EMT Practice Test

1. Question Content...

---

Question1: How is traffic flow through transparent virtual servers different from typical virtual servers?

Question2: Which statement is true concerning the default communication between a redundant pair of BIG- IP devices.

Question3: What is the difference between primary and secondary DNS servers?

Question4: Which two ports must be enabled to establish communication between GTM Systems and other BIG IP Systems? (Choose two.)

Question5: A site wishes to perform source address translation on packets from some clients but not others. The determination is not based on the client's IP address, but on the virtual servers their packets arrive on. What could best accomplish this goal.

Question6: How do you support non-intelligent DNS resolution in an environment with GTM Systems and standard DNS servers? (Choose two.)

Question7: Which HTTP response code ranges indicate an error condition? (Choose 2)

Question8: Could an iRule perform persistence based on a cookie?

Question9: Which of the following is not a feature of a standalone BIG-IP ASM System?

Question10: You have created a custom profile named TEST2. The parent profile of TEST2 is named TEST1. If additional changes are made to TEST1, what is the effect on TEST2?

Question11: When DNS_REV is used as the probe protocol by the GTM System, which information is expected in the response from the probe?

Question12: Assuming there are open connections through an active system's virtual servers and a failover occurs, by default, what happens to the connections.

Question13: In the following configuration, a virtual server has the following HTTP class configuration: HTTP Class 1 = Host pattern www.f5.com HTTP Class 2 = No filters A request arriving for WWW.F5.COM will be matched by which class(es)?

Question14: A virtual server is listening at 10.10.1.100:80 and has the following iRule associated with it: when HTTP_REQUEST { if {[HTTP::uri] ends_with "txt" } { pool pool1 } elseif {[HTTP::uri] ends_with "php" } { pool pool2 } If a user connects to http://10.10.1.100/foo.html, which pool will receive the request.

Question15: Which event is always triggered when a client initially connects to a virtual server configured with an HTTP profile?

Question16: A user is building a security policy using the Deployment Wizard and the Rapid Deployment application template. By default, which settings will be applied to the security policy? (Choose 3)

Question17: If a client's browser does not accept cookies, what occurs when the client connects to a virtual server using cookie persistence.

Question18: Which of the following is not a configurable parameter data type?

Question19: Which statement is true concerning packet filters?

Question20: Which event is always triggered when the client sends data to a virtual server using TCP?

Question21: Which statement is true regarding OneConnect processing?

Question22: Which statement about root DNS servers is true?

Question23: You have a pool of servers that need to be tested. All of the servers but one should be tested every 10 seconds, but one is slower and should only be tested every 20 seconds.
How do you proceed.

Question24: What does the BIG-IP_add script do?

Question25: A site wishes to perform source address translation on packets arriving from the Internet for clients using some pools but not others. The determination is not based on the client's IP address, but on the pool they are load balanced to. What could best accomplish this goal.

Question26: An LTM has the 3 virtual servers, a SNAT, four self IP addresses defined and the networks shown in the exhibit. Selected options for each object are shown below. Settings not shown are at their defaults. VirtualServerl Destination: 10.10.2.102:80 netmask 255.255.255.255 Pool: Pool with 3 members in the 172.16/16 network VirtualServer2 Destination: 10.10.2.102:* netmask 255.255.255.255 Pool: Pool with 3 members in the 192.168/16 network VirtualServer3 Destination: 10.10.2.0:80 netmask 255.255.255.0 Type: IP Forwarding SNAT1 Source IP: All Addresses SNATAddress: SNAT Pool with 2 members-172.16.20.50 and 192.168.10.50 Self IPs 192.168.1.1; 172.16.1.1; 10.10.2.1; 10.10.1.1 A connection attempt is made with a source IP and port of 10.20.100.50:2222 and a destination IP and port of 10.10.2.10:80. When the request is processed, what will be the destination IP address?

Question27: Monitors can be assigned to which three resources? (Choose three.)

Question28: A GTM System would like to ensure that a given LTM System is reachable and iQuery communication is allowed prior to sending it client request. What would be the simplest monitor template to use?

Question29: Which method of protection is not provided by the Rapid Deployment policy template?

Question30: What is the purpose of provisioning.

Question31: What is the advantage of specifying three load balancing methods when load balancing within pools?

Question32: Which three must be done so that Generic Host Servers can be monitored using SNMP? (Choose three.)

Question33: Click the Exhibit Button an LTM has the 3 virtual servers, a SNAT defined, four self IP addresses defined and the networks shown in the exhibit. Selected options for each object are shown below. Settings not shown are at their defaults. VirtualServer 1 Destination: 10.10.1.102:80 netmask 255.255.255.255 Pool: Pool with 3 members in the 172.16/16 network SNAT Automap enabled VirtualServer2 Destination: 10.10.1.102:* netmask 255.255.255.255 Pool: Pool with 3 members in the 192.168/16 network VirtualServer 3 Destination: 10.10.2.0:80 netmask 255.255.255.0 Type: IP Forwarding SNATI Source IP: All Addresses SNAT Address: SNAT Pool with 2 members
172.16.20.50 and 192.168.10.50 Self IPs 192.168.1.1; 172.16.1.1; 10.10.2.1; 10.10.1.1 A connection attempt is made with a source IP and port of 10.20.100.50:80 and a destination IP and port of 10.10.2.10:80. When the request is processed, what will be the source and destination IP addresses?

Question34: Which two methods can be used to determine which BIG-IP is currently active? (Choose two.)

Question35: Which of the following statements are incorrect regarding protection of web services? (Choose 2)

Question36: Which of the following statements are correct regarding positive and negative security models? (Choose 2)

Question37: What is the purpose of MAC masquerading?

Question38: Assume a client's traffic is being processed only by a NAT; no SNAT or virtual server processing takes place. Also assume that the NAT definition specifies a NAT address and an origin address while all other settings are left at their defaults. If a client were to initiate traffic to the NAT address, what changes, if any, would take place when the BIG-IP processes such packets?

Question39: Which is the result when multiple monitors are assigned to a pool member?

Question40: use a proprietary syntax language. must contain at least one event declaration. must contain at least one conditional statement. must contain at least one pool assignment statement.
What must be sent to the license server to generate a new license'?

Question41: What is the purpose of Zonerunner?

Question42: What are the best reasons for using the Deployment Wizard? (Choose 3)

Question43: A virtual server is defined using a source-address based persistence profile. The last five connections were A, B, C, A, C.
Given the conditions shown in the graphic, if a client with IP address 205.12.45.52 opens a connection to the virtual server, which member will be used for the connection.

Question44: When network failover is enabled, which of the following is true?

Question45: An LTM has the 3 virtual servers, four self IP addresses defined and the networks shown in the exhibit. Selected options for each object are shown below. Settings not shown are at their defaults. VirtualServerl Destination: 10.10.2.102:443 netmask 255.255.255.255 Pool: Pool with 3 members in the 172.16/16 network VirtualServer2 Destination: 10.10.2.102:* netmask 255.255.255.255 Pool: Pool with 3 members in the 192.168/16 network VirtualServer3 Destination: 10.10.2.0:80 netmask 255.255.255.0 Type: IP Forwarding SNAT1 Source IP: All Addresses SNAT Address: SNAT Pool with 2 members -172.16.20.50 and 192.168.10.50 Self IPs 192.168.1.1; 172.16.1.1; 10.10.2.1;
10.10.1.1 A connection attempt is made with a source IP and port of 10.20.100.50:2222 and a destination IP and port of 10.10.2.102:80. When the request is processed, what will be the destination IP address?

Question46: Which level of parameter assumes the highest precedence in BIG-IP ASM System processing logic?

Question47: Which of the following methods of protection are used by the BIG-IP ASM System to mitigate buffer overflow attacks?

Question48: Which of the following protocol protections is not provided by the Protocol Security Manager?

Question49: Which of the following statements are correct regarding Attack signatures? (Choose 2)

Question50: Which facility logs messages concerning GTM System parameters?

Question51: What is the primary benefit of associating Servers with Data Centers?

Question52: A monitor has been defined using the HTTP monitor template. The send and receive strings were customized, but all other settings were left at their defaults. Which resources can the monitor be assigned to?

Question53: What is a characteristic of iQuery?

Question54: Which tool is used on BIG-IP systems to capture data packets?

Question55: Assuming other failover settings are at their default state, what would occur if the failover cable were to be disconnected for five seconds and then reconnected.

Question56: There are many user roles configurable on the BIG-IP ASM System. Which of the following user roles have access to make changes to ASM policies? (Choose 3)

Question57: Which statement is true concerning iRules?

Question58: Which of the following are properties of an ASM logging profile? (Choose 2)

Question59: How is persistence configured.

Question60: Which of the following is correct regarding static parameters?

Question61: Which statement is true regarding failover?

Question62: When configuring a pool member's monitor, which three association options are available? (Choose three.)

Question63: Under what condition must an appliance license be reactivated.

Question64: Which two statements are true about NATs? (Choose two.)

Question65: Which two statements are true concerning the default communication between a redundant pair of BIG-IP systems? (Choose two.)

Question66: On a BIG-IP ASM 3600, in standalone mode, which of the following pool configurations is valid?

Question67: Which two statements describe differences between the active and standby systems. (Choose two.)

Question68: Which must be sent to the license server to generate a new license.

Question69: A site needs a virtual server that will use an iRule to parse HTTPS traffic based on HTTP
header values. Which two profile types must be associated with such a virtual server. (Choose two.)

Question70: What occurs when a load?command is issued?What occurs when a ? load?command is issued?

Question71: Which cookie persistence method requires the fewest configuration changes on the web servers to be implemented correctly?

Question72: What are some changes that must be made on the GTM System so that log messages are sent to centralized System Log servers?

Question73: An HTTP class is available

Question74: How is persistence configured.

Question75: When initially configuring the GTM System using the config tool, which two parameters can be set? (Choose two.)

Question76: Assume a virtual server has a ServerSSL profile. What SSL certificates are required on the pool members.

Question77: Which statement accurately describes the difference between two loadbalancing modes specified as "member" and "node".

Question78: Assume the bigd daemon fails on the active system. Which three are possible results? (Choose three.)

Question79: Where is connection mirroring configured?

Question80: An LTM has the 3 virtual servers, 2 SNATs, four self IP addresses defined, and the networks shown in the exhibit. Selected options for each object are shown below. Settings not shown are at their defaults. Assume port exhaustion has not been reached. Vi rtualServerl Destination: 10.10.2.102:80 netmask 255.255.255.255 Pool: Pool with 3 members in the 172.16/16 network SNAT Automap configured Vi rtualServer2 Destination: 10.10.2.102:* netmask 255.255.255.255 Pool: Pool with 3 members in the 192.168/16 network Vi rtualServer3 Destination: 10.10.2.0:80 netmask 255.255.255.0 Type: IP Forwarding SNAT1 Source IP: 10.10.0.0 netmask 255.255.0.0 SNAT Address: SNAT Pool with 2 members -
172.16.20.50 and 192.168.10.50 SNAT2 Source IP: All Addresses SNATAddress: 10.10.2.102 Floating Self IPs 192.168.1.1; 172.16.1.1; 10.10.2.1; 10.10.1.1 A.
connection attempt is made with a source IP and port of 10.10.100.50:2222 and a destination IP and port of 10.10.2.10:80.
When the request is processed, what will be the source and destination IP addresses?

Question81: Which of the following methods of protection is not available within the Protocol Security Manager for HTTP traffic?

Question82: A site has six members in a pool. All of the servers have been designed, built, and configured with the same applications. It is known that each client's interactions vary significantly and can affect the performance of the servers. If traffic
should be sent to all members on a regular basis, which loadbalancing mode is most effective if the goal is to maintain a relatively even load across all servers.

Question83: A virtual server at 10.10.1.100:80 has the rule listed below applied. when HTTP_REQUEST { if {[HTTP::uri] ends_with "htm"
} { pool pool1 } elseif {[HTTP::uri] ends_with "xt" } { pool pool2 } If a user connects to http://10.10.1.100/foo.txt which pool will receive the request.

Question84: Which of the following methods of protection is not available within the Protocol Security Manager for FTP protection?

Question85: Logging profiles are assigned to?

Question86: What will likely happen if you were to define a LTM System in the wrong Data Center?

Question87: If the config tool is complete, which two access methods are available by default for GTM administration and configuration? (Choose two.)

Question88: A BIG-IP has a virtual server at 150.150.10.10:80 with SNAT automap configured. This BIG-IP also has a SNAT at 150.150.10.11 set for a source address range of
200.200.1.0 / 255.255.255.0. All other settings are at their default states. If a client with the IP address 200.200.1.1 sends a request to the virtual server, what is the source IP address when the associated packet is sent to the pool member.

Question89: Listeners that correspond to nonfloating self lP addresses are stored in which configuration file?

Question90: Which of the following is correct regarding User-defined Attack signatures?

Question91: Which statement is correct concerning differences between BIG-IP ASM platforms?

Question92: Which statement about Generic Host Servers is true?

Question93: Which action will take place when a failover trigger is detected by the active system.

Question94: Which statement is true concerning SNATs using automap?

Question95: Which of the following storage type combinations are configurable in an ASM logging profile?

Question96: When users are created, which three access levels can be granted through the GTM Configuration Utility? (Choose three.)

Question97: Where is connection mirroring configured?