A company has a pair of F5 BIG-IP devices in an active-standby configuration. They want to enable network layer DoS protection for their external-facing virtual servers. The security team requires that the DoS protection configuration be consistent across both devices to ensure failover does not change protection behavior. What should the administrator do?

Enable DoS protection only on the active device, as the standby will not handle traffic.

Manually configure the DoS protection profiles on both devices with identical settings.

Create the DoS protection profiles on the active device and sync them to the standby device using config sync.

Use a separate DoS profile for each device with different thresholds to account for failover traffic.

What is the primary purpose of SYN cookie protection on an F5 BIG-IP system?

To provide application-layer authentication

To block all TCP traffic from untrusted sources

To mitigate SYN flood attacks by not allocating connection table resources until the handshake is verified

What is the primary purpose of an F5 DoS protection profile for network layer attacks?

To detect and mitigate network layer attacks such as SYN floods, ICMP floods, and UDP floods

To encrypt traffic between clients and servers

To provide high availability by failing over to a standby device

To filter application-layer requests based on URI patterns

F5Certified Solution Expert, Security

Domain 3Objective 1

3.01 Apply Procedural Concepts Required to Configure F5 Technology to Provide Network Layer DOS Protection 401 Practice Questions (Page 2)

Part of the OPERATION AND IMPLEMENTATION domain, which makes up ~38% of our current practice bank. F5 does not publish an official question count, but from its 105-minute exam (~40–70 total, ~15–27 in this domain), expect 2–4 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

7concepts

Questions 6–10

6application · medium
A company has a pair of F5 BIG-IP devices in an active-standby configuration. They want to enable network layer DoS protection for their external-facing virtual servers. The security team requires that the DoS protection configuration be consistent across both devices to ensure failover does not change protection behavior. What should the administrator do?
Select an answer first
7foundation · easy
What is the primary purpose of SYN cookie protection on an F5 BIG-IP system?
Select an answer first
8foundation · easy
Which F5 DoS feature is specifically used to mitigate ICMP flood attacks?
Select an answer first
9foundation · easy
What type of log entry would indicate that a DoS protection profile has taken a mitigation action?
Select an answer first
10foundation · easy
What is the primary purpose of an F5 DoS protection profile for network layer attacks?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 401

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “401” is a trademark of its owner, used for identification only.

3.01 Apply Procedural Concepts Required to Configure F5 Technology to Provide Network Layer DOS Protection 401 Practice Questions (Page 2)

Questions 6–10

What is the primary purpose of SYN cookie protection on an F5 BIG-IP system?

Which F5 DoS feature is specifically used to mitigate ICMP flood attacks?

What type of log entry would indicate that a DoS protection profile has taken a mitigation action?

What is the primary purpose of an F5 DoS protection profile for network layer attacks?

Keep studying — OPERATION AND IMPLEMENTATION