I85PREP
⌘ K
F5-303 study materials
F5-303 study resources

F5-303 practice questions

One question at a time. Build your F5-303 understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Application Delivery and Security Platform fundamentals

In a BIG-IP local traffic configuration, which object is responsible for holding the pool members that receive client traffic after the virtual server accepts a connection?

  1. An iRule
  2. A monitor
  3. A load balancing pool Correct answer.
  4. A data group

Explanation

A pool is the container that groups backend nodes and their service ports, and the virtual server references it as the default destination for traffic. Data groups hold lookup data, iRules hold scripting logic, and monitors perform health checks rather than receive traffic.

Question 2Application Delivery and Security Platform fundamentals

Which statement describes the role of a health monitor attached to a pool member?

  1. It periodically probes the member and marks it down when checks fail Correct answer.
  2. It encrypts traffic between the client and the virtual server
  3. It logs every request to a remote syslog server
  4. It rewrites the HTTP Host header before forwarding

Explanation

Monitors send periodic probes to pool members or nodes and change their availability status based on responses, so traffic is steered away from failed endpoints. Encryption, header rewriting, and logging are handled by profiles or iRules, not health monitors.

Question 3Application Delivery and Security Platform fundamentals

What is the primary function of a virtual server on an application delivery platform?

  1. To store the configuration database for the device
  2. To present a single client-facing IP and port that distributes requests to backend resources Correct answer.
  3. To provide out-of-band management access to the chassis
  4. To perform DNS zone transfers for internal clients

Explanation

A virtual server is the listener object clients connect to; it applies profiles and a load balancing decision to forward traffic to pool members. It does not store configuration, provide management access, or serve as an authoritative DNS server for zone transfers.

Question 4Application Delivery and Security Platform fundamentals

A client SSL profile is assigned to a virtual server. What does this profile control?

  1. The SNAT address pool used for outbound connections
  2. The certificate and TLS parameters used when the platform terminates client connections Correct answer.
  3. The persistence method used for backend sessions
  4. The health check interval used for pool members

Explanation

A client SSL profile defines the certificate, key, and protocol/cipher settings presented to connecting clients, enabling TLS termination at the virtual server. Health checks, persistence, and source NAT are configured by separate object types.

Question 5Application Delivery and Security Platform fundamentals

Which persistence method keeps a client bound to the same pool member based on information stored in a cookie?

  1. Cookie persistence Correct answer.
  2. Hash-based persistence
  3. Destination address persistence
  4. Source address persistence

Explanation

Cookie persistence inserts or reads a cookie so subsequent requests from the same client return to the same member, which is useful for stateful web applications. Source and destination address persistence use IP addresses, and hash persistence uses a computed hash value.

Question 6Application Delivery and Security Platform fundamentals

What does a load balancing method determine on an application delivery platform?

  1. Which cipher suite is negotiated with the client
  2. How often health monitors are sent
  3. Which VLAN carries the return traffic
  4. Which pool member is selected to receive a new connection Correct answer.

Explanation

The load balancing method is the algorithm that chooses a pool member for each new connection or request, such as round robin or least connections. Cipher negotiation, monitor intervals, and VLAN selection are controlled by other configuration objects.

Question 7Application Delivery and Security Platform fundamentals

Which platform component inspects application traffic to detect and block attacks such as SQL injection and cross-site scripting?

  1. A web application firewall profile Correct answer.
  2. A SNAT pool
  3. A one-connect profile
  4. A TCP profile

Explanation

A web application firewall profile performs deep inspection of HTTP requests and responses to detect and mitigate application-layer attacks. TCP, SNAT, and one-connect profiles affect connection handling and addressing, not payload attack detection.

Question 8Application Delivery and Security Platform fundamentals

What is the purpose of a node object in a local traffic configuration?

  1. It represents a backend server IP address that pools can reference Correct answer.
  2. It stores SSL certificates for the virtual server
  3. It defines the client-facing listener address
  4. It provides the DNS resolver for the platform

Explanation

A node represents a backend server by IP address, and pool members combine a node with a service port. Listener addresses belong to virtual servers, certificates belong to SSL profiles, and DNS resolution is a separate system function.

Question 9Application Delivery and Security Platform fundamentals

A virtual server uses round robin load balancing across three pool members. Which behavior should an administrator expect?

  1. New connections always go to the member with the fewest active connections
  2. New connections are sent to the member with the fastest monitor response
  3. New connections are distributed to each member in turn regardless of current load Correct answer.
  4. New connections are pinned to a member until it fails

Explanation

Round robin cycles through available members in sequence without regard to current connection counts. Least connections selects by active load, fastest monitor response is not a selection criterion, and pinning until failure describes persistence rather than round robin.

Question 10Application Delivery and Security Platform fundamentals

An administrator wants client traffic to be translated to an address from a dedicated pool before reaching backend servers. Which configuration achieves this?

  1. Assign a client SSL profile to the virtual server
  2. Enable a fallback host on the pool
  3. Add an HTTP response rewrite rule
  4. Assign a SNAT pool to the virtual server Correct answer.

Explanation

A SNAT pool provides a set of translation addresses that the virtual server uses for outbound connections to pool members. SSL profiles handle encryption, fallback hosts handle failure redirection, and response rewriting modifies payloads.

Question 11Application Delivery and Security Platform fundamentals

A pool contains three members, and one member fails its health monitor. How does the platform treat that member by default?

  1. It is removed from the pool configuration automatically
  2. It is marked down and excluded from new load balancing decisions Correct answer.
  3. It is promoted to a backup member for all other pools
  4. It continues to receive an equal share of new connections

Explanation

When a monitor marks a member down, the platform stops selecting it for new connections while keeping it in the configuration so it can return to service after passing checks. It does not continue receiving an equal share, get deleted, or become a backup for unrelated pools.

Question 12Application Delivery and Security Platform fundamentals

Which persistence configuration would best suit a stateful application where clients must return to the same member even when their source IP changes?

  1. Round robin without persistence
  2. Destination address persistence
  3. Cookie persistence Correct answer.
  4. Source address persistence

Explanation

Cookie persistence tracks the assigned member in a cookie, so a client whose IP address changes still returns to the same member. Source and destination address persistence key on addresses that may change or be shared, and round robin provides no affinity.

Question 13Application Delivery and Security Platform fundamentals

What is the effect of enabling SSL offload on a virtual server that fronts web servers without their own certificates?

  1. The platform requires client certificates from every connecting user
  2. The platform decrypts client traffic and forwards plain HTTP to the pool members Correct answer.
  3. The platform forwards encrypted traffic unchanged to the pool members
  4. The platform re-encrypts traffic using the backend server's certificate

Explanation

SSL offload terminates TLS at the virtual server using the client SSL profile, then sends decrypted traffic to backend members that do not need to handle encryption. Forwarding unchanged encrypted traffic is passthrough, requiring client certificates is optional client authentication, and re-encryption requires a server SSL profile.

Question 14Application Delivery and Security Platform fundamentals

An iRule is needed to redirect HTTP requests for a retired path to a new location. Which event is the most appropriate place to implement the redirect?

  1. LB_SELECTED
  2. HTTP_REQUEST Correct answer.
  3. CLIENT_ACCEPTED
  4. SERVER_CONNECTED

Explanation

The HTTP_REQUEST event fires after the request headers are parsed, making the URI and host available for a redirect decision. CLIENT_ACCEPTED and SERVER_CONNECTED occur at connection stages without HTTP parsing, and LB_SELECTED fires after a pool member is chosen.

Question 15Application Delivery and Security Platform fundamentals

Which profile type would an administrator tune to adjust idle timeout and maximum segment size for traffic handled by a virtual server?

  1. A persistence profile
  2. A TCP profile Correct answer.
  3. A client SSL profile
  4. An HTTP profile

Explanation

TCP profiles expose transport-layer settings such as idle timeout, maximum segment size, and window scaling. SSL, HTTP, and persistence profiles govern encryption, application-layer parsing, and session affinity respectively.

Question 16Application Delivery and Security Platform fundamentals

A virtual server is configured with a default pool and a fallback host. What happens when all pool members are marked down?

  1. Traffic is dropped with no response
  2. Clients are load balanced across the down members anyway
  3. Clients receive a redirect to the fallback host Correct answer.
  4. The virtual server is automatically disabled

Explanation

The fallback host feature returns an HTTP redirect to a designated server when no pool members are available, allowing a maintenance or error page to be served. It does not re-enable down members, disable the virtual server, or silently drop traffic.

Question 17Application Delivery and Security Platform fundamentals

Which statement best describes the difference between a node and a pool member?

  1. A node is a server IP; a member is a node paired with a service port inside a pool Correct answer.
  2. A node is a certificate object; a member is a key object
  3. A node is a health monitor; a member is a monitor instance
  4. A node is a virtual server listener; a member is a backend server

Explanation

A node identifies a backend server by address, while a pool member references that node plus a port and carries pool-specific settings such as ratio and priority. The other pairings confuse nodes with listeners, monitors, or certificate objects.

Question 18Application Delivery and Security Platform fundamentals

Why would an administrator assign different monitor types to pool members of the same pool?

  1. The platform requires one monitor per member for licensing reasons
  2. Different monitor types disable load balancing for those members
  3. Members run different services or ports that require protocol-appropriate health checks Correct answer.
  4. Monitors can only be assigned per member and never per pool

Explanation

Members may expose different services, so a monitor that matches each service protocol gives an accurate availability signal. Monitors can be assigned at pool or member level, licensing does not force per-member monitors, and monitor assignment does not disable load balancing.

Question 19Application Delivery and Security Platform fundamentals

A web application requires that users remain on the same backend server, but the platform must also honor server weighting. Which combination supports both requirements?

  1. A client SSL profile plus a fallback host
  2. An HTTP profile plus a data group
  3. A persistence profile plus weighted pool members Correct answer.
  4. A SNAT pool plus a TCP profile

Explanation

Persistence keeps a client on its assigned member, while member weight influences the initial distribution and rebalancing across servers. SNAT, SSL, fallback hosts, HTTP profiles, and data groups do not combine session affinity with weighted distribution.

Question 20Application Delivery and Security Platform fundamentals

An administrator needs to insert a custom HTTP header into responses sent to clients. Which approach is most direct?

  1. Change the monitor interval on the pool
  2. Add a second virtual server on the same address
  3. Assign a different load balancing method to the pool
  4. Use an iRule on the HTTP_RESPONSE event to add the header Correct answer.

Explanation

The HTTP_RESPONSE event exposes response headers for modification, so an iRule can insert a custom header before the response is sent. Load balancing methods, monitor intervals, and additional listeners do not modify response headers.

Question 21Application Delivery and Security Platform fundamentals

What is the primary benefit of using a one-connect profile on a virtual server?

  1. It encrypts traffic between the platform and pool members
  2. It provides session persistence based on client IP
  3. It reuses established backend connections to reduce connection setup overhead Correct answer.
  4. It performs antivirus scanning on uploaded files

Explanation

A one-connect profile lets the platform reuse backend connections for multiple client requests, reducing handshake overhead and improving efficiency. Encryption, persistence, and content scanning are handled by SSL, persistence, and security profiles.

Question 22Application Delivery and Security Platform fundamentals

A virtual server is configured with source address persistence, and many users behind one corporate NAT address access the application. What is the likely outcome?

  1. All users from that address are pinned to a single pool member Correct answer.
  2. The platform automatically switches to cookie persistence
  3. The users are denied access by the persistence profile
  4. Each user is distributed evenly across all pool members

Explanation

Source address persistence keys on the client IP, so many users sharing one NAT address map to the same member and can overload it. The platform does not automatically redistribute them, deny access, or change persistence methods on its own.

Question 23Application Delivery and Security Platform fundamentals

An administrator wants the platform to add a client certificate to backend connections while still terminating TLS from clients at the virtual server. Which configuration is required?

  1. A TCP profile and a persistence profile
  2. A client SSL profile and a server SSL profile on the virtual server Correct answer.
  3. A server SSL profile only
  4. A client SSL profile only

Explanation

The client SSL profile terminates TLS from clients, and the server SSL profile re-encrypts traffic to pool members, optionally presenting a certificate. Using only one profile leaves one side of the connection without the required TLS handling, and TCP or persistence profiles do not provide encryption.

Question 24Application Delivery and Security Platform fundamentals

A pool uses priority groups, and the highest-priority group has at least one member available. How does the platform select members?

  1. It disables lower-priority groups permanently
  2. It selects only from the highest-priority group that has available members Correct answer.
  3. It selects from the lowest-priority group first
  4. It selects from all groups in proportion to their member counts

Explanation

Priority groups create tiers of members; the platform uses the highest-priority tier that contains at least one available member and falls back to lower tiers only when that tier is exhausted. It does not blend tiers proportionally, reverse the order, or permanently disable lower groups.

Question 25Application Delivery and Security Platform fundamentals

An iRule must reject requests whose URI contains a specific pattern before any pool member is contacted. Which event placement best achieves this?

  1. HTTP_REQUEST with a drop or reject action Correct answer.
  2. LB_SELECTED with a log action
  3. SERVER_CONNECTED with a persist action
  4. CLIENT_CLOSED with a redirect action

Explanation

HTTP_REQUEST fires after the URI is parsed and before the backend connection is made, so a drop or reject there prevents any member from being contacted. LB_SELECTED and SERVER_CONNECTED occur after selection or connection, and CLIENT_CLOSED fires at connection teardown.

Question 26Application Delivery and Security Platform fundamentals

Which platform object is the client-facing listener that binds a destination IP address and port and associates it with a pool and profiles?

  1. A health monitor
  2. A pool member
  3. A virtual server Correct answer.
  4. A data group

Explanation

The virtual server is the listener object; it owns the destination address/port combination and references the pool and profiles that govern how connections are processed. Pool members are backend servers, monitors test their health, and data groups hold lookup values used by rules.

Question 27Application Delivery and Security Platform fundamentals

Which profile category controls protocol-level behavior such as HTTP header insertion, compression, and TCP settings for traffic handled by a virtual server?

  1. A persistence profile
  2. An iRule
  3. A monitor
  4. A protocol or application profile Correct answer.

Explanation

Profiles are typed configuration bundles attached to a virtual server; TCP, HTTP, and compression profiles govern protocol behavior for the traffic. Persistence profiles only control session affinity, monitors only test health, and iRules are scripts rather than declarative profile settings.

Question 28Application Delivery and Security Platform fundamentals

An administrator wants the platform to terminate TLS from clients and then re-encrypt traffic to backend servers. Which configuration achieves this?

  1. A TCP profile with SSL disabled on both sides
  2. A client SSL profile only, with backend servers speaking plain HTTP
  3. A client SSL profile plus a server SSL profile on the virtual server Correct answer.
  4. A server SSL profile only, leaving client traffic unencrypted

Explanation

TLS termination on the client side requires a client SSL profile, and re-encryption toward the backend requires a server SSL profile on the same virtual server. Using only one of the two leaves one leg of the connection unencrypted.

Question 29Application Delivery and Security Platform fundamentals

What is the primary role of a health monitor assigned to pool members?

  1. To balance requests across members
  2. To log every request for audit purposes
  3. To periodically probe members and mark them up or down based on the result Correct answer.
  4. To cache responses from backend servers

Explanation

A monitor sends periodic probes to a member and changes its availability state according to the responses, so the load balancer stops sending traffic to unhealthy members. It does not perform balancing, caching, or full request auditing.

Question 30Application Delivery and Security Platform fundamentals

A virtual server must accept traffic addressed to several different IP addresses on the same port. Which virtual server type supports this?

  1. A virtual server configured as a wildcard or with multiple destination addresses Correct answer.
  2. A standard virtual server with one destination address
  3. A network virtual server that forwards IP packets without a pool
  4. A forwarding virtual server with no pool

Explanation

A wildcard virtual server, or one configured with multiple destination addresses, matches traffic for a range of addresses on a given port. A standard virtual server is bound to a single destination address and would not match the other addresses.

Question 31Application Delivery and Security Platform fundamentals

An administrator needs the platform to inspect and enforce HTTP request content, such as blocking requests that contain a specific header value. Which platform capability is designed for this?

  1. A health monitor
  2. A persistence profile
  3. A web application firewall policy Correct answer.
  4. A Layer 4 TCP profile

Explanation

A web application firewall policy parses application-layer requests and applies security rules that can allow or block based on content such as headers, parameters, and URIs. TCP profiles, persistence profiles, and monitors do not inspect application payloads for policy enforcement.

Question 32Application Delivery and Security Platform fundamentals

Which statement describes the difference between a pool and a pool member?

  1. A pool is a health check, and a pool member is a monitor result
  2. A pool is a listener, and a pool member is a profile
  3. A pool is a single backend server, and a pool member is the client address
  4. A pool is a logical group of backend servers, and a pool member is one server and service port within that group Correct answer.

Explanation

A pool groups backend servers that share a load balancing method and monitors, and each member is an individual node address paired with a service port. The other options confuse pools with listeners, profiles, or health-check results.

Question 33Application Delivery and Security Platform fundamentals

A virtual server uses a cookie-based persistence profile. Which behavior should the administrator expect for returning clients?

  1. The client must send a source IP that matches a configured persistence entry
  2. Each new connection is always sent to the first available member
  3. Persistence is ignored when a member is marked up
  4. The platform inserts a cookie identifying the selected member and routes returning clients to that member Correct answer.

Explanation

Cookie persistence works by having the platform insert a cookie that encodes the chosen member, so subsequent requests carrying that cookie are directed to the same member. Source IP persistence instead relies on the client address, and persistence does not override member health.

Question 34Application Delivery and Security Platform fundamentals

What does a load balancing method such as least connections use to choose a pool member?

  1. The member that most recently became healthy
  2. The member with the lowest IP address
  3. The member with the highest configured weight
  4. The member with the fewest active connections at the time of selection Correct answer.

Explanation

Least connections selects the member currently handling the smallest number of active connections, which naturally shifts new sessions away from busier members. IP address order, health-transition time, and weight are not the selection criterion for this method.

Question 35Application Delivery and Security Platform fundamentals

An administrator wants client source addresses to be preserved when traffic reaches backend servers. Which configuration supports this?

  1. A SNAT pool applied to the virtual server
  2. A cookie persistence profile
  3. No source address translation configured on the virtual server Correct answer.
  4. Source address translation set to automap

Explanation

When no source address translation is configured, the backend servers see the original client address as the source. Automap and SNAT pool settings both rewrite the source address, and persistence does not affect addressing.

Question 36Application Delivery and Security Platform fundamentals

Which iRule event is best suited to make a routing decision based on the requested URI before a pool is selected?

  1. HTTP_RESPONSE
  2. CLIENT_ACCEPTED
  3. HTTP_REQUEST Correct answer.
  4. LB_SELECTED

Explanation

HTTP_REQUEST fires after the request headers are parsed, so the URI and headers are available for decisions such as selecting a pool. CLIENT_ACCEPTED occurs before HTTP parsing, HTTP_RESPONSE occurs after the backend replies, and LB_SELECTED occurs after a member has already been chosen.

Question 37Application Delivery and Security Platform fundamentals

A virtual server is configured with a default pool and a fallback host. What happens when all members of the default pool are marked down?

  1. The virtual server resets all client connections
  2. The platform queues requests until a member recovers
  3. The platform sends traffic to the member with the highest priority
  4. The platform redirects the client to the fallback host Correct answer.

Explanation

The fallback host is used when no pool member is available, so the platform redirects the client to that configured host instead of dropping the connection. It does not queue requests or select a down member.

Question 38Application Delivery and Security Platform fundamentals

Which object is typically used to map a large list of URI paths to different pools without writing many separate conditional statements?

  1. A data group referenced by a rule Correct answer.
  2. A client SSL profile
  3. A persistence profile
  4. A health monitor

Explanation

Data groups store key-value pairs such as URI prefixes mapped to pool names, and a rule can look up the request URI in the data group to select the pool. Monitors, SSL profiles, and persistence profiles do not provide lookup tables.

Question 39Application Delivery and Security Platform fundamentals

An administrator wants to add a custom header to responses sent to clients. Which approach is most direct?

  1. Enable a TCP profile option
  2. Configure a load balancing method that adds headers
  3. Use an iRule that inserts the header in the HTTP_RESPONSE event Correct answer.
  4. Change the pool member port

Explanation

Header manipulation on responses is done by a rule that runs in the HTTP_RESPONSE event and inserts the header before the response is sent. Load balancing methods, port changes, and TCP profile options do not modify HTTP headers.

Question 40Application Delivery and Security Platform fundamentals

A pool has three members with equal weights. One member is marked down by its monitor. How does the platform treat that member by default?

  1. It removes the member from selection until the monitor marks it up Correct answer.
  2. It sends only persistence traffic to the member
  3. It continues to send traffic but logs a warning
  4. It disables the entire pool

Explanation

A member marked down by its monitor is removed from the selection set, so new connections go to the remaining healthy members until the monitor marks it up again. The pool itself stays active as long as another member is available.

Question 41BIG-IP platform configuration and traffic management

A virtual server is configured with a destination address of 10.10.10.100 and a service port of 443. Which traffic does this virtual server match by default?

  1. Any destination address on the 10.10.10.0/24 subnet using port 443
  2. Only traffic arriving on the management interface destined for that address
  3. Any TCP or UDP traffic whose destination IP and port exactly match 10.10.10.100:443 Correct answer.
  4. Traffic destined for that address regardless of the destination port

Explanation

A standard virtual server matches on the combination of destination IP address, destination port, and protocol, so only flows to 10.10.10.100 on port 443 are handled. The address alone or the subnet is not sufficient unless a wildcard or network virtual server is used.

Question 42BIG-IP platform configuration and traffic management

An administrator needs a virtual server to accept traffic for every port on 192.168.5.10 without creating one virtual server per service. Which configuration accomplishes this?

  1. Enable port translation on a standard virtual server
  2. Set the destination IP mask to 255.255.255.255 and pick port 0
  3. Set the service port to * (wildcard) and the destination to the host address Correct answer.
  4. Create a forwarding virtual server with a source address list

Explanation

Using the wildcard service port (*) makes the virtual server match any destination port for the specified address. A host mask alone still requires a specific port.

Question 43BIG-IP platform configuration and traffic management

A virtual server has two pool members, both healthy. The load balancing method is Round Robin. What happens to new connections?

  1. They are hashed by source IP to a member
  2. They all go to the first member until it fails
  3. They are distributed to each member in turn, cycling through the member list Correct answer.
  4. They are sent to the member with the fewest active connections

Explanation

Round Robin rotates through available members sequentially, distributing new connections evenly. It does not consider current connection counts or client identity.

Question 44BIG-IP platform configuration and traffic management

Which persistence method ensures that all requests from the same client IP address are directed to the same pool member?

  1. Source address affinity persistence Correct answer.
  2. Cookie persistence
  3. Destination address affinity persistence
  4. SSL session ID persistence

Explanation

Source address affinity persistence keys on the client source IP so subsequent connections from that address reuse the same member. Cookie and SSL session ID persistence rely on other identifiers.

Question 45BIG-IP platform configuration and traffic management

An administrator wants health monitors to mark a pool member down when the application stops responding on port 8080. Which monitor type should be assigned to the pool?

  1. A gateway ICMP monitor
  2. An ICMP monitor
  3. An in-band monitor
  4. A TCP monitor configured for port 8080 Correct answer.

Explanation

A TCP monitor opens a connection to the specified port to verify the service is listening. ICMP monitors only test IP reachability, and in-band monitors are for link status on the pool member's own interface.

Question 46BIG-IP platform configuration and traffic management

What is the purpose of a pool in BIG-IP configuration?

  1. To group backend servers that a virtual server can distribute traffic to Correct answer.
  2. To define the client-facing IP address and port
  3. To apply an iRule to inbound traffic
  4. To store SSL certificates used during handshake

Explanation

A pool is a logical collection of backend members, typically servers, that receive traffic from a virtual server. The virtual server defines the client-facing listener and references the pool.

Question 47BIG-IP platform configuration and traffic management

Which profile type is required to terminate client SSL connections on a virtual server?

  1. A Server SSL profile
  2. A TCP profile
  3. A Client SSL profile Correct answer.
  4. An HTTP profile

Explanation

A Client SSL profile provides the certificate and key used to decrypt traffic from clients to the virtual server. A Server SSL profile is used for the BIG-IP's outbound connection to pool members.

Question 48BIG-IP platform configuration and traffic management

A virtual server is configured with a source address translation setting of Auto Map. What does this do to client traffic sent to pool members?

  1. It translates the destination address to the virtual server address
  2. It preserves the original client source address
  3. It rewrites the source port to a fixed value
  4. It translates the client source address to a self IP address on the egress VLAN Correct answer.

Explanation

Auto Map causes the BIG-IP to select a self IP on the outbound VLAN as the source address for connections to pool members. This is a form of SNAT that hides the client address.

Question 49BIG-IP platform configuration and traffic management

An administrator wants to create a virtual server that forwards packets without load balancing to any pool. Which virtual server type should be used?

  1. Forwarding (IP) Correct answer.
  2. Stateless
  3. Standard
  4. Performance (Layer 4)

Explanation

A Forwarding (IP) virtual server routes packets based on routing table lookups without requiring a pool. Standard and Performance virtual servers load balance to pool members.

Question 50BIG-IP platform configuration and traffic management

A virtual server uses a Priority Group activation setting of 2 with a minimum of 1. What is the effect when three members are available?

  1. Two members in the higher priority group receive traffic until one fails, then the third is used Correct answer.
  2. Only the first member receives traffic
  3. The pool is marked down until exactly two members are healthy
  4. All three members share traffic equally

Explanation

Priority Group Activation designates a number of active members in the highest priority group that must be available; the remaining lower-priority members are used only when the active count falls below the minimum.