I85PREP
⌘ K
F5-302 study materials
F5-302 study resources

F5-302 practice questions

One question at a time. Build your F5-302 understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Traffic Management

A BIG-IP local traffic policy is configured with a rule that matches on HTTP URI and sends matching traffic to pool A. A virtual server also has a default pool assigned. What happens to a request that matches the policy rule?

  1. The request is dropped because two pool selections conflict
  2. The request is load balanced across both pool A and the default pool
  3. The request is sent to the virtual server default pool because the default pool always takes precedence
  4. The request is sent to pool A because the policy rule's target overrides the virtual server default pool Correct answer.

Explanation

When a local traffic policy rule matches and specifies a pool or node as its target, that target is used for the connection instead of the virtual server's default pool. The default pool only applies when no policy rule selects a different target. This makes policies a way to route traffic conditionally without creating many virtual servers.

Question 2Traffic Management

Which load balancing method distributes connections to pool members based on a static, administrator-defined ratio rather than dynamic member status?

  1. Predictive
  2. Ratio Correct answer.
  3. Least connections
  4. Observed

Explanation

The Ratio method assigns each pool member a weight, and connections are distributed in proportion to those configured weights. It does not adjust for real-time member load. The other dynamic methods react to current connection counts or observed performance.

Question 3Traffic Management

A virtual server is configured with a source address persistence profile. What does this profile ensure for returning clients?

  1. That requests from the same source IP address are directed to the same pool member Correct answer.
  2. That the client source IP is rewritten before reaching the pool
  3. That each client is re-authenticated on every request
  4. That connections are limited to one per source address

Explanation

Source address persistence creates a persistence record keyed on the client's source IP so subsequent connections from that address go to the same pool member. This is useful for applications that store session state locally on a server. It does not authenticate clients or rewrite addresses.

Question 4Traffic Management

An administrator wants a virtual server to accept traffic only on TCP port 443 and forward it to pool members on port 8080. Which configuration accomplishes this?

  1. Set the virtual server destination to port 443 and configure pool member service ports to 8080 Correct answer.
  2. Create a source NAT that translates port 443 to 8080
  3. Set the virtual server destination to port 8080 and the pool member port to 443
  4. Configure a data group mapping 443 to 8080

Explanation

The virtual server destination port defines the port clients connect to, while the pool member service port defines the port the backend server receives. Setting the virtual server to 443 and the members to 8080 achieves the port translation. No separate NAT or data group is required.

Question 5Traffic Management

Which monitor type is most appropriate for verifying that a pool member's web service returns a specific string in an HTTP response?

  1. TCP half-open monitor
  2. Gateway ICMP monitor
  3. HTTP monitor with send and receive strings Correct answer.
  4. ICMP monitor

Explanation

An HTTP monitor can send a request and check the response body for an expected receive string, confirming the application is serving content correctly. ICMP and TCP monitors only test reachability or port availability. The HTTP monitor therefore provides application-layer health verification.

Question 6Traffic Management

In a BIG-IP configuration, what is the primary purpose of a SNAT?

  1. To balance traffic across multiple virtual servers
  2. To translate the destination port of incoming requests
  3. To translate the client's source IP address to a different address as traffic goes to pool members Correct answer.
  4. To encrypt traffic between the client and the virtual server

Explanation

A SNAT (secure NAT) translates the client source address to a configured address, which is often used so backend servers see a predictable source or can route return traffic correctly. It does not perform load balancing, encryption, or destination port translation. Return traffic is translated back by the BIG-IP.

Question 7Traffic Management

A virtual server uses the least connections load balancing method. A new connection arrives and two pool members report equal active connection counts. How does BIG-IP break the tie by default?

  1. It always selects the first member in the pool list
  2. It drops the connection
  3. It selects the member with the highest priority value
  4. It uses a round-robin selection among the tied members Correct answer.

Explanation

When least connections finds multiple members with the same connection count, it applies a round-robin selection among those tied members. This spreads load evenly rather than always favoring one member. Priority values are a separate mechanism used with priority group activation.

Question 8Traffic Management

What does the OneConnect profile accomplish on a virtual server?

  1. It forces all clients to share one source IP address
  2. It duplicates each request to two pool members
  3. It limits each client to one connection at a time
  4. It multiplexes multiple client connections over a single server-side connection Correct answer.

Explanation

OneConnect reuses established server-side connections by multiplexing multiple client requests over them, reducing connection setup overhead to the backend. It does not change client source addresses or limit client connections. This improves efficiency for short-lived HTTP requests.

Question 9Traffic Management

A pool contains three members: one with priority 10 and two with priority 5. Priority group activation is set to 'less than 2'. What happens when all members are healthy?

  1. Traffic is dropped because priorities differ
  2. Only the priority 10 member receives traffic
  3. Only the two priority 5 members receive traffic
  4. All three members receive traffic Correct answer.

Explanation

Priority group activation with 'less than 2' means the higher-priority group is used only when fewer than two members of that group are available. Since the priority 10 group has only one member, which is fewer than two, the lower-priority members are also activated, so all three receive traffic. This setting controls when standby priority groups become active.

Question 10Traffic Management

An administrator needs requests containing a specific cookie to reach the same pool member across multiple connections. Which persistence type should be used?

  1. Destination address persistence
  2. Cookie persistence Correct answer.
  3. SSL persistence
  4. Source address persistence

Explanation

Cookie persistence inserts or reads a cookie to identify the pool member that served the client, maintaining affinity even when source addresses change (for example behind a proxy). Source and destination address persistence key on IP addresses. SSL persistence keys on SSL session identifiers, not application cookies.

Question 11Traffic Management

A virtual server has an HTTP profile and a client sends a request with an unsupported HTTP method. Which BIG-IP component is responsible for parsing and potentially rejecting malformed or disallowed HTTP requests?

  1. The SNAT pool
  2. The persistence profile
  3. The HTTP profile Correct answer.
  4. The TCP profile

Explanation

The HTTP profile enables HTTP parsing and enforcement, including handling of methods, headers, and protocol compliance. The TCP profile handles transport-layer behavior, and SNAT and persistence profiles do not parse HTTP. Therefore the HTTP profile governs request validation at the application layer.

Question 12Traffic Management

A virtual server is configured with a fallback host in an HTTP profile and all pool members fail their health monitors. What is the resulting behavior for client requests?

  1. The client receives the content from the configured fallback host Correct answer.
  2. The request is load balanced to a different virtual server
  3. The virtual server resets all client connections
  4. The pool members are marked up automatically

Explanation

The fallback host feature redirects clients to a configured fallback server when no pool members are available, allowing a maintenance or error page to be served. It does not reset connections or revive failed members. It also does not move traffic to another virtual server.

Question 13Traffic Management

Which statement accurately describes the difference between a network virtual server and a standard virtual server?

  1. A standard virtual server cannot use pools
  2. A network virtual server forwards IP packets without terminating the connection, while a standard virtual server terminates and proxies connections Correct answer.
  3. A network virtual server requires an HTTP profile
  4. A network virtual server only supports UDP, while a standard virtual server only supports TCP

Explanation

A network virtual server operates at the packet level, forwarding traffic based on IP without full proxy termination. A standard virtual server terminates client connections and establishes separate connections to pool members. This distinction affects how much the BIG-IP can inspect and modify traffic.

Question 14Traffic Management

An iRule contains the event 'when HTTP_REQUEST' and the command 'pool pool_b'. A client request matches the iRule. What is the effect?

  1. The virtual server default pool is always used instead
  2. The client is redirected with an HTTP 302 response
  3. The iRule is ignored because pools cannot be set in HTTP_REQUEST
  4. The request is sent to pool_b for that connection Correct answer.

Explanation

The HTTP_REQUEST event fires when a request is received, and the pool command selects pool_b as the target for that connection. This overrides the default pool for the matching request. No redirect is generated unless the iRule explicitly issues one.

Question 15Traffic Management

A monitor is configured with an interval of 5 and a timeout of 16. What does this configuration indicate?

  1. The monitor uses port 5 for probing and port 16 for responses
  2. The monitor marks a member down after 5 failures and up after 16 successes
  3. The monitor sends 5 probes within 16 seconds
  4. The monitor sends a probe every 5 seconds and waits up to 16 seconds for a response Correct answer.

Explanation

The interval defines how often the monitor sends a probe, and the timeout defines how long it waits for a response before considering the probe failed. A timeout longer than the interval is unusual but permitted. Interval and timeout do not define failure or success counts.

Question 16Traffic Management

An administrator wants to distribute traffic across pool members in proportion to their measured current performance, favoring faster-responding members. Which method best fits?

  1. Dynamic ratio Correct answer.
  2. Ratio (member)
  3. Least sessions
  4. Round robin

Explanation

Dynamic ratio uses performance metrics reported by monitored members to weight distribution, so faster members receive more connections. Static ratio uses fixed weights, and round robin ignores performance. Least sessions counts sessions rather than measuring response performance.

Question 17Traffic Management

What is the effect of enabling 'source port' in a SNAT configuration?

  1. The destination port is translated to the SNAT port
  2. The source port is preserved from the client connection
  3. The source port is translated along with the source address Correct answer.
  4. The source port is used as the persistence key

Explanation

When source port translation is enabled, the BIG-IP translates the client source port in addition to the source address. Preserving the source port is a separate option. Destination port translation and persistence keying are unrelated to this setting.

Question 18Traffic Management

A client connects to a virtual server configured with an SSL client profile and an SSL server profile. What does the BIG-IP perform in this configuration?

  1. Compression of SSL records without decryption
  2. SSL termination on the client side and SSL re-encryption to the pool member Correct answer.
  3. SSL pass-through without decryption
  4. Only server-side SSL with no client-side encryption

Explanation

With both client and server SSL profiles, the BIG-IP terminates the client SSL session and establishes a new SSL session to the pool member, decrypting and re-encrypting traffic. This allows inspection and iRule processing of the plaintext. Pass-through would occur only without an SSL profile.

Question 19Traffic Management

An administrator configures a virtual server with a default pool and a local traffic policy. The policy has a rule matching a specific host header that forwards to a different pool, but the match uses an 'ends with' operator. A request arrives with a host header that ends with the configured value. What is the result?

  1. The request is sent to both pools
  2. The policy rule does not match and the default pool is used
  3. The request is rejected because 'ends with' is invalid for host headers
  4. The policy rule matches and the request is sent to the policy's pool Correct answer.

Explanation

The 'ends with' operator matches when the operand ends with the configured string, so a host header ending with that value satisfies the condition. The matching rule then selects its configured pool. The default pool is used only when no rule matches.

Question 20Traffic Management

Which persistence method should be avoided when clients connect through a large NAT device that hides many clients behind a single IP address?

  1. Source address persistence Correct answer.
  2. Destination address persistence
  3. SSL persistence
  4. Cookie persistence

Explanation

Source address persistence keys on the client IP; when many clients share one NAT address, they all map to the same pool member, causing imbalance. Cookie or SSL persistence avoids this by using application or session identifiers. Destination address persistence keys on the server address and is not affected the same way.

Question 21Traffic Management

A virtual server uses a TCP profile with 'reset on timeout' enabled. What happens when an idle connection exceeds the configured idle timeout?

  1. The client is redirected to another virtual server
  2. The connection is silently dropped
  3. The connection is forwarded to the fallback host
  4. A TCP RST is sent to the client Correct answer.

Explanation

With reset on timeout enabled, BIG-IP sends a TCP reset to terminate an idle connection rather than silently dropping it. This notifies the client promptly that the connection ended. Fallback host and virtual server redirection are unrelated to idle timeout handling.

Question 22Traffic Management

An iRule uses 'when HTTP_RESPONSE' and 'HTTP::header insert'. What is the purpose of this combination?

  1. To rewrite the destination URL
  2. To insert a cookie into the client's browser
  3. To modify a request header before it reaches the pool
  4. To add a header to the response before it is sent to the client Correct answer.

Explanation

The HTTP_RESPONSE event fires when the response is received from the server, and HTTP::header insert adds a header to that response before it is returned to the client. Request headers are handled in HTTP_REQUEST. Cookie insertion and URL rewriting use different commands.

Question 23Traffic Management

A pool member's monitor is configured with a 'receive disable' string. What does this mean for the monitor?

  1. The receive string is ignored entirely
  2. The monitor disables the pool member after a match
  3. The member is marked down when the receive string is found in the response Correct answer.
  4. The member is marked up only when the receive string is absent

Explanation

A receive disable string causes the monitor to mark the member down when that string appears in the response. This is useful for detecting error pages that indicate a service problem. It does not disable the member administratively or ignore the string.

Question 24Traffic Management

A virtual server is configured with a source address persistence profile and a persistence entry timeout of 180 seconds. A client reconnects after 200 seconds from the same source address. What is the result?

  1. The persistence record has expired, so the client is load balanced according to the configured method Correct answer.
  2. The client is rejected because the persistence entry is missing
  3. The client is sent to the fallback host
  4. The client is sent to the same pool member because persistence never expires

Explanation

Persistence entries expire after the configured timeout, so a reconnection after 200 seconds exceeds the 180-second entry and is treated as a new connection. The load balancing method then selects a member. The client is not rejected, and fallback host is unrelated to persistence expiry.

Question 25Traffic Management

An administrator applies a local traffic policy with a rule that matches on TCP port 80 and sets a pool, plus a second rule that matches on HTTP host and sets a different pool. A request arrives on port 80 with a matching host. How does BIG-IP resolve which pool is used?

  1. The last matching rule always determines the target
  2. The first matching rule in policy order determines the target Correct answer.
  3. Both pools receive the request
  4. The default pool is used because multiple rules matched

Explanation

Policy rules are evaluated in order, and by default the first matching rule that sets a target determines the outcome unless the policy is configured to continue evaluation. This makes rule ordering significant. Only one target is selected for the connection.

Question 26Traffic Management

An administrator wants the BIG-IP system to distribute new connections to pool members based on the current number of active connections each member is handling. Which load balancing method should be selected?

  1. Least connections Correct answer.
  2. Round robin
  3. Observed
  4. Ratio

Explanation

The least connections method selects the pool member with the fewest active connections at the time a new connection is assigned, which naturally balances load when session durations vary. Round robin ignores connection counts, ratio uses static weights, and observed uses a dynamic ratio based on performance metrics.

Question 27Traffic Management

A virtual server is configured with a source address persistence profile. A client at 203.0.113.5 connects and is assigned to pool member A. The persistence entry times out. The client reconnects and the load balancing method selects pool member B. What happens to the new connection?

  1. It is sent to pool member A only if the client uses the same source port.
  2. It is sent to pool member A because source address persistence is permanent.
  3. It is sent to pool member B because the persistence entry has expired. Correct answer.
  4. It is dropped because the persistence entry is missing.

Explanation

Source address persistence entries are temporary and expire after the configured timeout. Once the entry is gone, a new connection is load balanced normally, so it can land on a different member. Persistence does not guarantee the same member forever.

Question 28Traffic Management

Which statement describes the behavior of a SNAT configured with the 'automap' option on a virtual server?

  1. The BIG-IP translates the client source address to a self IP address. Correct answer.
  2. The BIG-IP translates the client source address to the virtual server address.
  3. The BIG-IP translates the destination address to a pool member address.
  4. The BIG-IP preserves the original client source address.

Explanation

Automap causes the BIG-IP to use a self IP address as the translation address for client source addresses. It does not use the virtual server address and does not preserve the original client address. Destination translation is separate from SNAT.

Question 29Traffic Management

A pool member is configured with a monitor that has an interval of 5 seconds and a timeout of 16 seconds. The monitor sends a probe and receives no response. After how many seconds will the BIG-IP mark the pool member down?

  1. 16 seconds Correct answer.
  2. 21 seconds
  3. 5 seconds
  4. 80 seconds

Explanation

The timeout value defines how long the BIG-IP waits for a monitor response before considering the probe failed. When the timeout expires without a response, the member is marked down. The interval controls how often probes are sent, not how long to wait for a reply.

Question 30Traffic Management

An administrator wants to ensure that a client's HTTP requests are consistently sent to the same pool member for the duration of a session. Which persistence method is designed for this purpose?

  1. Cookie persistence Correct answer.
  2. SSL persistence
  3. Destination address persistence
  4. Source address persistence

Explanation

Cookie persistence inserts or uses a cookie to identify the pool member assigned to a client, so subsequent HTTP requests carrying that cookie go to the same member. Source address persistence works at the IP layer and can be affected by NAT, while SSL persistence is for TLS session reuse.

Question 31Traffic Management

A virtual server has a default pool and an iRule with 'when HTTP_REQUEST { pool pool_b }'. A client request matches the iRule. Which pool is used for that request?

  1. The default pool
  2. pool_b Correct answer.
  3. No pool because the default is overridden
  4. Both pools alternately

Explanation

The 'pool' command in an iRule dynamically selects the pool for the current connection, overriding the virtual server's default pool. The default pool is used only when no iRule selects a pool.

Question 32Traffic Management

Which BIG-IP feature allows an administrator to define a set of match conditions and actions that are evaluated in order for each connection, separate from iRules?

  1. SNAT pools
  2. Persistence profiles
  3. Health monitors
  4. Local traffic policies Correct answer.

Explanation

Local traffic policies provide a rule-based framework where conditions are matched and actions such as selecting a pool or forwarding traffic are applied. They are evaluated in a defined order and are configured separately from iRules.

Question 33Traffic Management

A virtual server is configured with an HTTP profile and a fallback host. All pool members fail their health monitors. What does the BIG-IP return to the client?

  1. A TCP reset
  2. The default pool member's last known response
  3. An HTTP redirect to the fallback host Correct answer.
  4. An HTTP 503 Service Unavailable page

Explanation

When a fallback host is configured in an HTTP profile and no pool members are available, the BIG-IP responds with an HTTP redirect to the fallback host. Without a fallback host, it would return an error page such as HTTP 503.

Question 34Traffic Management

What is the effect of enabling the 'source port' option in a SNAT configuration?

  1. The BIG-IP preserves the client's source port when translating the source address. Correct answer.
  2. The BIG-IP uses the virtual server port as the source port.
  3. The BIG-IP disables source address translation for that connection.
  4. The BIG-IP translates the client's source port to a port from the SNAT pool.

Explanation

Enabling source port in a SNAT configuration causes the BIG-IP to retain the original client source port when performing source address translation. This is useful when the destination server expects a specific source port. It does not select a port from the SNAT pool.

Question 35Traffic Management

A virtual server is configured with a TCP profile that has 'reset on timeout' enabled. An idle connection exceeds the configured idle timeout. What does the BIG-IP do?

  1. Renews the connection automatically
  2. Sends a TCP FIN to the client
  3. Silently drops the connection
  4. Sends a TCP reset to the client Correct answer.

Explanation

When 'reset on timeout' is enabled, the BIG-IP sends a TCP RST to terminate an idle connection that exceeds the idle timeout. Without this option, the connection may be closed with a FIN or dropped silently depending on other settings.

Question 36Traffic Management

An iRule uses 'when HTTP_RESPONSE { HTTP::header insert X-Custom value }'. What is the purpose of this iRule?

  1. To add an HTTP header to responses sent to the client Correct answer.
  2. To remove an HTTP header from responses
  3. To redirect the client to a different URL
  4. To add an HTTP header to requests sent to the pool member

Explanation

The HTTP_RESPONSE event fires when a response is received from the server, and HTTP::header insert adds a header to that response before it is sent to the client. It does not modify requests or perform redirects.

Question 37Traffic Management

A pool contains three members: one with priority 10 and two with priority 5. Priority group activation is set to 'less than 2'. How does the BIG-IP distribute traffic?

  1. Traffic is distributed in a 2:1 ratio across all members.
  2. Only the priority 10 member receives traffic. Correct answer.
  3. All three members receive traffic equally.
  4. The two priority 5 members receive traffic.

Explanation

Priority group activation with 'less than 2' means the priority group is active only when fewer than two members of the highest priority are available. Since one member has priority 10, only that member is used until it becomes unavailable.

Question 38Traffic Management

A virtual server uses the least connections load balancing method. Two pool members report 10 and 20 active connections. A new connection arrives. Which member is selected?

  1. The member with the lowest IP address
  2. The member with 20 active connections
  3. The member that was configured first
  4. The member with 10 active connections Correct answer.

Explanation

Least connections selects the pool member with the fewest active connections, so the member reporting 10 connections is chosen over the one with 20. Configuration order and IP address are not factors in this method.

Question 39Traffic Management

An administrator configures a virtual server with a default pool and a local traffic policy. The policy has a rule that matches on TCP port 80 and sets a pool. A client connects on port 80. Which pool is used?

  1. The pool set by the matching policy rule Correct answer.
  2. The connection is rejected
  3. The default pool
  4. Both pools are used in round robin

Explanation

Local traffic policies are evaluated before the default pool is applied. When a rule matches, its action, such as setting a pool, takes precedence. The default pool is used only if no policy rule matches.

Question 40Traffic Management

A monitor is configured with a 'receive disable' string. What does this mean for the monitor?

  1. The monitor marks the member down if the response contains the string. Correct answer.
  2. The monitor marks the member up if the response contains the string.
  3. The monitor disables the member after receiving the string.
  4. The monitor sends the string to the member as part of the probe.

Explanation

A receive disable string causes the monitor to consider the probe failed if the response contains that string. It is the opposite of a receive string, which is used to confirm success. The string is not sent to the member.

Question 41Local Traffic Manager

Which BIG-IP Local Traffic Manager object is responsible for translating a virtual server's destination address and port to the address and port of a selected pool member?

  1. The SNAT translation address
  2. The pool member's monitor configuration
  3. The node's health status
  4. The virtual server's destination address translation setting Correct answer.

Explanation

Destination address translation is a property of the virtual server, and when enabled the virtual server rewrites the destination IP and port of inbound packets to those of the chosen pool member before forwarding. Monitors only determine member availability, and SNAT affects the source address of outbound traffic rather than the destination.

Question 42Local Traffic Manager

A client connects to a standard virtual server configured with a TCP profile. Which statement describes how the BIG-IP LTM handles the client-side and server-side TCP connections?

  1. It uses only UDP for transport regardless of the configured profile
  2. It forwards the client's TCP segments unchanged at layer 2 to the pool member
  3. It requires the pool member to complete a TCP handshake directly with the client
  4. It terminates the client connection and establishes a separate connection to the pool member Correct answer.

Explanation

A standard virtual server performs full proxy termination: the LTM completes the TCP handshake with the client, then opens an independent TCP connection to the selected pool member. This is why TCP profiles can be tuned separately for client and server sides.

Question 43Local Traffic Manager

An administrator wants the LTM to select a pool member based on the fewest number of current connections. Which load balancing method should be configured?

  1. Ratio
  2. Round Robin
  3. Least Connections Correct answer.
  4. Observed

Explanation

Least Connections directs each new connection to the member with the lowest current connection count, which suits pools where session duration varies widely. Round Robin ignores connection counts, Observed uses a dynamic performance score, and Ratio distributes by configured weights.

Question 44Local Traffic Manager

A pool member is marked offline by its health monitor. What is the default behavior of the LTM for new connections directed to that pool?

  1. The member is skipped and traffic goes to remaining available members Correct answer.
  2. The pool is deleted and must be recreated
  3. The member continues to receive traffic until existing sessions close
  4. The virtual server is automatically disabled

Explanation

When a monitor marks a member down, the LTM removes it from selection so new connections are distributed only to members that are up and available. Existing connections may persist depending on configuration, but new traffic avoids the failed member.

Question 45Local Traffic Manager

Which persistence type tracks clients by source IP address so that returning clients are sent to the same pool member?

  1. SSL session ID persistence
  2. Source address affinity persistence Correct answer.
  3. Cookie persistence
  4. Destination address affinity persistence

Explanation

Source address affinity persistence uses the client's source IP address as the persistence key, ensuring repeated connections from that address map to the same member. Cookie and SSL session ID persistence key on application-layer or TLS identifiers instead.

Question 46Local Traffic Manager

What is the purpose of a health monitor attached to a pool?

  1. To translate the client source address
  2. To periodically test members and mark them up or down Correct answer.
  3. To balance connections across pool members
  4. To encrypt traffic between the client and the virtual server

Explanation

A health monitor sends periodic probes to pool members and uses the responses to set each member's availability state, which the load balancing decision then respects. Encryption, distribution, and source translation are handled by other features.

Question 47Local Traffic Manager

Which virtual server type forwards traffic without terminating the connection and without requiring a pool, commonly used for IP routing-style traffic handling?

  1. Performance HTTP virtual server
  2. Forwarding (IP) virtual server Correct answer.
  3. Standard virtual server
  4. Network virtual server

Explanation

A forwarding IP virtual server matches traffic by destination and forwards packets without performing full proxy termination, and it does not require a load balancing pool. Standard and performance Layer 7 types terminate connections and select pool members.

Question 48Local Traffic Manager

What does a node represent in the BIG-IP LTM configuration model?

  1. A collection of virtual servers sharing a VLAN
  2. A client-side SSL certificate
  3. A persistence profile applied to a pool
  4. A physical or logical server identified by its IP address Correct answer.

Explanation

A node is the LTM object representing a backend server by IP address, and pool members reference a node plus a service port. Virtual servers, certificates, and persistence profiles are separate object types.

Question 49Local Traffic Manager

An administrator needs HTTP requests containing a specific URI path to be routed to a dedicated pool while all other requests go to a default pool. Which feature accomplishes this?

  1. A SNAT pool with two translation addresses
  2. A TCP profile with a longer idle timeout
  3. A source address persistence profile
  4. An iRule attached to the virtual server that selects a pool based on the HTTP URI Correct answer.

Explanation

iRules are Tcl-based event scripts that can inspect request data such as the HTTP URI and call pool selection commands to direct traffic to different pools. Profiles and SNAT settings do not perform content-based routing decisions.

Question 50Local Traffic Manager

A virtual server uses cookie persistence. Where does the LTM insert the persistence cookie in the HTTP response by default?

  1. In the TLS ClientHello message
  2. In the HTTP request URI
  3. In the TCP options field
  4. In a Set-Cookie header added to the server's response Correct answer.

Explanation

Cookie persistence works by having the LTM insert a Set-Cookie header into the response so the client stores the persistence value and returns it on subsequent requests. The LTM then reads that cookie to select the same pool member.