Which iRule statement demotes a virtual server from CMP?

[ class match $HTTP_CONTENT contains my_data_class ]

What is the effect of an iRule error such as referencing an undefined variable?

The iRule execution will be terminated, and both the client and server side connections will be reset.

The iRule execution will continue with the next statement.

The execution of the current event within the iRule will be terminated.

The iRule execution will be terminated, and both the client and server side connections will be reset.

The connection will continue, but the iRule will NOT be executed again for the lifetime of the connection.

when CLIENT_ACCEPTED {if { [matchclass [IP::client_addr] equals WebClient1-Whitelist1] }{#log local0. 'Valid client IP: [IP::client_addr] - forwarding traffic'#Pool WebClient1} else {log local0. 'Invalid client IP: [IP::client_addr] - discarding'discard}}What does the following iRule do?

The iRule compares a client IP to a list. If the client IP is NOT on the list, discard and log the discard.

The iRule compares a client IP to a list. If the client IP is on the list, discard and log the discard.

The iRule compares a client IP to a list. If the client IP is NOT on the list, discard and log the discard.

The iRule compares a client IP to a list. If the client IP is on the list, the client is sent to Pool WebClient1. Otherwise, discard and log the discard.

The iRule compares a client IP to a list. If the client IP is NOT on the list, the client is sent to Pool WebClient1. Otherwise, discard and log the discard.

set hsl [HSL::open -proto UDP -pool syslog_server_pool]HSL::send $hsl '<190> [HTTP::host] from [whereis [IP::client_addr] country continent state city zip] , IP: [IP::client_addr]'What do the following iRule commands do when they are used in the same iRule?

The commands set up a high-speed logging connection and then send the host header and client geographical detail to the connection.

The commands set up a high-speed logging connection and then send the geographical database to the server.

The commands set up a high-speed logging connection and then send the host header and client geographical detail to the connection.

The commands set up a high-speed logging connection and then send the host header, HTTP payload, and client geographical detail to the connection.

The commands set up a high-speed logging connection to the LTM device and then send the host header and client geographical detail to the connection.

Given the iRule:when HTTP_REQUEST {if {([HTTP::username] ne '') and ([HTTP::password] ne '') } {log local0. 'client ip [IP::remote_addr] credentials provided [HTTP::username] [HTTP::password]'}else {pool old_application_pool}}The associated virtual server has a default pool named new_application_pool.Which functionality does the iRule provide?

Allows clients without credentials to access the old_application_pool and logs the access of clients with credentials to the new_application_pool.

Allows clients with credentials to access the old_application_pool and logs the access of clients without credentials to the new_application_pool.

Allows clients without credentials to access the old_application_pool and logs the access of clients with credentials to the new_application_pool.

Allows clients with credentials to access the old_application_pool and logs the attempted access of clients with credentials to the new_application_pool.

Allows clients without credentials to access the old_application_pool and logs the attempted access of clients without credentials to the new_application_pool.

A web developer has created a custom HTTP call to a backend application. The HTTP headers being sent by the HTTP call are:GET / HTTP/1.1User-Agent: MyCustomApp (v1.0)Accept: text/htmlCache-Control: no-cacheConnection: keep-aliveCookiE. somecookie=1The backend server is responding with the following:HTTP/1.1 400 Bad RequestDatE. Wed, 20 Jul 2012 17:22:41 GMTConnection: closeWhy is the HTTP web server responding with a HTTP 400 Bad Request?

The client request does NOT include a Host header.

The User-Agent header contains an invalid character.

The web server is NOT expecting a keep-alive connection.

The web server is configured to accept HTTP 1.0 requests only.

A client is attempting to log in to a web application that requires authentication. The following HTTP headers are sent by the client:GET /owa/ HTTP/1.1Authorization: Basic dXNlcm5hbWU6cGFzc3dvcmQ=User-Agent: curl/7.26.0Host: 10.0.0.14Accept: */*Accept-EncodinG. gzip,deflateThe web server is responding with the following HTTP headers:HTTP/1.1 401 UnauthorizedContent-TypE. text/htmlServer: Microsoft-IIS/7.5WWW-AuthenticatE. NTLMDatE. Wed, 16 Aug 1977 19:12:31 GMTContent-LengtH. 1293The client has checked the login credentials and believes the correct details are being entered.What is the reason the destination web server is sending an HTTP 401 response?

The wrong authentication mechanism is being used.

The username and password are incorrect.

The server has an incorrect date configured.

The client is using the wrong type of browser.

The wrong authentication mechanism is being used.

The LTM device is configured to provide load balancing to a set of web servers that implement access control lists (ACL) based on the source IP address of the client. The ACL is at the network level and the web server is configured to send a TCP reset back to the client if it is NOT permitted to connect.The virtual server is configured with the default OneConnect profile.The ACL is defined on the web server as:Permit: 192.168.136.0/24Deny: 192.168.116.0/24The packet capture is taken of two individual client flows to a virtual server with IP address 192.168.136.100.Client A - Src IP 192.168.136.1 - Virtual Server 192.168.136.100:Clientside:09:35:11.073623 IP 192.168.136.1.55684 > 192.168.136.100.80: S 869998901:869998901(0) win 8192 <mss 1460,nop,wscale 2,nop,nop,sackOK>09:35:11.073931 IP 192.168.136.100.80 > 192.168.136.1.55684: S 2273668949:2273668949(0) ack 869998902 win 4380 <mss 1460,nop,wscale 0,sackOK,eol>09:35:11.074928 IP 192.168.136.1.55684 > 192.168.136.100.80: . ack 1 win 1642509:35:11.080936 IP 192.168.136.1.55684 > 192.168.136.100.80: P 1:299(298) ack 1 win 1642509:35:11.081029 IP 192.168.136.100.80 > 192.168.136.1.55684: . ack 299 win 4678Serverside:09:35:11.081022 IP 192.168.136.1.55684 > 192.168.116.128.80: S 685865802:685865802(0) win 4380 <mss 1460,nop,wscale 0,sackOK,eol>09:35:11.081928 IP 192.168.116.128.80 > 192.168.136.1.55684: S 4193259095:4193259095(0) ack 685865803 win 5840 <mss 1460,nop,nop,sackOK,nop,wscale 6>09:35:11.081943 IP 192.168.136.1.55684 > 192.168.116.128.80: . ack 1 win 438009:35:11.081955 IP 192.168.136.1.55684 > 192.168.116.128.80: P 1:299(298) ack 1 win 438009:35:11.083765 IP 192.168.116.128.80 > 192.168.136.1.55684: . ack 299 win 108Client B - Src IP 192.168.116.1 - Virtual Server 192.168.136.100:Clientside:09:36:11.244040 IP 192.168.116.1.55769 > 192.168.136.100.80: S 3320618938:3320618938(0) win 8192 <mss 1460,nop,wscale 2,nop,nop,sackOK>09:36:11.244152 IP 192.168.136.100.80 > 192.168.116.1.55769: S 3878120666:3878120666(0) ack 3320618939 win 4380 <mss 1460,nop,wscale 0,sackOK,eol>09:36:11.244839 IP 192.168.116.1.55769 > 192.168.136.100.80: . ack 1 win 1642509:36:11.245830 IP 192.168.116.1.55769 > 192.168.136.100.80: P 1:299(298) ack 1 win 1642509:36:11.245922 IP 192.168.136.100.80 > 192.168.116.1.55769: . ack 299 win 4678Serverside:09:36:11.245940 IP 192.168.136.1.55684 > 192.168.116.128.80: P 599:897(298) ack 4525 win 890409:36:11.247847 IP 192.168.116.128.80 > 192.168.136.1.55684: P 4525:5001(476) ack 897 win 142Why was the second client flow permitted by the web server?

The idle TCP session from the first client was re-used.

SNAT automap was enabled on the virtual server.

The idle TCP session from the first client was re-used.

A source address persistence profile is assigned to the virtual server.

An LTM Specialist is troubleshooting an HTTP monitor. The pool member is accessible directly through a browser, but the HTTP monitor is marking the pool member as down.GET / HTTP/1.1HTTP/1.1 400 Bad RequestDatE. Tue, 23 Oct 2012 21:39:07 GTMServer: Apache/2.2.22 (FreeBSD) PHP/5.4.4mod_ssl/2.2.22 OpenSSL/0.9.8q DAV/2Content-LengtH. 226Connection: closeContent-TypE. text/html; charset=iso-8859-1Which issue is the pool member having?

The pool member is rejecting the request because it is invalid.

The pool member has too many concurrent connections.

The pool member is rejecting the request because it is invalid.

The pool member lacks the object requested by the monitor.

The pool member is NOT accepting requests from the LTM device IP address.

An LTM Specialist is troubleshooting an issue with a new virtual server. When connecting through the virtual server, clients receive the message 'Unable to connect' in the browser, although connections directly to the pool member show the application is functioning correctly. The LTM device configuration is:ltm virtual /Common/vs_https {destination /Common/10.10.1.110:443ip-protocol udpmask 255.255.255.255pool /Common/pool_httpsprofiles {/Common/udp { }}translate-address enabledtranslate-port enabledvlans-disabled}ltm pool /Common/pool_https {members {/Common/172.16.20.1:443 {address 172.16.20.1}}}What issue is the LTM Specialist experiencing?

The virtual server is configured for the incorrect protocol.

The virtual server is disabled on all VLANs.

The pool member is marked down by a monitor.

The pool member is marked down administratively.

The virtual server is configured for the incorrect protocol.

An LTM Specialist configured a virtual server to load balance a custom application. The application works when it is tested from within the firewall but it fails when tested externally. The pool member address is 192.168.200.10:80. A capture from an external client shows:GET /index.jsp HTTP/1.1Host: 207.206.201.100User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:15.0) Gecko/20100101 Firefox/15.0.1Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8Connection: keep-aliveHTTP/1.1 302 FoundDatE. Wed, 17 Oct 2012 23:09:55 GMTServer: Apache/2.2.15 (CentOS)Location: http://192.168.200.10/user/home.jspContent-LengtH. 304Connection: closeWhat is the solution to this issue?

Configure redirect rewrite option in the HTTP profile.

Assign a SNAT pool to the virtual server.

Add a Web Acceleration Profile to the virtual server.

Configure redirect rewrite option in the HTTP profile.

Configure a content filter on the backend web server.

There are three servers in the pool: 172.16.20.1, 172.16.20.2, and 172.16.20.3, with the virtual IP address 10.0.20.88.A user CANNOT connect to an HTTP application. To understand the problem and find a solution, the LTM Specialist runs two concurrent traces on the LTM device, with the following results:Trace on client side:tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on 0.0, link-type EN10MB (Ethernet), capture size 96 bytes22:22:07.423759 IP 172.16.20.100.53875 > 10.0.20.88.80: S 998346084:998346084(0) win 5840 <mss 1460,sackOK,timestamp 67942058 0,nop,wscale 4>22:22:07.424056 IP 10.0.20.88.80 > 172.16.20.100.53875: S 4671780:4671780(0) ack 998346085 win 4380 <mss 1460,nop,wscale 0,nop,nop,timestamp 2392362490 67942058,sackOK,eol>22:22:07.424776 IP 172.16.20.100.53875 > 10.0.20.88.80: . ack 1 win 365 <nop,nop,timestamp 67942058 2392362490>22:22:07.424790 IP 172.16.20.100.53875 > 10.0.20.88.80: P 1:149(148) ack 1 win 365 <nop,nop,timestamp 67942058 2392362490>22:22:07.424891 IP 10.0.20.88.80 > 172.16.20.100.53875: . ack 149 win 4528 <nop,nop,timestamp 2392362491 67942058>22:22:12.024850 IP 10.0.20.88.80 > 172.16.20.100.53875: R 1:1(0) ack 149 win 45286 packets captured6 packets received by filter0 packets dropped by kernelTrace on server side:tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on internal, link-type EN10MB (Ethernet), capture size 96 bytes22:22:07.424881 IP 172.16.20.100.53875 > 172.16.20.2.80: S 51116678:51116678(0) win 4380 <mss 1460,nop,wscale 0,nop,nop,timestamp 2392362491 0,sackOK,eol>22:22:08.424893 IP 172.16.20.100.53875 > 172.16.20.2.80: S 51116678:51116678(0) win 4380 <mss 1460,nop,wscale 0,nop,nop,timestamp 2392363491 0,sackOK,eol>22:22:09.625082 IP 172.16.20.100.53875 > 172.16.20.2.80: S 51116678:51116678(0) win 4380 <mss 1460,nop,wscale 0,nop,nop,timestamp 2392364691 0,sackOK,eol>22:22:10.825194 IP 172.16.20.100.53875 > 172.16.20.2.80: S 51116678:51116678(0) win 4380 <mss 1460,sackOK,eol>4 packets captured4 packets received by filter0 packets dropped by kernelWhat should the LTM Specialist do to solve the problem?

Configure the virtual server to use SNAT.

Modify the monitor of the pool.

Configure the virtual server to use SNAT.

An LTM Specialist is troubleshooting an HTTP monitor. The pool member is accessible directly through a browser, but the HTTP monitor is marking the pool member as down.GET / HTTP/1.1HTTP/1.1 400 Bad RequestDatE. Tue, 23 Oct 2012 21:39:07 GTMServer: Apache/2.2.22 (FreeBSD) PHP/5.4.4mod_ssl/2.2.22 OpenSSL/0.9.8q DAV/2Content-LengtH. 226Connection: closeContent-TypE. text/html; charset=iso-8859-1How should the LTM Specialist resolve this issue?

Change the HTTP version in the send string from HTTP/1.1 to HTTP/1.0.

Add '200 OK' to the monitor's receive string.

Add 'Connection: close\r\n' to the monitor's send string.

Change the interval on the monitor from 5 seconds to 30 seconds.

Change the HTTP version in the send string from HTTP/1.1 to HTTP/1.0.

An LTM Specialist is troubleshooting an issue with a new virtual server. When connecting through the virtual server, clients receive the message 'The connection was reset' in the browser, although connections directly to the pool member show the application is functioning correctly.ltm pool srv1_https_pool {members {192.168.2.1:https{address 192.168.2.1}}}ltm virtual https_example_vs {destination 192.168.1.155:httpsip-protocol tcpmask 255.255.255.255pool srv1_https_poolprofiles {http { }tcp { }}snat automapvlans-disabled}How should the LTM Specialist resolve this issue?

Remove the HTTP profile from the virtual server.

Enable HTTP monitoring on the pool.

Add a ClientSSL profile to the virtual server.

Disable SNAT Automap on the virtual server.

Remove the HTTP profile from the virtual server.

An LTM Specialist loads a UCS file generated on a different LTM device and receives the following error message:'mcpd[2395]: 01070608:0: License is not operational (expired or digital signature does not match contents)'Which command should the LTM Specialist use to prevent the error?

bigpipe config save /config.ucs

These log entries can have different root causes:Jun 28 05:01:21 LTM_A notice mcpd[27545]: 0107143a:5: CMI reconnect timer: enabledJun 28 05:01:21 LTM_A notice mcpd[27545]: 01071431:5: Attempting to connect to CMI peer 1.1.1.2 port 6699Jun 28 05:01:21 LTM_A notice mcpd[27545]: 01071432:5: CMI peer connection established to 1.1.1.2 port 6699Jun 28 05:01:26 LTM_A notice mcpd[27545]: 0107143a:5: CMI reconnect timer: disabled, all peers are connectedWhich two commands should be used to obtain additional information on these entries? (Choose two.)

tmsh modify /sys db log.mcpd.level value debug

tmsh modify /sys db log.cmi.level value debug

An LTM Specialist wants to allow access to the Always On Management (AOM) from the network.Which two methods should the LTM Specialist use to configure the AOM interface? (Choose two.)

Choose the network configurator in the AOM menu on the serial port.

Log in to the Host via ssh, 'ssh aom', and modify the network configuration file.

Configure the AOM IP from the front panel buttons and LCD .

Choose the network configurator in the AOM menu on the serial port.

Configure the AOM network address in the GUI under System>Platform.

Log in to the Host via ssh, 'ssh aom', and modify the network configuration file.

An LTM Specialist troubleshooting an issue looks at the following /var/log/ltm entries:Oct 2 04:52:42 slot1/tmm7 crit tmm7[21734]: 01010201:2: Inet port exhaustion on 10.143.109.5 to 10.143.147.150:53 (proto 17)Oct 2 05:37:16 slot1/tmm7 crit tmm7[21734]: 01010201:2: Inet port exhaustion on 10.143.109.5 to 10.143.147.150:53 (proto 17)Oct 2 05:57:32 slot1/tmm2 crit tmm2[21729]: 01010201:2: Inet port exhaustion on 10.143.109.5 to 10.143.147.150:53 (proto 17)Oct 2 06:30:03 slot1/tmm7 crit tmm7[21734]: 01010201:2: Inet port exhaustion on 10.143.109.5 to 10.143.147.150:53 (proto 17)Oct 2 06:37:44 slot1/tmm2 crit tmm2[21729]: 01010201:2: Inet port exhaustion on 10.143.109.5 to 10.143.147.150:53 (proto 17)Oct 2 06:47:05 slot1/tmm5 crit tmm5[21732]: 01010201:2: Inet port exhaustion on 10.143.109.5 to 10.143.147.150:53 (proto 17)Which configuration item should the LTM Specialist review to fix the issue?

Virtual Server Port Translation

Which command will identify the active LTM device currently handling client traffic?

tmsh show /sys ha-status all-properties

Which command line interface command will check if the BIG-IP platform contains a packet velocity ASIC (PVA)?

tmsh show /sys hardware | grep -i pva

bigpipe platform show | grep -i pva

tmsh show /sys hardware pva status

tmsh show /sys hardware | grep -i pva

tmsh show /ltm hardware | grep -i pva

A BIG-IP Operator has made a grave error and deleted a few virtual servers on the active LTM device fronting the web browsing proxies. The BIG-IP Operator has NOT yet performed a configuration sync.Which command should the LTM Specialist execute on the active LTM device to force a failover to the standby node and restore web browsing?

tmsh /sys failover status standby

tmsh run /sys failover status standby

The output of a tmsh command is: ------------------------------------------------------------ Net::Interface Name Status Bits Bits Errs Errs Drops Drops Colli In Out In Out In Out sions ------------------------------------------------------------ 1.1 down 0 0 0 0 0 0 0 1.2 up 191.4K 0 0 0 374 0 0 1.3 down 0 0 0 0 0 0 0 1.4 up 22.5K 0 0 0 44 0 0 2.1 miss 0 0 0 0 0 0 0 2.2 miss 0 0 0 0 0 0 0 mgmt up 43.2G 160.0G 0 0 0 0 0Which command was executed on the LTM device to show the output?

tmsh /net show interface status

tmsh show /net interface status

The LTM device is configured for RADIUS authentication. Remote logins are failing and the LTM Specialist must verify the RADIUS configuration.How should the LTM Specialist check the RADIUS server and shared secret configured on the LTM device?

tmsh show running-config /auth radius

tmsh show running-config /sys auth radius

tmsh show running-config /auth configuration

tmsh show running-config /sys auth radius-server

F5 301b Practice Test 3 - Free Online Exam Prep & Questions

An LTM Specialist is creating a custom EAV monitor.

In which directory should the LTM Specialist upload the script?

A.

/usr/monitor

B.

/usr/monitors

C.

/config/monitors

D.

/usr/bin/monitors

E.

/config/templates

F5 301b Practice Test 3

Question

F5 301b Practice Tests

Practice Tests