I85PREP
⌘ K
CCA-AppDS Traffic Management (1Y0-241) study materials
CCA-AppDS Traffic Management (1Y0-241) study resources

CCA-AppDS Traffic Management (1Y0-241) practice questions

One question at a time. Build your CCA-AppDS Traffic Management (1Y0-241) understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1NetScaler/ADC Traffic Management Fundamentals and Architecture

In a NetScaler deployment, which component is responsible for forwarding client requests to backend servers based on configured policies?

  1. The virtual server (vserver) Correct answer.
  2. The service group monitor
  3. The NetScaler packet engine
  4. The policy expression engine

Explanation

A virtual server is the client-facing entity that receives traffic on a specific IP address and port, then applies its associated policies and load-balancing method to select a backend service. Monitors only track health, and the policy engine evaluates expressions but does not itself own the client-facing listener.

Question 2NetScaler/ADC Traffic Management Fundamentals and Architecture

Which NetScaler load-balancing method distributes requests to services in a repeating sequential order regardless of current server load?

  1. Round robin Correct answer.
  2. Response time
  3. Least bandwidth
  4. Least connection

Explanation

Round robin cycles through the bound services in order, sending each new connection to the next service in the list. It does not consider current load, so it is best suited to servers of similar capacity.

Question 3NetScaler/ADC Traffic Management Fundamentals and Architecture

What is the purpose of a monitor bound to a service in NetScaler?

  1. To rewrite HTTP headers before forwarding to the server
  2. To encrypt traffic between the client and the virtual server
  3. To periodically probe the backend and mark the service UP or DOWN Correct answer.
  4. To cache static content for repeat clients

Explanation

Monitors send probes such as TCP connects or HTTP requests to the backend at a configured interval and mark the service state based on the result. When a service is DOWN, the load-balancing algorithm skips it.

Question 4NetScaler/ADC Traffic Management Fundamentals and Architecture

A virtual server is configured with an IP address of 10.10.10.50 and port 443, using SSL. Which statement describes the client-facing behavior?

  1. Clients connect directly to each backend server's IP address on port 443
  2. Clients connect to port 80 and are redirected by the backend server
  3. Clients connect to 10.10.10.50 on port 443 and the NetScaler terminates or bridges the SSL session Correct answer.
  4. Clients must connect to the NetScaler NSIP on port 443 for all vservers

Explanation

A virtual server owns a VIP and port; clients send traffic to that VIP:port. With SSL configured, the NetScaler handles the SSL session on that listener. Backend IPs are hidden behind the vserver.

Question 5NetScaler/ADC Traffic Management Fundamentals and Architecture

Which NetScaler entity represents a specific backend server and port that receives traffic from a virtual server?

  1. Service Correct answer.
  2. Monitor
  3. Profile
  4. Action

Explanation

A service binds a backend server IP and port, and is then bound to one or more virtual servers. The vserver selects among its bound services using the configured load-balancing method.

Question 6NetScaler/ADC Traffic Management Fundamentals and Architecture

Persistence (session affinity) on a NetScaler virtual server primarily ensures which behavior?

  1. Requests are compressed before reaching the backend
  2. All client requests from the same client are sent to the same backend service for the persistence timeout Correct answer.
  3. Traffic is mirrored to a standby NetScaler appliance
  4. All clients are load balanced evenly across services without regard to prior requests

Explanation

Persistence overrides the load-balancing method for a period so that a returning client is directed to the same service it used before. This is essential for applications that store session state locally on the server.

Question 7NetScaler/ADC Traffic Management Fundamentals and Architecture

An administrator wants NetScaler to send new connections to the service with the fewest active connections. Which load-balancing method should be selected?

  1. Least connection Correct answer.
  2. Round robin
  3. Custom load
  4. Source IP hash

Explanation

Least connection tracks the number of active connections per service and picks the one with the smallest count. This adapts to uneven session lengths better than round robin.

Question 8NetScaler/ADC Traffic Management Fundamentals and Architecture

Which statement best describes the role of the NetScaler packet engine in traffic management?

  1. It stores configuration in a database for audit purposes
  2. It terminates only management SSH sessions
  3. It processes data-plane traffic, applying configured policies and forwarding decisions Correct answer.
  4. It provides the management GUI and CLI for configuration

Explanation

The packet engine is the data-plane component that inspects and forwards packets according to the configuration built by the control plane. The GUI and CLI are management interfaces, not the forwarding path.

Question 9NetScaler/ADC Traffic Management Fundamentals and Architecture

A NetScaler high-availability pair is configured in active-active mode. Which statement is accurate about how traffic is handled?

  1. Both nodes process every packet for the same virtual server in parallel
  2. Only the primary node processes traffic while the secondary is fully passive
  3. Both nodes can process traffic for different virtual servers simultaneously Correct answer.
  4. The secondary node only handles management traffic

Explanation

In active-active HA, both nodes actively process traffic, typically with different virtual servers owned by each node. If one node fails, its vservers fail over to the surviving node.

Question 10NetScaler/ADC Traffic Management Fundamentals and Architecture

Which policy type on NetScaler is used to silently drop or redirect requests before they reach a backend, without modifying the request?

  1. Content switching policy
  2. Rewrite policy
  3. Compression policy
  4. Responder policy Correct answer.

Explanation

Responder policies generate a response (such as a redirect or a drop) directly on the NetScaler, short-circuiting the request. Rewrite policies modify requests or responses but do not by themselves produce a new response.

Question 11NetScaler/ADC Traffic Management Fundamentals and Architecture

An administrator wants requests for /images/* to be handled by a dedicated vserver while all other paths go to the default vserver. Which feature accomplishes this?

  1. Global server load balancing
  2. SSL offloading
  3. Content switching Correct answer.
  4. Connection multiplexing

Explanation

Content switching uses policies to route requests to different target vservers based on URL, host, or other content. This allows path-based routing without changing client-facing addresses.

Question 12NetScaler/ADC Traffic Management Fundamentals and Architecture

Which persistence type is most appropriate for keeping a client on the same backend when the client's source address may change due to NAT?

  1. Cookie-based persistence Correct answer.
  2. Source IP persistence
  3. Destination IP persistence
  4. SSL session ID persistence

Explanation

Cookie-based persistence inserts or reads a cookie so affinity follows the client session rather than the source IP. This survives source NAT changes that would break source IP persistence.

Question 13NetScaler/ADC Traffic Management Fundamentals and Architecture

Which NetScaler feature allows a single backend connection to carry requests from multiple clients, reducing backend connection overhead?

  1. Surge protection
  2. HTTP compression
  3. TCP buffering
  4. Connection multiplexing Correct answer.

Explanation

Connection multiplexing (connection pooling) reuses backend connections for multiple client requests, reducing the number of TCP connections the servers must handle. This improves scalability for high-request-rate workloads.

Question 14NetScaler/ADC Traffic Management Fundamentals and Architecture

What does the NetScaler management IP (NSIP) primarily provide?

  1. The address used for management access and HA communication Correct answer.
  2. The address used for backend server health probes
  3. The data-plane address that clients connect to for applications
  4. The address used for GSLB site selection

Explanation

The NSIP is the management address used for GUI, CLI, and HA communication between nodes. Application traffic is served by virtual server VIPs, not the NSIP.

Question 15NetScaler/ADC Traffic Management Fundamentals and Architecture

A service is bound to a virtual server but its monitor reports DOWN. What is the expected effect on traffic distribution?

  1. Traffic is redirected to the NSIP
  2. The service is removed from the load-balancing selection until it returns UP Correct answer.
  3. The virtual server stops responding to all clients
  4. The monitor is automatically disabled

Explanation

When a monitor marks a service DOWN, the load-balancing algorithm excludes it from selection, so traffic goes to the remaining healthy services. The vserver continues serving clients as long as at least one healthy service remains bound.

Question 16NetScaler/ADC Traffic Management Fundamentals and Architecture

Which NetScaler capability provides global distribution of clients across data centers based on site health and proximity?

  1. Global server load balancing (GSLB) Correct answer.
  2. Content switching
  3. Cache redirection
  4. Link load balancing

Explanation

GSLB uses DNS-based methods and site metrics such as health, proximity, and load to direct clients to the best data center. Content switching operates locally across vservers, not across sites.

Question 17NetScaler/ADC Traffic Management Fundamentals and Architecture

A virtual server uses the least bandwidth method, but one backend has a much faster NIC than the others. Which consideration best explains a potential imbalance?

  1. Least bandwidth always selects the first bound service
  2. Least bandwidth selects by active connections, so NIC speed is ignored
  3. Least bandwidth selects by measured throughput, so a faster NIC may absorb more traffic until its measured bandwidth matches others Correct answer.
  4. Least bandwidth requires cookie persistence to function

Explanation

Least bandwidth chooses the service currently using the least measured bandwidth, so a high-capacity server can take on more load before its measured usage rises to match others. This can produce uneven connection counts but balanced throughput.

Question 18NetScaler/ADC Traffic Management Fundamentals and Architecture

Which statement correctly distinguishes a rewrite policy from a responder policy on NetScaler?

  1. Rewrite policies drop traffic, while responder policies modify headers
  2. Both policy types only apply to backend responses
  3. Responder policies require content switching to function
  4. Rewrite policies modify traffic in flight, while responder policies generate a new response to the client Correct answer.

Explanation

Rewrite policies transform requests or responses, such as changing a header or URL, while responder policies produce a response directly on the appliance. Responder is typically used for redirects, blocks, or maintenance pages.

Question 19NetScaler/ADC Traffic Management Fundamentals and Architecture

During an HA failover in an active-passive pair, which behavior should a client with an established TCP connection expect?

  1. The connection is typically reset and the client must reconnect to the VIP Correct answer.
  2. The connection continues uninterrupted because both nodes share the same connection state
  3. The connection is silently dropped with no further packets
  4. The connection is redirected to the NSIP

Explanation

In active-passive HA, the standby node does not maintain full connection state for the primary's flows, so established connections are generally reset on failover. Clients reconnect to the same VIP, which is now served by the newly active node.

Question 20NetScaler/ADC Traffic Management Fundamentals and Architecture

An administrator configures a content switching vserver with no default target and a policy that matches only /api/*. What happens to a request for /home?

  1. It receives no matching target and is not forwarded to a backend Correct answer.
  2. It is sent to the NSIP for handling
  3. It is automatically rewritten to /api/*
  4. It is forwarded to the first bound target vserver

Explanation

A content switching vserver forwards only requests that match a policy with an associated target. Without a default target, unmatched requests have no destination and are not forwarded to a backend.

Question 21NetScaler/ADC Traffic Management Fundamentals and Architecture

Which persistence configuration best supports an application that requires affinity but must also drain a server gracefully during maintenance?

  1. Cookie persistence with a finite timeout and graceful disable of the service Correct answer.
  2. Source IP persistence with an infinite timeout
  3. Round robin with no persistence
  4. SSL session ID persistence with no timeout

Explanation

Cookie persistence maintains affinity while a finite timeout allows sessions to expire naturally. Gracefully disabling the service lets existing sessions finish while new connections go elsewhere, supporting maintenance without abrupt drops.

Question 22NetScaler/ADC Traffic Management Fundamentals and Architecture

Which NetScaler feature inspects HTTP requests and can block traffic matching a signature or expression before it reaches the backend?

  1. Application firewall Correct answer.
  2. Compression policy
  3. TCP profile
  4. SSL profile

Explanation

The application firewall examines requests against signatures and policies and can block or log matching traffic. Profiles tune protocol behavior but do not enforce request-level security rules.

Question 23NetScaler/ADC Traffic Management Fundamentals and Architecture

Which statement best explains how the NetScaler chooses among multiple bound services when the configured method is round robin and one service is administratively disabled?

  1. The disabled service still receives traffic until its monitor fails
  2. Round robin falls back to least connection automatically
  3. The virtual server stops serving because a bound service is disabled
  4. The disabled service is skipped and the rotation continues among enabled services Correct answer.

Explanation

Administratively disabling a service removes it from selection while leaving it bound for configuration purposes. Round robin continues across the remaining enabled services.

Question 24NetScaler/ADC Traffic Management Fundamentals and Architecture

What is the primary function of a TCP profile bound to a NetScaler virtual server?

  1. To select the load-balancing method
  2. To define the backend server IP and port
  3. To store SSL certificates
  4. To tune transport-layer behavior such as window scaling and buffering Correct answer.

Explanation

A TCP profile controls transport-level parameters that affect throughput and latency, such as window scaling and buffering. It does not define backend endpoints or select load-balancing methods.

Question 25Load Balancing: Virtual Servers, Services, Monitors, and Load Balancing Methods

A NetScaler administrator wants persistence entries to remain valid even if the primary backend service fails and traffic moves to a backup virtual server. Which persistence type should be configured on the virtual server?

  1. Source IP persistence
  2. Rule-based persistence
  3. SSL session ID persistence
  4. Cookie persistence Correct answer.

Explanation

Cookie persistence inserts a cookie identifying the selected service so the client is re-associated with the same backend on subsequent requests. Because the cookie is client-side and validated against the configured persistence timeout, the entry can survive failover to a backup vserver when the same service exists there.

Question 26Load Balancing: Virtual Servers, Services, Monitors, and Load Balancing Methods

Which statement describes the default behavior of the NetScaler load balancing method when a virtual server is created without specifying an algorithm?

  1. Least Response Time is used
  2. Least Connection is used
  3. Round Robin is used Correct answer.
  4. Source IP hash is used

Explanation

When no method is specified, NetScaler applies the Round Robin method, distributing new connections sequentially across the bound services. Administrators must explicitly change the method to Least Connection or another algorithm if different distribution is required.

Question 27Load Balancing: Virtual Servers, Services, Monitors, and Load Balancing Methods

A monitor is bound to a service group containing six members. The monitor is configured with interval 5 and retries 3. How does NetScaler determine that an individual member is DOWN?

  1. After the monitor interval multiplied by the retry count elapses regardless of probe results
  2. After one failed probe
  3. After three failed probes within any 60-second window
  4. After three consecutive failed probes Correct answer.

Explanation

The retries parameter defines how many consecutive probe failures must occur before NetScaler marks the service as DOWN. A single failure does not change state, and the counter resets when a probe succeeds.

Question 28Load Balancing: Virtual Servers, Services, Monitors, and Load Balancing Methods

An administrator needs client requests for a web application to be distributed based on current server load rather than a fixed sequence. Which load balancing method best meets this requirement?

  1. Destination IP hash
  2. Round Robin
  3. Least Connection Correct answer.
  4. Static Proximity

Explanation

Least Connection selects the service with the fewest active connections, which naturally accounts for current load differences among backends. Round Robin ignores load, and hash-based methods distribute deterministically by address.

Question 29Load Balancing: Virtual Servers, Services, Monitors, and Load Balancing Methods

Which monitor type should be bound to a service when the administrator wants to verify that a backend responds to an HTTP request with a specific status code and body string?

  1. TCP monitor
  2. UDP-ECV monitor
  3. PING monitor
  4. HTTP-ECV monitor Correct answer.

Explanation

An HTTP-ECV monitor sends an HTTP request and evaluates the response against a configured expression, allowing checks on status codes and content. Plain TCP or PING monitors only confirm reachability, and UDP-ECV is for UDP payloads.

Question 30Load Balancing: Virtual Servers, Services, Monitors, and Load Balancing Methods

A service is bound to a virtual server but no monitor is bound to the service. What is the resulting health state of the service?

  1. It is treated as UP because no health check is defined Correct answer.
  2. It inherits the virtual server's monitor automatically
  3. It is marked DOWN until a monitor is bound
  4. It is placed in a transitional state

Explanation

Without a bound monitor, NetScaler has no health check to evaluate and treats the service as UP by default. Administrators should bind monitors to avoid sending traffic to failed backends.

Question 31Load Balancing: Virtual Servers, Services, Monitors, and Load Balancing Methods

Which virtual server type is required to load balance non-HTTP TCP traffic such as a database listener on port 3306?

  1. HTTP virtual server
  2. TCP virtual server Correct answer.
  3. UDP virtual server
  4. SSL virtual server

Explanation

A TCP virtual server handles generic TCP traffic and forwards it to bound services without HTTP parsing. HTTP and SSL virtual servers apply protocol-specific processing that is inappropriate for a raw database listener.

Question 32Load Balancing: Virtual Servers, Services, Monitors, and Load Balancing Methods

An administrator configures a backup virtual server on the primary virtual server. Under which condition does traffic begin flowing to the backup virtual server?

  1. When all services bound to the primary virtual server are DOWN Correct answer.
  2. Whenever any single bound service fails
  3. When the primary virtual server's monitor interval expires
  4. When the primary virtual server reaches 50 percent connection capacity

Explanation

A backup virtual server is used only when the primary virtual server has no available UP services. A single service failure is handled by the remaining services on the primary.

Question 33Load Balancing: Virtual Servers, Services, Monitors, and Load Balancing Methods

Which persistence method stores the persistence mapping on the NetScaler itself and can be shared by multiple virtual servers using the same persistence type and timeout?

  1. URL persistence
  2. SSL session ID persistence
  3. Cookie persistence
  4. Source IP persistence Correct answer.

Explanation

Source IP persistence creates a server-side mapping keyed by client IP address, stored on the appliance. With matching persistence type and timeout, multiple virtual servers can reference the same mapping.

Question 34Load Balancing: Virtual Servers, Services, Monitors, and Load Balancing Methods

A service group is configured with a member that is administratively disabled. How does the load balancing virtual server treat that member?

  1. It receives only health check probes
  2. It continues to receive new connections until existing ones close
  3. It is removed from the service group automatically
  4. It is excluded from new connection distribution Correct answer.

Explanation

Administratively disabling a member marks it unavailable so the virtual server stops selecting it for new connections. Existing connections may drain according to configuration, but new distribution excludes the member.

Question 35Load Balancing: Virtual Servers, Services, Monitors, and Load Balancing Methods

Which load balancing method uses a hash of the destination IP address to select a service?

  1. Source IP hash
  2. Least Bandwidth
  3. Destination IP hash Correct answer.
  4. Custom Load

Explanation

Destination IP hash computes a hash from the destination IP and uses it to pick a service, providing deterministic distribution. Source IP hash instead keys on the client address.

Question 36Load Balancing: Virtual Servers, Services, Monitors, and Load Balancing Methods

An administrator wants a monitor to be applied to every member of a service group without binding it to each member individually. What is the correct approach?

  1. Bind the monitor to the virtual server
  2. Bind the monitor to the service group Correct answer.
  3. Create a responder policy for each member
  4. Bind the monitor to each service individually

Explanation

Binding a monitor to a service group applies that health check to all members of the group. This centralizes monitor management and avoids per-member bindings.

Question 37Load Balancing: Virtual Servers, Services, Monitors, and Load Balancing Methods

A virtual server is configured with the Least Response Time method and no monitors are bound to its services. What is the effect on service selection?

  1. The virtual server marks all services DOWN
  2. The virtual server uses the configured response timeout value
  3. The virtual server uses active connection counts only Correct answer.
  4. The virtual server falls back to Round Robin

Explanation

Least Response Time relies on monitor-derived response data; without monitors, NetScaler cannot compute response times and selects based on active connections. Binding monitors restores response-time-based selection.

Question 38Load Balancing: Virtual Servers, Services, Monitors, and Load Balancing Methods

Which statement correctly distinguishes a service from a service group on NetScaler?

  1. A service represents one backend endpoint, while a service group represents a collection of endpoints managed together Correct answer.
  2. A service can only be bound to one virtual server, while a service group can be bound to many
  3. A service group cannot have monitors bound to it
  4. A service group represents one endpoint, while a service represents many endpoints

Explanation

A service defines a single IP and port endpoint, whereas a service group aggregates multiple member endpoints under shared configuration such as monitors and members. Service groups simplify managing many identical backends.

Question 39Load Balancing: Virtual Servers, Services, Monitors, and Load Balancing Methods

An administrator wants connections from the same client to consistently reach the same backend for the duration of a session, but only while the backend remains healthy. Which configuration achieves this?

  1. Source IP persistence with a timeout Correct answer.
  2. Destination IP hash with no timeout
  3. Least Connection with no persistence
  4. Round Robin with no persistence

Explanation

Source IP persistence maps a client address to a backend for the persistence timeout, providing session affinity. If the backend fails health checks, the mapping is invalidated and the client is rebalanced.

Question 40Load Balancing: Virtual Servers, Services, Monitors, and Load Balancing Methods

A monitor's probe is configured with a send string and receive string. What is the purpose of the receive string?

  1. It identifies the backend port to probe
  2. It specifies the expected content that must appear in the response for the probe to succeed Correct answer.
  3. It defines the payload sent to the backend
  4. It sets the timeout for the probe

Explanation

The receive string is matched against the backend response; the probe succeeds only if the expected content is present. The send string carries the request payload, and timeout and port are separate parameters.

Question 41Load Balancing: Virtual Servers, Services, Monitors, and Load Balancing Methods

Which virtual server setting determines whether the appliance terminates client connections and creates separate connections to the backend services?

  1. The load balancing method
  2. The persistence timeout
  3. The virtual server type and mode of operation Correct answer.
  4. The monitor retry count

Explanation

The virtual server type and its operating mode determine whether the appliance terminates client connections and establishes separate backend connections. Load balancing method, persistence, and monitor retries affect distribution and health, not connection termination.

Question 42Load Balancing: Virtual Servers, Services, Monitors, and Load Balancing Methods

An administrator wants traffic distributed proportionally to weights assigned to each service. Which method should be used?

  1. Weighted Round Robin Correct answer.
  2. Least Packets
  3. Least Connection
  4. Round Robin

Explanation

Weighted Round Robin distributes connections according to configured weight values, so higher-weight services receive proportionally more traffic. Plain Round Robin treats all services equally.

Question 43Load Balancing: Virtual Servers, Services, Monitors, and Load Balancing Methods

A service group member is marked DOWN by its monitor. What happens to new connections directed to that member?

  1. They are sent but immediately reset
  2. They continue to be sent until the persistence timeout expires
  3. They are not sent; the member is removed from the active distribution set Correct answer.
  4. They are sent only if the member is the first in the group

Explanation

When a monitor marks a member DOWN, the virtual server excludes it from new connection distribution and selects among remaining UP members. Existing connections may be handled per configured behavior.

Question 44Load Balancing: Virtual Servers, Services, Monitors, and Load Balancing Methods

Which persistence type is most appropriate for a stateless application where any backend can serve any request and affinity is unnecessary?

  1. No persistence configured Correct answer.
  2. Cookie persistence
  3. SSL session ID persistence
  4. Source IP persistence

Explanation

For stateless applications, persistence is unnecessary and can cause uneven distribution. Omitting persistence lets the load balancing method freely distribute each connection.

Question 45Load Balancing: Virtual Servers, Services, Monitors, and Load Balancing Methods

What is the effect of configuring a monitor's interval to a very low value such as 1 second on a large service group?

  1. It disables health checking
  2. It increases probe traffic and may burden the appliance and backends Correct answer.
  3. It reduces probe traffic and CPU load
  4. It automatically increases the retry count

Explanation

A short interval causes probes to be sent more frequently, increasing traffic and processing load on both the appliance and the backends. Administrators should balance detection speed against overhead.

Question 46Load Balancing: Virtual Servers, Services, Monitors, and Load Balancing Methods

Which statement about binding a service to a virtual server is correct?

  1. A service can be bound only to a service group, never to a virtual server
  2. A service automatically receives traffic from all virtual servers once created
  3. Binding a service requires deleting and recreating the virtual server
  4. A service must be bound to a virtual server before it can receive traffic through that virtual server Correct answer.

Explanation

Traffic reaches a backend through a virtual server only when the service is bound to that virtual server. Creating a service alone does not route traffic to it.

Question 47Load Balancing: Virtual Servers, Services, Monitors, and Load Balancing Methods

An administrator observes that one backend in a service group receives no traffic while others are busy, even though its monitor reports UP. Which cause is most likely?

  1. The service group has no monitor bound
  2. The member is administratively disabled Correct answer.
  3. The persistence timeout is too short
  4. The virtual server uses Round Robin

Explanation

An administratively disabled member remains in the group and may still be probed, but it is excluded from new connection distribution. Checking member state distinguishes administrative disablement from health-based DOWN.

Question 48Load Balancing: Virtual Servers, Services, Monitors, and Load Balancing Methods

Which load balancing method bases selection on the measured bandwidth utilization of each service?

  1. Round Robin
  2. Least Bandwidth Correct answer.
  3. Least Connection
  4. Least Response Time

Explanation

Least Bandwidth selects the service with the lowest measured bandwidth usage among the candidates. Least Connection uses connection counts, and Least Response Time uses response-time data.

Question 49Load Balancing: Virtual Servers, Services, Monitors, and Load Balancing Methods

A virtual server uses cookie persistence, but clients connect through a proxy that strips cookies. What is the practical result?

  1. The virtual server marks all services DOWN
  2. The appliance automatically switches to source IP persistence
  3. Persistence fails and requests may be distributed without affinity Correct answer.
  4. Persistence continues to work because the appliance tracks client IP

Explanation

Cookie persistence depends on the client returning the inserted cookie; if a proxy strips it, the appliance cannot re-associate the request and affinity is lost. The appliance does not silently change persistence type.

Question 50Load Balancing: Virtual Servers, Services, Monitors, and Load Balancing Methods

A load balancing virtual server is configured with the Source IP Hash method. Which behavior should the administrator expect when two different clients sit behind the same NAT device and reach the virtual server with identical source IP addresses?

  1. Both clients are mapped to the same service because the hash input is identical. Correct answer.
  2. Both clients are mapped to the first service in the binding order regardless of the hash.
  3. Each client is mapped to a different service because the hash also includes the source port.
  4. Each client is mapped to a different service because persistence overrides the hash.

Explanation

Source IP Hash computes a hash from the client source address only, so clients sharing one NAT address produce the same hash and land on the same service. Source port is not part of the hash input. This is the well-known drawback of source IP based distribution for clients behind a proxy or NAT pool.