EMT Practice Test

1. Question Content...

---

Question1: Which of the following statements about cookie persistence is NOT true?

Question2: What is the primary benefit of associating Servers with Data Centers?

Question3: The F5 Application Delivery Firewall has the ability to outperform traditional and next generationfirewalls during DDoS attacks by leveraging the performance and scalability of BIG-IP to handlextremely highloads, including high throughput, high connection count, and high number of connections per second.

Question4: An administrator needs to provide access to corporate resources for remote users. The administrator also needs to verify that the remote use has anti-virus software installed. Which F5 product provides this functionality?

Question5: It is common for free storage space to exist somewhere in a business network that is not easy for storageadministrators to utilize. What solution can the ARX provide in this situation?

Question6: A virtual server is listening at 10.10.1.100:any and has the following iRule associated with it:

If a user connects to 10.10.1.100 and port 22, which pool will receive the request?

Question7: Which of the following statements about cookie persistence is NOT true?

Question8: A virtual server at 10.10.1.100:80 has the rule listed below applied. when HTTP_REQUEST { if
{[HTTP::uri] ends_with "htm" } { pool pool1 } elseif {[HTTP::uri] ends_with "xt" } { pool pool2 } If a user connects to http://10.10.1.100/foo.txt which pool will receive the request.

Question9: Why is BIG-IP ASM ideally suited to protect against layer 7 attacks, including HTTP and HTTPS/SSL traffic,when compared to an intrusion prevention system (IPS)?

Question10: Which of the following user roles have access to make changes to security policies? (Choose 2)

Question11: What will likely happen if you were to define a LTM System in the wrong Data Center?

Question12: Using WOM for vMotion transfers across the WAN prevents VMware users from experiencing interruptions.

Question13: Select the question you would ask your customer related to DNS attacks. Based on the material, choose the most appropriate question.

Question14: A new virtual server is being tested to replace http://myapp.mydomain.com. The original virtual server is still on use. And the new virtual server is on a different ip address. What should be done to test this new virtual server using the fully quailed domain name for this application?

Question15: An administrator needs to protect a web application from cross-site scripting (CSS) exploits. Which F5 protocol provide this functionality

Question16: When is a Virtual Server hosted by an LTM System defined with two IP addresses?

Question17: When installing LTM on different VIPRION performance blades, each instance of LTM needs to be licensed separately.

Question18: The Protected Workspace client-side action provides more client-side security than the Cacheand Session Control action.

Question19: Learning suggestions in the Policy Building pages allow for which of the following? (Choose 2)

Question20: TCP Express is licensed separately from LTM

Question21: Which statement is true regarding failover?

Question22: Which of the following business benefits does storage tiering offer to customers?

Question23: An administrator is performing a capture from a lagged port on an Ethernet SWITCH.
Which OSI layer should be inspected to determine with which VLAN a datagram is associated?

Question24: GTM uses Auto Discovery to add virtual servers from both LTM and non-BIG-IP load balancers.

Question25: Using Fast Cache with ASM will:

Question26: An administrator needs to selectively compress HTTP traffic based on geographical location Which FS Feature should the administrator use?

Question27: Which of the following methods of protection is not available within the Protocol Security Manager for HTTP traffic?

Question28: Select the key reasons F5 is able to handle DNS DDoS attacks so effectively? Select two.

Question29: What is NOT a benefit of using a SNAT?

Question30: Select the best word or phrase to complete the following sentence.
Using the _______ feature in GTM, F5's Application Delivery Firewall solution can handle a significantly higher number of queries than traditional DNS servers.

Question31: BIG-IP ASM is requesting automatic signature updates from the F5 update service Who is considered the server in this communication?

Question32: Where is the load-balancing mode specified.

Question33: GTM solves which three of these standard DNS limitations?

Question34: DRAG DROP
Match the security-related term with the correct definition.
1. Demilitarized zone (DMZ)
2. Denial of service (DoS)
3. DNS Express
4. DNS Security Extensions (DNSSEC)
5. Endpoint inspection
Select and Place:

Question35: Which three parameters can be specified within the Setup Utility? (Choose three.)

Question36: How do you support non-intelligent DNS resolution in an environment with GTM Systems and standard DNS servers? (Choose two.)

Question37: Which event is always triggered when the client sends data to a virtual server using TCP?

Question38: Match these terms with their description.

Question39: Which aspect of F5's Intelligent Services Platform helps you extend your security conversation to include F5professionals and customers?

Question40: In which FTP mode is the serve, responsible for initiating the data correction back to the client?

Question41: An Administrator enables HTTP keep alive.
How does this affect the network?

Question42: An administrator connects two devices using an Ethernet cable. The link fails to come up on either device, which setting could prevent the link from being established?

Question43: The ARX saves customers time, money and frustration through a stub-based system that makes a slight modification to each file in order to more efficiently sort and store end user data.

Question44: In the following configuration, a virtual server has the following HTTP class configuration:

A request arriving for WWW.F5.COM will be matched by which class(es)?

Question45: The ARX saves customers time, money and frustration through a stub-based system that makes a slight modification to each file in order to more efficiently sort and store end user data.

Question46: Which of the following is correct regarding static parameters?

Question47: A BIG-IP Administrator needs to create a route to send traffic destined to 10.1.1 1 to another router with an address of 192 168 1 1 Which TMSH command should the administrator use?

Question48: Monitors can be assigned to which three resources? (Choose three.)

Question49: What is the purpose of the GTM Systems Address Exclusion List concerning local DNS servers?

Question50: Which is the result when multiple monitors are assigned to a pool member?

Question51: Which three files/data items are included in a BIG-IP UCS backup file? (Choose three.)

Question52: Complete the statement below by choosing the correct word or phrase to complete the sentence.
By identifying IP addresses and security categories associated with malicious activity, the BIG-IP
_______ service can incorporate dynamic lists of threatening IP addresses into the BIG-IP platform, adding context to policy decisions.

Question53: Which file contains the list of events for which the GTM System will send traps to an SNMP manager?

Question54: An LTM has the 3 virtual servers, four self IP addresses defined and the networks shown in the exhibit.
Selected options for each object are shown below. Settings not shown are at their defaults.

A connection attempt is made with a source IP and port of 10.20.100.50:2222 and a destination IP and port of
10.10.2.102:80.
When the request is processed, what will be the destination IP address?

Question55: An administrator needs to load balance connections to the application server with the lowest number of Which load balancing method meets these requirements?

Question56: Which HTTP response code ranges indicate an error condition? (Choose two.)

Question57: Why is BIG-IP ASM ideally suited to protect against layer 7 attacks, including HTTP and HTTPS/SSL traffic, when compared to an intrusion prevention system (IPS)?

Question58: Which of the following statements about cookie persistence is NOT true?

Question59: Which of the following is a benefit of using iRules?

Question60: The F5 Application Delivery Firewall has the ability to outperform traditional and next generation firewalls during DDoS attacks by leveraging the performance and scalability of BIG-IP to hand extremely high loads, including high throughput, high connection count, and high number of connections per second.

Question61: A Network Administrator needs a new networking device can perform NAT to connect several devices on a computer network.
What is the most appropriate device for this requirement?

Question62: A site wishes to perform source address translation on packets from some clients but not others. The determination is not based on the client's IP address, but on the virtual servers their packets arrive on. What could best accomplish this goal.

Question63: It is common for free storage space to exist somewhere in a business network that is not easy for storage administrators to utilize. What solution can the ARX provide in this situation?

Question64: Refer ex

Question65: An age-based policy is set up on the ARX that retains only data modified in the last 3 months on tier 1 storage and moves the rest of the data to secondary storage. What happens when the end user tries to access data that has not been touched in 6 months?

Question66: Match the five elements of the intelligent file virtualization with the appropriate ARX feature:

Question67: Which method of protection is not provided by the Rapid Deployment policy template?

Question68: CORRECT TEXT
A_______object maps a FQDN to virtual servers. (Fill in)

Question69: In order to ensure that a specific file type is never moved down to a secondary file tier, the administratorshould:

Question70: ASM combined with LTM provides protection against:

Question71: An administrator needs to rapidly deter e newly discovered security threat to a remote desktop application.
Which F5 feature provides this functionality?

Question72: On a BIG-IP ASM 3600, in standalone mode, which of the following pool configurations is valid?

Question73: Why is BIG-IP ASM ideally suited to protect against layer 7 attacks, including HTTP and HTTPS/SSL traffic, when compared to an intrusion prevention system (IPS)?

Question74: Similar to LTM monitors, GTM monitors use both an Interval and a Timeout value.

Question75: Which Datalink sublayer has the primary funcl.cn of proving node lo node flow and error control?

Question76: An LTM object contains both IP address and port combinations 20.18.9.250:80 and 20.18.9.251:80 and host the same Web application. What is this object?

Question77: ASM combined with LTM provides protection against:

Question78: LTM runs on________F5's proprietary product platform. (Fill in the correct answer)

Question79: When using a redundant pair of LTMs, it is most advantageous to use them in an Active/Active scenario because this provides additional load balancing capabilities.

Question80: Without decrypting, what portion of an HTTPS session is visible with a packet capture?

Question81: Which is NOT an ASM protectionmethod for cross site scripting?

Question82: A virtual server at 10.10.1.100:80 has the rule listed below applied. when HTTP_REQUEST { if {[HTTP::uri] ends_with "htm" } { pool pool1 } elseif {[HTTP::uri] ends_with "xt" } { pool pool2 } If a user connects to
http://10.10.1.100/foo.txt which pool will receive the request.

Question83: TMOS is an F5 software module that runs on the BIG-IP platform.

Question84: Assume a virtual server is configured with a ClientSSL profile. What would the result be if the virtual server's destination port were not 443.

Question85: The current status of a given pool is ffline.(red). Which condition could explain that state. Assume the descriptions below include all monitorsThe current status of a given pool is .ffline.(red). Which condition could explain that state. Assume the descriptions below include all monitors assigned for each scenario.

Question86: A)

B)

C)

Question87: An administrator needs to do the following
* install a load balancer in front of an existing application
* test application performance
* avoid reconfiguration of the application server
* avoid interruption of users accessing the application

Question88: The ARX can see ________ when a data modification takes place and will cue that file to be migrated back to the primary tier.

Question89: DNSSEC is a GTM add-on licensing feature.

Question90: What percentage of storage in a typical environment is actively used and modified?

Question91: Which two statements are true concerning the default communication between a redundant pair of BIG-IP systems. (Choose two.)

Question92: A BIG-IP administrator is interested in using some of the vCMP
What should impact the administrator's decision?

Question93: Which of the following storage type combinations are configurable in an ASM logging profile?

Question94: Which function does the Presentation Layer provide?

Question95: Which of the following is NOT a method that TMOS uses to improve the performance of applications?

Question96: Match each persistence method with the correct statement describing it:

Question97: Since F5 built GTM on the TMOS platform it can exist on the same BIGIP device as LTM:

Question98: Which are immediate results of entering the following command: b pool PoolA . { lb method predictive member 10.10.1 .1:80 member 10.10.1.2:80 }

Question99: What is the purpose of the GTM Systems Address Exclusion List concerning local DNS servers?

Question100: Which of the following are correct regarding Wildcard entities? (Choose two.)

Question101: Which statement is true concerning the default communication between a redundant pair of BIG-IP devices.

Question102: LTM runs on________F5's proprietary product platform.

Question103: A website is using source address persistence with a 30 second timeout A client is idle for 35 seconds What happens to their connection?

Question104: DRAG DROP
Match the five elements of the intelligent file virtualization with the appropriate ARX feature:
Select and Place:

Question105: Given the configuration shown below, if a connection request arrived on the BIG-IP with a source address of 200.10.10.10:1050 and a
destination of 150.10.10.75:80, what would the source IP address of the associated packet be when it arrived on the choosen member of the web_pool self
150.10.10.1 { netmask 255.255.255.0 unit I floating enable vlan external allow tcp https } self
10.10.1.1 { netmask 255.255.255.0 unit I floating enable vlan internal allow default } pool web_pool { member
10.10.1.11:80 member
10.10.1.12:80 member
10.10.1.13:80 }snatpool client_pool { member
10.10.1.100 member
150.10.10.15 }virtual VS_web { destination 150.10.10.10:80 ip protocol tcp snat automap pool web_pool }virtual VS_network{ destination 150.10.1 0.0:any mask
255.255.255.0 snatpool client_pool ip protocol tcp pool web_pool } virtual VS_network { destination 150.10.1 0.0:any mask 255.255.255.0 snatpool client_pool ip protocol tcp pool web_pool } virtual VS_network { destination
150.10.10.0:any mask
255.255.255.0 snatpool client_pool ip protocol tcp pool web_pool }

Question106: What is a common use of an iRule?

Question107: What is an advantage of a packet forwarding architecture?

Question108: GTM solves which three of these standard DNS limitations? (Choose three.)

Question109: An organization needs to protect its data center from layer three-based and layer four-based exploits. Which F5 product provides this functionality

Question110: The APM Dashboard enables administrators to monitor which two of these metrics?

Question111: Learning suggestions can be the result of:

Question112: Which two of the following are costs businesses may face in dealing with unstructured data?
(Choose two.)

Question113: A site needs to terminate client HTTPS traffic at the BIG-IP and forward that traffic unencrypted. Which two are profile types that must be associated with such a virtual server? (Choose two.)

Question114: Drag and Drop Question
Match the five elements of the intelligent file virtualization with the appropriate ARX feature:

Question115: The SNMP monitor can collect data based on which three metrics? (Choose three.)

Question116: The administrator must specify APM access control entries as either L4 or L7.

Question117: To share device information with F5 technical support, a customer must either verbally share the information over the phone or copy and send the information in an Email.

Question118: Which three of the following are benefits of adding WebAccelerator to the network infrastructure?

Question119: Which facility logs messages concerning GTM System parameters?

Question120: Select the key question you would use to ask your customer related to DNS attacks?

Question121: The ICMP monitor has been assigned to all nodes. In addition, all pools have been assigned custom monitors. If a pool .eb.is marked .vailable (green) which situation is sufficient to cause this.

Question122: DNSSEC is a GTM add-on licensing feature.

Question123: When using only LTM in redundant pairs, a customer can load balance to multiple data centers.

Question124: Assuming other failover settings are at their default state, what would occur if the failover cable were to be disconnected for five seconds and then reconnected.

Question125: Assume a virtual server is configured with a ClientSSL profile. What would the result be if the virtual server's destination port was not 443?

Question126: An administrator is planning on solving latency issues by placing the backup data center in a neighboring cityto the primary data center. Why isn't this an effective solution?

Question127: Which of the following statements are correct regarding Attack signatures? (Choose 2)

Question128: Assuming there are open connections through an active system's NAT and a failover occurs, by default, what happens to those connections?

Question129: How is persistence configured.

Question130: Drag and Drop Question
Match the security-related term with the correct definition.
1. OWASP Top 10
2. Secure Socket Layer (SSL)
3. Bot
4. Certificate
5. Content scrubbing

Question131: When initially configuring the GTM System using the config tool, which two parameters can be set? (Choose two.)

Question132: Which aspect of F5's Intelligent Services Platform helps you extend your security conversation to include F5professionals and customers?

Question133: Which of the following methods of protection is not available within the Protocol Security Manager for HTTP traffic?

Question134: Which aspect of F5's Intelligent Services Platform helps you extend your security conversation to include F5professionals and customers?

Question135: How is persistence configured?

Question136: Assume a virtual server is configured with a ClientSSL profile. What would the result be if the virtual server's destination port were not 443.

Question137: Very low administrative impact:

Question138: What is the correct procedure to comply with the recommendation?

Question139: Tightening is a feature of which type of entity?

Question140: Which two protocol are used for the retrieval of email? (Choose two)

Question141: When choosing Fundamental as the Policy Builder security policy type, BIG-IP ASM will learn and enforce the following components? (Choose 2)

Question142: A new VLAN segment has been added to the network. Only the existing connected interface may be used. What should the BIG-IP Administrator do to allow traffic to both the existing and the new VLAN?

Question143: A BIG-IP has two load balancing virtual servers at 150.150.10.10:80 and 150.150.10.10:443. The port 80 virtual server has SNAT automap configured. There is also a SNAT configured at 150.150.10.11 set for a source address range of 200.200.1.0 / 255.255.255.0. All other settings are at their default states.
If a client with the IP address 200.200.1.1 sends a request to https://150.150.10.10, what is the source IP address when the associated packet is sent to the pool member?

Question144: Although APM can interoperate with LTM, it is unable to use iRules for advanced processing.

Question145: What is a characteristic of iQuery?

Question146: Which two of the following factors are often responsible for poor Web application performance?
(Choose two.)

Question147: iQuery is a proprietary protocol that distributes metrics gathered from which three sources? (Choose three.)

Question148: When initially configuring the GTM System using the config tool, which two parameters can be set? (Choose two.)

Question149: Using WOM for vMotion transfers across the WAN prevents VMware users from experiencing interruptions.

Question150: CORRECT TEXT
Place the following items in the order that the BIG-IP device uses when processing a packet.

Question151: A site wishes to delegate the name .wmysite.com to a GTM System.
Which entry would be appropriate in their current DNS servers?

Question152: Which three files/data items are included in a BIG-IP UCS backup file? (Choose three.)

Question153: Which protocol data unit (POU) is associated with the OSI model's Network layer

Question154: DRAG DROP
Match the five elements of the intelligent file virtualization with the appropriate ARX feature:
Select and Place:

Question155: Which two of the following statements about how TMOS typically manages traffic between a client and server are accurate? (Choose two.)

Question156: A BIG IP Administrator wants to add a new VLAN (VLAN 40) to an LACP trunk (named LACP01) connected to the BIG-IP device Mufti VLANS exist on LACPO1. Which TMSH command should the BIG IP Administrator issue to add the new VLAN to the existing LACP trunk?

Question157: Which must be sent to the license server to generate a new license?

Question158: Which protocol data unit (PDU) is associated with the OSI model's Physical layer?

Question159: Which statement is correct concerning differences between BIG-IP ASM platforms?

Question160: With standard DNS, assuming no DNS request failures, which process describes the normal resolution process on a "first time" DNS request?

Question161: An LTM has the 3 virtual servers, a SNAT, four self IP addresses defined and the networks shown in the exhibit. Selected options for each object are shown below. Settings not shown are at their defaults.

A connection attempt is made with a source IP and port of 10.20.100.50:2222 and a destination IP and port of 10.10.2.102:80.
When the request is processed, what will be the destination IP address?

Question162: To make complex access policies easier to manage, an administrator can create a policy containing several policy actions, and then add instances of it within the policy using the ________. (Fill in)

Question163: To make complex access policies easier to manage, an administrator can create a policy containing several policy actions, and then add instances of it within the policy using the ________. (Fill in)

Question164: A site is load balancing to a pool of web servers. Which statement is true concerning BIG-IP's ability to verify whether the web servers are functioning properly or not.

Question165: Which service should be configured to allow BIG-IP devices to be externally monitored?

Question166: A BIG-IP has two load balancing virtual servers at 150.150.10.10:80 and
150.150.10.10:443. The port 80 virtual server has SNAT automap configured. There is also a SNAT configured at 150.150.10.11 set for a source address range of 200.200.1.0 /
255.255.255.0. All other settings are at their default states. If a client with the IP address 200.200.1.1 sends a request to https://150.150.10.10, what is the source IP address when the associated packet is sent to the pool member.

Question167: Assuming there are open connections through an active system's NAT and a failover occurs, by default, what happens to those connections.

Question168: All members of a pool must share the same service port?

Question169: A BIO IP Administrator is troubleshooting a slow web application. A packet capture shows that some of the packets coming from a window size of zero A packet capture shows that som a window size of zero What does this mean?

Question170: To function properly, an Enterprise Manager device is required within each data center.

Question171: Click the Exhibit Button an LTM has the 3 virtual servers, a SNAT defined, four self IP addresses defined and the networks shown in the exhibit. Selected options for each object are shown below.
Settings not shown are at their defaults.
VirtualServer 1
Destination: 10.10.1.102:80 netmask 255.255.255.255
Pool: Pool with 3 members in the 172.16/16 network
SNAT Automap enabled
VirtualServer2
Destination: 10.10.1.102:* netmask 255.255.255.255
Pool: Pool with 3 members in the 192.168/16 network
VirtualServer 3
Destination: 10.10.2.0:80 netmask 255.255.255.0
Type: IP Forwarding
SNATI Source IP: All Addresses
SNAT Address: SNAT Pool with 2 members 172.16.20.50 and 192.168.10.50
Self IPs 192.168.1.1;
172.16.1.1; 10.10.2.1; 10.10.1.1
A connection attempt is made with a source IP and port of 10.20.100.50:80 and a destination IP and port of 10.10.2.10:80. When the request is processed, what will be the source and destination IP addresses?

Question172: Which statement is true regarding fail-over?

Question173: If your customer has a policy requirement that cannot be handled in the Visual Policy Editor, what would you use to supplement the Visual Policy Editor?

Question174: When a pool is created and saved to file, where is the default file and location for the pool configuration?
When a pool is created and saved to file, where is the default file and location for the pool configuration?

Question175: What should a BIG-IP Administrator configure to minimize impact during a failure?

Question176: Which statement concerning virtual servers is true?

Question177: Which statement describes advanced shell access correctly? Which statement describes advanced shell access correctly?

Question178: What is the purpose of provisioning.

Question179: How does file caching affect the web application?

Question180: In the next few years, 75% of new storage capacity will shift to unstructured data (also known as file data).
Which two of the following are examples of unstructured data?

Question181: Assume a client's traffic is being processed only by a NAT; no SNAT or virtual server processing takes place.
Also assume that the NAT definition specifies a NAT address and an origin address while all other settings are left at their defaults. If a client were to initiate traffic to the NAT address, what changes, if any, would take place when the BIG-IP processes such packets?

Question182: Assuming there are open connections through an active system's NAT and a fail-over occurs, by default, what happens to those connections.

Question183: What is the main business driver for bringing Enterprise Manager into the network infrastructure?

Question184: Application trends and drivers that increase the need for application security are: