F5 BIG-IP Administrator 201 TMOS Administration Exam Questions

1. A BIG-IP Administrator is configuring a pool with members who have differing capabilities. Connections

to pool members must be load balanced appropriately.

Which load balancing method should the BIG-IP Administrator use?

2. A BIG-IP Administrator needs to restore a UCS file to an F5 device using the Configuration Utility.

Which section of the Configuration Utility should the BIG-IP Administrator access to perform this task?

3. Which Virtual Server type prevents the use of a default pool?

4. A user needs to determine known security vulnerabilities on an existing BIG-IP appliance and how to

remediate these vulnerabilities.

Which action should the BIG-IP Administrator recommend?

5. The 8IG-IP Administrator generates a qkview using "qkview -SO" and needs to transfer the output file via SCP.

Which directory contains the output file?

6. A BIG-IP Administrator notices that one of the servers that runs an application is NOT receiving any traffic. The BIG-IP Administrator examines the configuration status of the application and observes the displayed monitor configuration and affected Pool Member status.

What is the possible cause of this issue?

7. Which method is recommended for creating a new user from the CLI?

8. A BIG-IP Administrator wants to add a new Self IP to the BIG-IP device.

Which item should be assigned to the new Self IP being configured?

9. Refer to the exhibit.

The BIG-IP Administrator needs to avoid overloading any of the Pool Members with

connections, when they become active.

What should the BIG-IP Administrator configure to meet this requirement?

10. Refer to the exhibit.

Which Pool Members are receiving traffic?

11. A BIG-IP device has only LTM and ASM modules provisioned. Both have nominal provisioning level. The BI6-IP Administrator wants to dedicate more resources to the LTM module. The ASM module must remain enabled.

Which tmsh command should the BIG-IP Administrator execute to obtain the desired result?

12. The BIG-IP appliance fails to boot. The BIG-IP Administrator needs to run the End User Diagnostics (EUD) utility to collect data to send to F5 Support.

Where can the BIG-IP Administrator access this utility?

13. Some users who connect to a busy Virtual Server have connections reset by the BIG-IP system. Pool member resources are NOT a factor in this behavior.

What is a possible cause for this behavior?

14. For a given Virtual Server, the BIG-IP must perform SSL Offload and negotiate secure communication

overTLSvl.2only.

What should the BIG-IP Administrator do to meet this requirement?

15. A BIG-IP Administrator plans to upgrade a BIG-IP device to the latest TMOS version.

Which two tools could the administrator leverage to verify known issues for the target versions?

(Choose two.)

16. A BIG-IP Administrator remotely connects to the appliance via out-of-band management using https://mybigip mycompany net. The management portal has been working all week. When the administrator attempts to login today, the connection times out.

Which two aspects should the administrator verify? (Choose two)

17. Refer to the exhibit.

A user attempts to connect to 10.10.10.1.80 using FTP over SSL with an FTPS client.

Which virtual server will match and attempt to process the request?

18. An ecommerce company is experiencing latency issues with online shops during Black Friday’s peak season.

The BIG-IP Administrator detects an overall high CPU load on the BIG-IP device and wants to move the

top utilized Virtual Servers to a dedicated BIG-IP device.

Where should the BIG-IP Administrator determine the problematic Virtual Servers?

19. A BIG-IP Administrator applied the latest hotfix to an inactive boot location by mistake, and

needs to downgrade back to the previous hotfix.

What should the BIG-IP Administrator do to change the boot location to the previous hotfix?

20. Refer to the exhibit.

A BIG-IP Administrator needs to deploy an application on the BIG-IP system to perform SSL offload and

re-encrypt the traffic to pool members.

During testing, users are unable to connect to the application.

What must the BIG-IP Administrator do to resolve the issue?

21. The BIG-IP Administrator needs to perform a BIG-IP device upgrade to the latest version of TMOS. Where can the administrator obtain F5 documentation on upgrade requirements?

22. Refer to the exhibit.

Why is the virtual server responsive to incoming connections?

23. Administrative user accounts have been defined on the remote LDAP server and are unable to log in to the BIG-IP device.

Which log file should the BIG-IP Administrator check to find the related messages?

24. A BIG-IP Administrator is setting up a new BIG-IP device. The network administrator reports that the interface has an incompatible media speed. The BIG-IP Administrator needs to change this setting manually.

From which location should the BIG-IP Administrator perform this task?

25. An LTM device has a virtual server mapped to www.f5.com with a pool assigned. Users report that when browsing, they are periodically required to re-login to /resources/201.1.7.b.2_l.com.

The objects are defined as follows:

Virtual server. Destination 192.168.245.100:443 netmask 255.255.255.0

Persistence: SSL session persistence

Profiles: HTTP/TCP

Which persistence method should the BIG-IP Administrator apply to resolve this issue?

26. A BIG-IP Administrator defines a device Self IP . The Self IP is NOT reachable from the network.

What should the BIG-IP Administrator verify first?

27. A BIG-IP Administrator is receiving intermittent reports from users that SSL connections to the BIG-IP device are failing.

Upon checking the log files, the BIG-IP Administrator notices the following error message:

ere tmm<instance>[<pid>]: 01260008:3: SSL transaction (TPS) rate limit reached

After reviewing statistics, the BIG-IP Administrator notices there are a maximum of 1200 client-side SSL

TPS and a maximum of 800 server-side SSL TPS.

What is the minimum SSL license limit capacity the BIG-IP Administrator should upgrade to handle this

peak?

28. Which type of Virtual Server requires the use of a FastL4 profile?

29. A BIG-IP Administrator is checking the BIG-IP device for known vulnerabilities.

What should the 8IG-IP Administrator upload to BIG-IP iHealth for further analysis?

30. The owner of a web application asks the 8IG-IP Administrator to change the port that the BIG-IP device sends traffic to. This change must be made for each member in the server pool named app_pool for their Virtual Server named app_vs.

In which area of the BIG-IP Configuration Utility should the BIG-P Administrator make this change?

31. Refer to the exhibit.

A BIG-IP Administrator creates a new Virtual Server to load balance SSH traffic. Users are unable to log on to the servers.

What should the BIG-IP Administrator do to resolve the issue?

32. Which Virtual Server type should be used to load balance HTTP traffic to a pool of servers?

33. A BIG-IP Administrator receives an RMA replacement for a failed F5 device. The BIG-IP Administrator tries to restore a UCS taken from the previous device, but the restore fails.

The following error appears

inthe/var/log/itm.

mcpd [****J: •*****»;0; License is not operational (expired or digital signature does not match contents.)

What should the BIG-IP Administrator do to avoid this error?

34. A BIG-IP Administrator sees the following error message in /var/log/ltm diskmonitor: *******; Disk partition shared has less than 30$ free.

Which section of the Configuration Utility should the BIG-IP Administrator access to investigate this error message?

35. Refer to the exhibit.

A BIG-IP Administrator creates a new Virtual Server. The end user is unable to access the page. During troubleshooting, the administrator learns that the connection between the BIG-IP system and server is NOT set up correctly.

What should the administrator do to solve this issue?

36. A BIG-IP Administrator plans to resolve a non-critical issue with a BIG-IP device in 2 weeks.

What Severity level should be assigned to this type of F5 support ticket?

37. A development team needs to apply a software fix and troubleshoot one of its servers. The BIG-IP Administrator needs to immediately remove all connections from the BIG-IP system to the back end server. The BIG-IP Administrator checks the Virtual Server configuration and finds that a persistence profile is assigned to it.

What should the 8IG-IP Administrator do to meet this requirement?

38. A BIG-IP Administrator is conducting maintenance on one BIG-IP appliance in an HA Pair.

Why should the BIG-IP Administrator put the appliance into FORCED_OFFLINE state?

39. Refer to the exhibit.

A BIG-IP Administrator needs to configure health monitors for a newly configured server pool named Pool_B.

Which health monitor settings will ensure that all pool members will be accurately marked as available or unavailable?

40. A set of servers is used for an FTP application as well as an HTTP website via separate BIG-IP Pools. The server support team reports that some servers are receiving a lot more traffic than others.

Which Load Balancing Method should the BIG-IP Administrator apply to even out the connection count?

41. A BIG-IP Administrator makes a configuration change to a Virtual Server on the Standby device of an HA pair. The HA pair is currently configured with Auto-Sync Enabled.

What effect will the change have on the HA pair configuration?

42. Refer to the exhibit.

An LTM device has a virtual server mapped to www.f5.com. Users report that when they connect to /resources/201.1.2h.l_l.com they are unable to receive content.

What is the likely cause of the issue?

43. A BIG-IP Administrator finds the following log entry:

tnm tmm[7141]: 011e0002:4: sweeperjjpdate: aggressive mode activated.

Which action should the BIG-IP Administrator to mitigate this memory issue?

44. A VLAN has the following objects configured:

Self-IP 10.10.10.100 with port lockdown set to Allow default

Virtual server 10.10.10.100:443 with UDP profile enabled

Virtual server 10.10.10.0/24 port forwarding virtual server

Global destination NAT forwarding 10.10.10.100 to internal server 172.168.10.100

Which object will process this request when https://10.10.10.100 is entered into a browser?

45. A BIG-IP Administrator needs to remove a pool specific health monitor. There is a pool named Best Pool with two members, one named Best pool member and one named Best pool member2.

In the Local Traffic section of the administrative GUI, which stops should the BIG-IP Administrator take to remove a pool level monitor?

46. Refer to the exhibit.

A pool member fails the monitor checks for about 30 minutes and then starts passing the monitor

checks. New traffic is Not being sent to the pool member.

What is the likely reason for this problem?

47. A BIG-IP Administrator is unable to connect to the management interface via HTTPS.

What is a possible reason for this issue?

48. The BIG-IP Administrator needs to perform a BIG-IP device upgrade to the latest version of TMOS. Where can the administrator obtain F5 documentation on upgrade requirements?

49. A BIG-IP Administrator need to ensure that a pool member and down by the monitor the BIG-IP system

sends existing connections to another be pool member.

Which should the BIG-IP Administrator perform to meet this goal?

50. Refer to the exhibit

The network team creates a new VLAN on the switches. The BIG-IP Administrator needs to create a configuration on the BIG-IP device. The BIG-IP Administrator creates a new VLAN and Self IP, but the servers on the new VLAN are NOT reachable from the BIG-IP device.

Which action should the BIG-IP Administrators to resolve this issue?

51. A BIG-IP device is configured with both an internal external and two Corporate VLANs. The virtual server has SNAT enabled and is set to listen on all VLANs Auto Last Hop is disabled. The Corporate users are on 10.0.0.0./24 and 172.16.0.0/12. The BIG-IP has a Self-IP on the 1.0.0.0.0./24 subnet.

Internet users are able to access the virtual server. Only some of the Corporate users are able to connect to the virtual server A BIG-IP Administrator performs a tcpdump on the BIG-IP and verifies that traffic is arriving from users in 10.0.0.0/24.

What should the BIG-IP Administrator do to correct this behaviour?

52. A BIG-IP Administrator adds new Pool Members into an existing, highly utilized pool. Soon after, there are reports that the application is failing to load for some users.

What pool level setting should the BIG-IP Administrator check?

53. Users are unable to reach an application. The BIG-IP Administrator checks the Configuration Utility and observes that the Virtual Server has a red diamond in front of the status.

What is causing this issue?

54. A BIG-IP Administrator creates an HTTP Virtual Server using an iApp template. After the Virtual Server is created, the user requests to change the destination IP addresses. The BIG-IP Administrator tries to

change the destination IP address from 10.1.1.1 to 10.2.1.1

in Virtual Server settings, but receives the

following error:

The application service must be updated using an application management interface

What is causing this error?

55. A BIG-IP Administrator suspects that one of the BIG-IP device power supplies is experiencing power outages.

Which log file should the BIG-IP Administrator check to verify the suspicion?

56. DNS queries from two internal DNS servers are being load balanced to external DNS Servers via a Virtual Server on a BIG-P device. The DNS queries originate from 192.168.101.100 and 192.168.101.200 and target 192.168.21.50

All DNS queries destined for the external DNS Servers fail

Which property change should the BIG-IP Administrator make in the Virtual Server to resolve this issue?

57. In the BIG-IP Configuration Utility, a user requests a single screen view to determine the status of all Virtual Servers and associated pool members, as well as any iRules in use. Where should the BIG-IP Administrator instruct the user to find this view?

58. An LTM device has a virtual server mapped to www5f.com with a pool assigned.

The objects are defined as follows:

Virtual server. Destination 192.168.245.100.443 netmask 255.255.255.0

Persistence: Source address persistence netmask 255.0.0.0

SNAT:AutoMap

Profiles: HnP/TCP

How should the BIG-IP Administrator modify the persistence profile so that each unique IP address creates a persistence record?

59. Which log file should the BIG-IP Administrator check to determine if a specific user tried to log in to the 8IG-IP Configuration by utility?

60. A new BIG-IP VE is deployed with default settings. The BIG-IP Administrator completes the setup utility in the Configuration Utility. The internal self IP address fails to respond to a ping request.

What is a possible cause of this issue?