F5 F5201 Practice Test

F5201 practice test: what's covered

• TMOS Administration (BIG-IP)

Free F5201 sample questions

1. During a design review, an engineer must explain what TMOS provides as the foundation of every BIG-IP module. Which description is accurate?

   • A. A general-purpose Linux server distribution that runs unmodified web applications directly on the appliance
   • B. F5's purpose-built operating system that handles application delivery, traffic management, and security across all modules
   • C. A standalone DNS resolver that only answers recursive queries for internal client subnets
   • D. A virtualization hypervisor whose sole job is to host third-party guest operating systems
   Show answer

   Correct: B. TMOS (Traffic Management Operating System) is the unified platform underpinning LTM, AFM, ASM, APM, and DNS. It is not a generic Linux distro, because the data plane runs in the dedicated TMM process; it is not merely a DNS resolver or a hypervisor, which describe unrelated products.

2. A customer wants load balancing, SSL offload, persistence, and health monitoring at Layers 4 through 7. Which BIG-IP module delivers these core ADC functions?

   • A. Advanced Firewall Manager, which enforces stateful L3/L4 network firewall policy
   • B. Local Traffic Manager, the foundational module providing application delivery and traffic management
   • C. Access Policy Manager, which provides identity-aware secure remote access
   • D. Application Security Manager, which inspects HTTP payloads for OWASP attacks
   Show answer

   Correct: B. LTM is the foundational ADC module delivering load balancing, SSL offload, persistence, and monitors. AFM is a network firewall, APM provides access/VPN services, and ASM is a web application firewall, so none of those match the described feature set.

3. A security team needs a stateful Layer 3/4 network firewall integrated directly into the BIG-IP in front of LTM virtual servers. Which module should they provision?

   • A. Advanced Firewall Manager (AFM) for stateful network firewall enforcement
   • B. Application Security Manager (ASM) for Layer 7 web protection
   • C. Access Policy Manager (APM) for SSL VPN and SSO
   • D. Local Traffic Manager (LTM) for connection load balancing
   Show answer

   Correct: A. AFM is F5's network firewall enforcing stateful L3/L4 policy and is commonly layered in front of virtual servers. ASM operates at Layer 7, APM handles access/identity, and LTM is the load balancer, so they do not provide network firewall policy.

4. After a series of injection attacks, a team must protect public web applications against the OWASP Top 10 and malicious bots at Layer 7. Which BIG-IP module fits?

   • A. Local Traffic Manager performing connection-level load balancing only
   • B. Application Security Manager (Advanced WAF) protecting web apps at Layer 7
   • C. Advanced Firewall Manager enforcing packet filtering at Layer 4
   • D. DNS module performing wide-IP global server load balancing
   Show answer

   Correct: B. ASM, now branded F5 Advanced WAF, defends against OWASP Top 10, bots, and L7 DoS by inspecting HTTP. LTM only load balances, AFM is an L3/L4 firewall, and DNS does global load balancing, so none provides web application firewall protection.

5. An organization wants to publish internal applications through an identity-aware portal with SSL VPN, authentication, and single sign-on. Which module provides this?

   • A. Access Policy Manager (APM) delivering identity-aware secure access
   • B. Local Traffic Manager (LTM) providing only Layer 4 load balancing
   • C. Advanced Firewall Manager (AFM) providing stateful packet filtering
   • D. Application Security Manager (ASM) providing web application firewalling
   Show answer

   Correct: A. APM is F5's access proxy providing SSL VPN, authentication, SSO, and portal access. LTM only load balances, AFM is a network firewall, and ASM is a WAF, so none of them deliver identity-aware access policies and remote access.

Last updated: 2026-10-19

F5201 practice test FAQ

Related practice tests

• F5 F5101 practice test
• F5 F5301 practice test
• F5 F5-302 practice test
• F5 F5-303 practice test
• F5 F5-304 practice test