support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. F5
  4. 101

Free 101 Exam Braindumps
Application Delivery Fundamentals Exam Questions 206–210 (page: 43)

Updated On: 9-Feb-2026
Page 43 of 93
PDF with 460 Questions

Select the question you would ask your customer related to DNS attacks. Based on the material, choose the most appropriate question.

  1. How do you secure you DNS infrastructure against attacks?
  2. Do you rely on your network firewall to protect you DNS server?
  3. Do you over-provision your DNS infrastructure?
  4. Do you regularly update BIND or some other DNS application to the latest release?

Answer(s): A



Why does the F5 Application Delivery Firewall solution mitigate SSL attacks more effectively than any other firewalls?

  1. Because F5 has unlimited capacity to handle SSL traffic.
  2. Because F5 has full visibility and control of SSL traffic.
  3. Because F5 has a separate iApp to handle SSL traffic.
  4. Because F5 supports large SSL key sizes.

Answer(s): B



Assume a client's traffic is being processed only by a NAT; no SNAT or virtual server processing takes place. Also assume that the NAT definition specifies a NAT address and an origin address while all other settings are left at their defaults. If the origin server were to initiate traffic via the BIG-IP, what changes, if any, would take place when the BIG-IP processes such packets?

  1. The BIG-IP would drop the request since the traffic didn’t arrive destined to the NAT address.
  2. The source address would not change, but the destination address would be changed to the NAT address.
  3. The source address would be changed to the NAT address and destination address would be left unchanged.
  4. The source address would not change, but the destination address would be changed to a self-IP of the BIG-IP.

Answer(s): C



A site wishes to perform source address translation on packets arriving from the Internet for clients sing some pools but not others. The determination is not based on the client's IP address, but on the pool they are load balanced to. What could best accomplish this goal?

  1. A SNAT for all addresses could be defined, and then disable the SNAT processing for select pools.
  2. The decision to perform source address translation is always based on VLAN. Thus, the goal cannot be achieved.
  3. For each virtual server, regardless their default load balancing pools, association with SNAT pools could vary dependent upon need.
  4. The decision to perform source address translation is always based on a client's address (or network). Thus, this goal cannot be achieved.

Answer(s): A



Which two statements are true about SNATs? (Choose two.)

  1. SNATs are enabled on all VLANs, by default.
  2. SNATs can be configured within a Profile definition.
  3. SNATs can be configured within a Virtual Server definition.
  4. SNAT's are enabled only on the VLAN where origin traffic arrives, by default.

Answer(s): A,C



  PDF
Viewing page 43 of 93
Viewing questions 211 - 215 out of 460 questions


Post your Comments and Discuss F5 101 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!