I85PREP
⌘ K
F5 301B BIG-IP LTM study materials
F5 301B BIG-IP LTM study resources

F5 301B BIG-IP LTM practice questions

One question at a time. Build your F5 301B BIG-IP LTM understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1BIG-IP LTM configuration and virtual servers

A client connects to a standard virtual server configured with a destination address of 10.10.10.100 and service port 443. Which address does the BIG-IP use as the source IP when it opens the server-side connection by default?

  1. A self IP address selected by the TMM routing decision Correct answer.
  2. The client's original source IP address
  3. The virtual server's destination IP address
  4. The management interface address of the active device

Explanation

A standard virtual server performs full proxy termination, so the BIG-IP originates a new server-side connection using a self IP chosen by the traffic management microkernel based on routing. The client source address is preserved only when a SNAT, SNAT pool, or automap is applied.

Question 2BIG-IP LTM configuration and virtual servers

An administrator needs a virtual server that forwards traffic without terminating the TCP connection, preserving the client source IP and destination IP. Which virtual server type should be selected?

  1. Stateless
  2. Performance (Layer 4)
  3. Forwarding (IP) Correct answer.
  4. Standard

Explanation

A forwarding (IP) virtual server passes packets through without establishing a separate server-side connection, so both source and destination addresses are preserved. Standard and performance Layer 4 virtual servers act as full proxies and rewrite addresses as needed.

Question 3BIG-IP LTM configuration and virtual servers

A virtual server has destination 0.0.0.0:0 with a type of Forwarding (IP). What is the practical effect of this configuration?

  1. It matches only traffic addressed to 0.0.0.0
  2. It matches traffic only on the default VLAN
  3. It rejects all inbound traffic until a pool is attached
  4. It matches any destination address and port, making it a wildcard listener Correct answer.

Explanation

The all-zeros destination 0.0.0.0:0 combined with the forwarding type creates a wildcard virtual server that matches any destination IP and port. This pattern is commonly used for transparent forwarding or route-domain-level catch-all listeners.

Question 4BIG-IP LTM configuration and virtual servers

Which virtual server setting determines whether the BIG-IP rewrites the client source address toward pool members?

  1. VLAN Traffic Group
  2. Source Address Translation Correct answer.
  3. Port Translation
  4. Address Translation

Explanation

Source Address Translation controls whether SNAT, a SNAT pool, or automap is applied to connections leaving the virtual server toward pool members. Port Translation is a separate setting governing destination port rewriting.

Question 5BIG-IP LTM configuration and virtual servers

A virtual server is configured with Source Address Translation set to Automap and has no SNAT pool assigned. Which address will be used as the source for server-side connections?

  1. The client's original source address
  2. A self IP address on the egress VLAN Correct answer.
  3. The virtual server's destination address
  4. The floating self IP of the traffic group

Explanation

Automap selects a self IP address on the VLAN the traffic egresses, effectively applying SNAT using that self IP. It does not use the virtual address and does not preserve the client address.

Question 6BIG-IP LTM configuration and virtual servers

Which pool load balancing method distributes connections based on the number of currently active connections per member?

  1. Least Connections Correct answer.
  2. Observed
  3. Ratio
  4. Round Robin

Explanation

Least Connections selects the member with the fewest active connections at the time of the request. Round Robin rotates sequentially, Observed uses a dynamic score, and Ratio uses a configured weight.

Question 7BIG-IP LTM configuration and virtual servers

A pool member is marked down by a health monitor. What is the default behavior of the virtual server when all pool members are down?

  1. It returns a TCP reset or connection failure to the client Correct answer.
  2. It sends traffic to the first member anyway
  3. It forwards traffic to the virtual address itself
  4. It load balances across all members regardless of state

Explanation

When no pool members are available, the virtual server cannot select a destination and typically rejects the connection, producing a reset or failure for the client. Administrators can change this using the 'Action on Service Down' setting.

Question 8BIG-IP LTM configuration and virtual servers

Which persistence method stores persistence records so that multiple BIG-IP devices in a device group can share them, enabling persistence to survive failover?

  1. Universal persistence Correct answer.
  2. Destination address affinity persistence
  3. Source IP persistence
  4. Cookie persistence

Explanation

Universal persistence stores persistence information in a shared persistence table synchronized across a high-availability device group. This allows persistence records to survive failover between peers.

Question 9BIG-IP LTM configuration and virtual servers

An administrator wants a virtual server to match only HTTPS traffic addressed to 192.168.1.50 on port 443. Which configuration accomplishes this?

  1. Destination any:443 with type Forwarding
  2. Destination 0.0.0.0:0 with type Forwarding
  3. Destination 192.168.1.50:any with type Standard
  4. Destination 192.168.1.50:443 with type Standard Correct answer.

Explanation

A Standard virtual server with a specific destination address and port matches only that address and port combination. Wildcards or forwarding types would broaden the match beyond the intended traffic.

Question 10BIG-IP LTM configuration and virtual servers

A virtual server has an HTTP profile attached but no TCP profile. What is the result?

  1. The HTTP profile supplies its own TCP handling
  2. The virtual server cannot process the traffic
  3. The virtual server becomes a forwarding virtual server
  4. The virtual server uses the default TCP profile automatically Correct answer.

Explanation

When no TCP profile is explicitly assigned, the BIG-IP applies the default TCP profile so the connection can be established. The HTTP profile then parses the application-layer traffic.

Question 11BIG-IP LTM configuration and virtual servers

Which profile is required on a virtual server for the BIG-IP to decrypt and inspect HTTPS traffic from clients?

  1. Client SSL profile Correct answer.
  2. Server SSL profile
  3. FTP profile
  4. HTTP profile

Explanation

A Client SSL profile provides the certificate and key used to terminate TLS from the client, allowing the BIG-IP to decrypt the traffic. A Server SSL profile governs the BIG-IP's own TLS connection to the pool member.

Question 12BIG-IP LTM configuration and virtual servers

A virtual server uses a Client SSL profile and a Server SSL profile. What is the effect on the traffic flow?

  1. The BIG-IP requires both profiles to be identical
  2. The BIG-IP terminates TLS but sends plaintext to the pool member
  3. The BIG-IP terminates TLS from the client and re-encrypts traffic toward the pool member Correct answer.
  4. The BIG-IP passes encrypted traffic without decryption

Explanation

The Client SSL profile terminates the client TLS session, and the Server SSL profile establishes a new encrypted session to the pool member. This is often called SSL bridging or re-encryption.

Question 13BIG-IP LTM configuration and virtual servers

Which iRule event fires when a client first connects to a virtual server, before the connection is load balanced to a pool member?

  1. CLIENT_ACCEPTED Correct answer.
  2. SERVER_CONNECTED
  3. HTTP_REQUEST
  4. LB_SELECTED

Explanation

CLIENT_ACCEPTED fires when the client connection is accepted, before load balancing occurs. This is the appropriate event for early decisions such as selecting a pool or SNAT before a member is chosen.

Question 14BIG-IP LTM configuration and virtual servers

An iRule uses the event HTTP_REQUEST to inspect the URI and select a pool. Which statement about this event is accurate?

  1. It fires once per HTTP request, including keepalive requests Correct answer.
  2. It fires only after the server responds
  3. It fires only during the TLS handshake
  4. It fires once per TCP connection

Explanation

HTTP_REQUEST fires for each individual HTTP request received, which includes subsequent requests on a keepalive connection. This makes it suitable for per-request routing decisions.

Question 15BIG-IP LTM configuration and virtual servers

What is the primary purpose of a OneConnect profile on a virtual server?

  1. To provide SNAT for outbound traffic
  2. To multiplex multiple client connections over a single server-side connection Correct answer.
  3. To synchronize persistence records across devices
  4. To encrypt traffic between the BIG-IP and pool members

Explanation

OneConnect enables connection pooling and multiplexing, allowing many client requests to reuse a smaller number of server-side TCP connections. This reduces connection overhead on pool members.

Question 16BIG-IP LTM configuration and virtual servers

A pool has three members with weights 1, 2, and 3 under the Ratio (member) method. How is traffic distributed?

  1. Based on the fewest active connections
  2. Proportionally in a 1:2:3 ratio Correct answer.
  3. Only to the member with the highest weight
  4. Equally across all three members

Explanation

Ratio (member) distributes connections in proportion to each member's configured weight. Here the members receive roughly one-sixth, two-sixths, and three-sixths of the traffic respectively.

Question 17BIG-IP LTM configuration and virtual servers

Which setting on a virtual server determines the order in which virtual servers are evaluated when multiple virtual servers could match the same traffic?

  1. The persistence method
  2. The SNAT pool order
  3. The pool member priority
  4. The virtual server's order or precedence value Correct answer.

Explanation

When multiple virtual servers match overlapping traffic, the BIG-IP uses the virtual server order (precedence) to decide which one handles the connection. Lower order values take precedence over higher ones.

Question 18BIG-IP LTM configuration and virtual servers

A virtual server is configured with a VLAN binding of external-vlan only. What happens to traffic arriving on internal-vlan destined for the virtual address?

  1. It is load balanced normally
  2. It triggers a SNAT automatically
  3. It is not matched by the virtual server Correct answer.
  4. It is forwarded to the default pool

Explanation

A VLAN binding restricts the virtual server to traffic arriving on the specified VLAN. Traffic on other VLANs is not matched by that virtual server and may be handled by another virtual server or dropped.

Question 19BIG-IP LTM configuration and virtual servers

Which pool member state indicates that the member has failed a health monitor and is not receiving new connections?

  1. Unchecked
  2. Down Correct answer.
  3. Up
  4. Checking

Explanation

A member marked Down has failed its monitor and is removed from load balancing. Checking indicates a monitor probe is in progress, and Unchecked means no monitor result is available yet.

Question 20BIG-IP LTM configuration and virtual servers

An administrator creates a virtual server with type Performance (Layer 4). Which characteristic distinguishes it from a Standard virtual server?

  1. It forwards packets without any connection state
  2. It uses a fast Layer 4 path that requires a TCP profile but skips some Layer 7 processing Correct answer.
  3. It can only handle UDP traffic
  4. It terminates HTTP and inspects headers

Explanation

A Performance (Layer 4) virtual server uses a streamlined Layer 4 path optimized for high throughput, requiring a TCP profile but avoiding Layer 7 processing such as HTTP parsing. Standard virtual servers offer full proxy features including Layer 7 profiles.

Question 21BIG-IP LTM configuration and virtual servers

What does enabling 'Source Port' persistence accomplish on a virtual server?

  1. It forces all clients to use the same source port
  2. It maps the destination port to the source port
  3. It uses the client source port as part of the persistence key Correct answer.
  4. It preserves the client's source port toward the pool member

Explanation

Source Port persistence includes the client's source port in the persistence key so that connections from the same client port map to the same pool member. It does not preserve the source port toward the server.

Question 22BIG-IP LTM configuration and virtual servers

Which action occurs when a client request matches a virtual server that has no pool assigned and no iRule selecting a pool?

  1. The request is forwarded to the virtual address
  2. The request is load balanced to the default pool
  3. The request is queued until a pool is assigned
  4. The connection is rejected Correct answer.

Explanation

A virtual server without a pool and without an iRule that selects one has no destination for the traffic, so the connection is rejected. A pool or iRule-based selection is required to serve requests.

Question 23BIG-IP LTM configuration and virtual servers

Which statement about a SNAT pool is accurate?

  1. It defines a set of translation addresses the BIG-IP can use for source address translation Correct answer.
  2. It defines the addresses a virtual server listens on
  3. It defines the addresses used for health monitors
  4. It defines the pool members that receive traffic

Explanation

A SNAT pool is a collection of translation addresses from which the BIG-IP chooses a source address for outbound connections. It is referenced by the Source Address Translation setting on a virtual server.

Question 24BIG-IP LTM configuration and virtual servers

A virtual server is configured with a fallback host of 10.20.30.40. Under what condition is the fallback host used?

  1. When the virtual server receives a health monitor probe
  2. When the persistence record expires
  3. When the client sends an unsupported HTTP method
  4. When all pool members are unavailable Correct answer.

Explanation

A fallback host provides an alternate destination when no pool members are available, allowing the virtual server to return a maintained page or alternate service. It is not used for method filtering or persistence expiry.

Question 25BIG-IP LTM configuration and virtual servers

Which virtual server setting controls whether the BIG-IP rewrites the destination port toward the pool member?

  1. Port Translation Correct answer.
  2. Address Translation
  3. Source Address Translation
  4. SNAT Pool

Explanation

Port Translation determines whether the destination port is rewritten to the pool member's port. When disabled, the original destination port is preserved toward the member.

Question 26BIG-IP LTM configuration and virtual servers

A virtual server is configured with destination 10.10.10.100:443 and a default pool named web_pool. A client connects to 10.10.10.100 on port 80. What does the BIG-IP do with that connection?

  1. It forwards the connection to web_pool because the destination IP matches
  2. It sends the connection to the default pool of the wildcard virtual server
  3. It rewrites the destination port to 443 and forwards to web_pool
  4. It rejects the connection because no virtual server listener matches port 80 Correct answer.

Explanation

A virtual server matches on the destination address and port pair, so a listener defined only for 10.10.10.100:443 does not accept traffic to port 80. Without a matching listener the BIG-IP has nothing to translate against and the connection is not load balanced. A wildcard virtual server would only catch it if one were explicitly configured.

Question 27BIG-IP LTM configuration and virtual servers

Which virtual server address configuration makes the BIG-IP accept traffic addressed to any destination IP on the specified port?

  1. A standard virtual server with a host address
  2. A forwarding virtual server with a host address
  3. A network virtual server using a subnet mask
  4. A wildcard virtual server using 0.0.0.0/0 or the any address Correct answer.

Explanation

A wildcard virtual server uses the all-zeros address (or the any6 equivalent for IPv6) so that it matches any destination address on the configured port. It is commonly used for outbound or transparent forwarding scenarios. A network virtual server matches only the specified subnet, and a host virtual server matches a single address.

Question 28BIG-IP LTM configuration and virtual servers

An administrator wants connections from the same client IP to reach the same pool member for the life of a session. Which configuration accomplishes this with the least overhead?

  1. Set the pool load balancing method to Least Connections
  2. Enable a stream profile on the virtual server
  3. Enable source address persistence on the virtual server Correct answer.
  4. Attach a OneConnect profile to the virtual server

Explanation

Source address persistence creates a persistence record keyed on the client IP so subsequent connections from that address are steered to the same pool member. It is a lightweight way to achieve session affinity without inspecting application payloads. Load balancing methods and OneConnect do not provide affinity.

Question 29BIG-IP LTM configuration and virtual servers

Which statement describes the effect of setting a virtual server's service port to a specific value such as 8080 while the pool members listen on 80?

  1. The BIG-IP requires an iRule to change the port in every case
  2. The BIG-IP forwards traffic to the pool member on port 8080 and requires members to listen there
  3. The BIG-IP drops the traffic because the ports do not match
  4. The BIG-IP translates the destination port from 8080 to 80 for the pool member connection Correct answer.

Explanation

The virtual server listener port is independent of the pool member port. When the member port differs from the virtual port, the BIG-IP performs destination port translation so the member receives traffic on its own configured port. No iRule is required for this standard behavior.

Question 30BIG-IP LTM configuration and virtual servers

A virtual server has an HTTP profile, a TCP profile, and a default pool attached. A client sends a request that matches no iRule and no other virtual server. Which component selects the pool member?

  1. The load balancing method configured on the pool Correct answer.
  2. The client SSL profile, based on the SNI value
  3. The TCP profile, based on the SYN sequence number
  4. The HTTP profile, based on the Host header

Explanation

Once a virtual server has chosen its pool, the pool's configured load balancing method determines which member receives the connection. Profiles modify protocol behavior but do not perform member selection. The HTTP profile can parse headers, but selection still follows the pool method.

Question 31BIG-IP LTM configuration and virtual servers

An administrator configures a virtual server with a default pool and also attaches an iRule that uses the event HTTP_REQUEST to select a different pool based on the URI. What happens for a request whose URI matches the iRule condition?

  1. The request fails because two pools are configured
  2. The iRule-selected pool is used because the iRule overrides the default pool Correct answer.
  3. The default pool is used because it takes precedence over iRule-selected pools
  4. Both pools are used in a round-robin fashion

Explanation

An iRule that explicitly selects a pool during request processing overrides the virtual server's default pool for that connection. The default pool applies only when no other pool selection occurs. This makes content-based routing possible without removing the default pool.

Question 32BIG-IP LTM configuration and virtual servers

A virtual server is configured with a Source Address Translation setting of Automate. Which behavior results?

  1. The BIG-IP uses the client address as the source for all backend connections
  2. The BIG-IP translates the destination address to the pool member address
  3. The BIG-IP never translates the client source address
  4. The BIG-IP uses a SNAT pool defined on the virtual server if present, otherwise it uses the self IP of the egress VLAN Correct answer.

Explanation

The Automate setting lets the BIG-IP choose source translation automatically: it prefers a SNAT pool bound to the virtual server and otherwise falls back to the self IP of the VLAN used to reach the pool member. This is the default behavior for many standard virtual servers. Choosing None disables translation entirely.

Question 33BIG-IP LTM configuration and virtual servers

Which virtual server type forwards packets without performing address translation on the destination, allowing the BIG-IP to act as a router for traffic it does not terminate?

  1. Stateless
  2. Standard
  3. Forwarding (IP) Correct answer.
  4. Performance (Layer 4)

Explanation

A Forwarding (IP) virtual server passes traffic through without translating the destination address, which is useful for routing scenarios where the BIG-IP should not act as the endpoint. Standard and Performance (Layer 4) virtual servers terminate connections and load balance them to pool members. This distinction matters when designing transparent inspection paths.

Question 34BIG-IP LTM configuration and virtual servers

An administrator needs the BIG-IP to insert a custom header into client requests before they reach the pool member, without changing the pool selection. Which approach is appropriate?

  1. Attach a Client SSL profile and enable header insertion
  2. Use an iRule with HTTP_REQUEST to insert the header and leave pool selection unchanged Correct answer.
  3. Configure the pool's load balancing method to insert the header
  4. Enable the HTTP profile's compression setting to add the header

Explanation

An iRule handling HTTP_REQUEST can use HTTP::header insert to add a header to the request while leaving the existing pool selection logic intact. Profiles and pool settings do not provide arbitrary header insertion. This separates payload modification from load balancing decisions.

Question 35BIG-IP LTM configuration and virtual servers

Which statement correctly describes the relationship between a virtual server's destination address and the addresses of its pool members?

  1. Pool members must be defined as virtual servers themselves
  2. Pool members can be any reachable address and need not match the virtual server address Correct answer.
  3. Pool members must be on the same subnet as the virtual server address
  4. Pool members must use the same IP address as the virtual server

Explanation

The virtual server address is the address clients connect to, while pool member addresses are the backend destinations. They are independent, and members only need to be reachable by the BIG-IP. This decoupling is what allows the BIG-IP to present a single service address for many backend servers.

Question 36BIG-IP LTM configuration and virtual servers

An administrator configures a virtual server with a VLAN binding of internal-vlan and enables VLAN grouping. Traffic arrives on external-vlan. What is the result?

  1. The connection is automatically redirected to internal-vlan
  2. The connection is handled by the virtual server because VLAN grouping expands the match
  3. The connection is dropped by the default VLAN denial rule
  4. The connection is not matched by the virtual server because external-vlan is not in the binding Correct answer.

Explanation

A VLAN binding restricts the virtual server to traffic arriving on the listed VLANs. Traffic on a VLAN that is not in the binding is not matched by that virtual server. VLAN groups can share settings across VLANs, but only VLANs that are members of the group are included.

Question 37BIG-IP LTM configuration and virtual servers

A virtual server has both a Client SSL profile and a Server SSL profile attached. A client connects over TLS and the pool member also expects TLS. Which description of the traffic flow is accurate?

  1. TLS is terminated at the BIG-IP and plaintext is sent to the pool member
  2. TLS is terminated at the pool member and the BIG-IP forwards encrypted bytes
  3. TLS is terminated at the BIG-IP and a new TLS session is established to the pool member Correct answer.
  4. TLS is passed through end to end without termination at the BIG-IP

Explanation

A Client SSL profile terminates the client-side TLS session, and a Server SSL profile causes the BIG-IP to initiate a separate TLS session toward the pool member. The two sessions are independent, which allows different cipher suites or certificates on each side. Without a Server SSL profile the BIG-IP would send plaintext to the member.

Question 38BIG-IP LTM configuration and virtual servers

An administrator wants a virtual server to accept connections only from clients whose source address falls inside 172.16.0.0/16. Which configuration achieves this without affecting other virtual servers?

  1. Attach a source address list or iRule match to the virtual server that rejects other sources Correct answer.
  2. Add a pool member for each allowed client address
  3. Create a packet filter that applies to the whole device
  4. Change the virtual server's destination address to 172.16.0.0/16

Explanation

Source address lists, or an iRule that inspects the client address, can restrict access on a per-virtual-server basis. This keeps the restriction scoped to the intended service. Device-wide packet filters and destination changes affect more than the one virtual server.

Question 39BIG-IP LTM configuration and virtual servers

A virtual server uses the Least Connections load balancing method with a priority group configuration where member A has priority 1 and members B and C have priority 2. Member A is healthy. Which member receives new connections?

  1. All three members, distributed by least connections
  2. Member A, because it is in the highest priority group and is available Correct answer.
  3. Members B and C, because they are in a larger group
  4. No member, because the priorities conflict

Explanation

Priority groups cause the BIG-IP to prefer members in the highest-priority group that has at least one available member. As long as member A is up, it receives the traffic and the lower-priority members are used only as a fallback. Within the active group, the configured load balancing method still applies.

Question 40BIG-IP LTM configuration and virtual servers

A virtual server is configured with a fallback host for an HTTP profile. Under which condition does the BIG-IP send the request to the fallback host?

  1. Whenever the pool member returns a 200 response
  2. When no pool member is available or the selected member cannot be reached Correct answer.
  3. Whenever persistence is disabled on the virtual server
  4. When the virtual server has no default pool configured

Explanation

The fallback host is used when the BIG-IP cannot establish a connection to an available pool member, for example when all members are down. It provides a last-resort response such as a maintenance page. It is not used based on member response codes or persistence settings.

Question 41Profiles and traffic processing

A virtual server references a client SSL profile and a server SSL profile. Which statement describes the traffic handling that results?

  1. The BIG-IP decrypts traffic on both sides and forwards cleartext to the pool members
  2. The BIG-IP decrypts client-side traffic and re-encrypts it toward the pool members Correct answer.
  3. The BIG-IP passes encrypted traffic through untouched to the pool members
  4. The BIG-IP encrypts cleartext client traffic before sending it to the pool members

Explanation

A client SSL profile terminates TLS on the client side, so the BIG-IP decrypts incoming traffic. A server SSL profile then establishes a new TLS session toward the pool member, so the payload is re-encrypted rather than forwarded as cleartext.

Question 42Profiles and traffic processing

Which profile type determines how the BIG-IP distributes new connections across the members of a pool?

  1. Load balancing method Correct answer.
  2. Persistence profile
  3. HTTP profile
  4. TCP profile

Explanation

The load balancing method configured on a pool decides which member receives each new connection, using algorithms such as round robin or least connections. Persistence profiles only override that decision for clients that already have an active persistence record.

Question 43Profiles and traffic processing

A client SSL profile is bound to a virtual server but no certificate and key are associated with the profile. What is the most likely result for TLS handshakes to that virtual server?

  1. The handshake is redirected to the fallback virtual server
  2. The handshake completes using a self-signed certificate generated automatically
  3. The handshake succeeds but the connection is downgraded to cleartext
  4. The handshake fails because the BIG-IP cannot present a server certificate Correct answer.

Explanation

A client SSL profile needs a certificate and private key to act as the server during the TLS handshake. Without them the BIG-IP has nothing to present in the Certificate message, so the handshake cannot complete.

Question 44Profiles and traffic processing

What is the effect of enabling the Insert X-Forwarded-For option in an HTTP profile?

  1. The BIG-IP rewrites the source IP of the packet to the client address
  2. The BIG-IP adds an X-Forwarded-For header to the response returned to the client
  3. The BIG-IP strips any existing X-Forwarded-For header from the request
  4. The BIG-IP appends the client IP address to an X-Forwarded-For header sent to the pool member Correct answer.

Explanation

With Insert X-Forwarded-For enabled, the BIG-IP adds the client's IP address to the X-Forwarded-For header in the request forwarded to the server, so the server can log the original client. It does not alter packet addressing or touch response headers.

Question 45Profiles and traffic processing

Which profile type is used to define how the BIG-IP handles a client connection that arrives with a cookie matching an existing persistence record?

  1. Stream profile
  2. Rewrite profile
  3. Client SSL profile
  4. Cookie persistence profile Correct answer.

Explanation

A cookie persistence profile instructs the BIG-IP to insert a cookie and, on later requests carrying that cookie, to send the client to the same pool member. It is the persistence method most commonly used for HTTP applications.

Question 46Profiles and traffic processing

A virtual server is configured with a TCP profile whose idle timeout is shorter than the application's keepalive interval. What is the most likely symptom?

  1. The BIG-IP refuses new connections once the timeout expires
  2. The application receives duplicate requests for every client connection
  3. Connections are reset or dropped during idle periods before the application sends its next keepalive Correct answer.
  4. The pool member receives cleartext traffic instead of encrypted traffic

Explanation

The TCP idle timeout governs how long an idle connection is kept open. If it expires before the application's keepalive traffic arrives, the BIG-IP closes the connection, causing drops or resets that the client may see as sporadic failures.

Question 47Profiles and traffic processing

Which statement best describes the role of a default profile in BIG-IP configuration?

  1. It is applied automatically to any virtual server that has no profile of that type explicitly assigned Correct answer.
  2. It overrides every explicitly assigned profile on the virtual server
  3. It can only be bound to a virtual server through an iRule
  4. It is used only for management traffic on the management interface

Explanation

Each profile type has a default profile, and the BIG-IP applies it when a virtual server does not reference a specific profile of that type. Explicitly assigned profiles take precedence over the default.

Question 48Profiles and traffic processing

Which profile type would an administrator use to enable HTTP compression of responses sent to clients?

  1. Persistence profile
  2. Client SSL profile
  3. TCP profile
  4. HTTP profile Correct answer.

Explanation

Compression settings for HTTP responses are configured within the HTTP profile, which controls how the BIG-IP parses and manipulates HTTP traffic. Enabling compression there reduces bandwidth for compressible response bodies.

Question 49Profiles and traffic processing

An administrator needs the BIG-IP to insert a cookie that encodes the selected pool member so subsequent requests return to that member. Which persistence configuration accomplishes this?

  1. SSL session ID persistence
  2. Source address persistence
  3. Destination address persistence
  4. Cookie persistence with the HTTP cookie method Correct answer.

Explanation

Cookie persistence with the HTTP cookie method has the BIG-IP insert a cookie containing an encoded reference to the chosen pool member, so later requests carrying that cookie are directed back to it. This works even when client source addresses change.

Question 50Profiles and traffic processing

A virtual server uses a one-connect profile. What behavior does this produce for client connections?

  1. The BIG-IP opens a new TCP connection to a pool member for every request
  2. The BIG-IP reuses a single TCP connection for all clients simultaneously
  3. Each client connection is split so requests may reach different pool members
  4. Each client connection is mapped to a single pool member for its lifetime Correct answer.

Explanation

A one-connect profile ensures that all requests on a given client connection are sent to the same pool member, preserving connection affinity. This is the opposite of a sideband or per-request distribution model.