The active LTM device in a high-availability (HA) pair performs a failover at the same time the network team reports an outage of a switch on the network.Which two items could have caused the failover event? (Choose two.)

a monitor on a pool in an HA group

the standby LTM that was rebooted

an Auditor role that has access to the GUI

the standby LTM that lost connectivity on the failover VLAN

An active/standby pair of LTM devices deployed with network failover are working as desired. After external personnel perform maintenance on the network, the LTM devices are active/active rather than active/standby. No changes were made on the LTM devices during the network maintenance.Which two actions would help determine the cause of the malfunction? (Choose two.)

checking the configuration of the VLAN used for failover

checking the open ports in firewalls between the LTM devices

checking that the configurations are synchronized

checking the configuration of the VLAN used for failover

checking the configuration of the VLAN used for mirroring

checking the open ports in firewalls between the LTM devices

checking synchronization of system clocks among the network devices

Given this as the first packet displayed of an ssldump:2 2 1296947622.6313 (0.0001) S>CV3.1(74) HandshakeServerHellorandom[32]=19 21 d7 55 c1 14 65 63 54 23 62 b7 c4 30 a2 f0b8 c4 20 06 86 ed 9c 1f 9e 46 0f 42 79 45 8a 29session_id[32]=c4 44 ea 86 e2 ba f5 40 4b 44 b4 c2 3a d8 b4 ad4c dc 13 0d 6c 48 f2 70 19 c3 05 f4 06 e5 ab a9cipherSuite TLS_RSA_WITH_RC4_128_SHAcompressionMethod NULLIn reviewing the rest of the ssldump, the application data is NOT being decrypted.Why is ssldump failing to decrypt the application data?

The data is contained within a resumed TLS session.

The application data is encrypted with SSLv3.

The application data is encrypted with TLSv1.

The data is contained within a resumed TLS session.

The BigDB Key Log.Tcpdump.Level needs to be adjusted.

An LTM Specialist is troubleshooting virtual server 10.0.0.1:443 residing on VLAN vlan301. The web application is accessed via www.example.com. The LTM Specialist wants to save a packet capture with complete decrypted payload for external analysis.Which command should the LTM Specialist execute on the LTM device command line interface?

ssldump -Aed -ni vlan301 -k /config/filestore/files_d/Common_d/certificate_key_d/:Common:www.example.com.key_1 > /var/tmp/trace.cap

tcpdump -vvv -s 0 'host 10.0.0.1 and port 443' -w /var/tmp/trace.cap

tcpdump -vvv -s 0 -ni vlan301 'host 10.0.0.1 and port 443' -w /var/tmp/trace.cap

ssldump -Aed -k /config/filestore/files_d/Common_d/certificate_key_d/:Common:www.example.com.key_1 > /var/tmp/trace.cap

ssldump -Aed -ni vlan301 -k /config/filestore/files_d/Common_d/certificate_key_d/:Common:www.example.com.key_1 > /var/tmp/trace.cap

In preparation for a maintenance task, an LTM Specialist performs a 'Force to Standby' on LTM device Unit 1. LTM device Unit 2 becomes active as expected. The maintenance task requires the reboot of Unit 1. Shortly after the reboot is complete, the LTM Specialist discovers that Unit 1 has become active and Unit 2 has returned to standby.What would cause this behavior?

A traffic group is configured with Auto Failback, and Unit 1 is the default device.

Unit 1 is set with the redundancy state preference of active in devices groups.

Unit 1 is set with the redundancy state preference of active in high availability.

A traffic group is configured with Auto Failback, and Unit 1 is the default device.

A device group is configured with Auto Failback, and Unit 1 is the default device.

A high-availability (HA) pair configuration uses only the hardwire serial cable connection to determine device state. A power outage occurs to the PDU powering the active unit. The standby unit takes over the active role as expected.How is the peer unit able to determine the active unit is unavailable?

no data stream received on serial port

no response on management interface

no heartbeat packets received on self IPs

A failover event is recorded in the log messages:Jan 01 00:00:50 BIG-IP notice sod[5855]: 01140029:5: HA proc_running tmm fails action is go offline and down links.Jan 01 00:00:50 BIG-IP notice sod[5855]: 010c0050:5: Sod requests links down.Jan 01 00:00:50 BIG-IP notice sod[5855]: 010c0054:5: Offline for traffic group /Common/traffic-group-1.Jan 01 00:00:50 BIG-IP notice sod[5855]: 010c003e:5: OfflineJan 01 00:00:50 BIG-IP notice logger: /usr/bin/tmipsecd --tmmcount 4 ==> /usr/bin/bigstart stop racoonJan 01 00:00:50 BIG-IP info lacpd[5502]: 01160016:6: Failover event detected. (Switchboard failsafe disabled while offline)Jan 01 00:00:51 BIG-IP err bcm56xxd[5296]: 012c0010:3: Failover event detected. Marking external interfaces down. bsx.c(3633)Jan 01 00:00:51 BIG-IP info bcm56xxd[5296]: 012c0015:6: Link: 1.1 is DOWNJan 01 00:00:56 BIG-IP notice mcpd[5318]: 0107143c:5: Connection to CMI peer 10.0.0.3 has been removedJan 01 00:00:56 BIG-IP notice mcpd[5318]: 0107143a:5: CMI reconnect timer: enabledJan 01 00:00:56 BIG-IP notice mcpd[5318]: 01071431:5: Attempting to connect to CMI peer 10.0.0.3 port 6699What is the cause of the failover?

TMM failed, and system fail-safe initiated the failover.

TMM failed, and VLAN fail-safe initiated the failover.

TMM failed, and system fail-safe initiated the failover.

Loss of connection to CMI peer 10.0.0.3 initiated the failover.

A switchboard failure caused system fail-safe to initiate the failover.

-- Exhibit -- -- Exhibit --Refer to the exhibit.An LTM Specialist is reviewing the 'test' partition.Which objects, in order, can be removed from the partition?

delete pool test1_pool, delete node 10.1.1.2

delete node 10.1.1.2, delete pool test2_pool

delete pool test1_pool, delete node 10.1.1.2, delete node 10.1.1.1

delete virtual test1_vs, delete pool test2_pool, delete node 10.1.1.1

delete pool test1_pool, delete pool test2_pool, delete node 10.1.1.3

-- Exhibit -- -- Exhibit --Refer to the exhibit.An LTM Specialist is working on an LTM 11.0.0 installation and has identified a security vulnerability as shown in the exhibit. The LTM Specialist is tasked with applying the latest available hotfix to resolve the problem.Which procedure resolves the problem?

Browse to System > Software Management > Hotfix List. Import 11.1.0.HF3 to the available hotfix images. Select the imported hotfix image and installation location and click Install.

Browse to System > Software Management > Hotfix List. Import TMOS 11.2.0 to the available hotfix images. Select the imported hotfix image and installation location and click Install.

Browse to System > Software Management > Hotfix List. Import 11.1.0.HF3 to the available hotfix images. Select the imported hotfix image and installation location and click Install.

Browse to System > Software Management > Image List. Import TMOS 11.2.0 to the available hotfix images. Select the imported hotfix image and installation location and click Install.

Browse to System > Software Management > Image List. Import 11.1.0.HF3 to the available hotfix images. Select the imported hotfix image and installation location and click Install.

-- Exhibit -- -- Exhibit --Refer to the exhibit.An LTM Specialist has uploaded a qkview to F5 iHealth.Within the GUI, what is the correct procedure to comply with the recommendation shown in the exhibit?

Obtain product version image from downloads.f5.com. Import product version image. Install image onto BIG-IP platform. Select product version image and click Install. Select the available disk and volume set name.

Obtain product version image from release.f5.com. Overwrite existing image with new product version image. Select product version image and click Install. Select the available disk and volume set name.

Obtain product version image from images.f5.com. Overwrite existing image with new product version image. Select product version image and click Install. Select the available disk and volume set name.

Obtain product version image from downloads.f5.com. Import product version image. Install image onto BIG-IP platform. Select product version image and click Install. Select the available disk and volume set name.

Log a call requesting the product version image via websupport.f5.com Import product version image. Install image onto BIG-IP platform. Select product version image and click Install. Select the available disk and volume set name.

-- Exhibit -- -- Exhibit --Refer to the exhibit.Users receive an error when attempting to connect to the website https://website.com. The website has a DNS record of 195.56.67.90. The upstream ISP has confirmed that there is nothing wrong with the routing between the user and the LTM device.The following tcpdump outputs have been captured:External Vlan, filtered on IP 168.210.232.500:25:07.598519 IP 168.210.232.5.33159 > 195.56.67.90.https: S 1920647964:1920647964(0) win 8192 <mss 1450,nop,nop,sackOK>00:25:07.598537 IP 195.56.67.90.https > 168.210.232.5.33159: S 2690691360:2690691360(0) ack 1920647965 win 4350 <mss 1460,sackOK,eol>00:25:07.598851 IP 168.210.232.5.33160 > 195.56.67.90.https: S 2763858764:2763858764(0) win 8192 <mss 1450,nop,nop,sackOK>00:25:07.598858 IP 195.56.67.90.https > 168.210.232.5.33160: S 1905576176:1905576176(0) ack 2763858765 win 4350 <mss 1460,sackOK,eol>Internal Vlan, filtered on IP 168.210.232.500:31:46.171124 IP 168.210.232.5.33202 > 192.168.100.20.http: S 2389057240:2389057240(0) win 4380 <mss 1460,nop,wscale 0,sackOK,eol>What is the problem?

The firewall is dropping the connection coming from the pool members returned to the client.

The filters on the tcpdumps are incorrect.

The DNS entry for website.com is incorrect.

The virtual server 'WEBSERVICES1' is listening on the incorrect port.

The firewall is dropping the connection coming from the pool members returned to the client.

The subnet masks of the pool members of pool WebServices1 and the f5 'Internal' Vlan are incorrect.

-- Exhibit -- -- Exhibit --Refer to the exhibit.A client attempts to connect from a Google Chrome browser to a virtual server on a BIG-IP LTM. The virtual server is SSL Offloaded. When the client connects, the client receives an SSL error. After trying Mozilla Firefox and Internet Explorer browsers, the client still receives the same errors.The LTM Specialist does an ssldump on the virtual server and receives the results as per the exhibit.What is the problem?

The BIG-IP LTM is NOT serving a certificate.

The SSL key length is incorrect.

The BIG-IP LTM is NOT serving a certificate.

The BIG-IP LTM is NOT listening on port 443.

The client needs to be upgraded to the appropriate cipher-suite.

-- Exhibit -- -- Exhibit --Refer to the exhibit.An LTM Specialist has a virtual server set up on the LTM device as per the exhibit. The LTM Specialist receives reports of intermittent issues. Some clients are connecting fine while others are failing to connect.The LTM Specialist does a tcpdump on the relevant interfaces, with the following results extracted:What is causing the intermittent issues?

The default gateway is inaccessible from WS1.

The firewall is dropping the packets from WS1.

The default gateway is inaccessible from WS1.

The load balancing (LB) method is inappropriate.

The pool members have been set up as an active/standby pair, with WS1 as the standby.

-- Exhibit -- -- Exhibit --Refer to the exhibit.A company uses a complex piece of client software that connects to one or more virtual servers (VS) hosted on an LTM device. The client software is experiencing issues. An LTM Specialist is tasked with finding the cause of the problem.The LTM Specialist has the tcpdump extract and knows the client software has at least one connection to a VS on port 1990. However, when a tcpdump runs on the internal VLAN, there is no record of port 1990 in the tcpdump.Why is there no record of port 1990 in the tcpdump?

The LTM device performs a Port Address Translation (PAT).

The LTM device drops the connection.

Port 1990 is a well-known port, so its use is restricted.

The LTM device performs a Port Address Translation (PAT).

The LTM device performs a Network Address Translation (NAT).

-- Exhibit -- -- Exhibit --Refer to the exhibit.A company uses a complex piece of client software that connects to one or more virtual servers (VS) hosted on an LTM device. The client software is experiencing issues. An LTM Specialist must determine the cause of the problem.The LTM Specialist is seeing a client source IP of 168.210.232.5 in the tcpdump. However, the client source IP is actually 10.123.17.12.Why does the IP address of 10.123.17.12 fail to appear in the tcpdump?

Network Address Translation (NAT) has occurred in the path between the client and the LTM device.

The LTM device performed NAT on the individual's IP address.

The Secure Network Address Translation (SNAT) pool on the virtual server is activated.

Network Address Translation (NAT) has occurred in the path between the client and the LTM device.

The individual's data stream is being routed to the LTM device by a means other than the default route.

-- Exhibit -- -- Exhibit --Refer to the exhibit.A company uses a complex piece of client software that connects to one or more virtual servers (VS) hosted on an LTM device. The client software is experiencing issues. An LTM Specialist must determine the cause of the problem. The LTM Specialist has the tcpdump extract. The client loses connection with the LTM device.Where is the reset originating?

the device initiating the connection

the destination device of the initial connection

-- Exhibit -- -- Exhibit --Refer to the exhibit.An LTM device is used to load balance web content over a secure channel.The developers of the web content have done a trace using an HTTP profiler application. They believe that allowing the LTM device to compress traffic to the client will improve performance. The client can utilize GZIP or deflate compression algorithms.An LTM Specialist must implement the compression.The LTM Specialist has completed the following actions:1. Create the relevant profile.2. Apply the relevant profile to the virtual server (VS).After applying the relevant profile, the LTM device is failing to compress the traffic. Instead, the traffic is being served with an error.What is the problem?

The LTM device CANNOT SSL offload the traffic in order to read and compress it.

The incorrect compression algorithm is applied to the compression profile.

The LTM device CANNOT SSL offload the traffic in order to read and compress it.

The Protocol Profile (Client) option of 'Allow Compression' needs to be enabled.

The Protocol Profile (Server) option of 'Allow Compression' needs to be enabled.

-- Exhibit -- -- Exhibit --Refer to the exhibit.A client attempts to connect from a Google Chrome browser to a virtual server on a BIG-IP LTM. The virtual server is SSL Offloaded. When the client connects, the client receives an SSL error. The client receives the same errors when trying Mozilla Firefox and Internet Explorer browsers.The LTM Specialist does an ssldump on the virtual server and receives the results as per the exhibit.How should this be resolved?

Select the appropriate 'SSL Profile (Client)' in the virtual server settings.

Set the virtual server to listen on port 443 (HTTPS).

Upgrade the client to support the appropriate SSL cipher suite.

Select the appropriate 'SSL Profile (Client)' in the virtual server settings.

Adjust the SSL key length in the SSL profile to match the minimum required by the client.

-- Exhibit -- -- Exhibit --Refer to the exhibit.An LTM Specialist configures a virtual server to load balance to a pool of FTP servers. File transfers are failing. The virtual server is configured as follows:ltm virtual ftp_vs {destination 10.10.1.103:ftpip-protocol tcpmask 255.255.255.255pool ftp_poolprofiles {tcp { }}vlans-disabled}Which change will resolve the problem?

Add an FTP profile to the virtual server.

Add an FTP monitor to the pool.

Add an FTP profile to the virtual server.

Enable loose initiation in the TCP profile.

Increase the TCP timeout value in the TCP profile.

-- Exhibit -- -- Exhibit --Refer to the exhibit.An LTM Specialist is investigating reports that users are unable to perform some commands through an FTP virtual server. The users are receiving the FTP error '500 Illegal PORT command.' The virtual server is configured to SNAT using automap. The LTM Specialist performs a capture on the server side of the LTM device.Why is the server returning this error?

Active IP address in PORT command

Active IP address in LOGIN command

-- Exhibit -- -- Exhibit --Refer to the exhibit.An LTM Specialist configures a virtual server that balances HTTP connections to a pool of three application servers. Approximately one out of every three connections to the virtual server fails.Which two actions will resolve the problem? (Choose two.)

Enable SNAT automap on the virtual server.

Verify the default gateway on the application servers.

Assign a custom HTTP monitor to the pool.

Enable SNAT automap on the virtual server.

Verify that port lockdown is set to allow port 80.

Verify the default gateway on the application servers.

Increase the TCP timeout value in the default TCP profile.

-- Exhibit -- -- Exhibit --Refer to the exhibit.A server administrator notices that one server is intermittently NOT being sent any HTTP requests. The server logs display no issues. The LTM Specialist notices log entries stating the node (172.16.20.1) status cycling between down and up. The pool associated with the virtual server (10.10.1.100) has a custom HTTP monitor applied.Which tcpdump filter will help trace the monitor?

tcpdump -i internal port 80 and host 172.16.1.31

tcpdump -i external port 80 and host 10.10.1.100

tcpdump -i internal port 80 and host 172.16.1.33

tcpdump -i external port 80 and host 172.16.20.1

-- Exhibit -- -- Exhibit --Refer to the exhibit.A layer 2 nPath routing configuration has been deployed. A packet capture contains a client connection packet with the following properties:Source IP: <Virtual Server>Destination IP: <Client A>At which two locations could the packet capture have been taken? (Choose two.)

the network interface of web server

the internal interface of the Internet firewall

the network interface of web server

the DMZ interface of the Internet firewall

the internal interface of the Internet firewall

the external VLAN interface of the LTM device

F5 301b Practice Test 4 - Free Online Exam Prep & Questions

An F5 LTM Specialist needs to perform an LTM device configuration backup prior to RMA swap.

Which command should be executed on the command line interface to create a backup?

bigpipe config save /var/tmp/backup.ucs

tmsh save /sys ucs /var/tmp/backup.ucs

tmsh save /sys config /var/tmp/backup.ucs

tmsh save /sys config ucs /var/tmp/backup.ucs

Comment (0)

F5 301b Practice Test 4

Question

F5 301b Practice Tests

Practice Tests