Free 201 sample questions

Correct answer: :p

The `:p` modifier used with the `-i 0.0` interface tells `tcpdump` to capture traffic on the client-side of the flow after it has been decrypted by the Client SSL profile. This allows the administrator to see the raw, unencrypted application layer data (e.g., HTTP headers and payload) as it is processed by TMM, which is crucial for troubleshooting application-level performance issues.

Correct answer: Network > Self IPs

Port Lockdown is a security feature configured on a per-self-IP basis. To check or change this setting, the administrator must navigate to Network > Self IPs, select the specific self-IP in question, and then review the 'Port Lockdown' setting. SSH is likely allowed while HTTPS is not.

Correct answer: A qkview diagnostic file.

A qkview file is a comprehensive snapshot of the BIG-IP system's configuration, logs, and real-time status. F5 Support engineers rely on this file as the primary source of information for troubleshooting. Uploading it to iHealth provides an initial automated analysis and makes the data readily available to the support team, significantly speeding up the diagnostic process.

Correct answer: The pool member's health is unknown; no monitor is assigned.

In the BIG-IP Network Map, different shapes and colors represent the status of objects. A blue square specifically indicates that the object (in this case, a pool member) is available but its health status is unknown because there is no health monitor assigned to it. The system cannot verify its ability to service requests.

Correct answer: Upgrade the standby unit first, verify its status, force a failover to make it active, and then upgrade the new standby unit.

The standard, best-practice procedure for upgrading an HA pair is to perform the operation on the standby unit first. This allows the active unit to continue handling traffic. Once the standby unit is successfully upgraded and rebooted into the new software version, the administrator can force a failover. The newly upgraded unit becomes active, and the process is repeated on the other unit, which is now the standby. This ensures traffic is always being handled by one of the units.

Correct answer: Set the state to 'Disabled'.

Setting a pool member's state to 'Disabled' is the correct action for graceful removal. This state allows existing connections, including those maintained by persistence, to continue until they are closed or time out. However, it prevents the BIG-IP from sending any new connections to that member. 'Forced Offline', in contrast, marks the member as down and immediately stops it from receiving any traffic, which could disrupt existing user sessions.

Correct answer: A persistence profile on the virtual server is overriding the load balancing decision for returning clients.

The BIG-IP system checks for a persistence record before making a load balancing decision. If a client has an existing persistence record for a specific pool member, the system will send the new connection to that member, regardless of the 'Least Connections' algorithm. If most returning clients are persisted to other members, a new or underutilized member will receive very little traffic.

Correct answer: Guest

The 'Guest' role in TMOS is specifically designed for read-only access. Users with this role can log in to the Configuration Utility and view configurations, statistics, and statuses, but they are prohibited from making any changes. This is the principle of least privilege in action for monitoring purposes.

Correct answers: The health monitor's Interval and Timeout values are too aggressive for the application's response time.; There is an intermittent network issue (e.g., packet loss) between the BIG-IP self-IP and the pool member.

If the monitor timeout is shorter than the server's typical response time, the monitor will frequently fail, marking the member down. When the server does respond within the interval, it will be marked up again, leading to a flapping state.

Health monitor probes are network packets. If there is intermittent packet loss or high latency on the path between the BIG-IP and the server, some monitor probes will fail while others succeed, causing the member's status to flap between up and down.

Correct answer: Provision the ASM module under System > Resource Provisioning.

On a BIG-IP system, being licensed for a module is not enough to use it. An administrator must also provision system resources (CPU, memory) to it. This is done in the System > Resource Provisioning section of the Configuration Utility. After provisioning, the relevant daemons are started and the configuration options appear in the GUI.