5passwd username' from bash or tmsh
- B. Run useradd username' then 'passwd username' from bash tmsh
- C. edit bigip.conf to add the new user and the user's clear-text password
- D. Run tmsh create auth user username prompt for password' from bash
Answer: D
NEW QUESTION # 138
Refer to the exhibit.
A BIG-IP Administrator creates a new Virtual Server to load balance SSH traffic. Users are unable to log on to the servers.
What should the BIG-IP Administrator do to resolve the issue?
- A. Set Protocol to UDP
- B. Set Destination Addresses/Mask to 0.0.0.0/0
- C. Set Source Address to 10.1.1.2
- D. Set HTTP Profile to None
Answer: D
NEW QUESTION # 139
How should a BIG-IP Administrator control the amount of traffic that a newly enabled pool member receives.
- A. set the Slow Ramp Time
- B. set the Priority Group Activation
- C. set a Connection Limit
- D. set a Health Monitor
Answer: A
Explanation:
Specifies the duration during which the system sends less traffic to a newly-enabled pool member. The amount of traffic is based on the ratio of how long the pool member has been available compared to the slow ramp time, in seconds. Once the pool member has been online for a time greater than the slow ramp time, the pool member receives a full proportion of the incoming traffic. Slow ramp time is particularly useful for the least connections load balancing mode.
Setting this to a nonzero value can cause unexpected Priority Group behavior, such as load balancing to a low-priority member even with enough high-priority servers.
NEW QUESTION # 140
Where is the loadbalancing mode specified?
- A. within the node definition
- B. within the pool definition
- C. within the pool member definition
- D. within the virtual server definition
Answer: B
NEW QUESTION # 141
A set of servers is used for an FTP application as well as an HTTP website via separate BIG-IP Pools. The server support team reports that some servers are receiving a lot more traffic than others.
Which Load Balancing Method should the BIG-IP Administrator apply to even out the connection count?
- A. Least Connections (Member)
- B. Ratio (Node)
- C. Least Connections (Node)
- D. Ratio (Member)
Answer: C
Explanation:
Explanation
The connection is required to be balanced, and the unit is the server and the application port is the unit, so it is node.
NEW QUESTION # 142
Which two statements
describe differences
between the active and standby systems. (Choose two.)
- A. Floating selfElIP addresses are hosted only by the active system.
- B. FailElover triggers only cause changes on the active system.
- C. Configuration changes can only be made on the active system.
- D. Virtual server addresses are hosted only by the active system.
- E. Monitors are performed only by the active system.
Answer: A,D
NEW QUESTION # 143
......
Get Instant Access to 201 Practice Exam Questions: https://evedumps.testkingpass.com/201-testking-dumps.html