Which persistence profile would be the most appropriate to ensure an HTTP web request connects to the same pool member? (Choose one answer)
Answer(s): D
For HTTP-based applications, cookie persistence is the most appropriate and commonly recommended persistence method.According to the BIG-IP Administration: Data Plane Configuration documentation:Cookie persistence inserts or uses an HTTP cookie to maintain session affinity.It operates at Layer 7 (HTTP) and is application-aware.It allows persistence to be maintained even when multiple clients are behind a NAT device.Why the other options are incorrect:A . Destination addressDestination address persistence is generally used for inbound traffic patterns such as firewall or proxy scenarios.B . Hash persistenceHash persistence is less granular and not HTTP-specific.C . SSL persistenceSSL persistence is typically used when SSL session IDs are reused and is less reliable than cookies for HTTP applications.Correct Resolution:Using cookie persistence ensures that HTTP web requests are consistently directed to the same pool member.
A BIG-IP Administrator needs to apply persistence to a virtual server that is configured as a Performance (Layer 4) virtual server that allows access to a secure (TLS) e-commerce website.What type of persistence profile can be used? (Choose one answer)
Answer(s): A
A Performance (Layer 4) virtual server does not inspect or process application-layer data such as HTTP headers or cookies. Therefore, only Layer 4compatible persistence methods can be used.According to the BIG-IP Administration: Data Plane Configuration documentation:Source Address Affinity persistence operates at Layer 4 and uses the client IP address to maintain session persistence.It is fully compatible with Performance (Layer 4) virtual servers.It works regardless of encryption, making it suitable for TLS-secured applications.Why the other options are incorrect:B . Cookie persistenceRequires an HTTP profile and Layer 7 inspection, which is not supported on Performance virtual servers.C . Microsoft RDP persistenceIs protocol-specific and not applicable to web-based TLS traffic.D . Host persistenceRequires HTTP host header inspection, which is not available at Layer 4.Correct Resolution:Source Address Affinity persistence is the appropriate choice for maintaining persistence on a Performance (Layer 4) virtual server handling TLS traffic.Below is Batch 1 (Questions 110) extracted only from your uploaded document that are directly related to BIG-IP Administration: Data Plane Configuration topics (Virtual Servers, Pools, Load Balancing, Monitors, Persistence, SNAT, Profiles).I have excluded system-only, licensing, support, hardware, HA management-only, and admin UI questions that are not Data Planefocused.Source: Your uploaded TMOS Administration v2.0 documentBATCH 1 (10 Questions)
A Virtual Server uses an iRule to send traffic to pool members depending on the URI. The BIG-IP Administrator needs to modify the pool member in the iRule.Which event declaration does the BIG-IP Administrator need to change to accomplish this?
Answer(s): C
URI-based traffic steering requires inspection of the HTTP request. BIG-IP processes HTTP headers and URIs in the HTTP_REQUEST event. Pool member selection based on URI must occur before the request is sent to the server, making HTTP_REQUEST the correct event.
A BIG-IP Administrator creates a new Virtual Server to load balance SSH traffic. Users are unable to log on to the servers.What should the BIG-IP Administrator do to resolve the issue?
Answer(s): B
SSH is a TCP Layer 4 protocol. Applying an HTTP profile causes BIG-IP to expect HTTP headers, breaking SSH sessions. Removing the HTTP profile allows raw TCP forwarding.
A BIG-IP Administrator uses backend servers to host multiple services per server. There are multiple virtual servers and pools defined, referencing the same backend servers.Which load balancing algorithm is most appropriate to have an equal number of connections on each backend server?
Least Connections (node) balances connections across the physical server regardless of how many services or pool members exist on that node.
What is the status of a pool member when manual resume is enabled and a health check first fails and then passes?
With manual resume enabled, BIG-IP does not automatically return a pool member to service after recovery. The member remains offline until manually re-enabled.
Some users who connect to a busy Virtual Server have connections reset by the BIG-IP system. Pool member resources are NOT a factor.What is a possible cause?
When the connection limit is reached, BIG-IP resets new connections, even if pool members are healthy.
Which Virtual Server type prevents the use of a default pool?
Forwarding (IP) virtual servers operate at Layer 3 and forward traffic based on routing, not pools.
Share your comments for F5 F5CAB3 exam with other users:
please upload
prepping for fsc exam
pd1 with great experience
@t it seems like azure service bus message quesues could be the best solution
helpful to check your understanding.
question 128 the answer should be static not auto
more comments here
great support to appear for exams
useful dumps
making progress
q31 answer should be d i think
is this real?
q10: c and f are also true. q11: this is outdated. you no longer need ownership on a pipe to operate it
good questions with simple explanation
admin guide (windows) respond to malicious causality chains. when the cortex xdr agent identifies a remote network connection that attempts to perform malicious activity—such as encrypting endpoint files—the agent can automatically block the ip address to close all existing communication and block new connections from this ip address to the endpoint. when cortex xdrblocks an ip address per endpoint, that address remains blocked throughout all agent profiles and policies, including any host-firewall policy rules. you can view the list of all blocked ip addresses per endpoint from the action center, as well as unblock them to re-enable communication as appropriate. this module is supported with cortex xdr agent 7.3.0 and later. select the action mode to take when the cortex xdr agent detects remote malicious causality chains: enabled (default)—terminate connection and block ip address of the remote connection. disabled—do not block remote ip addresses. to allow specific and known s
very inciting
question 5, it seems a instead of d, because: - care plan = case - patient = person account - product = product2;
it look like real one
i am taking oracle fcc certification test next two days, pls share question dumps
i need dumps
its time to comptia sec+
question 35 has an answer for a different question. i believe the answer is "a" because it shut off the firewall. "0" in registry data means that its false (aka off).
helpful content
oracle 19c is complex db
helpful for practice
support team is fast and deeply knowledgeable. i appreciate that a lot.
helpful questions
thanks for question
the software is provided for free so this is a big change. all other sites are charging for that. also that fucking examtopic site that says free is not free at all. you are hit with a pay-wall.
i need exam questions nca 6.5 any help please ?
just took the comptia cybersecurity analyst (cysa+) - wished id seeing this before my exam
very helpful
i need this exam
nice questions... are these questions the same of the exam?
Keeping this site free takes real effort. We constantly battle automated scraping and unauthorized content copying. A quick account helps us protect the community and keep the site free.
To continue studying for your F5CAB3, please sign in or create a free account.