Determine the Egress Source IP Based on Configuration F5CAB2 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the primary purpose of SNAT (Secure Network Address Translation) on a BIG-IP system?

   • ATo translate the destination IP address of incoming traffic to the pool member's IP address
   • BTo encrypt traffic between the client and the BIG-IP system
   • CTo filter traffic based on source IP address and port
   • DTo translate the source IP address of traffic leaving the BIG-IP to a configured address
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What source IP address does a BIG-IP use for traffic it originates itself, such as a health check to a pool member?

   • AThe virtual server's destination IP address
   • BThe client's source IP address
   • CThe management IP address for all health checks
   • DA self-IP address on the BIG-IP that can route to the pool member
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   A virtual server has no SNAT configuration. A client with IP 203.0.113.5 connects to the virtual server. What source IP will the pool member see?

   • AA self-IP of the BIG-IP
   • B203.0.113.5 (the client's IP)
   • CThe virtual server's destination IP
   • DAn address from a SNAT pool
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A SNAT pool is configured with the IP addresses 172.16.1.10, 172.16.1.11, and 172.16.1.12. A virtual server uses this SNAT pool. A client establishes multiple connections through the virtual server. How does the BIG-IP assign source IPs to these connections?

   • AIt uses a hash of the client IP to select a source IP from the pool.
   • BIt uses the client's original IP if the pool is not reachable.
   • CIt uses the first available IP in the pool for all connections.
   • DIt uses a round-robin method to cycle through the pool IPs.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   An organization has a BIG-IP load balancing multiple internal servers. They need to ensure that traffic from a specific virtual server always egresses from one of three specific IP addresses (10.10.10.10, 10.10.10.11, or 10.10.10.12) to meet firewall allow-list requirements. The firewall team wants to know which IP will be used for each new connection. How should the administrator configure this to meet the requirement?

   • ACreate a SNAT pool with the three IP addresses and assign it to the virtual server.
   • BDisable SNAT on the virtual server to preserve the client IP.
   • CConfigure a SNAT listener with a virtual server destination of 10.10.10.10.
   • DEnable SNAT Automap on the virtual server to use the self-IPs.
   Reveal Solution Discussion Select an answer first