ExamGecko
Home Home / F5 / 301b

F5 301b Practice Test - Questions Answers, Page 11

Question list
Search
Search

List of questions

Search

Related questions











An LTM Specialist needs to rewrite text within an HTML response from a web server. A client is sending the HTTP request below:

GET / HTTP/1.1

Host: www.f5.com

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:16.0) Gecko/20100101 Firefox/16.0

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-LanguagE. en-US,en;q=0.5

Accept-EncodinG. gzip, deflate

Cache-Control: no-cache

Connection: keep-alive

CookiE. somecookie=1

Although a stream profile has been added to the virtual server, the content within the HTTP response is NOT being matched, and therefore NOT modified.

Which HTTP header should the LTM Specialist remove from the request to ensure the content can be matched and modified?

A.
Connection
A.
Connection
Answers
B.
Accept
B.
Accept
Answers
C.
Cache-Control
C.
Cache-Control
Answers
D.
Accept-Encoding
D.
Accept-Encoding
Answers
Suggested answer: D

An LTM Specialist configured a virtual server to load balance a custom application. The application works when it is tested from within the firewall but it fails when tested externally. The pool member address is 192.168.200.10:80. A capture from an external client shows:

GET /index.jsp HTTP/1.1

Host: 207.206.201.100

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:15.0) Gecko/20100101 Firefox/15.0.1

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Connection: keep-alive

HTTP/1.1 302 Found

DatE. Wed, 17 Oct 2012 23:09:55 GMT

Server: Apache/2.2.15 (CentOS)

Location: http://192.168.200.10/user/home.jsp

Content-LengtH. 304

Connection: close

What is the solution to this issue?

A.
Assign a SNAT pool to the virtual server.
A.
Assign a SNAT pool to the virtual server.
Answers
B.
Add a Web Acceleration Profile to the virtual server.
B.
Add a Web Acceleration Profile to the virtual server.
Answers
C.
Configure redirect rewrite option in the HTTP profile.
C.
Configure redirect rewrite option in the HTTP profile.
Answers
D.
Configure a content filter on the backend web server.
D.
Configure a content filter on the backend web server.
Answers
Suggested answer: C

There are three servers in the pool: 172.16.20.1, 172.16.20.2, and 172.16.20.3, with the virtual IP address 10.0.20.88.

A user CANNOT connect to an HTTP application. To understand the problem and find a solution, the LTM Specialist runs two concurrent traces on the LTM device, with the following results:

Trace on client side:

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on 0.0, link-type EN10MB (Ethernet), capture size 96 bytes

22:22:07.423759 IP 172.16.20.100.53875 > 10.0.20.88.80: S 998346084:998346084(0) win 5840 <mss 1460,sackOK,timestamp 67942058 0,nop,wscale 4>

22:22:07.424056 IP 10.0.20.88.80 > 172.16.20.100.53875: S 4671780:4671780(0) ack 998346085 win 4380 <mss 1460,nop,wscale 0,nop,nop,timestamp 2392362490 67942058,sackOK,eol>

22:22:07.424776 IP 172.16.20.100.53875 > 10.0.20.88.80: . ack 1 win 365 <nop,nop,timestamp 67942058 2392362490>

22:22:07.424790 IP 172.16.20.100.53875 > 10.0.20.88.80: P 1:149(148) ack 1 win 365 <nop,nop,timestamp 67942058 2392362490>

22:22:07.424891 IP 10.0.20.88.80 > 172.16.20.100.53875: . ack 149 win 4528 <nop,nop,timestamp 2392362491 67942058>

22:22:12.024850 IP 10.0.20.88.80 > 172.16.20.100.53875: R 1:1(0) ack 149 win 4528

6 packets captured

6 packets received by filter

0 packets dropped by kernel

Trace on server side:

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on internal, link-type EN10MB (Ethernet), capture size 96 bytes

22:22:07.424881 IP 172.16.20.100.53875 > 172.16.20.2.80: S 51116678:51116678(0) win 4380 <mss 1460,nop,wscale 0,nop,nop,timestamp 2392362491 0,sackOK,eol>

22:22:08.424893 IP 172.16.20.100.53875 > 172.16.20.2.80: S 51116678:51116678(0) win 4380 <mss 1460,nop,wscale 0,nop,nop,timestamp 2392363491 0,sackOK,eol>

22:22:09.625082 IP 172.16.20.100.53875 > 172.16.20.2.80: S 51116678:51116678(0) win 4380 <mss 1460,nop,wscale 0,nop,nop,timestamp 2392364691 0,sackOK,eol>

22:22:10.825194 IP 172.16.20.100.53875 > 172.16.20.2.80: S 51116678:51116678(0) win 4380 <mss 1460,sackOK,eol>

4 packets captured

4 packets received by filter

0 packets dropped by kernel

What should the LTM Specialist do to solve the problem?

A.
Edit the packet filter rules.
A.
Edit the packet filter rules.
Answers
B.
Modify the monitor of the pool.
B.
Modify the monitor of the pool.
Answers
C.
Enable the virtual server.
C.
Enable the virtual server.
Answers
D.
Configure the virtual server to use SNAT.
D.
Configure the virtual server to use SNAT.
Answers
Suggested answer: D

An LTM Specialist is troubleshooting an HTTP monitor. The pool member is accessible directly through a browser, but the HTTP monitor is marking the pool member as down.

GET / HTTP/1.1

HTTP/1.1 400 Bad Request

DatE. Tue, 23 Oct 2012 21:39:07 GTM

Server: Apache/2.2.22 (FreeBSD) PHP/5.4.4

mod_ssl/2.2.22 OpenSSL/0.9.8q DAV/2

Content-LengtH. 226

Connection: close

Content-TypE. text/html; charset=iso-8859-1

How should the LTM Specialist resolve this issue?

A.
Add '200 OK' to the monitor's receive string.
A.
Add '200 OK' to the monitor's receive string.
Answers
B.
Add 'Connection: close\r\n' to the monitor's send string.
B.
Add 'Connection: close\r\n' to the monitor's send string.
Answers
C.
Change the interval on the monitor from 5 seconds to 30 seconds.
C.
Change the interval on the monitor from 5 seconds to 30 seconds.
Answers
D.
Change the HTTP version in the send string from HTTP/1.1 to HTTP/1.0.
D.
Change the HTTP version in the send string from HTTP/1.1 to HTTP/1.0.
Answers
Suggested answer: D

An LTM Specialist is troubleshooting an issue with a new virtual server. When connecting through the virtual server, clients receive the message 'The connection was reset' in the browser, although connections directly to the pool member show the application is functioning correctly.

ltm pool srv1_https_pool {

members {

192.168.2.1:https{

address 192.168.2.1

}

}

}

ltm virtual https_example_vs {

destination 192.168.1.155:https

ip-protocol tcp

mask 255.255.255.255

pool srv1_https_pool

profiles {

http { }

tcp { }

}

snat automap

vlans-disabled

}

How should the LTM Specialist resolve this issue?

A.
Enable HTTP monitoring on the pool.
A.
Enable HTTP monitoring on the pool.
Answers
B.
Add a ClientSSL profile to the virtual server.
B.
Add a ClientSSL profile to the virtual server.
Answers
C.
Disable SNAT Automap on the virtual server.
C.
Disable SNAT Automap on the virtual server.
Answers
D.
Remove the HTTP profile from the virtual server.
D.
Remove the HTTP profile from the virtual server.
Answers
Suggested answer: D

An LTM device supports two power supplies. The value of the BigDB key 'platform.powersupplymonitor' is equal to enable.

Where would the error message be visible if one of the power supplies fails or is NOT plugged in?

A.
visible only via the console
A.
visible only via the console
Answers
B.
in the /var/log/ltm log file
B.
in the /var/log/ltm log file
Answers
C.
in the /var/log/kern.log file
C.
in the /var/log/kern.log file
Answers
D.
in the /var/log/tmm log file
D.
in the /var/log/tmm log file
Answers
Suggested answer: B

An LTM Specialist loads a UCS file generated on a different LTM device and receives the following error message:

'mcpd[2395]: 01070608:0: License is not operational (expired or digital signature does not match contents)'

Which command should the LTM Specialist use to prevent the error?

A.
tmsh show /sys license
A.
tmsh show /sys license
Answers
B.
tmsh show /sys hardware
B.
tmsh show /sys hardware
Answers
C.
bigpipe config save /config.ucs
C.
bigpipe config save /config.ucs
Answers
D.
tmsh load /sys /ucs rma
D.
tmsh load /sys /ucs rma
Answers
E.
tmsh load /sys ucs no-license
E.
tmsh load /sys ucs no-license
Answers
Suggested answer: E

These log entries can have different root causes:

Jun 28 05:01:21 LTM_A notice mcpd[27545]: 0107143a:5: CMI reconnect timer: enabled

Jun 28 05:01:21 LTM_A notice mcpd[27545]: 01071431:5: Attempting to connect to CMI peer 1.1.1.2 port 6699

Jun 28 05:01:21 LTM_A notice mcpd[27545]: 01071432:5: CMI peer connection established to 1.1.1.2 port 6699

Jun 28 05:01:26 LTM_A notice mcpd[27545]: 0107143a:5: CMI reconnect timer: disabled, all peers are connected

Which two commands should be used to obtain additional information on these entries? (Choose two.)

A.
tmsh show /sys mcpd
A.
tmsh show /sys mcpd
Answers
B.
bigstart status mcpd
B.
bigstart status mcpd
Answers
C.
tmsh modify /sys db log.mcpd.level value debug
C.
tmsh modify /sys db log.mcpd.level value debug
Answers
D.
tmsh modify /sys db log.cmi.level value debug
D.
tmsh modify /sys db log.cmi.level value debug
Answers
Suggested answer: B, C

An LTM Specialist wants to allow access to the Always On Management (AOM) from the network.

Which two methods should the LTM Specialist use to configure the AOM interface? (Choose two.)

A.
Configure the AOM IP from the front panel buttons and LCD .
A.
Configure the AOM IP from the front panel buttons and LCD .
Answers
B.
Choose the network configurator in the AOM menu on the serial port.
B.
Choose the network configurator in the AOM menu on the serial port.
Answers
C.
Configure the AOM network address in the GUI under System>Platform.
C.
Configure the AOM network address in the GUI under System>Platform.
Answers
D.
Log in to the Host via ssh, 'ssh aom', and modify the network configuration file.
D.
Log in to the Host via ssh, 'ssh aom', and modify the network configuration file.
Answers
Suggested answer: B, D

An LTM Specialist troubleshooting an issue looks at the following /var/log/ltm entries:

Oct 2 04:52:42 slot1/tmm7 crit tmm7[21734]: 01010201:2: Inet port exhaustion on 10.143.109.5 to 10.143.147.150:53 (proto 17)

Oct 2 05:37:16 slot1/tmm7 crit tmm7[21734]: 01010201:2: Inet port exhaustion on 10.143.109.5 to 10.143.147.150:53 (proto 17)

Oct 2 05:57:32 slot1/tmm2 crit tmm2[21729]: 01010201:2: Inet port exhaustion on 10.143.109.5 to 10.143.147.150:53 (proto 17)

Oct 2 06:30:03 slot1/tmm7 crit tmm7[21734]: 01010201:2: Inet port exhaustion on 10.143.109.5 to 10.143.147.150:53 (proto 17)

Oct 2 06:37:44 slot1/tmm2 crit tmm2[21729]: 01010201:2: Inet port exhaustion on 10.143.109.5 to 10.143.147.150:53 (proto 17)

Oct 2 06:47:05 slot1/tmm5 crit tmm5[21732]: 01010201:2: Inet port exhaustion on 10.143.109.5 to 10.143.147.150:53 (proto 17)

Which configuration item should the LTM Specialist review to fix the issue?

A.
SNAT Pool
A.
SNAT Pool
Answers
B.
Pool Member
B.
Pool Member
Answers
C.
Port Lockdown
C.
Port Lockdown
Answers
D.
Virtual Server Port Translation
D.
Virtual Server Port Translation
Answers
Suggested answer: A
Total 210 questions
Go to page: of 21