A hospital's patient portal is protected by a DDoS protection profile on BIG-IP. After a suspected attack, the security administrator needs to determine whether the DDoS vectors triggered and which actions were taken. Where should the administrator look to verify the DDoS vector events?

BIG-IP DDoS dashboard and security logs

BIG-IP network map and ARP table

When configuring a DDoS protection profile in BIG-IP, what is the purpose of setting an 'action' for a specific vector?

To set the logging level for the vector

To define the source IP address of the attacker

To define what the system does when the threshold is exceeded

To specify which virtual servers the profile applies to

What is the primary goal of tuning DDoS vector thresholds in BIG-IP?

To balance protection against attacks with the performance of legitimate traffic

To increase the number of virtual servers that can be protected

To eliminate the need for other security devices

To reduce the amount of logging generated by the system

A BIG-IP administrator has configured a DDoS protection profile with SYN flood mitigation. To protect a public-facing web application, where should this profile be applied?

To the virtual server that hosts the web application

To the default gateway of the network

To the pool members of the web application

To the management interface of the BIG-IP

F5Certified Administrator, BIG-IP

Domain 1Objective 4

Configure DDOS Vectors F5CAB1 Practice Questions (Page 4)

Part of the Securing BIG-IP domain, which makes up ~29% of our current practice bank. F5 does not publish an official question count, but from its 30-minute exam (~10–20 total, ~3–6 in this domain), expect 1–1 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

5concepts

Questions 16–20

16application · medium
A hospital's patient portal is protected by a DDoS protection profile on BIG-IP. After a suspected attack, the security administrator needs to determine whether the DDoS vectors triggered and which actions were taken. Where should the administrator look to verify the DDoS vector events?
Select an answer first
17foundation · easy
When configuring a DDoS protection profile in BIG-IP, what is the purpose of setting an 'action' for a specific vector?
Select an answer first
18foundation · easy
An attacker sends a large number of DNS queries with spoofed source addresses to open resolvers, causing them to send large responses to the victim. Which DDoS attack vector does this describe?
Select an answer first
19foundation · easy
What is the primary goal of tuning DDoS vector thresholds in BIG-IP?
Select an answer first
20foundation · easy
A BIG-IP administrator has configured a DDoS protection profile with SYN flood mitigation. To protect a public-facing web application, where should this profile be applied?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to F5CAB1

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “F5CAB1” is a trademark of its owner, used for identification only.