F5 201 問題集

質問 1：
A BIG-IP Administrator creates an HTTP Virtual Server using an iApp template. After the Virtual Server is created, the user requests to change the destination IP addresses. The BIG-IP Administrator tries to change the destination IP address from 10.1.1.1 to 10.2.1.1 in Virtual Server settings, but receives the following error:
The application service must be updated using an application management interface What is causing this error?
A. The Application Services have Strict Updates enabled.
B. The IP addresses are already in use.
C. The IP addresses used are NOT from the same subnet as the Self IP.
D. The Application Service was NOT deleted before making the IP address change.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Assume a virtual server is configured with a ClientSSL profile. What would the result be if the virtual server's destination port were not 443?
A. As long as client traffic was directed to the alternate port, the virtual server would work as intended.
B. Virtual servers with a ClientSSL profile are always configured with a destination port of 443.
C. SSL termination could not be performed if the virtual server's port was not port 443.
D. Since the virtual server is associated with a ClientSSL profile, it will always process traffic sent to port 443.
正解：A

質問 3：
A standard virtual server is defined with a pool and a SNAT using automap. All other settings for the virtual server are at defaults. When client traffic is processed by the BIG-IP, what will occur to the IP addresses?
A. Traffic initiated by the pool members will have the source address translated to a self-IP address but the destination address will not be changed.
B. Traffic initiated to the virtual server will have the destination address translated to a pool member address and the source address translated to a self-IP address.
C. Traffic initiated to the virtual server will have the destination address translated to a pool member address and the source address translated to a self-IP address. Traffic arriving destined to other destinations will have the source translated to a self-IP address only.
D. Traffic initiated by selected clients, based on their IP address, will have the source address translated to a self-IP address but the destination will only be translated if the traffic is destined to the virtual server.
正解：B

質問 4：
A BIG-IP Administrator finds the following log entry after a report of user issues connecting to a virtual server:
01010201: 2: Inet port exhaustion on 10.70.110.112 to 192.28.123.250:80 (proto 6) How should the BIG-IP Administrator modify the SNAT pool that is associated with the virtual server?
A. Remove the SNAT pool and apply SNAT Automap.
B. Increase the timeout of the SNAT addresses.
C. Add an address to the SNAT pool.
D. Remove an IP address from the SNAT pool.
正解：C

質問 5：
A virtual server is defined using a source address based persistence profile. The last five connections were A, B, C, A, C . Given the conditions shown in the graphic, if a client with IP address 205.12.45.52 opens a connection to the virtual server, which member will be used for the connection?

A. 10.10.20.3:80
B. 10.10.20.2:80
C. 10.10.20.5:80
D. 10.10.20.4:80
E. 10.10.20.1:80
正解：B

質問 6：
DNS queries from two internal DNS servers are being load balanced to external DNS Servers via a Virtual Server on a BIG-P device. The DNS queries originate from 192.168.101.100 and 192.168.101.200 and target 192.168.21.50 All DNS queries destined for the external DNS Servers fail Which property change should the BIG-IP Administrator make in the Virtual Server to resolve this issue?
A. Type to Performance (HTTP)
B. Protocol Profile (Client) to DNS-OPTIMZED
C. Source Address to 192.168.101.0/24
D. Protocol to UDP
正解：D

質問 7：
A site has assigned the ICMP monitor to all nodes and a custom monitor, based on the HTTP template, to a pool of web servers. The HTTP based monitor is working in all cases. The ICMP monitor is failing for 2 of the pool member 5 nodes.
All other settings are default. What is the status of the monitor is working in all cases?
A. All pool members are down since the ICMPbased monitor is failing in some cases.
B. The pool members whose nodes are failing the ICMPbased monitor will be marked unavailable.
C. The pool members whose nodes are failing the ICMPbased monitor will be marked disabled.
D. All pool members are up since the HTTPbased monitor is successful.
正解：B

質問 8：
What is the purpose of MAC masquerading?
A. to allow both BIGIP devices to simultaneously use the same MAC address
B. to minimize ARP entries on routers
C. to minimize connection loss due to ARP cache refresh delays
D. to prevent ARP cache errors
正解：C