F5 Adc 201 Study

Front 1

What information do you need to create an IP forwarding Virtual Server?

Back 1

Type (Forwarding IP), Destination Network, source VLAN and SNAT

Front 2

Increase the speed of HTTP and TCP using what Profiles?

Back 2

FastHTTP and FastTCP

Front 3

Order of precidence for virtual servers?

Back 3

IP:PORT

IP:*

NETWORK:PORT

NETWORK:*

*:PORT

*:*

Front 4

VLANs map to interfaces? Self IP's map to VLANs?

Back 4

True

Front 5

5 Different types of status indicators on the network map?

Back 5

Green = Enabled and Available

Yellow = currently unavailable but enabled

Red = Offline due to monitor but enabled

Black = Disabled

Blue = Unknown Enabled

Front 6

What is a virtual address?

Back 6

Same as a node but for virtual servers, it is

simply an IP address that can be associated with a virtual server when a port is added.

Front 7

What happens on layer 2 with a virtual address?

Back 7

BigIP associated a MAC address with the IP and will respond to ARP.

Front 8

What types of troubleshooting tools are available for testing server connectivity at different layers?

Back 8

Ping, traceroute, telnet, openssl, curl

Front 9

Monitors are associated with pools or pool members?

Back 9

Pool Members, each member can have a different monitor.

Front 10

Force offline can only be applied to the?

Back 10

Pool Member

Front 11

What is the difference between force offline and disabled?

Back 11

Disabled allows persistent connections and existing connections.

Force Offline only allows existing connections to time out.

Front 12

Difference between Pool Member ratio and Priority?

Back 12

Priority sets which pool members take priority over others, eg 1 or 2 servers will service ALL requests, until one of those is unavailable, another server with lower priority will take over.

Ratio sets the weight of how many connections can be sent to a certain pool member

Front 13

What features do you use to manage the number of incomming connections and the rate a which connections are made?

Back 13

On either VS, Pool member or node, change connection rate limit or connection limit.

Front 14

Name the two most common session persistence methods on F5 BigIP?

Back 14

Cookie and Source Address Affinity

Others include: dest address, SSL, SIP, Hash

Front 15

What are the two objects used to configure session persistence?

Back 15

Persistence profiles and iRules.

Front 16

Difference between persistence and session persistence?

Back 16

Persistence can refer to HTTP keeping itself alive instead of closing after each transaction.

Session persistence is the act of keeping a session active on a single server instead of load balancing.

Front 17

What is the difference between primary and fallback persistence?

Back 17

You can only set address based persistence for a fallback. When the primary persistence is not working, the address based persistence record is used.

Front 18

Are cookie persistence records viewable on the F5?

Back 18

No

Front 19

Saving and restoring archive in CLI?

Back 19

tmsh save sys ucs /path/to/save

tmsh load sys ucs /path/to/ucs

Front 20

How to view address based persistence in the GUI and CLI?

Back 20

GUI = Statistics > Module Statistics > Local Traffic > Persistence Records

CLI = show ltm persistence persist-records

Front 21

What is EUD and how can you run it?

Back 21

End User Diagnostics, can be run from the boot menu from console.

stored in /var/log/ directory

Front 22

Where are alerts from alertd written to file?

Back 22

/shared/log/ltm

Front 23

Name 3 of the 5 types of logs stored in /var/log

Back 23

System Messages /log/messages

Linux related events

Audit log /log/audit

incl usernames and ID

Local Traffic Events /log/ltm

LTM TMM etc

Packet filter /log/pktfilter

GTM Global traffic manager

Front 24

How does a failover to standby help in troubleshooting?

Back 24

By failing over to a secondary device which is in sync, you can see if the issue is related to the formerly active device hardware. If the issue persists, it is likely a configuration issue.

Front 25

To create a stateful failover, each system must be configured to mirror what?

Back 25

connection table, persistence records and SNAT table.

Front 26

Running tcpdump on a heavily loaded system can cause preformance issues, what can be done to mitigate this?

Back 26

Use tcpdump filter expressions such as:

-nni = no DNS resolution and using interface "x"

-network = listen on specific network or ports

-w = write to file

-s0 = capture whole packet or specify different length

Front 27

quantitative vs qualitative?

Back 27

Quantitiy:

What measurable indicators can we take from the issue that are different from normal operation?

vs
Quality:

What can you observe about the issue? How is it different from normal operation?

Front 28

What are the different port lockdown options for self-IPs?

Back 28

Allow All

Allow None

Allow Custom

Allow Default

Front 29

Name 4 protocols allowed for the port lockdown "Allow Default" setting?

Back 29

OSPF

DNS

HTTPS

SSH

SNMP

iQuery

RIP

Network Failover

Front 30

What is the port lockdown setting on a brand new device running 11.x? Is it different for 10.x versions?

Back 30

Allow None

Yes, Allow Default

Front 31

Why use port lockdown?

Back 31

To restrict self-ip access to only allow what is required by administrators.

Front 32

Does a packet filter apply to management traffic?

Back 32

Yes, Packet filter apply to all traffic.

Front 33

What input must be provided for a basic packet filter rule?

Back 33

Order = First, Last, After

Action = Accept, Discard, Reject, Continue

VLAN = VLAN to filter

expression = what to filter

logging = yes or no

Front 34

What is PAM? (Pluggable Authentication Module)

Back 34

PAM allows the use of a number of different AAA providers to be used through BigIP

Front 35

Does PAM use TMM or Self?

Back 35

TMM

Front 36

Name 3 authentication modules supported by the BigIP

Back 36

LDAP

RADIUS

TACACS+

CRLDP

KEREBOS

SSL client Cert LDAP

OCSP

Front 37

What are the two methods BigIP uses to resolve names?

Back 37

hosts file in /etc/hosts

DNS server configured

Front 38

How can an admin verify if DNS is working?

Back 38

Using DIG or nslookup on the CLI

Front 39

Guidlines for information to provide when raising a support ticket.

Back 39

1. Full description of the issue

2. Description of the impact the issue is having

3. The hours available and contact info

4. remote access info if possible

5. qkview or tech.out file

6. packet traces

7. UCS archive

8. Core files

Front 40

To provide f5 with more log files what would you do?

Back 40

Create a tar archive:

tar -czpf /var/tmp/logfiles.tar.gz /var/log/*

Front 41

Name the 4 severities for cases, their response times and what the criteria is for each sev.

Back 41

Sev1 = 1 hour - preventing critical business activities

Sev2 = 1 hour - significantly imparing high level commerce or business activities

Sev3 = 4 hour - degredation of service or functionality for normal business or commerce

Sev4 = 24 hour = Informational and troubleshooting non critical issues.

Front 42

Two different views included in the network map?

Back 42

Local Traffic Summary

Network Map

Front 43

Summary of what virtual servers can do:

Back 43

Distribute Client request across multiple servers

Apply various behavioral settings

Enable persistence

Direct traffic according to iRules

Front 44

Main difference between a node and pool member

Back 44

Node is just a logical IP address

Pool member uses a node object and adds a port. Will then be added to a pool which can be added to a virtual server.

Front 45

Standard Dashboard overview displays what?

Back 45

CPU usage, memory usage, connections and throughput

Front 46

Analytics also known as AVR is a module providing what kind of statistics?

Back 46

Application Visibility and Reporting shows how applications are performing. It provides detailed metrics such as TPS, server and client latency, request and response throughput and sessions.

Front 47

What must you create to allow Analytics to work?

Back 47

An analytics profile which must be associated with a virtual server.

Profiles contain:

- What stats to collect

- Where to collect data (locally, remotely or both)

-Whether to capture trafic itself

-Whether to send notifications

Front 48

Where are statistics relating to iRules, profiles, SNAT lists, pools, nodes and virtual addresses located?

Back 48

Statics > Module Statistics > Local Traffic

Front 49

When would you restore a UCS archive?

Back 49

In event of a device failure, RMA or disaster recovery.

Front 50

When would you create a UCS archive?

Back 50

Before and after making changes to a device on both active and standby devices in a HA pair.

Front 51

Which tasks can be automated using the EM?

Back 51

Configuration

Software updates

Cert management

Node Management

Policy Control

Front 52

How does a rotatig archive work?

Back 52

A task can be scheduled to check every week, day, month etc to check current config of devices against the latest backup. If changes have occured, EM takes a backup. Only 10 archives are stored and the oldest is deleted.

Front 53

What happens to a pinned archive in the EM?

Back 53

It will not be deleted unless done so by and admin.

Front 54

There is no way of knowing if a task has failed on a specific device. True or false?

Back 54

False, you can create custom alerts to nitify you or others if a device becomes unreachable or tasks fail etc.

Front 55

By default certificate management is enabled, what are the different flags for? (Red, Yellow, Green)

Back 55

Red = Expired

Yellow = About to expire in 30 days

Green = Cert has at least 30 days left or more

Front 56

Common issues when moving to a new software version are?

Back 56

iRule compatibility

Configuration

Known issues with the release

Front 57

All changes to virtual servers take effect immediately. True or false?

Back 57

False, some settings only apply to new connections made after the chage.