-- Exhibit -- -- Exhibit --Refer to the exhibit.An LTM Specialist is troubleshooting a new HTTP monitor on a pool. The pool member is functioning correctly when accessed directly through a browser. However, the monitor is marking the member as down. The LTM Specialist captures the monitor traffic via tcpdump.What is the issue?

The monitor request is NOT returning the page body.

The server is marking the connection as closed.

The pool member is rejecting the monitor request.

The monitor request is NOT returning the page body.

The 'time-until-up' setting on the monitor is incorrect.

-- Exhibit -- -- Exhibit --Refer to the exhibit.An LTM Specialist is troubleshooting a new HTTP monitor on a pool. The pool member is functioning correctly when accessed directly through a browser, although the monitor is marking the member as down. As part of the troubleshooting, the LTM Specialist has captured the monitor traffic via tcpdump.How should the LTM Specialist resolve this issue?

Modify the receive string to valid content.

Add the 'http' monitor to the pool.

Add the 'icmp' monitor to the node.

Modify the receive string to valid content.

Correct the firewall rules on the pool member.

-- Exhibit -- -- Exhibit --Refer to the exhibit.The decoded TCPDump capture is a trace of a failing health monitor. The health monitor is sending the string shown in the capture; however, the server response is NOT as expected. The receive string is set to 'SERVER IS UP'.What is the solution?

The /test_page.html does NOT exist on the web server and should be added.

The GET request Host header field requires a host name.

Incorrect syntax in send string. 'HTTP/1.1' should be 'HTTP1.1'.

The /test_page.html does NOT exist on the web server and should be added.

Incorrect syntax in send string. 'Connection: Close' should be 'Connection: Open'.

-- Exhibit -- -- Exhibit --Refer to the exhibit.An LTM Specialist sets up AVR alerts and notifications for a specific virtual server if the server latency exceeds 50ms. The LTM Specialist simulates a fault so that the server latency is consistently exceeding the 50ms threshold; however, no alerts are being received.Which configuration should the LTM Specialist modify to achieve the expected results?

The rule should be adjusted to trigger when server latency is above 50ms.

SNMP alerting should be enabled to allow e-mail to be sent to the support team.

User Agents needs to be enabled to ensure the correct information is collected to trigger the alert.

The metric 'Page Load Time' needs to be enabled to ensure that the correct information is collected.

-- Exhibit -- -- Exhibit --Refer to the exhibit.An LTM Specialist is troubleshooting an HTTP monitor that is marking a pool member as down. Connecting to the pool member directly through a browser shows the application is up and functioning correctly.ltm monitor http http_mon {defaults-from httpdestination *:*interval 5recv '200 OK'send 'GET /\\r\\n'time-until-up 0timeout 16}What is the issue?

The pool member is responding without HTTP headers.

The HTTP headers are compressed.

The pool member is responding with a 404.

The pool member is responding without HTTP headers.

The request is NOT being received by the pool member.

-- Exhibit -- -- Exhibit --Refer to the exhibit.An LTM Specialist is troubleshooting an issue with SSL and is receiving the error shown when connecting to the virtual server. When connecting directly to the pool member, clients do NOT receive this message, and the application functions correctly. The LTM Specialist exports the appropriate certificate and key from the pool member and imports them into the LTM device. The LTM Specialist then creates the Client SSL profile and associates it with the virtual server.What is the issue?

The client CANNOT verify the certification path.

The SSL certificate and key have expired.

The SSL certificate and key do NOT match.

The client CANNOT verify the certification path.

The common name on the SSL certificate does NOT match the hostname of the site.

-- Exhibit -- -- Exhibit --Refer to the exhibit.A user is unable to access a secure application via a virtual server.What is the cause of the issue?

The client authentication failed.

The virtual server does NOT have a pool configured.

The client and server CANNOT agree on a common cipher.

The virtual server does NOT have a client SSL profile configured.

-- Exhibit -- -- Exhibit --Refer to the exhibit.An LTM Specialist is troubleshooting an issue with a new virtual server. When connecting through the virtual server, clients receive the message 'The connection was reset' in the browser. Connections directly to the pool member show the application is functioning correctly.What is the issue?

The virtual server is processing encrypted traffic as plain-text HTTP.

The pool member is failing the monitor check.

The pool member default gateway is set incorrectly.

The virtual server is configured with the incorrect SNAT address.

The virtual server is processing encrypted traffic as plain-text HTTP.

-- Exhibit -- -- Exhibit --Refer to the exhibit.An LTM Specialist is troubleshooting a virtual server. Both the virtual server and the pool are showing blue squares for their statuses, and new clients report receiving 'The connection was reset' through their browsers. Connections directly to the pool member are successful.What is the issue?

The node is marked as disabled.

The HTTP profile has incorrect settings.

The virtual server is disabled on all VLANs.

-- Exhibit -- -- Exhibit --Refer to the exhibit.A user is unable to access an application.What is the root cause of the problem?

The user failed authentication.

The GET request uses the wrong syntax.

-- Exhibit -- -- Exhibit --Refer to the exhibit.A user is unable to access an HTTP application via a virtual server.What is the cause of the failure?

There is no pool member available to service the request.

The host header requires a host name.

The virtual server is in the disabled state.

The Connection: Keep-Alive header is set.

There is no pool member available to service the request.

-- Exhibit -- -- Exhibit --Refer to the exhibit.An LTM Specialist is performing an HTTP trace on the client side of the LTM device and notices there are many undesired headers being sent by the server in the response. The LTM Specialist wants to remove all response headers except 'Set-Cookie' and 'Location.'How should the LTM Specialist modify the HTTP profile to remove undesired headers from the HTTP response?

Enter the desired header names in the 'Response Headers Allowed' field.

Enter the desired header names in the 'Request Header Insert' field.

Enter the undesired header names in the 'Request Header Erase' field.

Enter the undesired header names in the 'Response Header Erase' field.

Enter the desired header names in the 'Response Headers Allowed' field.

-- Exhibit -- -- Exhibit --Refer to the exhibit.A web application is configured to allow sessions to continue even after a user computer is shut down for the night. A new LTM device is configured to load balance the web application to several servers. The application owner reports that application users are logged out of the web application whenever their browser is restarted or computer is rebooted.What is the problem?

The cookie set by the LTM device does NOT have an 'Expires' value.

The virtual server does NOT have persistence configured.

The virtual server does NOT have persistence mirroring configured.

The cookie set by the LTM device does NOT have an 'Expires' value.

The cookie set by the server is NOT being passed to client by the LTM device.

-- Exhibit -- -- Exhibit --Refer to the exhibit.An LTM Specialist creates a virtual server to load balance traffic to a pool of HTTPS servers. The servers use client certificates for user authentication. The virtual server has clientssl, serverssl, and http profiles enabled. Clients are unable to connect to the application through the virtual server, but they are able to connect to the application servers directly.Which change to the LTM device configuration will resolve the problem?

Install the server certificate/key and enable Proxy SSL.

Use the serverssl-insecure-compatible serverssl profile.

Configure the clientssl profile to require a client certificate.

Install the client's issuing Certificate Authority certificate on the LTM device.

-- Exhibit -- -- Exhibit --Refer to the exhibit.A pair of LTM devices are configured for HA . The LTM Specialist observes from a capture that there is a successful connection from a client directly to a web server and an unsuccessful connection from a client via the LTM device to the same web server.Which two solutions will solve the configuration problem? (Choose two.)

Configure SNAT on the virtual server.

Change server default gateway to point at LTM internal floating IP.

Configure SNAT on the virtual server.

Change server default gateway to point at LTM internal self IP.

Change server default gateway to point at LTM internal floating IP.

-- Exhibit -- -- Exhibit --Refer to the exhibits.How should the LTM Specialist minimize the configuration?

Create a single monitor, apply it to the pool, and remove the pool member level monitors.

Remove the pool member level monitors.

The configuration is as minimized as possible.

Create a single monitor and apply it to each pool member.

Create a single monitor, apply it to the pool, and remove the pool member level monitors.

-- Exhibit -- -- Exhibit --Refer to the exhibits.An LTM device has been configured for load balancing a number of different application servers. Configuration changes need to be made to the LTM device to allow administrative management of the servers in 172.16.10/24, 172.16.20/24, and 172.16.30/24 networks. The servers require outbound access to numerous destinations for operations.Which solution has the simplest configuration changes while maintaining functionality and basic security?

Enable 172.16.10.0:0/24, 172.16.20.0:0/24, and 172.16.30.0:0/24 on ingress VLAN(s), and enable 0.0.0.0:0/0.0.0.0 on egress VLAN(s).

Remove 172.16.10.0:0/24, 172.16.20.0:0/24, and 172.16.30.0:0/24, and keep 0.0.0.0:0/0.0.0.0 enabled on all VLANs.

Replace 172.16.10.0:0/24, 172.16.20.0:0/24, and 172.16.30.0:0/24, with 172.16.0.0:0/16, and keep 0.0.0.0:0/0.0.0.0.

Enable 172.16.10.0:0/24, 172.16.20.0:0/24, and 172.16.30.0:0/24 on ingress VLAN(s), and enable 0.0.0.0:0/0.0.0.0 on egress VLAN(s).

Enable 172.16.10.0:0/24, 172.16.20.0:0/24, and 172.16.30.0:0/24 on egress VLAN(s), and enable 0.0.0.0:0/0.0.0.0 on ingress VLAN(s).

-- Exhibit -- -- Exhibit --Refer to the exhibits.A virtual server has been configured for SSL offload on a single-arm network. On average, the virtual server will be handling 100,000 connections, with a peak of 130,000 connections. Between the virtual server and the web servers there is a single reverse proxy to provide site caching. The proxy is configured to perform source IP persistence before contacting the web servers. The site is logging users out immediately after logging them in.What should the LTM Specialist do to resolve this issue?

Create an iRule to add client IP persistence to a SNAT pool member.

Add a source address persistence profile to the virtual server.

Create an iRule to add client IP persistence to a SNAT pool member.

Change the virtual server server-side TCP profile to tcp-lan-optimized.

Configure the virtual server HTTP profile to insert an X-Forwarded-For header.

-- Exhibit -- -- Exhibit --Refer to the exhibits.Which two servers are missing two frequently used URLs? (Choose two.)

172.16.20.2 /text.one /text.txt

172.16.20.3 /text.one /browserspecific.html

172.16.20.1 /text.one /text.txt

172.16.20.2 /text.one /text.txt

172.16.20.1 /text.txt /browserspecific.html

172.16.20.2 /text.one /browserspecific.html

172.16.20.3 /text.one /browserspecific.html

-- Exhibit -- -- Exhibit --Refer to the exhibits.When observing the AVR statistics for the HTTPS_VS, an LTM Specialist realizes that HTTP status codes are NOT being recorded.How should the LTM Specialist modify the configuration to record the HTTP status codes?

enable Collected Entities, Response Codes on the analytics profile

assign a streaming profile to the virtual server

assign client SSL and server SSL profiles to the virtual server

enable Statistics Logging Type, External on the analytics profile

enable Collected Entities, Response Codes on the analytics profile

-- Exhibit -- -- Exhibit --Refer to the exhibits.A customer requests to offload SSL for an internal website. The front page of the website loads correctly; however, selecting links on the page fails.How should the LTM Specialist fix the issue?

Create a new HTTP profile. Enable redirect rewrite. Add the new HTTP profile to the VS.

Create a new SNAT pool. Add internal network IPs to the SNAT pool. Add the SNAT pool to the VS.

Create a new HTTP profile. Enable Insert X-Forwarded-For. Add the new HTTP profile to the VS.

Create a new HTTP profile. Enable redirect rewrite. Add the new HTTP profile to the VS.

Create a new Server SSL profile. Enable Proxy SSL. Add the Server SSL profile to the VS.

-- Exhibit -- -- Exhibit --Refer to the exhibits.An LTM Specialist is troubleshooting an application configured on an LTM device on a one-armed configuration. The application is NOT working through the LTM device but does work when accessed directly via the application servers. The virtual server 192.168.1.211:443 is configured to SNAT using the address 192.168.1.144 and references a pool with the member 192.168.10.80:443. No Client or Server SSL profiles are associated. The LTM Specialist has collected two traffic captures to help determine the issue.What is the problem with the configuration on the LTM device?

Pool member is configured to use wrong port.

Pool member is configured for SSL off-loading.

Virtual server is configured to use wrong port.

Virtual server is configured without SSL Profiles.

-- Exhibit -- -- Exhibit --Refer to the exhibit.An LTM Specialist configures a virtual server to perform client-side encryption while allowing the server-side traffic to be unencrypted. Application owners report that images are failing to load through the virtual server; however, images load when going directly to the server.What is the problem with the images loading through the virtual server?

Image references are for HTTP objects, not HTTPS.

Image references are for HTTPS objects, not HTTP.

The virtual server does not have 'SSL Offloading' enabled.

The virtual server does not have an HTTP profile associated.

-- Exhibit -- -- Exhibit --Refer to the exhibits.Users are able to access the application when connecting directly to the web server but are unsuccessful when connecting to the virtual server.What is the cause of the application access problem?

The virtual server has address translation disabled.

The virtual server has SNAT disabled.

The client has no route to the web server.

The virtual server has address translation disabled.

The web server is NOT responding on the correct port.

The virtual server is NOT configured to listen on port 80.

-- Exhibit -- -- Exhibit --Refer to the exhibits.An LTM Specialist is reconfiguring a virtual server to redirect all clients to HTTPS. Testing reveals that the redirect is functioning incorrectly. As part of the troubleshooting process, the LTM Specialist performs a packet capture.What is the issue?

The redirect is sending the client to the incorrect location.

The redirect is causing an infinite loop.

The virtual server is missing a clientssl profile.

The redirect is sending the client to the incorrect location.

The virtual server is incorrectly processing the HTTP request.

-- Exhibit -- -- Exhibit --Refer to the exhibits.An LTM Specialist has configured a virtual server to distribute connections to a pool of application servers and to offload SSL processing. The application fails to work as expected when connecting to the virtual server. It does work when clients connect directly to the application. Two packet captures were taken at the application server.What is the root cause of the problem?

The LTM device is sending non-SSL traffic to an SSL port.

The application servers are NOT listening on port 80.

The LTM device is sending non-SSL traffic to an SSL port.

The virtual server does NOT have a clientSSL profile assigned.

The SSL handshake between the LTM device and the server is failing.

-- Exhibit -- -- Exhibit --Refer to the exhibit.An LTM Specialist is troubleshooting an issue with an application configured on an LTM device. The application works properly when accessed directly via the servers; however, it does not work when accessed via the LTM device. The virtual server, 192.168.1.211:443, is configured to SNAT using the address 192.168.1.144 and references a pool with the member 192.168.10.80:443. The virtual server has no Client or Server SSL profiles associated.Which configuration change will allow the application to function through the virtual server?

Change pool member port to 8443.

Change virtual server port to 8443.

Add SSL off-loading to the pool member.

Add Client and Server SSL profiles to the virtual server.

-- Exhibit -- -- Exhibit --Refer to the exhibit.An administrator created a monitor to a pool member web server, which resulted in a pool member that is marked red. The administrator knows the web server is working when it is accessed from another computer.What should the administrator do to correct the problem?

Change the username and/or password on the monitor.

Change the default gateway on the server.

Create a SNAT in the LTM device configuration.

Change the route to the client in the LTM configuration.

Change the username and/or password on the monitor.

-- Exhibit -- -- Exhibit --Refer to the exhibits.An LTM Specialist configures a virtual server for an internal application to perform client-side encryption while allowing the server-side traffic to be unencrypted. Application users report that images are NOT loading through the virtual server; however, images load when going directly to the server.What should the LTM Specialist configure to allow the images to load through the virtual server?

Stream profile with source 'http:' and target 'https:'

HTTP profile with 'SSL Offload' enabled

HTTP profile with 'SSL Offload' disabled

Stream profile with source 'http:' and target 'https:'

Stream profile with target 'http:' and source 'https:'

-- Exhibit -- -- Exhibit --Refer to the exhibits.An LTM Specialist is troubleshooting an issue with one of the virtual servers on an LTM device, and all requests are receiving errors. Testing directly against the server generates no errors. The LTM Specialist has captured the request and response on both client and server sides of the LTM device.What should the LTM Specialist do to fix this issue?

Remove 'header-erase Host' in http profile.

Configure SNAT Automap on the virtual server.

Assign OneConnect profile to the virtual server.

Set 'redirect-rewrite' to 'selective' in http profile.

-- Exhibit -- -- Exhibit --Refer to the exhibit.An LTM Specialist is investigating intermittent page load issues being reported by users.What should the LTM Specialist do to resolve the issue?

Assign an HTTP monitor to the pool.

Remove HTTP monitor on the pool.

Assign an HTTP monitor to the pool.

Select least connections load balancing method on virtual server.

Remove least connections load balancing method on virtual server.

An LTM Specialist is troubleshooting an issue with a new virtual server. When connecting through the virtual server, clients receive the message 'Unable to connect' in the browser, although connections directly to the pool member show the application is functioning correctly. The LTM configuration is:ltm virtual /Common/vs_https {destination /Common/10.10.1.110:443ip-protocol udpmask 255.255.255.255pool /Common/pool_httpsprofiles {/Common/udp { }}translate-address enabledtranslate-port enabledvlans-disabled}ltm pool /Common/pool_https {members {/Common/172.16.20.1:443 {address 172.16.20.1}}}How should the LTM Specialist resolve this issue?

Select the correct protocol for the virtual server.

Remove an HTTP monitor from the pool.

Add an HTTP profile to the virtual server.

Enable the pool member on the correct VLAN.

Select the correct protocol for the virtual server.

An LTM Specialist is troubleshooting a problem on an eCommerce website. The user browses the online store using port 80, adding items to the shopping cart. The user then clicks the 'Checkout' button on the site, which redirects the user to port 443 for the checkout process. Suddenly, the user's shopping cart is shown as empty. The shopping cart data is stored in memory on the server, and the default source address persistence profile is used on both virtual servers.What is the issue?

The port 80 and port 443 connections are balanced to different nodes.

The port 80 pool member is deleting the user's session cookie.

The port 443 pool member is deleting the user's session cookie.

The port 80 and port 443 connections are balanced to the same node.

The port 80 and port 443 connections are balanced to different nodes.

An LTM Specialist is troubleshooting a problem on an eCommerce website. The user browses the online store using port 80, adding items to the shopping cart. The user then clicks the 'Checkout' button on the site, which redirects the user to port 443 for the checkout process. Suddenly, the user's shopping cart is shown as empty. The shopping cart data is stored in memory on the server, and the default source address persistence profile is used on both virtual servers.How should the LTM Specialist resolve this issue?

Create a custom persistence profile and enable 'Match Across Services.'

Add an HTTP profile to both virtual servers.

Enable SNAT Automap on both virtual servers.

Create a custom persistence profile and enable 'Map Proxies.'

Create a custom persistence profile and enable 'Match Across Services.'

An LTM device has been configured to log the reasons for generating TCP RST packets.The following log entry occurs:'01230140:3: RST sent from 192.168.1.100:80 to 192.168.1.124:39272, [0x112d82a:1721] {peer} TCP RST from remote system.'Which condition will trigger this log entry?

The host at the other end terminated the TCP connection.

A virtual server connection limit has been reached.

The host at the other end terminated the TCP connection.

The LTM device reset the connection because no pool members are available.

The LTM device has reached the maximum number of allowed attempts to send the data segment to the affected TCP connection.

F5 301b Practice Test 5 - Free Online Exam Prep & Questions

-- Exhibit --

F5 301b image Question 161 83473 09242024194212000000

-- Exhibit --

Refer to the exhibit.

An HTTP monitor always marks the nodes in the pool as down. The monitor's definition and the HTTP headers from the monitor request and response are provided.

What is the issue?

Become a Premium Member for full access

Unlock Premium Member

F5 301b Practice Test 5

Question

F5 301b Practice Tests

Practice Tests