F50-531 Online Practice Questions and Answers

Which is an advantage of terminating SSL communication at the BIG-IP rather than the ultimate web server?

A. Terminating SSL at the BIG-IP can eliminate SSL processing at the web servers.

B. Terminating SSL at the BIG-IP eliminates all UN-encrypted traffic from the internal network.

C. Terminating SSL at the BIG-IP eliminates the need to purchase SSL certificates from a certificate authority.

D. Terminating SSL at the BIG-IP eliminates the need to use SSL acceleration hardware anywhere in the network.

Which two statements are true about SNATs? (Choose two.)

A. SNAT's are enabled on all VLANs, by default.

B. SNAT's can be configured within a Profile definition.

C. SNAT's can be configured within a Virtual Server definition.

D. SNAT's are enabled only on the VLAN where origin traffic arrives, by default

A BIG-IP has two load balancing virtual servers at 150.150.10.10:80 and 150.150.10.10:443. The port 80 virtual server has SNAT auto-map configured. There is also a SNAT configured at 150.150.10.11 set for a source address range of 200.200.1.0 / 255.255.255.0. All other settings are at their default states. If a client with the IP address 200.200.1.1 sends a request to https://150.150.10.10, what is the source IP address when the associated packet is sent to the pool member?

A. 200.200.1.1

B. 150.150.10.11

C. Floating self IP address on VLAN where the packet leaves the system

D. Floating self IP address on VLAN where the packet arrives on the system

Which statement describes a typical purpose of iRules?

A. iRules can be used to add individual control characters to an HTTP data stream.

B. iRules can be used to update the timers on monitors as a server load changes.iRules can be used to update the timers on monitors as a server's load changes.

C. iRules can examine a server response and remove it from a pool if the response is unexpected iRules can examine a server's response and remove it from a pool if the response is unexpected.

D. iRules can be used to look at client requests and server responses to choose a pool member to select for load balancing.

A virtual server is listening at 10.10.1.100:any and has the following iRule associated with it: when CLIENT_ACCEPTED { if {[TCP::local_port] equals 21 } { pool ftppool } elseif {[TCP::local_port] equals 23 } { pool telnetpool } If a user connects to 10.10.1.100 and port 22, which pool will receive the request?

A. ftppool

B. telnetpool

C. None. The request will be dropped.

D. Unknown. The pool cannot be determined from the information provided.

What is the purpose of provisioning?

A. Provisioning allows modules that are not licensed to be fully tested.

B. Provisioning allows modules that are licensed be granted appropriate resource levels.

C. Provisioning allows the administrator to activate modules in non-standard combinations.

D. Provisioning allows the administrator to see what modules are licensed, but no user action is ever required.

Assume a BIG-IP has no NATs or SNATs configured. Which two scenarios are possible when client traffic arrives on a BIG-IP that is NOT destined to a self-IP? (Choose two.)

A. If the destination of the traffic does not match a virtual server, the traffic will be discarded.

B. If the destination of the traffic does not match a virtual server, the traffic will be forwarded based on routing tables.

C. If the destination of the traffic matches a virtual server, the traffic will be processed per the virtual server definition.

D. If the destination of the traffic matches a virtual server, the traffic will be forwarded, but it cannot be load-balanced since no SNAT has been configured.

A virtual server is listening at 10.10.1.100:80 and has the following iRule associated with it: when HTTP_REQUEST { if {[HTTP::uri] ends_with "txt" } { pool pool1 } elseif {[HTTP::uri] ends_with "php" } { pool pool2 } If a user connects to http://10.10.1.100/foo.html, which pool will receive the request?

A. pool1

B. pool2

C. None. The request will be dropped.

D. Unknown. The pool cannot be determined from the information provided.

Which statement is true about the synchronization process, as performed by the Configuration Utility or by typing b config sync all?

A. The process should always be run from the standby system.

B. The process should always be run from the system with the latest configuration.

C. The two /config/bigip.conf configuration files are synchronized (made identical) each time the process is run.

D. Multiple files, including /config/bigip.conf and /config/bigip_base.conf, are synchronized (made identical) each time the process is run.

How is MAC masquerading configured?

A. Specify the desired MAC address for each VLAN for which you want this feature enabled.

B. Specify the desired MAC address for each self-IP address for which you want this feature enabled.

C. Specify the desired MAC address for each VLAN on the active system and synchronize the systems.

D. Specify the desired MAC address for each floating self-IP address for which you want this feature enabled.