EMT Practice Test

1. Question Content...

---

Question1: If LTM uses the round robin load balancing method, which pool member in the diagram above will receive the next request?

Question2: A top-level DNS zone uses a CNAME record to point to a sub-zone. Which of the following is an example of a sub-zone?

Question3: The main drawback to using an APM Deployment Wizard is that it is not possible to edit the resulting objects, including the access policy.

Question4: TMOS is an F5 software module that runs on the BIG-IP platform.

Question5: Which three of the following are benefits of adding WebAccelerator to the network infrastructure?

Question6: What is NOT a benefit of using a SNAT?

Question7: A customer wants the best possible throughput but only has a maximum of 3RU rack space. Which F5platform should you recommend?

Question8: What happens when the data center that GTM recommends for a client is unavailable?

Question9: In a routed configuration, what does LTM do with the packet before sending it to the pool member?

Question10: To function properly, an Enterprise Manager device is required within each data center.

Question11: The BIG-IP determines the lowest connection speed between the client and the server and then uses that for both connections.

Question12: Select the key reasons F5 is able to handle DNS DDoS attacks so effectively? Select two.

Question13: Customers can purchase LTM as a stand-alone product, or layer it with additional software modules to increase the functionality of the BIG-IP device.

Question14: ________% of F5 products are sent through thorough software testing before being sold to customers

Question15: Which two of these statements about OneConnect are true?

Question16: GTM can load balance to LTM in addition to non-BIG-IP hosts.

Question17: One reason APM beats the competition is its ability to perform both user authentication and authorization on a single device.

Question18: Using file virtualization, what can the ARX do for customers?

Question19: The LTM "Manager" authentication role can create iRules.

Question20: The least connections load balancing method functions best when all pool members share similar characteristics.

Question21: If your customer has a policy requirement that cannot be handled in the Visual Policy Editor, what would you use to supplement the Visual Policy Editor?

Question22: When using a routed configuration, the real server must point to the LTM as the ________.

Question23: Which of the following statements about Web server offload is NOT true?

Question24: TCP Express enables LTM to use different TCP settings for the connection between the client and LTM, and the connection between LTM and the pool member.

Question25: If the BIG-IP device is NOT always located between the client and the server, it will NOT provide full optimization and security.

Question26: ASM Geolocation reporting provides information regarding:

Question27: SIMULATION
The layer 3 security feature _______ Cookies that protects against SYN floods, DoS, and DDoS attacks.
(Fill in)

Question28: Which three of the following are benefits of adding WebAccelerator to the network infrastructure?

Question29: All members of a pool must share the same service port?

Question30: A user's access to resources can change based on the computer they connect from.

Question31: The BIG-IP full proxy architecture has full visibility from the client to the server and from the server to the client.
What security benefit does this provide to customers?

Question32: It is common for free storage space to exist somewhere in a business network that is not easy for storage administrators to utilize. What solution can the ARX provide in this situation?

Question33: Another name for the F5 OneConnect feature is TCP multiplexing.

Question34: When using a routed configuration, the real server must point to the LTM as the _________.

Question35: Adding more RAM to a GTM device drastically improves query performance.

Question36: The Policy Builder benefits include:

Question37: Which of the following statements is true about ARX's capacity balancing ability?

Question38: Learning suggestions can be the result of:

Question39: Which of the following is NOT a benefit of using SSL offload?

Question40: In order to ensure that a specific file type is never moved down to a secondary file tier, the administrator should:

Question41: SIMULATION
A _______ object maps a FQDN to virtual servers. (Fill in)

Question42: Which item is NOT a function of a properly deployed and configured ASM?

Question43: Similar to LTM monitors, GTM monitors use both an Interval and a Timeout value.

Question44: Which of the following is NOT a method that TMOS uses to improve the performance of applications?

Question45: APM administrators can configure access policies granting users which two types of access?

Question46: Which of the following is a benefit of using iRules?

Question47: When using only LTM in redundant pairs, a customer can load balance to multiple data centers.

Question48: The least connections load balancing method functions best when all pool members share similar characteristics.

Question49: Application trends and drivers that increase the need for application security are:

Question50: Which of the following is NOT a logging option within an APM access control entry?

Question51: In the next few years, 75% of new storage capacity will shift to unstructured data (also known as file data).
Which two of the following are examples of unstructured data?

Question52: An age-based policy is set up on the ARX that retains only data modified in the Iast 3 months on tier 1 storage and moves the rest of the data to secondary storage. What happens when the end user tries to access data that has not been touched in 6 months?

Question53: A network administrator tells you that they do NOT need WebAccelerator because their Web application is fine. What is your best response?

Question54: Which is NOT an ASM protection method for cross site scripting?

Question55: Which is NOT a function of ASM?

Question56: If LTM uses the least connections load balancing method, which pool member in the following diagram receives the next request?

Question57: GTM solves which three of these standard DNS limitations?

Question58: SIMULATION
GTM uses the F5 ___________ protocol to synchronize performance metrics between GTMdevices. (Fill in)

Question59: What is NOT a benefit of using a SNAT?

Question60: Which three are GTM server dynamic load balancing modes?

Question61: Which item is NOT a function of ASM?

Question62: ARX will detect any modification to a file on the second tier because all clients are being .......... by the ARX to get to the storage.

Question63: Since F5 built GTM on the TMOS platform it can exist on the same BIGIP device as LTM:

Question64: Which of the following does NOT describe network performance management?

Question65: The ARX is like a mini network manager. It is able to check the health of the environment and can raise alerts when thresholds are reached.

Question66: Network Security personnel are entirely responsible for web application security.

Question67: Although not all modules run on all platforms, each F5 hardware platform can run LTM plus at least one additional software module.

Question68: The Rapid Deployment Policy is used to:

Question69: The production version of BIG-IP Virtual Edition is limited to 200 Mbps throughput.

Question70: The administrator must specify APM access control entries as either L4 or L7.

Question71: ASM provides antivirus protection by:

Question72: The APM Dashboard enables administrators to monitor which two of these metrics?

Question73: Match each persistence method with the correct statement describing it:

Question74: Replicating a large database between sites could take several hours without WOM, and only several minutes with WOM.

Question75: Which two of these statements about OneConnect are true?

Question76: Select the best word or phrase to complete the following sentence.
Using the _______ feature in GTM, F5's Application Delivery Firewall solution can handle a significantly higher number of queries than traditional DNS servers.

Question77: Which of the following is a client-side action in the Visual Policy Editor that prevents external access and deletes any files created during a secure access session?

Question78: An administrator is planning on solving latency issues by placing the backup data center in a neighboring city to the primary data center. Why isn't this effective solution?

Question79: DRAG DROP
Match the security-related term with the correct definition.
1. OWASP Top 10
2. Secure Socket Layer (SSL)
3. Bot
4. Certificate
5. Content scrubbing
Select and Place:

Question80: Using IP Geolocation, an organization can always direct a client request from France to a data enter in Dublin.

Question81: Using Fast Cache with ASM will:

Question82: Select the question you would ask your customer related to DNS attacks. Based on the material, choose the most appropriate question.

Question83: What is the main cause of high latency in a Web application?

Question84: A customer says his business wouldn't benefit from buying ARX because it already has block based storage virtualization in place. Is he right? Why or why not?

Question85: DRAG DROP
Match the five elements of the intelligent file virtualization with the appropriate ARX feature:
Select and Place:

Question86: As a full TCP proxy, LTM acts as the termination point for both requests from the client and responses from the server.

Question87: Which of the following is NOT a profile type on the BIG-IP?

Question88: DRAG DROP
Place the following items in the order that the BIG-IP device uses when processing a packet.
Select and Place:

Question89: Information leakage is a major obstacle to achieving PCI DSS compliance.

Question90: For a typical business, what percentage of data does the ARX usually move to a secondary tier?

Question91: ASM combined with LTM provides protection against:

Question92: When using a redundant pair of LTMs, it is most advantageous to use them in an Active/Active scenario because this provides additional load balancing capabilities.

Question93: DRAG DROP
Match the security-related term with the correct definition.
1. Demilitarized zone (DMZ)
2. Denial of service (DoS)
3. DNS Express
4. DNS Security Extensions (DNSSEC)
5. Endpoint inspection
Select and Place:

Question94: Select the key question you would use to ask your customer related to DNS attacks?

Question95: How does the ARX eliminate the disruption caused by re-provisioning storage?

Question96: In order to improve GTM performance, administrators should use multiple complex monitors to ensure resources are functioning properly:

Question97: ARX can classify data based on all of the following EXCEPT:

Question98: ASM's Web Scraping protection:

Question99: Which two of the following factors are often responsible for poor Web application performance?

Question100: Using WOM for vMotion transfers across the WAN prevents VMware users from experiencing interruptions.

Question101: CSRF is difficult to detect because:

Question102: The F5 Visual Policy Editor (VPE) is unique to the F5 BIG-IP APM module; no other access management tool has this capability. Select the features that the VPE provides. Select two.

Question103: Which of the following is NOT a benefit of using SSL offload?

Question104: Which of the following can be accomplished using iRules?

Question105: DNSSEC is a GTM add-on licensing feature.

Question106: An F5 customer must install WebAccelerator on top of LTM:

Question107: The ARX can see ________ when a data modification takes place and will cue that file to be migrated back to the primary tier.

Question108: Which of the following statements about cookie persistence is NOT true?

Question109: Requests that do not meet the ASM security policies can:

Question110: LTM can only load balance outbound traffic by using iRules

Question111: Application templates save the time it typically takes to create nodes, pools, pool members, virtual servers, and monitors.

Question112: Which aspect of F5's Intelligent Services Platform helps you extend your security conversation to include F5professionals and customers?

Question113: Administrators can customize APM to resemble other internal Web applications in the organization.

Question114: The F5 Visual Policy Editor (VPE) is unique to the F5 BIG-IP APM module; no other access management tool has this capability. Select the features that the VPE provides. Select two

Question115: Organizations are moving towards a cloud solution are good candidates for F5 WOM solutions.

Question116: Which two of the following statements are accurate descriptions of the ARX index?

Question117: Which of the following is NOT a profile type on the BIG-IP?

Question118: The Device Inventory option in Enterprise Manager can replace an organization's static Excel spreadsheet containing similar data.

Question119: An administrator is adding GTM to the network infrastructure. Which of the following requirements would lead them to select an Authoritative Screening architecture rather than Delegation?

Question120: When an optimized TCP connection exists between LTM and the pool member, LTM can accept server responses faster than the client. What is the name of this feature?

Question121: When a business is hacked, they often lose more than money. What are the other consequences to a business as a result of being hacked? Select two.

Question122: The drawback to having BIG-IP act as a full application proxy is the decrease in application performance.

Question123: In order to further accelerate applications, the external router can direct subsequent client traffic to bypass LTM and communicate directly with the server.

Question124: The Protected Workspace client-side action provides more client-side security than the Cache and Session Control action.

Question125: ARX will detect any modification to a file on the second tier because all clients are being _______ by the ARX to get to the storage.

Question126: Why does the F5 Application Delivery Firewall solution mitigate SSL attacks more effectively than any other firewalls?

Question127: Identifying users by their IP address is a sufficient method of performing authentication and authorization.

Question128: An LTM object represents a downstream server that hosts a secure Web site and contains the IP address and port combination 192.168.9.250:443. What is this object?

Question129: What feature of the F5 Exchange solution helps administrators to streamline implementation for added security and granular control?

Question130: Which of the following business benefits does storage tiering offer to customers?

Question131: Which WOM feature replaces a long byte pattern, such as "100000111000110101", with a shorter reference to the pattern?

Question132: True or False, WOM speeds up large file data transfer across the WAN between a Windows client and a Windows file Server.

Question133: To share device information with F5 technical support, a customer must either verbally share the information over the phone or copy and send the information in an Email.

Question134: Complete the statement below by choosing the correct word or phrase to complete the sentence. By identifying IP addresses and security categories associated with malicious activity, the BIG-IP _______ service can incorporate dynamic lists of threatening IP addresses into the BIG-IP platform, adding context to policy decisions.

Question135: TMOS is an F5 software module that runs on the BIG-IP platform.

Question136: If a customer has an application that uses a customized protocol, what LTM feature can help optimize the traffic from the application?

Question137: Brute force protection will:

Question138: Which of the following TMOS feature enables BIG-IP to scale performance based to the available CPU cores?

Question139: The ARX saves customers time, money and frustration through a stub-based system that makes a slight modification to each file in order to more efficiently sort and store end user data.

Question140: Which of the following statements best describes the ARX architecture?

Question141: An LTM object contains both IP address and port combinations 20.18.9.250:80 and 20.18.9.251:80 and host the same Web application. What is this object?

Question142: The PCI compliance report is proof that a company is secure.

Question143: Which two of the following statements about how TMOS typically manages traffic between a client and server are accurate?

Question144: The Protected Workspace client-side action provides more client-side security than the Cache and Session Control action.

Question145: Although APM can interoperate with LTM, it is unable to use iRules for advanced processing.

Question146: Which of the following is NOT included on the F5 DevCentral site?

Question147: When sizing a WebAccelerator deployment, you should base the WA capacity on the LTMcapacity.

Question148: GTM uses Auto Discovery to add virtual servers from both LTM and non-BIG-IP load balancers.

Question149: In most cases, F5 recommends using round robin load balancing.

Question150: Administrators can specify an APM access profile when defining a virtual server in LTM.

Question151: Even though F5 is an application delivery controller, it can also effectively mitigate attacks directed at the network layer.

Question152: Which of these statements about a stream profile is false?

Question153: Using IP Geolocation, an organization can always direct a client request from France to a datacenter in Dublin.

Question154: What technology does ARX use to create a logical abstraction of the physical storage environment?

Question155: Mobile device browsers typically display Web pages more slowly than PC browsers.

Question156: Which three of the following are some of the methods that F5 uses with its environmental stress screening chamber?

Question157: The Policy Builder benefits include:

Question158: What percentage of storage in a typical environment is actively used and modified?

Question159: Why is BIG-IP ASM ideally suited to protect against layer 7 attacks, including HTTP and HTTPS/SSL traffic, when compared to an intrusion prevention system (IPS)?

Question160: Which of the following is a benefit of using iRules?

Question161: When using only LTM in redundant pairs, a customer can load balance to multiple data centers.

Question162: Match these terms with their description.
Select and Place:

Question163: When installing LTM on different VIPRION performance blades, each instance of LTM needs to be licensed separately.

Question164: FastCache will NOT work with compressed objects.

Question165: Which two of the following are costs businesses may face in dealing with unstructured data?

Question166: To make complex access policies easier to manage, an administrator can create a policy containing several policy actions, and then add instances of it within the policy using the ________. (Fill in)

Question167: APM provides access control lists at which two OSI layers?

Question168: In the current version of BIG-IP, what happens if the GTM does not find a wide IP that matches the DNSrequest?

Question169: ASM offers the most extensive, effective, and simplest to configure CSRF protection in the WAF market.

Question170: To make complex access policies easier to manage, an administrator can create a _______ containing several policy actions, and then add instances of it within the policy? (Fill in)

Question171: An LTM object that represents a downstream server contains the IP address 192.168.9.250 and no port.
What is this object?

Question172: Why does deploying LTM into an existing network immediately improve security?

Question173: IP Enforcer blocks IP addresses that have repeatedly and regularly attacked the site.

Question174: The F5 Application Delivery Firewall has the ability to outperform traditional and next generation firewalls during DDoS attacks by leveraging the performance and scalability of BIG-IP to hand extremely high loads, including high throughput, high connection count, and high number of connections per second.

Question175: LTM runs on______F5's proprietary product platform. (Fill in the correct answer)