2.04 Recognize the Constraints Imposed by Various SDN Technologies on F5 Components 402 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A security team is implementing micro-segmentation with NSX and wants to use F5 BIG-IP for L7 inspection. They are concerned that the BIG-IP might be bypassed by east-west traffic. What is the best way to ensure all east-west traffic is inspected?

   • ADeploy the BIG-IP in inline mode on each host.
   • BUse the BIG-IP's virtual server as the default gateway for all workloads.
   • CPlace the BIG-IP on the same VLAN as all workloads.
   • DConfigure NSX service chaining to redirect traffic to the BIG-IP.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is a common requirement for integrating F5 components with an SDN controller?

   • AF5 devices must support the controller's API for dynamic provisioning.
   • BF5 devices must run a proprietary controller protocol.
   • CF5 devices must be replaced with virtual appliances.
   • DF5 devices must be managed exclusively through the controller.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company is deploying F5 BIG-IP in a VXLAN overlay to connect containers across multiple hosts. The network team is concerned about the additional latency introduced by VXLAN encapsulation. What is the best way to minimize latency?

   • ADisable VXLAN and use VLANs instead.
   • BIncrease the MTU to 9000 bytes.
   • CPlace the BIG-IP in the underlay network.
   • DUse a hardware VTEP to offload VXLAN encapsulation.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A cloud team is automating F5 BIG-IP deployment using OpenStack Neutron. They need to ensure that the BIG-IP's management IP is reachable from the orchestration layer. Which configuration is required?

   • AConfigure the BIG-IP with a floating IP on the external network.
   • BAttach the BIG-IP to a Neutron network that has a router interface to the management network.
   • CUse the BIG-IP's self-IP as the management IP.
   • DDisable Neutron security groups on the BIG-IP port.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A large enterprise is planning to deploy F5 BIG-IP virtual editions in a VXLAN overlay to support a new microservices architecture. The environment will have high east-west traffic. The performance team is concerned about the CPU overhead of VXLAN encapsulation on the BIG-IP. Which strategy would best mitigate this concern?

   • APlace the BIG-IP in the underlay network and use policy-based routing to redirect traffic.
   • BDeploy the BIG-IP as a service node in the overlay, using hardware VTEPs for encapsulation.
   • CIncrease the number of vCPUs on the BIG-IP VE to handle the encapsulation overhead.
   • DDisable VXLAN and use VLANs to reduce overhead.
   Reveal Solution Discussion Select an answer first