[Full-Version] 2022 New Preparation Guide of F5 101 Exam
101 Practice Exam - 240 Unique Questions
For more info visit:
NEW QUESTION 87
GTM can sign a DNS response using DNSSEC only if the DNS request. GTM can sign a DNS response using DNSSEC only if the DNS request.
- A. is answered by BIND running on the GTM.
- B. is a part of a DNSSEC zone.
- C. is for a Wide-IP name on the GTM.
- D. has the DO bit set.
Answer: B
NEW QUESTION 88
In wh.ch layer of the OSI model is the data transported in the form of a packet?
- A. Session
- B. Network
- C. Transport
- D. Presentation
Answer: B
NEW QUESTION 89
A top-level DNS zone uses a CNAME record to point to a sub-zone. Which of the following is an example of a sub-zone?
- A. www.F5.com
- B. f5.com
- C. www.F5.com/sub
- D. .com
- E. www.gslb.F5.com
Answer: E
NEW QUESTION 90
Which of the following is a valid IP address and prefix length?
- A. 192 168:0. 129/25
- B. 192 168 :0 255/25
- C. 192.168:0 128/25
- D. 192. 168.:0 177/25
Answer: A
NEW QUESTION 91
Which three of the following are some of the methods that F5 uses with its environmental stress screening chamber?
- A. Varying the voltage from extreme high to extreme low
- B. Ensuring continual functioning through fire or flooding conditions
- C. Repairing failed components until they function properly
- D. Running a product 300 to 500 times on each cycle
- E. Alternate temperature from -5 degrees Celsius to 60 degrees Celsius
Answer: A,D,E
Explanation:
Explanation/Reference:
Explanation:
NEW QUESTION 92
Network Security personnel are entirely responsible for web application security.
- A. False
- B. True
Answer: A
Explanation:
Explanation/Reference:
Explanation:
NEW QUESTION 93
Match the security-related term with the correct definition.
1. Demilitarized zone (DMZ)
2. Denial of service (DoS)
3. DNS Express
4. DNS Security Extensions (DNSSEC)
5. Endpoint inspection
Answer:
Explanation:
Explanation
1. Demilitarized zone (DMZ) - A portion of an enterprise network that sits behind a firewall but outside of or segmented from the internal network.
2. Denial of service (DoS) - An attack that floods a network or server with requests and data making it unavailable.
3. DNS Express - A high-speed in-memory authoritative DNS slave that can dramatically reduce the DNS server infrastructure.
4. DNS Security Extensions (DNSSEC) - A set of standards created to address vulnerabilities in the Domain Name System (DNS) and protect it from online threats.
5. Endpoint inspection - Ensures a client device does not present a security risk before it is granted a remote-access connection to the network.
NEW QUESTION 94
In a routed configuration, what does LTM do with the packet before sending it to the pool member?
- A. Change the source IP address
- B. Change the destination IP address
- C. Leave it unchanged and forward it
- D. Change the source IP and the destination IP address
Answer: B
Explanation:
Explanation/Reference:
NEW QUESTION 95
Why is BIG-IP ASM ideally suited to protect against layer 7 attacks, including HTTP and HTTPS/SSL traffic, when compared to an intrusion prevention system (IPS)?
- A. An intrusion prevention system (IPS) is based on Packet Filtering.
- B. An IPS can only look at overall traffic patterns; it doesn't understand what applications are in the network.
- C. An IPS only focus on operating system attacks; it doesn't understand what application are in the network.
- D. An IPS doesn't have the visibility into HTTPS traffic. it doesn't understand what applications are in the network.
Answer: B
Explanation:
Explanation/Reference:
NEW QUESTION 96
ATP administrator recently added a new VLAN and needs to confirm that the BIG IP sees traffic on this VLAN. The VLAN is untagged on interface 1.1 and is named VLAN704 in the BIG IP Configuration Unity.
Which tool should be used to generate a packet capture that shows all traffic on this VLAN?
- A. ifconsfig
- B. tcpdump
- C. netstat
- D. map
Answer: B
NEW QUESTION 97
The ARX is like a mini network manager. It is able to check the health of the environment and can raise alerts when thresholds are reached.
- A. False
- B. True
Answer: B
Explanation:
Explanation/Reference:
NEW QUESTION 98
Even though F5 is an application delivery controller, it can also effectively mitigate attacks directed at thenetwork layer.
- A. False
- B. True
Answer: B
NEW QUESTION 99
An administrator needs to prepare change control documents for operations staff To reduce possible errors the administrator killed number of default configuration options is choose from. Which F5 feature is intended to help with this task?
- A. iApp
- B. iCatl
- C. icontrol
- D. iRules
Answer: C
Explanation:
https://devcentral.f5.com/icontrol
NEW QUESTION 100
Assuming there are open connections through an active system's virtual servers and a fail-over occurs, by default, what happens to the connections.
- A. When persistence mirroring is enabled, open connections are maintained even if a fail-over occurs.
- B. All open connections are lost, but new connections are initiated by the newly active BIG-IP, resulting in minimal client downtime.
- C. All open connections are lost.
- D. All open connections are maintained.
- E. Long-lived connections such as Telnet and FTP are maintained, but short-lived connections such as HTTP are lost.
Answer: C
NEW QUESTION 101
In the current version of BIG-IP, what happens if the GTM does not find a wide IP that matches the DNS request?
- A. It sends a broadcast request to all GTM devices.
- B. It sends a request to its configured backup GTM device.
- C. It sends the request to an external DNS.
- D. It uses iQuery to request the information from LTM.
- E. It sends an un-resolvable error to the client.
Answer: C
NEW QUESTION 102
Which of the following does not pertain to protecting the Requested Resource (URI) element?
- A. Domain cookie validation
- B. File type validation
- C. URL name validation
- D. Attack signature validation
Answer: A
NEW QUESTION 103
DNSSEC is a GTM add-on licensing feature.
- A. False
- B. True
Answer: B
NEW QUESTION 104
A virtual server is defined per the charts. The last five client connections were to members C, D, A, B, B.
Given the conditions shown in the above graphic, if a client with IP address 205.12.45.52 opens a connection to the virtual server, which member will be used for the connection.
- A. 172.16.20.2:80
- B. 172.16.20.4:80
- C. 172.16.20.3:80
- D. 172.16.20.5:80
- E. 172.16.20.1:80
Answer: B
NEW QUESTION 105
......
How to book the F5 101 Exam
These are following steps for registering the F5 101 exam. Step 1: Visit to F5 Candidate Portal Exam Registration Step 2: Signup/Login to F5 account Step 3: After creating F5 account Select your testing center from PearsonVUE Step 4: Select Date, time and confirm with payment method
Latest Questions 101 Guide to Prepare Free Practice Tests: https://www.practicematerial.com/101-exam-materials.html
Reliable 101 Dumps Questions Available as Web-Based Practice Test Engine: https://drive.google.com/open?id=1zmTej9SS21DSnIHdOjuQtKaBeqqJXTpx
