Question 1

A BIG-IP device is configured with both an internal external and two Corporate VLANs. The virtual server

has SNAT enabled and is set to listen on all VLANs Auto Last Hop is disabled. The Corporate users are on

10.0.0.0./24 and 172.16.0.0/12. The BIG-IP has a Self-IP on the 1.0.0.0.0./24 subnet.

Internet users are able to access the virtual server. Only some of the Corporate users are able to connect

to the virtual server A BIG-IP Administrator performs a tcpdump on the BIG-IP and verifies that traffic is

arriving from users in 10.0.0.0/24.

What should the BIG-IP Administrator do to correct this behaviour?

Options :

A : Disable the server on the internal VLAN

B : Add a static route for the 172.16.0.0/12 subnet

C : Change the default route to point to the extra firewall

D : Modify the default route of the servers to point to the BIG-IP device

Answer: B

Question 2

Which log file should the BIG-IP Administrator check to determine if a specific user tried to log in to the 8IG-IP Configuration by utility?

Options :

A : /var/log/pam/tally/log

B : /ver/log/secure

C : /var/log/trn

D : /var/log/http.d

Answer: B

Question 3

The owner of a web application asks the 8IG-IP Administrator to change the port that the BIG-IP device sends traffic to. This change must be made for each member in the server pool named app_pool for their Virtual Server named app_vs. In which area of the BIG-IP Configuration Utility should the BIG-P Administrator make this change?

Options :

A : Local Traffic > Pools

B : Local Traffic > Nodes

C : Network > Interfaces

D : Local Traffic > Virtual Servers

Answer: A

Question 4

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

Which pool can be removed without affecting client traffic?

Options :

A : ftp_pool

B : http_pool

C : server1_80

D : server_pool

Answer: D

Question 5

Which iRule will reject any connection originating from a 10.0.0.0/8 network?

Options :

A :

when CLIENT_ACCEPTED {

set remote_ip [IP::addr [IP::remote_addr] mask 8]

switch $remote_ip {

"10.0.0.0" { reject }

"11.0.0.0" { pool pool_http1}

default { pool http_pool }

}

B :

when CLIENT_ACCEPTED {

set remote_ip [IP::addr [IP::local_addr] mask 8]

switch $remote_ip {

"10.0.0.0" { reject }

"11.0.0.0" { pool pool_http1}

default { pool http_pool }

}

C :

when CLIENT_ACCEPTED {

set remote_ip [IP::addr [IP::client_addr] mask 255.0.0.0]

switch $remote_ip {

"10.0.0.0" { reject }

"11.0.0.0" { pool pool_http1}

default { pool http_pool }

}

D :

when CLIENT_ACCEPTED {

set remote_ip [IP::addr [IP::local_addr] mask 255.0.0.0]

switch $remote_ip {

"10.0.0.0" { reject }

"11.0.0.0" { pool pool_http1}

default { pool http_pool }

}

Answer: C

Free 303 Mock Exam – Practice Online Confidently

Buying Options: