A BIG-IP administrator runs `netstat -an` and sees many connections in the TIME_WAIT state for port 80. What does this indicate about the HTTP service?

The service is actively handling connections that have recently closed.

The service is experiencing a SYN flood attack.

The service is listening but not accepting new connections.

The service is down and not accepting connections.

An administrator sees `tcp 0 0 10.0.0.1:443 10.0.0.2:5000 CLOSE_WAIT` in netstat output. What does this indicate about the connection?

The connection is in TIME_WAIT.

The connection is actively transferring data.

The remote host has closed the connection, and the local application needs to close its side.

The connection is in the process of being established.

A BIG-IP administrator is investigating a security incident. The netstat output shows `tcp 0 0 0.0.0.0:23 0.0.0.0:* LISTEN`. Which service is exposed, and what is a potential concern?

SSH is exposed, which is secure.

FTP is exposed, which is insecure.

Telnet is exposed, which is insecure because it transmits data in clear text.

HTTP is exposed, which is insecure.

A netstat output shows many connections to port 443 in ESTABLISHED state. What does this indicate about the HTTPS service?

The service is listening but not accepting connections

The service is experiencing a connection timeout

The service is actively handling active HTTPS connections

F5Certified Administrator, BIG-IP

Domain 10Objective 2

Infer Services for Given Netstat Output F5CAB4 Practice Questions (Page 3)

Part of the Given a scenario, interpret Service status domain, which makes up ~9% of our current practice bank. F5 does not publish an official question count, but from its 30-minute exam (~10–20 total, ~1–2 in this domain), expect 1–1 from this objective — we provide 18 practice questions to prepare you well beyond it. (estimate)

18questions here

4free pages

4concepts

Questions 11–15

11application · medium
An administrator sees the following netstat output on a BIG-IP system: `tcp 0 0 10.1.1.1:8443 10.1.1.2:54321 ESTABLISHED`. Which service is most likely being accessed?
Select an answer first
12application · medium
A BIG-IP administrator runs `netstat -an` and sees many connections in the TIME_WAIT state for port 80. What does this indicate about the HTTP service?
Select an answer first
13expert · hard
An administrator sees `tcp 0 0 10.0.0.1:443 10.0.0.2:5000 CLOSE_WAIT` in netstat output. What does this indicate about the connection?
Select an answer first
14expert · hard
A BIG-IP administrator is investigating a security incident. The netstat output shows `tcp 0 0 0.0.0.0:23 0.0.0.0:* LISTEN`. Which service is exposed, and what is a potential concern?
Select an answer first
15foundation · medium
A netstat output shows many connections to port 443 in ESTABLISHED state. What does this indicate about the HTTPS service?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to F5CAB4

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “F5CAB4” is a trademark of its owner, used for identification only.