F5 Networks Exam 201 Topic 10 Question 89 Discussion

Actual exam question for F5 Networks's 201 exam

Question #: 89
Topic #: 10

[All 201 Questions]

A BIG-IP device is configured with both an internal external and two Corporate VLANs. The virtual server

has SNAT enabled and is set to listen on all VLANs Auto Last Hop is disabled. The Corporate users are on

10.0.0.0./24 and 172.16.0.0/12. The BIG-IP has a Self-IP on the 1.0.0.0.0./24 subnet.

Internet users are able to access the virtual server. Only some of the Corporate users are able to connect

to the virtual server A BIG-IP Administrator performs a tcpdump on the BIG-IP and verifies that traffic is

arriving from users in 10.0.0.0/24.

What should the BIG-IP Administrator do to correct this behaviour?

ADisable the server on the internal VLAN

BAdd a static route for the 172.16.0.0/12 subnet

CChange the default route to point to the extra firewall

DModify the default route of the servers to point to the BIG-IP device

Show Suggested Answer

Suggested Answer: C

by Paola at Jun 01, 2024, 11:02 AM

Limited Time Offer

25%

Off

Get Premium 201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rossana

15 days ago

This question is making my head spin like a BIG-IP device on a dance floor. But I think the answer is clear - add that static route and get those corporate users back on track. And remember, always keep your SNAT enabled, unless you want your virtual server to be a wallflower.

upvoted 0 times

...

Paulina

18 days ago

As a BIG-IP administrator, I'd be tempted to add a static route for the 172.16.0.0/12 subnet. It's the simplest and most direct solution to the problem. But hey, maybe the extra firewall is actually a giant hamster wheel. You never know!

upvoted 0 times

...

Von

20 days ago

Changing the default route to point to the extra firewall might not be the best approach, as that could introduce additional complexity and potential points of failure. The static route for the 172.16.0.0/12 subnet seems like the most straightforward solution.

upvoted 0 times

Lashaunda

3 days ago

B) Add a static route for the 172.16.0.0/12 subnet

upvoted 0 times

...

Lynelle

26 days ago

Disabling the server on the internal VLAN doesn't sound like the right solution. I think the administrator should modify the default route of the servers to point to the BIG-IP device, which should help resolve the issue.

upvoted 0 times

...

2 months ago

I think the BIG-IP Administrator should add a static route for the 172.16.0.0/12 subnet.

upvoted 0 times

...