F5 TMOS Administration (201) Certification Sample Questions

02. An administrator is about to raise a support case for a BIG-IP system that is behaving unexpectedly but is still passing traffic. Which two actions make the case more likely to be resolved quickly?
(Choose two.)
a) Raise the case at the highest severity so that it is answered sooner
b) Record what changed on the system in the period before the behavior appeared
c) Restore the most recent UCS archive so that the configuration is known to be correct
d) Reboot the device first, so that the case describes the system in a known state
e) Collect a qkview while the system is still exhibiting the behavior

03. Users report that an application is slow. The administrator must establish whether the delay is on the network path between the BIG-IP system and the pool member, or in the member's own response. Which comparison separates the two?
a) The total time the client waits against the time recorded on the client's own workstation.
b) The interface statistics on the internal interface against those on the external interface.
c) The number of connections the member is holding against the number the other members hold.
d) The time taken to establish the connection to the member against the time the member then takes to answer the request.

04. A BIG-IP system is reported as unhealthy, but TMM CPU is normal and throughput is well below the licensed rate. Which two conditions would produce a resource problem that does not appear as elevated TMM CPU?
(Choose two.)
a) A disk partition holding logs is approaching capacity
b) Throughput on the external interface sitting near the licensed rate
c) Memory consumed by a module provisioned since the baseline was taken
d) A rise in the rate at which the system is establishing new client connections
e) SSL transactions per second climbing during the working day

05. Monitors on a BIG-IP system are configured to test pool members by name rather than by address, and every one of them has begun to fail at once. The members themselves are running normally. Which system service should the administrator check?
a) NTP, because a clock that has drifted will cause monitors to time out before their responses arrive.
b) Remote logging, because the monitor results cannot be recorded.
c) SNMP, because the management station's polling interferes with the monitor traffic.
d) DNS, because the device must resolve each of those names to an address before a monitor can send a single test to the member.

06. An administrator resolved a configuration finding on a BIG-IP system last week, but the finding still appears in the iHealth report they are reading today. What explains this?
a) Findings are retained for a fixed period after they have been resolved, keeping the history visible to the administrator.
b) The report describes the qkview it was generated from, which captured the system before the change.
c) The change was made on the peer device, so this unit is still carrying the original configuration the finding described.
d) The finding cannot be cleared until F5 Support confirms the remediation.

07. Traffic leaves a BIG-IP system towards a pool member, but the application never responds and the client eventually times out. The administrator wants to establish whether the member is receiving the traffic and failing to answer, or never receiving it.
Which approach settles that question?
a) Capture on the server side of the BIG-IP system and check whether the member answers what is sent to it.
b) Compare interface statistics on the system's internal and external interfaces.
c) Read the pool member's monitor status in the Configuration utility.
d) Capture on the client side and the server side of the BIG-IP system at the same time, and compare what each side shows.

08. An administrator forces one unit of a high-availability pair to standby before starting maintenance on it. Which two statements describe the result?
(Choose two.)
a) The unit's virtual servers are disabled and have to be re-enabled afterward
b) The traffic groups the unit was holding move to the peer device
c) The unit leaves the device trust until it is returned to service
d) The unit stays in the device group and continues to synchronize configuration
e) The peer must be relicensed before it can accept the traffic groups

09. To stop SSH attempts arriving at a BIG-IP system, an administrator sets port lockdown to Allow None on the self-IP of the VLAN the attempts appear to come from:
net self /Common/self-external { allow-service none }
The attempts on the management interface continue unchanged.
Why did the change have no effect on them?
a) Port lockdown governs only the self-IP it is set on, and the management interface is controlled separately.
b) Port lockdown takes effect only after the configuration has been synchronized to the peer.
c) The self-IP is on the wrong VLAN, so the setting matches no traffic.
d) Allow None still permits SSH, because it is treated as a management protocol.

10. End User Diagnostics must be run on one unit of a high-availability pair during business hours. What should the administrator do first?
a) Disable the virtual servers on the unit so that clients are not sent to it.
b) Remove the unit from its device group so that no configuration reaches it while it is down.
c) Move the traffic to the peer and confirm it is serving the applications before taking the unit down.
d) Take a UCS archive of the unit, so that its configuration can be restored if the diagnostics disturb it.