Free 201 sample questions

Correct answer: In the virtual server properties, set the Default Persistence Profile to the Source Address profile and the Fallback Persistence Profile to the SSL profile.

The BIG-IP system is designed to handle this scenario explicitly. The 'Default Persistence Profile' is always checked first. If no persistence record is found using the default profile, the system then checks the 'Fallback Persistence Profile'. This allows for a layered approach to session persistence without requiring iRules or custom profiles for this common use case.

Correct answer: Connect a USB drive to the BIG-IP, and the EUD utility will provide an option to save the log file directly to the drive.

The standard F5 procedure for collecting EUD results involves using a USB flash drive. The EUD utility has a built-in function to detect the drive and save the diagnostic log file, which can then be easily transferred to another machine for review or uploaded to F5 Support.

Correct answer: :p

The `:p` modifier used with the `-i 0.0` interface tells `tcpdump` to capture traffic on the client-side of the flow after it has been decrypted by the Client SSL profile. This allows the administrator to see the raw, unencrypted application layer data (e.g., HTTP headers and payload) as it is processed by TMM, which is crucial for troubleshooting application-level performance issues.

Correct answer: Network > Self IPs

Port Lockdown is a security feature configured on a per-self-IP basis. To check or change this setting, the administrator must navigate to Network > Self IPs, select the specific self-IP in question, and then review the 'Port Lockdown' setting. SSH is likely allowed while HTTPS is not.

Correct answer: A qkview diagnostic file.

A qkview file is a comprehensive snapshot of the BIG-IP system's configuration, logs, and real-time status. F5 Support engineers rely on this file as the primary source of information for troubleshooting. Uploading it to iHealth provides an initial automated analysis and makes the data readily available to the support team, significantly speeding up the diagnostic process.

Correct answer: The pool member's health is unknown; no monitor is assigned.

In the BIG-IP Network Map, different shapes and colors represent the status of objects. A blue square specifically indicates that the object (in this case, a pool member) is available but its health status is unknown because there is no health monitor assigned to it. The system cannot verify its ability to service requests.

Correct answer: Upgrade the standby unit first, verify its status, force a failover to make it active, and then upgrade the new standby unit.

The standard, best-practice procedure for upgrading an HA pair is to perform the operation on the standby unit first. This allows the active unit to continue handling traffic. Once the standby unit is successfully upgraded and rebooted into the new software version, the administrator can force a failover. The newly upgraded unit becomes active, and the process is repeated on the other unit, which is now the standby. This ensures traffic is always being handled by one of the units.

Correct answer: Set the state to 'Disabled'.

Setting a pool member's state to 'Disabled' is the correct action for graceful removal. This state allows existing connections, including those maintained by persistence, to continue until they are closed or time out. However, it prevents the BIG-IP from sending any new connections to that member. 'Forced Offline', in contrast, marks the member as down and immediately stops it from receiving any traffic, which could disrupt existing user sessions.

Correct answer: A persistence profile on the virtual server is overriding the load balancing decision for returning clients.

The BIG-IP system checks for a persistence record before making a load balancing decision. If a client has an existing persistence record for a specific pool member, the system will send the new connection to that member, regardless of the 'Least Connections' algorithm. If most returning clients are persisted to other members, a new or underutilized member will receive very little traffic.

Correct answer: Guest

The 'Guest' role in TMOS is specifically designed for read-only access. Users with this role can log in to the Configuration Utility and view configurations, statistics, and statuses, but they are prohibited from making any changes. This is the principle of least privilege in action for monitoring purposes.