EMT Practice Test

1. Question Content...

---

Question1: An LTM object contains both IP address and port combinations 20.18.9.250:80 and 20.18.9.251:80 and host the same Web application. What is this object?

Question2: The incoming client IP address is 205.12.45.52. The last five connections have been sent to members C, D, A, B, B.
The incoming client. IP address is 205.12.45.52. The last five connections have been sent to members C, D, A, B, B.
Given the virtual server and pool definitions and the statistics shown in the graphic, which member will be used for the next connection.

Question3: Which three properties can be assigned to nodes. (Choose three.)

Question4: A user fails to provide credentials when requesting a web resource that requires authentication. Which HTTP response code does the server send?

Question5: Which type of certificate is pre-installed in a web browser's trusted store?

Question6: A company recently opened a new branch site. The site needs to access the internet through a link to HQ. The router at the branch Branch1 the router at HQ is Called core1. The computers at the branch site reside on the network 192 168 1 0/24 directly connected to Branch1 Users at HQ can already access the Internet. What routing must be configured to achieve the required internet connectivity for the branch site?

Question7: What is NOT a benefit of using a SNAT?

Question8: IP Enforcer blocks IP addresses that have repeatedly and regularly attacked the site.

Question9: An F5 customer must install WebAccelerator on top of LTM:

Question10: Which statement is true concerning iRule context?

Question11: A virtual server is listening at 10.10.1.100:80 and has the following iRule associated with it: when HTTP_REQUEST { if {[HTTP::uri] ends_with "txt" } { pool pool1 } elseif {[HTTP::uri] ends_with "php" } { pool pool2 } If a user connects to http://10.10.1.100/foo.html, which pool will receive the request.

Question12: When a virtual server has an HTTP profile with compression enabled, which traffic is compressed by the BIG-IP?

Question13: What is the primary function of a certificate authority?

Question14: Using file virtualization, what can the ARX do for customers?

Question15: Which two must be included in a Wide-IP definition for the Wide-IP to resolve a DNS query? (Choose two.)

Question16: A site is load balancing to a pool of web servers. Which statement is true concerning BIGElIP's ability to verify whether the web servers are functioning properly or not.

Question17: Assume a client's traffic is being processed only by a NAT; no SNAT or virtual server processing takes place. Also assume that the NAT definition specifies a NAT address and an origin address while all other settings are left at their defaults. If the origin server were to initiate traffic via the BIG-IP, what changes, if any, would take place when the BIG-IP processes such packets?

Question18: Complete the statement below by choosing the correct word or phrase to complete the sentence.By identifying IP addresses and security categories associated with malicious activity, the BIG-IP________service can incorporate dynamic lists of threatening IP addresses into the BIG-IP platform, adding context topolicy decisions.

Question19: To make complex access policies easier to manage, an administrator can create a policy containing several policy actions, and then add instances of it within the policy using the ________. (Fill in)

Question20: Which statement describes advanced shell access correctly? Which statement describes advanced shell access correctly?

Question21: A pool is using Round Trip Time as its load balancing method (Alternate: Round Robin; Fallback:
None). The last five resolutions have been C, D, C, D, C . Given the current conditions shown in the table below, which address will be used for the next resolution?

Question22: A site has six members in a pool. All of the servers have been designed, built, and configured with the same applications. It is known that each client's interactions vary significantly and can affect the performance of the servers. If traffic should be sent to all members on a regular basis, which loadbalancing mode is most effective if the goal is to maintain a relatively even load across all servers.

Question23: An application uses a proprietary protocol running over TCP
Which FS BIG-IP feature should the administrator use to modify the protocol?

Question24: Learning suggestions in the Policy Building pages allow for which of the following? (Choose 2)

Question25: A virtual server is listening at 10.10.1.100:any and has the following iRule associated with it:

Question26: It is common for free storage space to exist somewhere in a business network that is not easy for storageadministrators to utilize. What solution can the ARX provide in this situation?

Question27: A BIG IP Administrator is trying to reach the internal web server from a workstation
* The workstation has a MAC address of 00:00 00 00 00 01 and an IP address or 192. 168. 0. 1
* An internal web server has a MAC address of 00 00 00 00 00 02 and an IP address of 10. 10. 1. 1
* The workstations default gateway has a MAC address of 00 00 00 00 00 03 and IP address of 192 168 0 254 What is the destination hardware address of the outbound packet when it leaves the workstation?

Question28: In the next few years, 75% of new storage capacity will shift to unstructured data (also known as file data).
Which two of the following are examples of unstructured data?

Question29: Which tool is used on BIG-IP systems to capture data packets?

Question30: In the current version of BIG-IP, what happens if the GTM does not find a wide IP that matches the DNS request?

Question31: Which statement is correct concerning differences between BIG-IP ASM platforms?

Question32:

Question33: What is the purpose of Zonerunner?

Question34: Which facility logs messages concerning GTM System parameters?

Question35: Using IP Geolocation, an organization can always direct a client request from France to a datacenter in Dublin.

Question36: To function properly, an Enterprise Manager device is required within each data center.

Question37: TMOS is an F5 software module that runs on the BIG-IP platform.

Question38: An administrator needs to lower .he amount of new TCP connections to help with network congest?
How should the administrator accomplish this?

Question39: An administrator needs to provide access to corporate resources for remote users. The administrator also needs to verify that the remote use has anti-virus software installed. Which F5 product provides this functionality?

Question40: As a full TCP proxy, LTM acts as the termination point for both requests from the client andresponses from the server.

Question41: The default staging-tightening period for attack signatures and wildcard entities is?

Question42: A pool is using Global Availability as its load balancing method (Alternate:Round Robin; Fallback: Return to DNS). The last five resolutions have been C, D, C, D, C.
Given the current conditions shown in the table, which address will be used for the next resolution?

Question43: Data centers often rely on either traditional firewalls or next generation firewalls. Select the core weakness of the traditional or next generation firewalls when it comes to DDoS attacks.

Question44:

Question45: When can a single virtual server be associated with multiple profiles?

Question46: Another name for the F5 OneConnect feature is TCP multiplexing.

Question47: Which must be sent to the license server to generate a new license.

Question48: The users in a company are unable to send and receive SMTP e-mails using the BIG-IP Virtual Server.
The administrator logs into the BIG IP device to verify if the mail pool member with an IP address of 192. 168. 10. 100. 18 is serving SMTP traffic.
Which command on the BIG-IP device should the administrator use to verify the traffic?

Question49: What is used to resolve IP address to MAC address mappings?

Question50: DRAG DROP
Match these terms with their description.
Select and Place:

Question51: An administrator needs to selectively compress HTTP traffic based on geographical location Which FS Feature should the administrator use?

Question52: The current status of a given pool member is nknown. Which condition could explain that state. The current status of a given pool member is .nknown. Which condition could explain that state.

Question53: The partial configuration below includes an iRule, a virtual server, and pools. When traffic from the client at 160.10.10.10:2056 connects to the virtual server Test_VS and sends an HTTP request, what will the client's source address be translated to as the traffic is sent to the chosen pool member?

Question54: Which two statements are true concerning the default communication between a redundant pair of BIG-IP systems? (Choose two.)

Question55: Where do you configure GTM client persistence?
Case Study Title (Case Study):

Question56: You have a pool of servers that need to be tested. All of the servers but one should be tested every 10 seconds, but one is slower and should only be tested every 20 seconds. How do you proceed?

Question57: Which two must be included in a Wide-lP definition for the Wide-lP to resolve a DNS query? (Choose two.)

Question58: Another name for the F5 OneConnect feature is TCP multiplexing.

Question59: The current status of a given pool is offline (red). Which condition could explain that state? Assume the descriptions below include all monitors assigned for each scenario.

Question60: A BIG-IP Administrator needs to make sure that requests from a single user are directed to the server that was initially selected (unless that server is marked down). What should the administrator configure?

Question61: What does the insert X-Forwarded option in an HTTP profile do?

Question62: The production version of BIG-IP Virtual Edition is limited to 200 Mbps throughput.

Question63: As a full TCP proxy, LTM acts as the termination point for both requests from the client and responses from the server.

Question64: Which of the following is NOT a benefit of using SSL offload?

Question65: Generally speaking, should the monitor templates be used as production monitors or should they be customized prior to use?

Question66: What is used to provide mutual authentication for TLS/SSL?

Question67: What occurs when a save-config command is issued?

Question68: Adding more RAM to a GTM device drastically improves query performance.

Question69: Which statement is true regarding failover?

Question70: When users are created, which three access levels can be granted through the GTM Configuration Utility?
(Choose three.)

Question71:

Question72: An administrator suspects that a BIG IP appliance is experiencing performing issue due to spikes in CPU usage checks the performance issues does to spikes in CPU usage checks the performance report in the BIG-IP UI on CPU spikes are evident in the graphs. Which section in the BIG IP UI can the administrator check to troubleshoot the issue further?

Question73: To function properly, an Enterprise Manager device is required within each data center.

Question74: Which of the following are properties of an ASM logging profile? (Choose 2)

Question75: Which parameters are set to the same value when a pair of BIG-IP devices are synchronized.

Question76: Which three properties can be assigned to nodes? (Choose three.)

Question77: What is a primary reason to choose hardware over virtual devices?

Question78: On a BIG-IP ASM 3600, in standalone mode, which of the following pool configurations is valid?

Question79: Select the key question you would use to ask your customer related to DNS attacks?

Question80: The administrator must specify APM access control entries as either L4 or L7.

Question81: Which device type in the topology will forward network packets without an OSI layer 3 address assigned to a data plane interface?

Question82: What is the main business driver for bringing Enterprise Manager into the network infrastructure?

Question83: If LTM uses the round robin load balancing method, which pool member in the diagram above will receive the next request?

Question84: What is the purpose of the GTM Systems Address Exclusion List concerning local DNS servers?

Question85: Which is NOT a function of ASM?

Question86: TMOS is an F5 software module that runs on the BIG-IP platform.

Question87: An LTM has the 3 virtual servers, 2 SNATs, four self IP addresses defined, and the networks shown in the exhibit. Selected options for each object are shown below. Settings not shown are at their defaults. Assume port exhaustion has not been reached.

A connection attempt is made with a source IP and port of 10.10.100.50:2222 and a destination IP and port of
10.10.2.10:80. When the request is processed, what will be the source and destination IP addresses?

Question88: Which three of the following are benefits of adding WebAccelerator to the network infrastructure?
(Choose three.)

Question89: An administrator is adding GTM to the network infrastructure. Which of the following requirements would lead them to select an Authoritative Screening architecture rather than Delegation?

Question90: The APM Dashboard enables administrators to monitor which two of these metrics?

Question91: Which two daemons only run after the entire license process has been completed? (Choose two.)

Question92: The F5 Visual Policy Editor (VPE) is unique to the F5 BIG-IP APM module; no other access management tool has this capability. Select the features that the VPE provides. Select two.

Question93: A request is sent to the BIG-IP ASM System that generates a Length error violation.
Which of the following length types provides a valid learning suggestion? (Choose 3)

Question94: An F5 customer must install WebAccelerator on top of LTM:

Question95: A monitor has been defined using the HTTP monitor template. The send and receive strings were customized, but all other settings were left at their defaults. Which resources can the monitor be assigned to?

Question96: TCP Express is licensed separately from LTM

Question97: Which of the following are methods BIG-IP ASM utilizes to mitigate web scraping vulnerabilities? (Choose two.)

Question98: A customer says his business wouldn't benefit from buying ARX because it already has block based storage virtualization in place. Is he right? Why or why not?

Question99: An administrator is planning on solving latency issues by placing the backup data center in a neighboring city to the primary data center. Why isn't this effective solution?

Question100: Which three of the metrics listed below can GTM use when making load balancing decisions for a client?
(Choose three.)

Question101: Which of the following storage type combinations are configurable in an ASM logging profile?

Question102: In the following configuration, a virtual server has the following HTTP class configuration: HTTP Class 1 = Host pattern www.f5.com HTTP Class 2 = No filters A request arriving for WWW.F5.COM will be matched by which class(es)?

Question103: When configuring a pool member's monitor, which three association options are available? (Choose three.)

Question104: A user's access to resources can change based on the computer they connect from.

Question105: Which two processes are involved when BIG-IP systems issue traps? (Choose two.)

Question106: LTM can only load balance outbound traffic by using iRules

Question107: FastCache will NOT work with compressed objects.

Question108: The APM Dashboard enables administrators to monitor which two of these metrics? (Choose two.)

Question109: Which WOM feature replaces a long byte pattern, such as "100000111000110101", with a shorter reference to the pattern?

Question110: A pool is using Global Availability as its load balancing method (Alternate:Round Robin; Fallback: Return to DNS). The last five resolutions have been C, D, C, D, C Given the current conditions shown in the table, which address will be used for the next resolution?

Question111: ARP provides translation between which two address types?

Question112: Which of the following methods of protection is not available within the Protocol Security Manager for FTP protection?

Question113: How is persistence configured.

Question114: Which protocol Authenticates network traffic between hosts end without encryption?

Question115: LTM runs on______F5's proprietary product platform. (Fill in the correct answer)

Question116: Monitors can be assigned to which three resources? (Choose three.)

Question117: Exhibit.

the Web application Server made a query to the Database to present dynamic content for a user who would be the client?

Question118: A company deploys F5 load balancers to manage number of secure applications. The company needs to centrally manage certificates.
Which F5 product provides this functionality?