An organization needs to deploy an HTTP application on a BIG-IP system. The requirements specify hardware acceleration to enhance performance, while HTTP optimization features are not required.What type of virtual server and associated protocol profile should be used to meet these requirements? (Choose one answer)
Answer(s): C
To select the correct virtual server type, an administrator must balance the need for L7 intelligence versus raw throughput and hardware offloading:Performance (Layer 4) Virtual Server: This type is designed for maximum speed. It uses the fastL4 profile, which allows the BIG-IP system to leverage the ePVA (Embedded Packet Velocity Accelerator) hardware chip. When a Performance (L4) virtual server is used, the system processes packets at the network layer (L4) without looking into the application payload (L7). This fulfills the requirement for hardware acceleration and avoids the overhead of HTTP optimization features, which are not needed in this scenario.Performance (HTTP) Virtual Server: While fast, this type uses the fasthttp profile to provide some L7 awareness and optimization (like header insertion or small-scale multiplexing). Since the requirement specifically states HTTP optimization is not required, the L4 variant is more efficient.Standard Virtual Server: This is a full-proxy type. While it offers the most features (SSL offload, iRules, Compression), it processes traffic primarily in the TMOS software layer (or via high-level hardware assistance), which is "slower" than the pure hardware switching path of the Performance (L4) type.Stateless Virtual Server: This is typically used for specific UDP/ICMP traffic where the system does not need to maintain a connection table. It is not appropriate for standard HTTP (TCP) applications requiring persistent sessions or stateful load balancing.By choosing Performance (Layer 4) with the fastL4 profile, the organization ensures that the traffic is handled by the hardware acceleration chips, providing the lowest latency and highest throughput possible for their HTTP application.
An application is configured so that the same pool member must be used for an entire session, and this behavior must persist across HTTP and FTP traffic. A user reports that a session terminates and must be restarted after the active BIG-IP device fails over to the standby device.Which configuration settings should the BIG-IP Administrator verify to ensure proper behavior when BIG-IP failover occurs? (Choose one answer)
This scenario combines session continuity, multiple protocols (HTTP and FTP), and HA failover behavior, which directly implicates persistence handling across devices and services.Key Requirements BreakdownSame pool member for entire sessionSession must survive failoverSession must span multiple services (HTTP and FTP)Why Persistence Mirroring + Match Across Services Is RequiredPersistence MirroringEnsures persistence records are synchronized from the active BIG-IP to the standby BIG-IP.Without mirroring:After failover, the standby device has no persistence tableClients are load-balanced againSessions break, forcing users to restartPersistence mirroring is essential for session continuity during failoverMatch Across ServicesAllows a single persistence record to be shared across multiple virtual servers / protocolsRequired when:HTTP and FTP must use the same pool memberMultiple services are part of a single application sessionTogether, these settings ensure:Persistence survives device failoverPersistence is honored across HTTP and FTPWhy the Other Options Are IncorrectA . Cookie persistence and session timeoutCookie persistence only applies to HTTP and does not address FTP or failover synchronization.B . Stateful failover and Network Failover detectionStateful failover applies to connection state, not persistence records, and does not link HTTP and FTP sessions.D . SYN-cookie insertion threshold and connection low-water markThese are DoS / SYN flood protection settings, unrelated to persistence or HA behavior.
The BIG-IP Administrator wants to provide quick failover between the F5 LTM devices that are configured as an HA pair with a single Self IP using the MAC Masquerade feature. The administrator configures MAC masquerade for traffic-group-1 using the following command:`tmsh modify /cm traffic-group traffic-group-1 mac 02:12:34:56:00:00`However, the Network Operations team identifies an issue with using the same MAC address across multiple VLANs. As a result, the administrator enables Per-VLAN MAC Masquerade to ensure a unique MAC address per VLAN by running:`tmsh modify /sys db tm.macmasqaddr_per_vlan value true`What would be the resulting MAC address on a tagged VLAN with ID 1501? (Choose one answer)
In BIG-IP high availability (HA) configurations, MAC Masquerade is used to speed up failover by allowing traffic-group-associated Self IPs to retain the same MAC address when moving between devices. This prevents upstream switches and routers from having to relearn ARP entries during a failover event, resulting in near-instant traffic recovery.By default, MAC masquerade applies one MAC address per traffic group, regardless of how many VLANs the traffic group spans. This can create problems in some network designs because the same MAC address appearing on multiple VLANs may violate network policies or confuse switching infrastructure.To address this, BIG-IP provides Per-VLAN MAC Masquerade, enabled by the database variable:`tm.macmasqaddr_per_vlan = true`When this feature is enabled:BIG-IP derives a unique MAC address per VLANThe base MAC address configured on the traffic group remains the first four octetsThe last two octets are replaced with the VLAN ID expressed in hexadecimalThe VLAN ID is encoded in network byte order (high byte first, low byte second)### VLAN ID Conversion:VLAN ID: 1501 (decimal)Convert to hexadecimal:1501₁₀ = 0x05DDHigh byte: 05Low byte: DD### Resulting MAC Address:Base MAC: `02:12:34:56:00:00`Per-VLAN substitution →last two bytes = `05:DD`Final MAC address:`02:12:34:56:05:dd`### Why the Other Options Are Incorrect:A (01:15) – Incorrect hexadecimal conversion of 1501B (dd:05) – Byte order reversed (little-endian, not used by BIG-IP)D (15:01) – Uses decimal values instead of hexadecimal### Key BIG-IP HA Concept Reinforced:Per-VLAN MAC Masquerade ensures Layer 2 uniqueness per VLAN while preserving the fast failover benefits of traffic groups, making it the recommended best practice in multi-VLAN HA deployments.
A BIG-IP Administrator makes a configuration change to a Virtual Server on the Standby device of an HA pair. The HA pair is currently configured with Auto-Sync enabled. What effect will the change have on the HA pair configuration? (Choose one answer)
In a BIG-IP high availability (HA) configuration, Auto-Sync is a device trust feature that automatically synchronizes configuration changes from the Active device to the Standby device within a Sync-Failover device group.Key principles from BIG-IP Administration Data Plane Concepts:The Active device is always the authoritative source of configurationConfiguration changes are intended to be made only on the Active deviceWith Auto-Sync enabled, any time the Active device configuration changes, the system automatically pushes the configuration to all Standby members of the device groupConfiguration changes made directly on a Standby device are not preservedIn this scenario:The administrator modifies a Virtual Server on the Standby deviceThat change is local only and does not alter the device group’s synchronized configurationWhen Auto-Sync next runs (triggered by a change on the Active device or an internal sync event), the Active device configuration overwrites the Standby configurationAs a result, the configuration change made on the Standby device is undone.Why the Other Options Are Incorrect:A – The change is not undone only when another change is made; it is undone during the next Auto-Sync operationB – Changes made on the Standby device are never propagated to the Active deviceD – Auto-Sync does not merge or promote Standby changes into the HA pair configurationBest Practice Reinforced:Always perform configuration changes on the Active BIG-IP device when Auto-Sync is enabled to ensure consistent and predictable HA behavior.
What is the result when a BIG-IP Administrator manually disables a pool member? (Choose one answer)
Answer(s): A
In BIG-IP LTM, a pool member state directly affects how traffic is handled at the data plane level. When a pool member is manually disabled, BIG-IP changes the member’s availability state to disabled, which has specific and predictable traffic-handling consequences.According to BIG-IP Administration Data Plane Concepts:A disabled pool member:Does not accept new connectionsContinues to process existing non-persistent connections until they naturally closeIs removed from load-balancing decisions, including persistence lookupsMost importantly for this question: Persistent connections(such as those created using source-address persistence, cookie persistence, or SSL persistence) are not honored for a disabled pool memberBIG-IP will not send new persistent traffic to a disabled member, even if persistence records existTherefore, when a pool member is manually disabled, it stops processing persistent connections, while allowing existing non-persistent flows to drain gracefully.Why the Other Options Are Incorrect:B – Persistent connections are not honored for a disabled pool memberC – Existing connections are not immediately terminated when a pool member is disabledD – Only the disabled pool member stops accepting new connections, not all pool membersKey Data Plane Concept Reinforced:Manually disabling a pool member is a graceful administrative action that prevents new and persistent traffic from reaching the member while allowing existing connections to complete, which is critical for maintenance and troubleshooting scenarios.
A BIG-IP Administrator assigns the default HTTP health monitor to a pool that has three members listening on port 80. When the administrator connects to each pool member using the curl utility, two of the members respond with a status of 404 Not Found, while the third responds with 200 OK. What will the pool show for member availability? (Choose one answer)
In BIG-IP LTM, health monitors are used to determine the availability of pool members and directly influence traffic flow decisions in the data plane.Key characteristics of the default HTTP monitor according to BIG-IP Administration Data Plane Concepts:Sends an HTTP request (typically GET /)Expects an HTTP response code of 200 OKAny response other than 200 is treated as a monitor failureA failed monitor causes the pool member to be marked offline (down)In this scenario:Two pool members return 404 Not FoundA 404 response indicates that the requested object was not foundThis does not meet the success criteria of the default HTTP monitorThese two members are therefore marked offlineOne pool member returns 200 OKThis matches the expected responseThe member is marked onlineResulting Pool Member Availability:2 members: Offline1 member: OnlineWhy the Other Options Are Incorrect:B – 404 responses are not considered healthy by the default HTTP monitorC – At least one member responds with the expected 200 OKD – Members returning 404 responses fail the monitor and cannot be marked onlineKey Data Plane Concept Reinforced:BIG-IP health monitors make binary availability decisions based strictly on configured success criteria. For HTTP monitors, response codes matter—404 is a failure, even if the service is technically reachable.
An ecommerce company is experiencing latency issues with online shops during Black Friday’s peak season. The BIG-IP Administrator detects an overall high CPU load on the BIG-IP device and wants to move the top utilized Virtual Servers to a dedicated BIG-IP device. Where should the BIG-IP Administrator determine the problematic Virtual Servers? (Choose one answer)
When troubleshooting performance and latency issues on BIG-IP, especially under peak load conditions, it is critical to identify which Virtual Servers are consuming the most resources. This is a core data plane analysis task.BIG-IP provides multiple views of configuration and status, but only certain areas expose real-time and historical traffic statistics that correlate directly with CPU usage and throughput.Why Option C Is Correct:Statistics > Module Statistics > Local Traffic > Virtual Servers provides:Real-time and cumulative statistics per Virtual ServerMetrics such as:Bits in / Bits outPackets in / Packets outCurrent connectionsConnection rateTotal requestsThe ability to identify high-traffic or high-connection Virtual Servers, which are the most likely contributors to elevated CPU utilizationThese statistics allow the administrator to objectively determine which Virtual Servers are the top consumers of system resources and therefore good candidates for migration to a dedicated BIG-IP device.Why the Other Options Are Incorrect:A . Local Traffic > Virtual Servers > Virtual Server ListPrimarily a configuration viewDoes not provide sufficient performance or utilization statistics to identify CPU-heavy Virtual ServersB . System > PlatformDisplays hardware-level information such as CPU cores, memory, disk, and platform typeDoes not break down utilization by Virtual ServerD . Local Traffic > Network MapProvides a logical topology view of Virtual Servers, pools, and pool membersUseful for understanding relationships, but not for identifying high-utilization Virtual ServersKey Data Plane Concept Reinforced:To diagnose performance problems and plan traffic redistribution, BIG-IP administrators must rely on Module and object-level statistics, not configuration screens. The Virtual Server statistics view is the authoritative location for identifying traffic hotspots that directly impact CPU and latency during peak events such as Black Friday.
and their status/statistics]A BIG-IP Administrator needs to connect a BIG-IP system to two upstream switches to provide external network resilience. The network engineer instructs the administrator to configure interface binding with LACP. Which configuration should the administrator use? (Choose one answer)
Answer(s): D
In BIG-IP architecture, link aggregation and redundancy at Layer 2 are implemented using Trunks, not virtual servers or pools.According to BIG-IP Administration Data Plane Concepts:Interfaces are the physical network ports on the BIG-IP deviceA Trunk is a logical grouping of multiple interfacesTrunks can be configured to use LACP (Link Aggregation Control Protocol) to:Provide link redundancyIncrease aggregate bandwidthAllow automatic detection of link failuresVLANs are then assigned to the trunk, not directly to individual interfaces, once aggregation is in placeCorrect Design for the Scenario:To connect BIG-IP to two upstream switches with LACP:One physical interface from BIG-IP connects to Switch AAnother physical interface from BIG-IP connects to Switch BBoth interfaces are placed into the same trunkLACP is enabled on the trunk and on the switchesThis configuration allows:Traffic to continue flowing if one interface or switch failsProper LACP negotiation between BIG-IP and the upstream switchesClean separation of responsibilities (Layer 2 handled by trunking, Layer 4–7 by virtual servers)Why Option D Is Correct:A Trunk containing an interface connected to each switch is exactly how BIG-IP implements LACP-based interface bindingThe trunk handles link state, load distribution, and failover at the data planeWhy the Other Options Are Incorrect:A & B – Virtual servers operate at Layers 4–7 and have nothing to do with physical link aggregation or LACPC – VLAN IDs and MAC addresses are not configured inside a trunk definition; trunks aggregate interfaces, and VLANs are applied to trunksKey Data Plane Concept Reinforced:On BIG-IP systems, LACP is always configured on a Trunk, which aggregates physical interfaces to provide Layer 2 resiliency and bandwidth aggregation. Virtual servers and pools are not involved in physical interface binding.
Share your comments for F5 F5CAB2 exam with other users:
good content
so challenging
17 should be d ,for morequery its scale out
nice question
yes.
good mateial
good practice exam
impressivre qustion
questions seem helpful
question 21 answer is alerts
am preparing for exam
good one thanks
only got thru 5 questions, need more to evaluate
q26 should be b
the aaa triad in information security is authentication, accounting and authorisation so the answer should be d 1, 3 and 5.
need to attend this
these are free brain dumps i understand, how can one get free pdf
provide access
good morning
please upload the ncp-mci 6.5 dumps, really need to practice this one. thanks guys
question 16: https://help.salesforce.com/s/articleview?id=sf.care_console_overview.htm&type=5
yes i m prepared exam
my experience was great with this site as i studied for the ms-900 from here and got 900/1000 on the test. my main focus was on the tutorials which were provided and practice questions. thanks!
great course
very good question
question: 93 which statement is true regarding the result? sales contain 6 columns and values contain 7 columns so c is not right answer.
highly recommend just passed my exam.
great practice! thanks
anyone who wrote this exam recently?
kindly share the dump
could you please upload cfe fraud prevention and deterrence questions? it will be very much helpful.
this is really very very helpful for mcd level 1
very helpful!
Keeping this site free takes real effort. We constantly battle automated scraping and unauthorized content copying. A quick account helps us protect the community and keep the site free.
To continue studying for your F5CAB2, please sign in or create a free account.