[Nov 06, 2026] F5CAB3 Free Exam Questions with Quality Guaranteed [Q46-Q61]

Rate this post

[Nov 06, 2026] F5CAB3 Free Exam Questions with Quality Guaranteed

F5CAB3 Free Exam Files Downloaded Instantly

F5 F5CAB3 Exam Syllabus Topics:

Topic	Details
Topic 1	Apply procedural concepts required to modify and manage virtual servers: This domain covers managing virtual servers including applying persistence, encryption, and protocol profiles, identifying iApp objects, reporting iRules, and showing pool configurations.
Topic 2	Apply procedural concepts required to modify and manage pools: This domain addresses managing server pools including health monitors, load balancing methods, priority groups, and service port configurations.

NEW QUESTION 46
A virtual server is configured to offload SSL from a pool of backend servers. When users connect to the virtual server, they successfully establish an SSL connection but no content is displayed. A packet trace performed on the server shows that the server receives and responds to the request. What should a BIG-IP Administrator do to resolve the problem? (Choose one answer)

enable Server SSL profile

disable Server SSL profile

disable SNAT

enable SNAT

NEW QUESTION 47
Which type of Virtual Server requires the use of a FastL4 profile?

Performance (Layer 4)

Stateless

Performance (HTTP)

Standard

NEW QUESTION 48
During a high-demand event, the BIG-IP Administrator needs to limit the number of new connections per second to a Virtual Server.
What should be applied?

OneConnect profile

Connection Rate Limit

HTTP Compression profile

Connection Limit

NEW QUESTION 49
A Virtual Server uses an iRule to send traffic to pool members depending on the URI. The BIG-IP Administrator needs to modify the pool member in the iRule.
Which event declaration does the BIG-IP Administrator need to change to accomplish this?

CLIENT_ACCEPTED

HTTP_RESPONSE

HTTP_REQUEST

SERVER_CONNECTED

NEW QUESTION 50
In a pool there are 2 pool members (older servers) that can handle fewer connections than the other 3 newer servers.
Which load balancing method would allow more traffic to be directed to the newer servers? (Choose one answer)

Global Availability

Weighted Least Connections (member)

Round Robin

Least Connections (member)

NEW QUESTION 51
A web server administrator informs the BIG-IP Administrator that web servers currently load-balanced require encrypted traffic. Starting next month, the web server administrator will offload SSL. Starting next month, the BIG-IP device will terminate SSL to reduce web server load. The BIG-IP device is already using Client SSL, Client port, and iRules on HTTP traffic. What actions should the BIG-IP Administrator take to achieve the desired configuration? (Choose one answer)

Remove the server SSL profile and configure the pool members to use HTTP

Remove the client SSL profile and configure the pool members to use HTTP

Remove the server SSL profile and change the Virtual Server to accept HTTP traffic

Remove the client SSL profile and change the Virtual Server to accept HTTP traffic

NEW QUESTION 52
A virtual server is configured to offload SSL from a pool of backend servers. When users connect to the virtual server, they successfully establish an SSL connection but no content is displayed. A packet trace performed on the server shows that the server receives and responds to the request. What should a BIG-IP Administrator do to resolve the problem?

enable Server SSL profile

enable SNAT

disable Server SSL profile

disable SNAT

NEW QUESTION 53
Which Virtual Server type prevents the use of a default pool?

Performance (Layer 4)

Forwarding (IP)

Performance (HTTP)

Standard

NEW QUESTION 54
Application administrators are reporting that nodes different from those configured in the pool are selected.
The use of an iRule is suspected.
How can the BIG-IP Administrator check if an iRule is used for this traffic? (Choose two answers)

Via TMSH with the list /ltm rule <irule> command.

Via the GUI at the Resources tab for the virtual server.

Via TMSH with the list /ltm virtual <virtual_server> command.

Via the GUI at the iRule tab for the virtual server.

NEW QUESTION 55
In a pool there are 2 pool members out of the 5 members that are older servers. The number of connections these can handle is less than the other 3 pool members. Which load balancing method would allow more traffic to be directed to the newer servers? (Choose one answer)

Global Availability

Weighted Least Connections (member)

Round Robin

Least Connections (member)

NEW QUESTION 56
Which persistence profile would be the most appropriate to ensure an HTTP web request connects to the same pool member? (Choose one answer)

Destination address

Cookie persistence

SSL persistence

Hash persistence

NEW QUESTION 57
A BIG-IP Administrator uses backend servers to host multiple services per server. There are multiple virtual servers and pools defined, referencing the same backend servers.
Which load balancing algorithm is most appropriate to have an equal number of connections on each backend server?

Least Connections (member)

Least Connections (node)

Predictive (member)

Predictive (node)

NEW QUESTION 58
Refer to the exhibit.

A BIG-IP Administrator configures a new VLAN on an HA pair of devices that does NOT yet have any traffic. This action causes the assigned traffic group to fail over to the standby device. Which VLAN setting should be changed to prevent this issue?

Auto Last Hop

Source Check

Fail-safe

Customer Tag

NEW QUESTION 59
The BIG-IP Administrator has configured an HTTP health monitor applied to a Pool of HTTP web servers hosting www.f5.com, but all Pool Members show a DOWN status. The web server is returning a response of ‘
400 Bad Request ‘ . What would be the correct monitor Send string?

GET /healthmonitor.html HTTP/1.1 rnConnection: Closern

GET /healthmonitor.html HTTP/1.1 Connection: Close

GET /healthmonitor.html HTTP/1.1 rnHost: www.f5.comrnConnection: Closernrn

GET /healthmonitor.html HTTP/1.1rnConnection: Closernrn

NEW QUESTION 60
A BIG-IP Administrator creates a new Virtual Server. The end user is unable to access the page. During troubleshooting, the administrator learns that the connection between the BIG-IP system and server is NOT set up correctly. What should the administrator do to solve this issue? (Choose one answer)

Disable Address Translation

Set Address Translation to Auto Map, configure a SNAT pool, and have pool members in the same subnet as the servers

Set Address Translation to SNAT and configure a specific translation address

Set Address Translation to SNAT and have a self-IP configured in the same subnet as the servers

The issue described is a classic symptom of asymmetric routing, which frequently occurs when the BIG-IP system and the back-end servers reside on the same subnet (often referred to as a “one-arm” deployment).
* The Routing Problem: By default, the BIG-IP system preserves the original client source IP address when forwarding traffic to a pool member. If the server is in the same subnet as the client or if the server’s default gateway is not the BIG-IP, the server will attempt to send its response directly back to the client’s IP address, bypassing the BIG-IP.
* Stateful Failure: Since the BIG-IP is a Full Proxy, it maintains a state table. Because the response packet never returns through the BIG-IP, the system cannot complete the three-way handshake or manage the application session, resulting in a connection failure for the user.
* The Solution (SNAT): Enabling Source Network Address Translation (SNAT) solves this by changing the source IP address of the request to an IP address owned by the BIG-IP (typically a self-IP).
* Requirement for Subnet Alignment: To ensure the server sends the response back to the BIG-IP, the translation address must be reachable. By using a self-IP configured in the same subnet as the servers, the BIG-IP ensures that the server sees the request coming from a local “neighbor.” The server will then naturally send the response back to that self-IP, allowing the BIG-IP to translate the packet back and forward it to the client.
Why other options are incorrect:
* A: Disabling address translation would ensure the server-side traffic uses the client IP, making asymmetric routing inevitable in this scenario.
* B: This is technically contradictory; “Auto Map” specifically uses existing self-IPs and does not require or use a “SNAT pool” configuration.
* C: While using a specific translation address can work, it does not inherently guarantee the Layer 2
/Layer 3 reachability mentioned in the scenario as effectively as ensuring the self-IP is correctly placed in the server’s subnet.

NEW QUESTION 61
A BIG-IP Administrator creates a new Virtual Server to load balance SSH traffic. Users are unable to log on to the servers.
What should the BIG-IP Administrator do to resolve the issue?

Set Protocol to UDP

Set HTTP Profile to None

Set Source Address to 10.1.1.2

Set Destination Address/Mask to 0.0.0.0/0