101 Practice Test

If a client's browser does not accept cookies, what occurs when the client connects to a virtual
server using cookie persistence?

A.

The connection request is not processed.

B.

The connection request is sent to a server.

C.

The connection request is load-balanced to an available pool member.

D.

The connection request is refused and the client is sent a "server not available" message.

The incoming client IP address is 195.64.45.52 and the last five connections have been sent to
members A, C, E, D and B. The incoming client IP address is 195.64.45.52 and the last five
connections have been sent to members A, C, E, D and B. Given the virtual server, pool, and
persistence definitions and statistics shown in the above graphic, which member will be used for
the next connection?

A.

10.10.20.1:80

B.

10.10.20.2:80

C.

10.10.20.3:80

D.

10.10.20.4:80

E.

10.10.20.5:80

F.

It cannot be determined with the information given.

Assume a virtual server has a ServerSSL profile. What SSL certificates are required on the BIGIP?

A.

No SSL certificates are required on the BIG-IP.

B.

The BIG-IP's SSL certificates must only exist.

C.

The BIG-IP's SSL certificates must be issued from a certificate authority.

D.

The BIG-IP's SSL certificates must be created within the company hosting the BIG-IPs.

Which statement is true concerning SSL termination?

A.

A virtual server that has both ClientSSL and ServerSSL profiles can still support cookie
persistence.

B.

Decrypting traffic at the BIG-IP allows the use of iRules for traffic management, but increases
the load onthe pool member.

C.

When any virtual server uses a ClientSSL profile, all SSL traffic sent to the BIG-IP is decrypted
before it isforwarded to servers.

D.

If a virtual server has both a ClientSSL and ServerSSL profile, the pool members have less
SSL processingthan if the virtual server had only a ClientSSL profile.

A site wishes to perform source address translation on packets from some clients but not others.
The determination is not based on the client's IP address, but on the virtual servers their packets
arrive on. What could best accomplish this goal?

A.

A SNAT for all addresses could be defined, and then disable the SNAT processing for select
VLANs.

B.

Some virtual servers could be associated with SNAT pools and others not associated with
SNAT pools.

C.

The decision to perform source address translation is always based on VLAN. Thus, the goal
cannot beachieved.

D.

The decision to perform source address translation is always based on a client's address (or
network).Thus, this goal cannot be achieved.