I85PREP
⌘ K
F5CABR (BIG-IP Recert) study materials
F5CABR (BIG-IP Recert) study resources

F5CABR (BIG-IP Recert) practice questions

One question at a time. Build your F5CABR (BIG-IP Recert) understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1BIG-IP Platform Architecture and Local Traffic Management Fundamentals

On a BIG-IP system, which component is responsible for creating and managing the local traffic objects such as virtual servers, pools, and profiles?

  1. The Traffic Management Microkernel (TMM)
  2. The tmsh configuration utility
  3. The Advanced Shell (bash) environment
  4. The Local Traffic Manager (LTM) module Correct answer.

Explanation

LTM is the module that provides local traffic management: it owns virtual servers, pools, monitors, and profiles and applies the configuration to traffic. TMM is the data-plane process that actually processes packets, while tmsh and bash are management interfaces/tools.

Question 2BIG-IP Platform Architecture and Local Traffic Management Fundamentals

A virtual server is configured with destination 10.10.10.100:443 and type Standard. What does the BIG-IP use to decide whether an incoming connection matches this virtual server?

  1. The SSL certificate presented by the client
  2. The source IP address of the client
  3. The URI path requested by the client
  4. The destination IP address and port of the connection Correct answer.

Explanation

A Standard virtual server matches traffic on its configured destination address and port, which together form the listener. Source address, URI, and client certificate are not part of the basic Standard virtual server match criteria.

Question 3BIG-IP Platform Architecture and Local Traffic Management Fundamentals

Which statement describes the default load-balancing method of a newly created pool on BIG-IP?

  1. Least Connections
  2. Observed
  3. Ratio (member)
  4. Round Robin Correct answer.

Explanation

When no method is specified, a pool uses Round Robin, distributing new connections sequentially across available members. Least Connections, Observed, and Ratio are alternative methods that must be explicitly selected.

Question 4BIG-IP Platform Architecture and Local Traffic Management Fundamentals

What is the primary function of a health monitor attached to a pool?

  1. To balance connections across pool members
  2. To encrypt traffic between the BIG-IP and pool members
  3. To log every client request to the pool
  4. To determine whether pool members are available to receive traffic Correct answer.

Explanation

Monitors probe pool members and mark them up or down based on the response, so the BIG-IP only sends traffic to healthy members. Balancing is the job of the load-balancing method, and encryption is handled by SSL profiles.

Question 5BIG-IP Platform Architecture and Local Traffic Management Fundamentals

Which profile type is attached to a virtual server to terminate client SSL connections on the BIG-IP?

  1. A TCP profile
  2. A Persistence profile
  3. An HTTP profile
  4. A Client SSL profile Correct answer.

Explanation

A Client SSL profile on the virtual server causes the BIG-IP to terminate the client-side TLS session and decrypt traffic. TCP and HTTP profiles govern protocol behavior, and persistence profiles maintain session affinity.

Question 6BIG-IP Platform Architecture and Local Traffic Management Fundamentals

In a BIG-IP configuration, what is the purpose of a node?

  1. It represents a physical or logical server identified by an IP address Correct answer.
  2. It stores the SSL certificate used for termination
  3. It defines the listening address of a virtual server
  4. It defines a health-check interval

Explanation

A node is the BIG-IP object that represents a backend server by IP address. Pool members reference nodes plus a service port, so the node is the addressable endpoint behind the pool.

Question 7BIG-IP Platform Architecture and Local Traffic Management Fundamentals

Which BIG-IP feature allows a single virtual server to distribute traffic to different pools based on the requested host name?

  1. A VLAN group
  2. Source address persistence
  3. A Layer 4 TCP profile
  4. An HTTP profile combined with a host-based iRule or local traffic policy Correct answer.

Explanation

Host-based routing requires inspecting the HTTP Host header, which means HTTP-aware processing via an iRule or local traffic policy on a virtual server with an HTTP profile. Persistence, TCP profiles, and VLAN groups do not inspect the Host header.

Question 8BIG-IP Platform Architecture and Local Traffic Management Fundamentals

What does the OneConnect profile do for a virtual server?

  1. It compresses HTTP responses
  2. It duplicates client requests to multiple pools
  3. It reuses server-side TCP connections for multiple client requests Correct answer.
  4. It enforces client certificate authentication

Explanation

OneConnect enables server-side connection reuse so that many client connections can share a smaller set of connections to pool members, reducing connection overhead. It does not duplicate requests, enforce certificates, or compress responses.

Question 9BIG-IP Platform Architecture and Local Traffic Management Fundamentals

A pool contains three members with equal weights, and the pool uses Round Robin. The first three new connections are distributed to members A, B, and C in order. Where does the fourth new connection go?

  1. A random member
  2. Member B
  3. Member C
  4. Member A Correct answer.

Explanation

Round Robin cycles through available members in sequence and then returns to the first member, so the fourth connection goes to A. Random distribution would not guarantee this pattern.

Question 10BIG-IP Platform Architecture and Local Traffic Management Fundamentals

A virtual server has a default pool assigned. A client request arrives and the default pool has all members marked down. Assuming no iRules or fallback host are configured, what happens to the connection?

  1. The BIG-IP resets the connection because no member is available Correct answer.
  2. The BIG-IP returns a 503 response from the default pool
  3. The BIG-IP forwards the request to the last known healthy member
  4. The BIG-IP queues the request until a member recovers

Explanation

When the default pool has no available members and no fallback is configured, the BIG-IP cannot select a destination and resets the connection. It does not forward to a down member or queue indefinitely.

Question 11BIG-IP Platform Architecture and Local Traffic Management Fundamentals

An administrator wants client sessions to remain on the same pool member after the initial connection. Which profile type should be attached to the virtual server to accomplish this?

  1. A Stream profile
  2. A Persistence profile Correct answer.
  3. A Rewrite profile
  4. A Compression profile

Explanation

Persistence profiles maintain session affinity so subsequent connections from the same client go to the same pool member. Compression, Stream, and Rewrite profiles modify payload data and do not provide affinity.

Question 12BIG-IP Platform Architecture and Local Traffic Management Fundamentals

Which monitor type would be most appropriate to verify that a web application returns a specific string in its HTTP response body?

  1. A UDP monitor
  2. An ICMP monitor
  3. A TCP half-open monitor
  4. An HTTP monitor with a Send and Receive string Correct answer.

Explanation

An HTTP monitor can send a request and check the response for a configured receive string, confirming application-level health. ICMP, TCP half-open, and UDP monitors only verify reachability or port availability.

Question 13BIG-IP Platform Architecture and Local Traffic Management Fundamentals

A virtual server is configured with a source address of 0.0.0.0/0 and port 80. What does this configuration indicate?

  1. The virtual server matches only traffic to the management address
  2. The virtual server matches traffic to any destination on port 80 Correct answer.
  3. The virtual server matches only traffic from the local subnet
  4. The virtual server is disabled until a pool is assigned

Explanation

A wildcard destination of 0.0.0.0/0 with port 80 makes the virtual server a listener for any destination address on port 80. It does not restrict to a subnet or management address, and a pool is not required for the listener to exist.

Question 14BIG-IP Platform Architecture and Local Traffic Management Fundamentals

Which statement about the relationship between a virtual server and a pool is correct?

  1. A virtual server can reference only one pool across its lifetime
  2. A pool can be referenced by multiple virtual servers Correct answer.
  3. A virtual server cannot be created without a pool
  4. A pool must contain at least one node object with a monitor attached

Explanation

Pools are independent objects and can be shared by multiple virtual servers. A virtual server may have a default pool and can also select other pools dynamically via iRules or policies.

Question 15BIG-IP Platform Architecture and Local Traffic Management Fundamentals

A client connects to a virtual server with a Client SSL profile and a Server SSL profile. Where does the BIG-IP decrypt and re-encrypt traffic?

  1. It decrypts client traffic and forwards it unencrypted only if the pool member requests it
  2. It passes encrypted traffic through without inspection
  3. It decrypts client traffic and re-encrypts it toward the pool member Correct answer.
  4. It re-encrypts client traffic and decrypts server traffic at the pool

Explanation

With both profiles, the BIG-IP terminates the client TLS session and initiates a separate TLS session to the server, decrypting inbound and re-encrypting outbound. This allows L7 inspection while keeping the server leg encrypted.

Question 16BIG-IP Platform Architecture and Local Traffic Management Fundamentals

An administrator wants the BIG-IP to insert an X-Forwarded-For header when proxying HTTP requests. Which configuration accomplishes this?

  1. Enable the NTLM option in the HTTP profile
  2. Enable the insert X-Forwarded-For option in the TCP profile
  3. Attach a Client SSL profile to the virtual server
  4. Enable the insert X-Forwarded-For option in the HTTP profile Correct answer.

Explanation

The HTTP profile includes an insert X-Forwarded-For setting that appends the client IP to the request header. TCP profiles and SSL profiles do not manipulate HTTP headers, and NTLM is unrelated.

Question 17BIG-IP Platform Architecture and Local Traffic Management Fundamentals

A virtual server uses Least Connections (member) as its load-balancing method. Two members are available: member A has 10 active connections and member B has 4. Where does the next new connection go?

  1. Member B Correct answer.
  2. It is dropped because counts differ
  3. Member A
  4. It alternates regardless of connection count

Explanation

Least Connections selects the available member with the fewest active connections, so member B with 4 connections is chosen over member A with 10. The method does not alternate blindly or drop traffic.

Question 18BIG-IP Platform Architecture and Local Traffic Management Fundamentals

What is the effect of setting a pool member's state to 'forced down'?

  1. The member is removed from the pool permanently
  2. The member is marked up regardless of monitor results
  3. The member is marked down regardless of monitor results Correct answer.
  4. The member receives traffic only from the local subnet

Explanation

Forcing a member down overrides monitor status so the BIG-IP treats it as unavailable. Forcing a member up does the opposite, and neither action deletes the member from the pool.

Question 19BIG-IP Platform Architecture and Local Traffic Management Fundamentals

A virtual server is configured with a Source Address Affinity persistence profile and a timeout of 180 seconds. A client makes a request, waits 200 seconds, then reconnects. What is the expected behavior?

  1. The persistence record has expired, so the load-balancing method selects a member Correct answer.
  2. The client is sent to the same member because persistence never expires
  3. The client connection is rejected until the record is refreshed
  4. The client is sent to a member chosen by the monitor

Explanation

Persistence records expire after the configured timeout, so after 200 seconds the 180-second record is gone and normal load balancing selects the member. Persistence does not persist indefinitely, reject clients, or use monitors for selection.

Question 20BIG-IP Platform Architecture and Local Traffic Management Fundamentals

A virtual server has an HTTP profile and an iRule that selects a pool based on the URI. A request arrives for /api and the iRule selects a pool whose members are all down. No default pool is configured. What is the result?

  1. The request is sent to the pool member with the lowest connection count even if down
  2. The iRule is skipped and the request is dropped silently
  3. The request falls back to the virtual server's implicit pool
  4. The connection is reset because the selected pool has no available members Correct answer.

Explanation

When an iRule selects a pool with no available members and there is no default pool or fallback, the BIG-IP cannot choose a destination and resets the connection. It will not use an implicit pool or send traffic to a down member.

Question 21BIG-IP Platform Architecture and Local Traffic Management Fundamentals

Which statement correctly distinguishes a Standard virtual server from a Forwarding (IP) virtual server?

  1. A Forwarding virtual server terminates connections and applies L7 profiles, while a Standard virtual server forwards packets
  2. A Standard virtual server requires an SSL profile, while a Forwarding virtual server does not
  3. Both types terminate connections and differ only in persistence support
  4. A Standard virtual server terminates connections and can apply L7 profiles, while a Forwarding virtual server forwards packets without terminating connections Correct answer.

Explanation

A Standard virtual server acts as a proxy endpoint that terminates connections and supports profiles and iRules, whereas a Forwarding (IP) virtual server forwards packets at Layer 3/4 without terminating the connection. The other statements reverse or misstate this distinction.

Question 22BIG-IP Platform Architecture and Local Traffic Management Fundamentals

A pool uses Priority Group Activation with a threshold of 2, and members are assigned to priority groups 10 and 20. If two members in group 10 are available and one member in group 20 is available, which members receive new connections?

  1. Only the member in priority group 20
  2. All three members equally
  3. Only the members in priority group 10 Correct answer.
  4. Members are selected randomly across both groups

Explanation

Priority Group Activation serves the highest-priority group as long as its available member count meets or exceeds the threshold. With two available members in group 10 and a threshold of 2, only group 10 is used.

Question 23BIG-IP Platform Architecture and Local Traffic Management Fundamentals

An administrator needs to preserve the client source IP address as seen by pool members. Which configuration achieves this on a Standard virtual server?

  1. Enable Source Address Translation set to Automap
  2. Disable Source Address Translation so the client IP is preserved Correct answer.
  3. Enable Source Address Translation set to SNAT with a pool of translation addresses
  4. Enable a Client SSL profile on the virtual server

Explanation

Source Address Translation rewrites the source IP toward pool members; setting it to None preserves the client address. Automap and SNAT pools both translate the source, and SSL profiles do not affect source addressing.

Question 24BIG-IP Platform Architecture and Local Traffic Management Fundamentals

Which statement about a virtual server's destination address and a pool member's address is correct?

  1. The pool member address must be a self IP on the BIG-IP
  2. They must be identical for traffic to flow
  3. The virtual server address must be a floating self IP
  4. They are independent; the virtual server address is the listener and the member address is the backend server Correct answer.

Explanation

The virtual server destination is the address clients connect to, while pool members point to backend servers, which are typically different addresses. Neither must match the other, and members are not required to be self IPs.

Question 25BIG-IP Platform Architecture and Local Traffic Management Fundamentals

What is the role of the default gateway setting in a BIG-IP network configuration?

  1. It defines the persistence timeout for virtual servers
  2. It defines the monitor interval for pool members
  3. It defines the address the BIG-IP uses to reach destinations outside its local subnets Correct answer.
  4. It defines the address clients use to reach virtual servers

Explanation

The default gateway is the next-hop router used for traffic destined outside the BIG-IP's directly connected subnets. Client reachability, monitor intervals, and persistence timeouts are governed by other settings.

Question 26BIG-IP Platform Architecture and Local Traffic Management Fundamentals

On a BIG-IP, which component provides the actual health and availability status that a virtual server's default pool uses when deciding whether a member can receive traffic?

  1. The monitor assigned to the pool or pool member Correct answer.
  2. The client SSL profile attached to the virtual server
  3. The SNAT pool referenced by the virtual server
  4. The VLAN on which the virtual server listens

Explanation

Monitors send probes to pool members and mark them up or down based on the response, and that state is what the virtual server consults before choosing a member. Without a monitor, a member is assumed up as long as the node and service are administratively enabled. SNAT pools, SSL profiles, and VLANs affect how traffic is handled but do not determine member health.

Question 27BIG-IP Platform Architecture and Local Traffic Management Fundamentals

A virtual server is configured with an iRule that executes a pool command for matching traffic, and the virtual server also has a default pool assigned. For traffic that matches the iRule event, which pool is used?

  1. The virtual server's default pool
  2. Neither pool until the iRule finishes and the default is reapplied
  3. Both pools, alternating per connection
  4. The pool selected by the iRule Correct answer.

Explanation

When an iRule issues a pool selection command, that selection overrides the default pool for the current connection. The default pool remains the fallback for connections that do not hit that iRule logic. There is no automatic alternation between the two pools.

Question 28BIG-IP Platform Architecture and Local Traffic Management Fundamentals

Which profile type must be assigned to a virtual server so the BIG-IP can parse and modify HTTP headers such as inserting a custom header before the request reaches the pool member?

  1. An HTTP profile Correct answer.
  2. A UDP profile
  3. A FastL4 profile
  4. A TCP profile

Explanation

HTTP awareness on the BIG-IP comes from the HTTP profile, which enables parsing of requests and responses so headers can be inspected or rewritten. TCP and UDP profiles only manage transport behavior, and FastL4 switches packets without HTTP parsing. Header insertion therefore requires the HTTP profile.

Question 29BIG-IP Platform Architecture and Local Traffic Management Fundamentals

A virtual server is configured with destination 10.10.10.100:443 and type Standard. Clients connect to that address and are load balanced to pool members in 192.168.50.0/24. What must be true for return traffic from the members to flow correctly back through the BIG-IP?

  1. The members must be configured with the virtual server address as their own primary IP address
  2. The pool members must reside in the same subnet as the virtual server destination
  3. The members must route return traffic back to the BIG-IP, typically because the BIG-IP is their default gateway or a SNAT address is used Correct answer.
  4. The virtual server must be changed to a Forwarding (IP) type so return traffic is accepted

Explanation

For a Standard virtual server the BIG-IP terminates the client connection and opens a separate connection to the member, so the member's replies must come back to the BIG-IP. That happens when the BIG-IP is the member's next hop or when source address translation makes the BIG-IP the apparent source. Members do not need the virtual address assigned to them, and the type does not need to change.

Question 30BIG-IP Platform Architecture and Local Traffic Management Fundamentals

Which statement best describes what a SNAT pool accomplishes for connections from a virtual server to its pool members?

  1. It translates the destination address of the client request to a member address
  2. It translates the client source address to an address from the pool so members see the BIG-IP as the source Correct answer.
  3. It provides a list of backup virtual servers used when the primary virtual server is unavailable
  4. It stores the client's original source address so persistence can be maintained

Explanation

A SNAT pool is a set of translation addresses the BIG-IP uses to replace the client source address on connections it initiates to pool members. This also simplifies the return path because members reply to the BIG-IP. It does not change the destination, provide virtual server redundancy, or implement persistence.

Question 31BIG-IP Platform Architecture and Local Traffic Management Fundamentals

An administrator wants the BIG-IP to choose a pool member based on the URI in an HTTP request while still using a Standard virtual server. Which approach accomplishes this?

  1. Assign multiple default pools to the virtual server and let the BIG-IP rotate among them
  2. Rely on the TCP profile to read the URI and choose the pool
  3. Attach an iRule that inspects the HTTP request and selects a pool based on the URI Correct answer.
  4. Change the virtual server type to Forwarding (IP) so the URI can be examined

Explanation

URI-based selection requires HTTP parsing plus logic to map the URI to a pool, which an iRule provides by inspecting the HTTP request event and issuing a pool command. A Forwarding (IP) virtual server does not parse HTTP, a virtual server has only one default pool, and TCP profiles do not inspect application payload.

Question 32BIG-IP Platform Architecture and Local Traffic Management Fundamentals

What is the primary function of a persistence profile on a virtual server?

  1. To monitor pool member health and remove failed members from rotation
  2. To compress HTTP responses before they reach the client
  3. To send subsequent connections from the same client to the same pool member for a period of time Correct answer.
  4. To translate the client source address to a SNAT address

Explanation

Persistence profiles create an affinity record so that a returning client is directed to the member it used before, for the duration of the configured timeout. Health checking is the job of monitors, compression is handled by HTTP compression settings, and address translation is handled by SNAT.

Question 33BIG-IP Platform Architecture and Local Traffic Management Fundamentals

A virtual server has a TCP profile and an HTTP profile, and the pool members are web servers listening on port 8080 while the virtual server listens on port 80. What does the BIG-IP do with the destination port when it connects to a pool member?

  1. It connects to the member's configured port, in this case 8080 Correct answer.
  2. It connects to the port defined in the TCP profile
  3. It always connects to the same port the client used, in this case 80
  4. It refuses the connection because the ports differ

Explanation

Each pool member is defined by an address and a service port, and the BIG-IP opens its server-side connection to that member port regardless of the port the client used. Port translation between the virtual server and the member is normal behavior. The TCP profile does not define a destination port, and mismatched ports are not a rejection condition.

Question 34BIG-IP Platform Architecture and Local Traffic Management Fundamentals

Which statement about the relationship between a virtual server and a pool member's node is correct?

  1. A node is created automatically for every virtual server and shares its address
  2. A node and a pool member are two names for the same object
  3. A node represents a physical or logical server address, and a pool member pairs that node with a service port Correct answer.
  4. A pool member cannot exist without a corresponding virtual server

Explanation

A node object holds the server's address, and a pool member combines that node with a port plus monitor and state settings. One node can back several pool members on different ports. Nodes are not tied to virtual server addresses, and a pool member is a distinct object from the node it references.

Question 35BIG-IP Platform Architecture and Local Traffic Management Fundamentals

A virtual server uses a source address persistence profile with a 300-second timeout. A client's first connection lands on member A. After 120 seconds the client opens a second connection, but member A is now marked down by its monitor. What happens?

  1. The BIG-IP sends the connection to member A anyway because persistence overrides health
  2. The BIG-IP rejects the connection because the persisted member is unavailable
  3. The BIG-IP selects a new available member and creates a new persistence record for that client Correct answer.
  4. The BIG-IP waits until member A recovers before serving the connection

Explanation

Persistence guides member selection but never overrides health status; if the persisted member is down, the BIG-IP load balances to an available member and updates the persistence entry. Connections are not rejected or queued waiting for recovery, and a down member does not receive traffic.

Question 36BIG-IP Platform Architecture and Local Traffic Management Fundamentals

What is the effect of configuring a virtual server with a source address of 0.0.0.0/0 and a specific destination address and port?

  1. It accepts traffic from any client source address destined for that address and port Correct answer.
  2. It rejects all traffic until a source restriction is added
  3. It accepts traffic only from clients on the directly connected subnet
  4. It forwards all traffic regardless of destination address

Explanation

The source field on a virtual server acts as a filter on client addresses, and 0.0.0.0/0 is a wildcard matching any source. The destination address and port still determine what the listener accepts. It does not restrict to a local subnet, forward all destinations, or block traffic.

Question 37BIG-IP Platform Architecture and Local Traffic Management Fundamentals

A pool uses Priority Group Activation with a threshold of 2. Members are in priority group 10 (three members) and priority group 20 (two members). If one member in group 10 goes down, which members receive new connections?

  1. Only the remaining members in priority group 10 Correct answer.
  2. No members, because the threshold is no longer met in group 10
  3. Only the members in priority group 20
  4. Members in both priority groups 10 and 20

Explanation

Priority Group Activation keeps traffic on the highest-priority group as long as at least the threshold number of members in that group are available. With a threshold of 2 and two group-10 members still up, the threshold is satisfied, so lower-priority members are not used. Group 20 is only engaged when group 10 falls below the threshold.

Question 38BIG-IP Platform Architecture and Local Traffic Management Fundamentals

Which load-balancing method selects a pool member based on the fewest current connections relative to the member's configured ratio?

  1. Least Connections (member) Correct answer.
  2. Ratio (member)
  3. Round Robin
  4. Observed (member)

Explanation

Least Connections (member) picks the member with the lowest ratio of active connections to its configured weight, which suits members of differing capacity. Round Robin cycles through members regardless of load, Observed adjusts based on performance history, and Ratio distributes by weight without considering current connections.

Question 39BIG-IP Platform Architecture and Local Traffic Management Fundamentals

An administrator needs the BIG-IP to forward traffic for many different destination addresses without terminating the connections, preserving the original destination IP. Which virtual server type fits this requirement?

  1. Stateless
  2. Performance (HTTP)
  3. Standard
  4. Forwarding (IP) Correct answer.

Explanation

A Forwarding (IP) virtual server passes packets through without terminating the client connection, so the original destination address is preserved and can be used for routing decisions. Standard and Performance (HTTP) virtual servers terminate connections and proxy to pool members, and Stateless is a UDP-oriented type.

Question 40BIG-IP Platform Architecture and Local Traffic Management Fundamentals

Which statement correctly describes how a wildcard virtual server differs from a network virtual server?

  1. A wildcard virtual server matches any destination address, while a network virtual server matches a range of addresses defined by a subnet Correct answer.
  2. A wildcard virtual server matches only the local subnet, while a network virtual server matches any address
  3. A wildcard virtual server operates only on UDP, while a network virtual server operates only on TCP
  4. A wildcard virtual server requires a pool, while a network virtual server cannot have one

Explanation

A wildcard virtual server uses an all-zeros destination to match traffic to any address, and a network virtual server uses a subnet destination to match a range of addresses. Both can be assigned pools and both work with TCP or UDP depending on configuration. The distinction is the scope of destination addresses matched.

Question 41Virtual Servers, Pools, Nodes, and Load Balancing Methods

A virtual server is configured with a Destination address of 10.10.10.100 and a Service Port of 443. Which traffic does it match by default?

  1. Any traffic sent to any address on port 443
  2. TCP and UDP traffic sent to 10.10.10.100 on port 443
  3. Any IP protocol sent to 10.10.10.100 on any port
  4. Only TCP traffic sent to 10.10.10.100 on port 443 Correct answer.

Explanation

A standard virtual server matches on the destination address, port, and IP protocol. When a TCP profile is attached and the service port is 443, only TCP traffic to that address and port is matched. Other protocols and ports are not captured unless a wildcard or specific listener is configured.

Question 42Virtual Servers, Pools, Nodes, and Load Balancing Methods

An administrator wants a virtual server to accept traffic destined to any IP address on the BIG-IP while still matching a single service port. Which destination setting accomplishes this?

  1. A network virtual server using a wildcard port
  2. A forwarding virtual server with no destination
  3. A standard virtual server with destination 0.0.0.0/0 and the required port Correct answer.
  4. A performance (Layer 4) virtual server with address 255.255.255.255

Explanation

Setting the destination to the wildcard network 0.0.0.0/0 with a defined service port makes the virtual server match any destination address on that port. This is the standard way to build a catch-all listener. A wildcard port would broaden the match beyond the single port requirement.

Question 43Virtual Servers, Pools, Nodes, and Load Balancing Methods

Which pool member state indicates the node is administratively enabled and the health monitor reports it as available to receive traffic?

  1. Offline
  2. Forced Offline
  3. Checking
  4. Up Correct answer.

Explanation

The Up state means the member is enabled administratively and the monitor has marked it healthy, so the virtual server can select it. Checking means monitoring has not yet produced a definitive result. Offline and Forced Offline states remove the member from selection.

Question 44Virtual Servers, Pools, Nodes, and Load Balancing Methods

A pool member's monitor has failed, but the administrator needs that member to keep receiving new connections until the issue is resolved. Which action achieves this without changing the monitor?

  1. Remove all monitors from the pool
  2. Change the load balancing method to Least Connections
  3. Set the member's state to Disabled
  4. Set the member's state to Forced Online Correct answer.

Explanation

Forcing a member online overrides the monitor result and allows the member to receive traffic. This is a deliberate administrative action used for maintenance or troubleshooting. Disabling the member or removing monitors would change behavior in ways that do not preserve monitored health semantics.

Question 45Virtual Servers, Pools, Nodes, and Load Balancing Methods

Which load balancing method distributes connections to pool members in a fixed repeating sequence, independent of current connection counts?

  1. Round Robin Correct answer.
  2. Observed
  3. Predictive
  4. Least Connections

Explanation

Round Robin cycles through the available members in order, giving each member a turn regardless of load. It does not consider current connection counts or member performance. Methods such as Least Connections and Observed adapt to member load or historical performance.

Question 46Virtual Servers, Pools, Nodes, and Load Balancing Methods

An administrator wants new connections sent to the member currently handling the fewest active connections. Which method should be selected?

  1. Dynamic Ratio
  2. Least Connections Correct answer.
  3. Fastest
  4. Ratio

Explanation

Least Connections tracks active connections per member and selects the member with the lowest count. This adapts to uneven session durations better than simple rotation. Ratio, Fastest, and Dynamic Ratio use different criteria such as weights, response time, or performance metrics.

Question 47Virtual Servers, Pools, Nodes, and Load Balancing Methods

A pool contains members with very different capacity. The administrator wants to send twice as many connections to member A as to member B, regardless of current load. Which method should be used?

  1. Observed
  2. Least Connections
  3. Round Robin
  4. Ratio (member) Correct answer.

Explanation

Ratio (member) distributes connections according to per-member ratio weights, so a weight of 2 sends roughly twice the share of a weight of 1. It does not depend on live connection counts. Least Connections and Observed adapt to current or historical load instead.

Question 48Virtual Servers, Pools, Nodes, and Load Balancing Methods

Which load balancing method assigns connections based on a hash of the source IP address so that a client consistently reaches the same member?

  1. Source IP Hash Correct answer.
  2. Least Sessions
  3. Round Robin
  4. Ratio (node)

Explanation

Source IP Hash computes a hash from the client source address to select a member, providing a form of session affinity. The same client address tends to map to the same member as long as the member set is unchanged. The other methods do not provide address-based stickiness.

Question 49Virtual Servers, Pools, Nodes, and Load Balancing Methods

A virtual server uses a pool with three members. One member's monitor fails and its state becomes Down. How does the default load balancing behavior change?

  1. The pool is automatically disabled
  2. New connections are distributed only among the remaining Up members Correct answer.
  3. Connections are still sent to the Down member until existing sessions close
  4. The virtual server stops accepting new connections

Explanation

Members marked Down by monitoring are removed from the selection set, so new connections go to the remaining available members. Existing connections may continue depending on protocol and configuration. The virtual server itself continues listening as long as at least one member is available.

Question 50Virtual Servers, Pools, Nodes, and Load Balancing Methods

What is the default relationship between a node and the pool members that reference it?

  1. Multiple pool members can reference the same node with different service ports Correct answer.
  2. A node address cannot be shared across virtual servers
  3. A node can belong to only one pool at a time
  4. Each pool member must have a unique node address

Explanation

A node represents an IP address, and pools create members by pairing that node with a service port. Multiple members can therefore reference the same node with different ports, and the same node can appear in several pools. This allows one server to expose multiple services.