QUESTION: 69

Assume a virtual server is configured with a ClientSSL profile. What would the result be if the virtual server's destination port were not 443?

SSL termination could not be performed if the virtual server's port was not port 443.
Virtual servers with a ClientSSL profile are always configured with a destination port of 443.
As long as client traffic was directed to the alternate port, the virtual server would work as intended.
Since the virtual server is associated with a ClientSSL profile, it will always process traffic sent to port 443.

Answer(s): C

Reveal Solution Next Question

QUESTION: 70

Which statement is true concerning SSL termination?

A virtual server that has both ClientSSL and ServerSSL profiles can still support cookie persistence.
Decrypting traffic at the BIG‐IP allows the use of iRules for traffic management, but increases the load on the pool member.
When any virtual server uses a ClientSSL profile, all SSL traffic sent to the BIG‐IP is decrypted before it is forwarded to servers.
If a virtual server has both a ClientSSL and ServerSSL profile, the pool members have less SSL processing than if the virtual server had only a ClientSSL profile

Answer(s): A

Reveal Solution Next Question

A site wishes to perform source address translation on packets from some clients but not others. The determination is not based on the client's IP address, but on the virtual servers their packets arrive on. What could best accomplish this goal?

A SNAT for all addresses could be defined, and then disable the SNAT processing for select VLANs.
Some virtual servers could be associated with SNAT pools and others not associated with
SNAT pools.
The decision to perform source address translation is always based on VLAN. Thus, the goal cannot be achieved.
The decision to perform source address translation is always based on a client's address (or network). Thus, this goal cannot be achieved.

Answer(s): B

Reveal Solution Next Question

QUESTION: 72

Assume a client's traffic is being processed only by a NAT; no SNAT or virtual server processing takes place. Also assume that the NAT definition specifies a NAT address and an origin address while all other settings are left at their defaults. If a client were to initiate traffic to the NAT address, what changes, if any, would take place when the BIG‐IP processes such packets.

The source address would not change, but the destination address would be translated to the origin address.
The destination address would not change, but the source address would be translated to the origin address.
The source address would not change, but the destination address would be translated to the NAT's address.
The destination address would not change, but the source address would be translated to the NAT's address.

Answer(s): A

Reveal Solution Next Question

Free 201 Exam Braindumps (page: 18)

QUESTION: 69

QUESTION: 70

QUESTION: 71

QUESTION: 72