F5CAB3 VCE Exam Download

A red diamond indicates that the Virtual Server is enabled but unavailable, typically due to all pool members being down.

From the exhibit, the pool containsdifferent applications on different service ports(for example, HTTP/80, FTP/21, HTTPS/443, SSH/22). To mark pool members correctly, BIG-IP must be able to verify theactual servicerunning on each member’s port.

InBIG-IP Administration: Data Plane Configuration, monitor behavior is described as follows:

Whenmultiple monitorsare assigned to a pool, theAvailability Requirementcontrols how monitor results are evaluated:

At least one= the pool member is markedupifany oneof the assigned monitors succeeds.

All= the pool member is markeduponly ifeveryassigned monitor succeeds.

For pools containing members with different services/ports, usingAllcan incorrectly mark members down because monitors intended for other services will fail on the wrong port.

WhyCis correct:

AssigningHTTPS, HTTP, FTP, and SSHcovers the actual services shown in the pool.

Setting the Availability Requirement toat least oneensures that each pool member is consideredavailablewhen itsappropriateservice monitor succeeds, without being forced to pass unrelated service monitors.

Why the other options are incorrect:

A / D (Availability Requirement = all):would cause members to be markeddownwhen unrelated monitors fail (e.g., SSH monitor against an HTTP member).

B (includes ICMP):ICMP can indicate the host is reachable even if theapplication service is down, which does not “accurately” reflect service availability.

Therefore, the best choice isHTTPS, HTTP, FTP, and SSHwith Availability Requirement ofat least onehealth monitor.

APerformance (Layer 4)virtual server does not inspect or process application-layer data such as HTTP headers or cookies. Therefore, onlyLayer 4–compatible persistence methodscan be used.

According to theBIG-IP Administration: Data Plane Configurationdocumentation:

Source Address Affinity persistenceoperates at Layer 4 and uses the client IP address to maintain session persistence.

It is fully compatible with Performance (Layer 4) virtual servers.

It works regardless of encryption, making it suitable forTLS-secured applications.

Why the other options are incorrect:

B. Cookie persistenceRequires an HTTP profile and Layer 7 inspection, which is not supported on Performance virtual servers.

C. Microsoft RDP persistenceIs protocol-specific and not applicable to web-based TLS traffic.

D. Host persistenceRequires HTTP host header inspection, which is not available at Layer 4.

Correct Resolution:

Source Address Affinity persistenceis the appropriate choice for maintaining persistence on a Performance (Layer 4) virtual server handling TLS traffic.

Below isBatch 1 (Questions 1–10)extractedonlyfrom your uploaded document that aredirectly related toBIG-IP Administration: Data Plane Configurationtopics(Virtual Servers, Pools, Load Balancing, Monitors, Persistence, SNAT, Profiles).

I haveexcluded system-only, licensing, support, hardware, HA management-only, and admin UI questionsthat arenot Data Plane–focused.

Source: Your uploadedTMOS Administration v2.0document

✅BATCH 1 (10 Questions)

In BIG-IP systems,iRules influence traffic only when they are attached to a Virtual Server. If application traffic is being sent tonodes or pool members that are not defined in the pool, this typically indicates that an iRule is overriding the default load-balancing behavior by explicitly selecting a pool or node.

According toBIG-IP Administration: Data Plane Configurationand official F5 guidance:

iRules areassociated with Virtual Servers, not directly with pools or nodes.

To determine whether an iRule is actively affecting traffic, the administrator must inspect theVirtual Server configuration.

Explanation of the correct answers:

B. Via the GUI at the Resources tab for the virtual serverTheResourcestab in the Configuration Utility displays all traffic-handling objects applied to the Virtual Server, includingassigned iRules. This is the primary GUI location to verify whether an iRule is influencing data plane traffic.

C. Via TMSH with the list /ltm virtual <virtual_server> commandThis TMSH command displays the full Virtual Server configuration, including anyiRules listed under the rules section. It is the authoritative CLI method to confirm iRule usage.

Why the other options are incorrect:

A. Via TMSH with the list /ltm rule <irule> commandThis command only shows the contents of an iRule and does not indicate whether the iRule is attached to or used by any Virtual Server.

D. Via the GUI at the iRule tab for the virtual serverBIG-IP does not provide a dedicated “iRule” tab on Virtual Servers. iRules are viewed and managed under theResourcestab.

Correct Conclusion:

To verify whether an iRule is responsible for unexpected node selection, the BIG-IP Administrator must examine theVirtual Server configuration, either through theResources tab in the GUIor by usingTMSH to list the Virtual Server configuration.