Question 1

A BIG-IP device is licensed for LTM, ASM, APM, and AFM. Currently, it will only be used for load balancing and web application firewalling. To ensure optimal performance and efficient resource utilization, which of the following module provisioning combinations is the best choice?

Options :

A : LTM: DedicatedASM: DedicatedAPM: Minimal AFM: Minimal

B : LTM: DedicatedASM: DedicatedAPM: NoneAFM: None

C : LTM: NominalASM: NominalAPM: NoneAFM: None

D : LTM: NominalASM: NominalAPM: MinimalAFM: Minimal

Answer: C

Question 2

When logged into the bash shell of a BIG-IP system, which of the following commands will display the management-ip address? (Choose two.)

Options :

A : tmsh list /sys management-ip

B : show mgmt ip

C : ifconfig mgmt

D : list / sys management-ip

Answer: A,C

Question 3

A BIG-IP Administrator needs to verify the state of equipment in the data center.A BIG-IP appliance has a solid yellow indicator on the status LED. How should the administrator interpret this LED indicator?

Options :

A : Appliance is halted or in End-User Diagnostic (EUD) mode

B : Appliance is a standby member in a device group

C : A warning-level alarm condition is present

D : A power supply is NOT operating properly

Answer: C

Question 4

The Configuration Utility of a BIG-IP device is currently accessible via its management IP 10.53.1.245 from all VLANs. The BIG-IP Administrator needs to restrict access so only hosts from the 10.0.0.0 subnet can access the Configuration Utility. Which TMSH command accomplishes this?

Options :

A : (tmos)# create /net acl MGMT.HTTP rule add { (permit tcp 10.0.0.0 0.0.0.255 host 10.53.1.245 http) }

B : (tmos)# modify /ltm httpd allow replace-all-with {10.0.0.0}

C : (tmos)# create /net acl MGMT.HTTP rule add { (permit tcp 10.0.0.0 10.53.1.245 http) (deny ip any any http) }

D : (tmos)# modify /sys httpd allow replace-all-with {10.0.0.0}

Answer: D