Spring Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: pass65

301b LTM Specialist: Maintain & Troubleshoot Questions and Answers

Questions 4

-- Exhibit –

301b Question 4

-- Exhibit --

Refer to the exhibit.

An administrator created a monitor to a pool member web server, which resulted in a pool member that is marked red. The administrator knows the web server is working when it is accessed from another computer.

What should the administrator do to correct the problem?

Options:

A.

Change the default gateway on the server.

B.

Create a SNAT in the LTM device configuration.

C.

Change the route to the client in the LTM configuration.

D.

Change the username and/or password on the monitor.

Buy Now
Questions 5

An LTM Specialist has configured a virtual server for www.example.com, load balancing connections to a pool of application servers that provide a shopping cart application. Cookie persistence is enabled on the virtual server. Users are able to connect to the application, but the user's shopping cart fails to update. A traffic capture shows the following:

Request:

GET /cart/updatecart.php HTTP/1.1

Host: www.example.com

Connection: keep-alive

Cache-Control: max-age=0

User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_5) AppleWebKit/537.4 (KHTML, like Gecko) Chrome/22.0.1229.94 Safari/537.4

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-EncodinG. gzip,deflate,sdch

Accept-LanguagE. en-US,en;q=0.8

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3

CookiE. BIGipServerwebstore_pool=353636524.20480.0000

Response:

HTTP/1.1 200 OK

DatE. Wed, 24 Oct 2012 18:00:13 GMT

Server: Apache/2.2.22 (Ubuntu)

X-Powered-By: PHP/5.3.10-1ubuntu3.1

Set-CookiE. cartID=647A5EA6657828C69DB8188981CB5; path=/; domain=wb01.example.com

Keep-AlivE. timeout=5, max=100

Connection: Keep-Alive

Content-TypE. text/html

No changes can be made to the application.

What should the LTM Specialist do to resolve the problem?

Options:

A.

Use an iRule to rewrite the cartID cookie domain.

B.

Create a universal persistence profile on the cartID cookie.

C.

Enable source address persistence as a fallback persistence method.

D.

Create a cookie persistence profile with "match across services" enabled.

Buy Now
Questions 6

-- Exhibit –

301b Question 6

-- Exhibit --

Refer to the exhibit.

A virtual server is set up on an LTM device as follows:

Virtual server address 78.24.213.79

Default Persistence ProfilE. source_addr, 600s.

Pool NamE. Pool1

Pool Members: 10.72.250.52:80 and 10.72.250.60:80 (both on Internal Vlan)

There are several current connections to the virtual server, and pool member 10.72.250.52:80 has been set to a "Disabled" state.

A tcpdump on the Internal Vlan shows traffic going to 10.72.250.52:80.

How soon after the persistence table query was run can existing connections be refreshed/renewed to ensure that no requests are sent to 10.72.250.52?

Options:

A.

196 seconds

B.

460 seconds

C.

539 seconds

D.

590 seconds

E.

591 seconds

Buy Now
Questions 7

An LTM device has been configured to log the reasons for generating TCP RST packets.

The following log entry occurs:

"01230140:3: RST sent from 192.168.1.100:80 to 192.168.1.124:39272, [0x112d82a:1721] {peer} TCP RST from remote system."

Which condition will trigger this log entry?

Options:

A.

A virtual server connection limit has been reached.

B.

The host at the other end terminated the TCP connection.

C.

The LTM device reset the connection because no pool members are available.

D.

The LTM device has reached the maximum number of allowed attempts to send the data segment to the affected TCP connection.

Buy Now
Questions 8

An LTM Specialist configures a new HTTP virtual server on an LTM device external VLAN. The web servers are connected to the LTM device internal VLAN. Clients trying to connect to the virtual server are unable to establish a connection. A packet capture shows an HTTP response from a web server to the client and then a reset from the client to the web server.

From which two locations could the packet capture have been collected? (Choose two.)

Options:

A.

network interface of web server

B.

network interface of client machine

C.

internal VLAN interface of the LTM device

D.

external VLAN interface of the LTM device

E.

management VLAN interface of the LTM device

Buy Now
Questions 9

-- Exhibit –

301b Question 9

301b Question 9

-- Exhibit --

Refer to the exhibits.

A virtual server has been configured for SSL offload on a single-arm network. On average, the virtual server will be handling 100,000 connections, with a peak of 130,000 connections. Between the virtual server and the web servers there is a single reverse proxy to provide site caching. The proxy is configured to perform source IP persistence before contacting the web servers. The site is logging users out immediately after logging them in.

What should the LTM Specialist do to resolve this issue?

Options:

A.

Add a source address persistence profile to the virtual server.

B.

Create an iRule to add client IP persistence to a SNAT pool member.

C.

Change the virtual server server-side TCP profile to tcp-lan-optimized.

D.

Configure the virtual server HTTP profile to insert an X-Forwarded-For header.

Buy Now
Questions 10

-- Exhibit –

301b Question 10

-- Exhibit --

Refer to the exhibit.

An LTM Specialist is troubleshooting an HTTP monitor that is marking a pool member as down. Connecting to the pool member directly through a browser shows the application is up and functioning correctly.

How should the send string be modified to correct this issue?

Options:

A.

GET /\r\n\r\n

B.

GET / HTTP/1.0\r\n\r\n

C.

GET /\r\nHost: \r\n\r\n

D.

GET /\r\nHTTP/1.0\r\n\r\n

Buy Now
Questions 11

An LTM Specialist is creating a custom EAV monitor.

In which directory should the LTM Specialist upload the script?

Options:

A.

/usr/monitor

B.

/usr/monitors

C.

/config/monitors

D.

/usr/bin/monitors

E.

/config/templates

Buy Now
Questions 12

An LTM Specialist needs to modify the logging level for tcpdump execution events. Checking the BigDB Key, the following is currently configured:

sys db log.tcpdump.level {

value "Notice"

}

Which command should the LTM Specialist execute on the LTM device to change the logging level to informational?

Options:

A.

tmsh set /sys db log.tcpdump.level value informational

B.

tmsh set /sys db log.tcpdump.level status informational

C.

tmsh modify /sys db log.tcpdump.level value informational

D.

tmsh modify /sys db log.tcpdump.level status informational

Buy Now
Questions 13

An LTM Specialist is troubleshooting an issue with a new virtual server. When connecting through the virtual server, clients receive the message "The connection was reset" in the browser, although connections directly to the pool member show the application is functioning correctly.

ltm pool srv1_https_pool {

members {

192.168.2.1:https{

address 192.168.2.1

}

}

}

ltm virtual https_example_vs {

destination 192.168.1.155:https

ip-protocol tcp

mask 255.255.255.255

pool srv1_https_pool

profiles {

http { }

tcp { }

}

snat automap

vlans-disabled

}

How should the LTM Specialist resolve this issue?

Options:

A.

Enable HTTP monitoring on the pool.

B.

Add a ClientSSL profile to the virtual server.

C.

Disable SNAT Automap on the virtual server.

D.

Remove the HTTP profile from the virtual server.

Buy Now
Questions 14

-- Exhibit –

301b Question 14

-- Exhibit --

Refer to the exhibit.

Which step should an LTM Specialist take to utilize AVR?

Options:

A.

provision AVR

B.

reboot the device

C.

install the AVR add-on

D.

license the device for AVR

Buy Now
Questions 15

-- Exhibit –

301b Question 15

-- Exhibit --

Refer to the exhibit.

An LTM Specialist creates a virtual server to load balance traffic to a pool of HTTPS servers. The servers use client certificates for user authentication. The virtual server has clientssl, serverssl, and http profiles enabled. Clients are unable to connect to the application through the virtual server, but they are able to connect to the application servers directly.

Which change to the LTM device configuration will resolve the problem?

Options:

A.

Install the server certificate/key and enable Proxy SSL.

B.

Use the serverssl-insecure-compatible serverssl profile.

C.

Configure the clientssl profile to require a client certificate.

D.

Install the client's issuing Certificate Authority certificate on the LTM device.

Buy Now
Questions 16

An LTM Specialist loads a UCS file generated on a different LTM device and receives the following error message:

"mcpd[2395]: 01070608:0: License is not operational (expired or digital signature does not match contents)"

Which command should the LTM Specialist use to prevent the error?

Options:

A.

tmsh show /sys license

B.

tmsh show /sys hardware

C.

bigpipe config save /config.ucs

D.

tmsh load /sys /ucs rma < path/to/UCS >

E.

tmsh load /sys ucs < path/to/UCS > no-license

Buy Now
Questions 17

The LTM device is configured to provide load balancing to a set of web servers that implement access control lists (ACL) based on the source IP address of the client. The ACL is at the network level and the web server is configured to send a TCP reset back to the client if it is NOT permitted to connect.

The virtual server is configured with the default OneConnect profile.

The ACL is defined on the web server as:

Permit: 192.168.136.0/24

Deny: 192.168.116.0/24

The packet capture is taken of two individual client flows to a virtual server with IP address 192.168.136.100.

Client A - Src IP 192.168.136.1 - Virtual Server 192.168.136.100:

Clientside:

09:35:11.073623 IP 192.168.136.1.55684 > 192.168.136.100.80: S 869998901:869998901(0) win 8192 < mss 1460,nop,wscale 2,nop,nop,sackOK >

09:35:11.073931 IP 192.168.136.100.80 > 192.168.136.1.55684: S 2273668949:2273668949(0) ack 869998902 win 4380 < mss 1460,nop,wscale 0,sackOK,eol >

09:35:11.074928 IP 192.168.136.1.55684 > 192.168.136.100.80: . ack 1 win 16425

09:35:11.080936 IP 192.168.136.1.55684 > 192.168.136.100.80: P 1:299(298) ack 1 win 16425

09:35:11.081029 IP 192.168.136.100.80 > 192.168.136.1.55684: . ack 299 win 4678

Serverside:

09:35:11.081022 IP 192.168.136.1.55684 > 192.168.116.128.80: S 685865802:685865802(0) win 4380 < mss 1460,nop,wscale 0,sackOK,eol >

09:35:11.081928 IP 192.168.116.128.80 > 192.168.136.1.55684: S 4193259095:4193259095(0) ack 685865803 win 5840 < mss 1460,nop,nop,sackOK,nop,wscale 6 >

09:35:11.081943 IP 192.168.136.1.55684 > 192.168.116.128.80: . ack 1 win 4380

09:35:11.081955 IP 192.168.136.1.55684 > 192.168.116.128.80: P 1:299(298) ack 1 win 4380

09:35:11.083765 IP 192.168.116.128.80 > 192.168.136.1.55684: . ack 299 win 108

Client B - Src IP 192.168.116.1 - Virtual Server 192.168.136.100:

Clientside:

09:36:11.244040 IP 192.168.116.1.55769 > 192.168.136.100.80: S 3320618938:3320618938(0) win 8192 < mss 1460,nop,wscale 2,nop,nop,sackOK >

09:36:11.244152 IP 192.168.136.100.80 > 192.168.116.1.55769: S 3878120666:3878120666(0) ack 3320618939 win 4380 < mss 1460,nop,wscale 0,sackOK,eol >

09:36:11.244839 IP 192.168.116.1.55769 > 192.168.136.100.80: . ack 1 win 16425

09:36:11.245830 IP 192.168.116.1.55769 > 192.168.136.100.80: P 1:299(298) ack 1 win 16425

09:36:11.245922 IP 192.168.136.100.80 > 192.168.116.1.55769: . ack 299 win 4678

Serverside:

09:36:11.245940 IP 192.168.136.1.55684 > 192.168.116.128.80: P 599:897(298) ack 4525 win 8904

09:36:11.247847 IP 192.168.116.128.80 > 192.168.136.1.55684: P 4525:5001(476) ack 897 win 142

Why was the second client flow permitted by the web server?

Options:

A.

A global SNAT is defined.

B.

SNAT automap was enabled on the virtual server.

C.

The idle TCP session from the first client was re-used.

D.

A source address persistence profile is assigned to the virtual server.

Buy Now
Questions 18

A client is attempting to log in to a web application that requires authentication. The following HTTP headers are sent by the client:

GET /owa/ HTTP/1.1

Authorization: Basic dXNlcm5hbWU6cGFzc3dvcmQ=

User-Agent: curl/7.26.0

Host: 10.0.0.14

Accept: */*

Accept-EncodinG. gzip,deflate

The web server is responding with the following HTTP headers:

HTTP/1.1 401 Unauthorized

Content-TypE. text/html

Server: Microsoft-IIS/7.5

WWW-AuthenticatE. NTLM

DatE. Wed, 16 Aug 1977 19:12:31 GMT

Content-LengtH. 1293

The client has checked the login credentials and believes the correct details are being entered.

What is the reason the destination web server is sending an HTTP 401 response?

Options:

A.

The username and password are incorrect.

B.

The server has an incorrect date configured.

C.

The client is using the wrong type of browser.

D.

The wrong authentication mechanism is being used.

Buy Now
Questions 19

Which iRule will reject any connection originating from a 10.0.0.0/8 network?

Options:

A.

when CLIENT_ACCEPTED {

set remote_ip [IP::addr [IP::remote_addr] mask 8]

switch $remote_ip {

"10.0.0.0" { reject }

"11.0.0.0" { pool pool_http1}

default { pool http_pool }

}

}

B.

when CLIENT_ACCEPTED {

set remote_ip [IP::addr [IP::local_addr] mask 8]

switch $remote_ip {

"10.0.0.0" { reject }

"11.0.0.0" { pool pool_http1}

default { pool http_pool }

}

}

C.

when CLIENT_ACCEPTED {

set remote_ip [IP::addr [IP::client_addr] mask 255.0.0.0]

switch $remote_ip {

"10.0.0.0" { reject }

"11.0.0.0" { pool pool_http1}

default { pool http_pool }

}

}

D.

when CLIENT_ACCEPTED {

set remote_ip [IP::addr [IP::local_addr] mask 255.0.0.0]

switch $remote_ip {

"10.0.0.0" { reject }

"11.0.0.0" { pool pool_http1}

default { pool http_pool }

}

}

Buy Now
Questions 20

An LTM Specialist wants to allow access to the Always On Management (AOM) from the network.

Which two methods should the LTM Specialist use to configure the AOM interface? (Choose two.)

Options:

A.

Configure the AOM IP from the front panel buttons and LCD.

B.

Choose the network configurator in the AOM menu on the serial port.

C.

Configure the AOM network address in the GUI under System > Platform.

D.

Log in to the Host via ssh, "ssh aom", and modify the network configuration file.

Buy Now
Questions 21

An LTM Specialist is troubleshooting a problem on an eCommerce website. The user browses the online store using port 80, adding items to the shopping cart. The user then clicks the "Checkout" button on the site, which redirects the user to port 443 for the checkout process. Suddenly, the user's shopping cart is shown as empty. The shopping cart data is stored in memory on the server, and the default source address persistence profile is used on both virtual servers.

How should the LTM Specialist resolve this issue?

Options:

A.

Add an HTTP profile to both virtual servers.

B.

Enable SNAT Automap on both virtual servers.

C.

Create a custom persistence profile and enable "Map Proxies."

D.

Create a custom persistence profile and enable "Match Across Services."

Buy Now
Questions 22

An LTM device supports two power supplies. The value of the BigDB key "platform.powersupplymonitor" is equal to enable.

Where would the error message be visible if one of the power supplies fails or is NOT plugged in?

Options:

A.

visible only via the console

B.

in the /var/log/ltm log file

C.

in the /var/log/kern.log file

D.

in the /var/log/tmm log file

Buy Now
Questions 23

-- Exhibit –

301b Question 23

-- Exhibit --

Refer to the exhibit.

An LTM Specialist is upgrading the LTM devices.

Which device should be upgraded first?

Options:

A.

Device A

B.

Device B

C.

Device C

D.

Device D

Buy Now
Questions 24

What is the recommended procedure for upgrading a major TMOS release on a BIG-IP platform?

Options:

A.

1. Renew the device license.

2. Take a configuration backup.

3. Reboot the device to the non-active volume.

4. Upload the device code.

5. Install device code to the current volume.

B.

1. Take a configuration backup.

2. Upload the device code.

3. Install device code to the non-active volume.

4. Reboot the device to the non-active volume.

5. Renew the device license.

C.

1. Renew the device license.

2. Take a configuration backup.

3. Upload the device code.

4. Install device code to the non-active volume.

5. Reboot the device to the non-active volume.

D.

1. Take a configuration backup.

2. Reboot the device to the non-active volume.

3. Renew the device license.

4. Upload the device code.

5. Install device code to the current volume.

Buy Now
Questions 25

-- Exhibit --

301b Question 25

-- Exhibit --

Refer to the exhibit.

A company uses a complex piece of client software that connects to one or more virtual servers (VS) hosted on an LTM device. The client software is experiencing issues. An LTM Specialist must determine the cause of the problem. The LTM Specialist has the tcpdump extract. The client loses connection with the LTM device.

Where is the reset originating?

Options:

A.

the local switch

B.

the application server

C.

the device initiating the connection

D.

the destination device of the initial connection

Buy Now
Questions 26

An application is configured on an LTM device:

Virtual server: 10.0.0.1:80 (VLAN vlan301)

SNAT IP: 10.0.0.1

Pool members: 10.0.1.1:8080, 10.0.1.2:8080, 10.0.1.3:8080 (VLAN vlan302)

Which packet capture should the LTM Specialist perform on the LTM device command line interface to capture only client traffic specifically for this virtual server?

Options:

A.

tcpdump -ni 0.0:nnn -s 0 'host 10.0.0.1' -w /var/tmp/trace.cap

B.

tcpdump -ni vlan301 -s 0 'port 80 and host 10.0.0.1' -w /var/tmp/trace.cap

C.

tcpdump -ni vlan301 -s 0 'port 8080 and host 10.0.1.1 or host 10.0.1.2 or host 10.0.1.3' -w /var/tmp/trace.cap

D.

tcpdump -ni vlan302 -s 0 'port 8080 and host 10.0.1.1 or host 10.0.1.2 or host 10.0.1.3' -w /var/tmp/trace.cap

E.

tcpdump -ni 0.0:nnn -s 0 '(port 80 and host 10.0.0.1) or (port 8080 and host 10.0.1.1 or host 10.0.1.2 or host 10.0.1.3)' -w /var/tmp/trace.cap

Buy Now
Questions 27

An LTM Specialist is troubleshooting an issue where one LTM device in a three LTM device group is failing to synchronize after a synchronize to group command is issued. The LTM Specialist verifies there are no packet filters, port lock down, or network issues preventing the connection.

What are two reasons the synchronization group is having issues? (Choose two.)

Options:

A.

Certificates expired on all of the peer LTM devices.

B.

Certificates stored for the device trusts on all of the peer LTM devices are corrupted.

C.

Admin passwords changed on one of the peer LTM devices that are able to synchronize.

D.

Admin password changed on the LTM device NOT receiving the synchronized configurations.

E.

Certificates stored for the device trusts on the LTM device NOT receiving the configuration are corrupted.

Buy Now
Questions 28

-- Exhibit –

301b Question 28

301b Question 28

-- Exhibit --

Refer to the exhibits.

When observing the AVR statistics for the HTTPS_VS, an LTM Specialist realizes that HTTP status codes are NOT being recorded.

How should the LTM Specialist modify the configuration to record the HTTP status codes?

Options:

A.

assign a streaming profile to the virtual server

B.

assign client SSL and server SSL profiles to the virtual server

C.

enable Statistics Logging Type, External on the analytics profile

D.

enable Collected Entities, Response Codes on the analytics profile

Buy Now
Questions 29

-- Exhibit –

301b Question 29

-- Exhibit --

Refer to the exhibit.

An LTM Specialist is troubleshooting a new HTTP monitor on a pool. The pool member is functioning correctly when accessed directly through a browser. However, the monitor is marking the member as down. The LTM Specialist captures the monitor traffic via tcpdump.

What is the issue?

Options:

A.

The server is marking the connection as closed.

B.

The pool member is rejecting the monitor request.

C.

The monitor request is NOT returning the page body.

D.

The 'time-until-up' setting on the monitor is incorrect.

Buy Now
Questions 30

Given a tcpdump on an LTM device from both sides of a connection on the External and Internal VLANs, how should an LTM Specialist determine if SNAT is enabled for a particular pool?

Options:

A.

by checking to see if the Source IP is carried through from the External Vlan to the Internal Vlan

B.

by checking to see if the Destination port is carried through from the External Vlan to the Internal Vlan

C.

by checking to see if the Source port is carried through from the External Vlan to the Internal Vlan

D.

by checking to see if the Destination IP is carried through from the External Vlan to the Internal Vlan

Buy Now
Questions 31

There are three servers in the pool: 172.16.20.1, 172.16.20.2, and 172.16.20.3, with the virtual IP address 10.0.20.88.

A user CANNOT connect to an HTTP application. To understand the problem and find a solution, the LTM Specialist runs two concurrent traces on the LTM device, with the following results:

Trace on client side:

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode

listening on 0.0, link-type EN10MB (Ethernet), capture size 96 bytes

22:22:07.423759 IP 172.16.20.100.53875 > 10.0.20.88.80: S 998346084:998346084(0) win 5840 < mss 1460,sackOK,timestamp 67942058 0,nop,wscale 4 >

22:22:07.424056 IP 10.0.20.88.80 > 172.16.20.100.53875: S 4671780:4671780(0) ack 998346085 win 4380 < mss 1460,nop,wscale 0,nop,nop,timestamp 2392362490 67942058,sackOK,eol >

22:22:07.424776 IP 172.16.20.100.53875 > 10.0.20.88.80: . ack 1 win 365 < nop,nop,timestamp 67942058 2392362490 >

22:22:07.424790 IP 172.16.20.100.53875 > 10.0.20.88.80: P 1:149(148) ack 1 win 365 < nop,nop,timestamp 67942058 2392362490 >

22:22:07.424891 IP 10.0.20.88.80 > 172.16.20.100.53875: . ack 149 win 4528 < nop,nop,timestamp 2392362491 67942058 >

22:22:12.024850 IP 10.0.20.88.80 > 172.16.20.100.53875: R 1:1(0) ack 149 win 4528

6 packets captured

6 packets received by filter

0 packets dropped by kernel

Trace on server side:

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode

listening on internal, link-type EN10MB (Ethernet), capture size 96 bytes

22:22:07.424881 IP 172.16.20.100.53875 > 172.16.20.2.80: S 51116678:51116678(0) win 4380 < mss 1460,nop,wscale 0,nop,nop,timestamp 2392362491 0,sackOK,eol >

22:22:08.424893 IP 172.16.20.100.53875 > 172.16.20.2.80: S 51116678:51116678(0) win 4380 < mss 1460,nop,wscale 0,nop,nop,timestamp 2392363491 0,sackOK,eol >

22:22:09.625082 IP 172.16.20.100.53875 > 172.16.20.2.80: S 51116678:51116678(0) win 4380 < mss 1460,nop,wscale 0,nop,nop,timestamp 2392364691 0,sackOK,eol >

22:22:10.825194 IP 172.16.20.100.53875 > 172.16.20.2.80: S 51116678:51116678(0) win 4380 < mss 1460,sackOK,eol >

4 packets captured

4 packets received by filter

0 packets dropped by kernel

What should the LTM Specialist do to solve the problem?

Options:

A.

Edit the packet filter rules.

B.

Modify the monitor of the pool.

C.

Enable the virtual server.

D.

Configure the virtual server to use SNAT.

Buy Now
Questions 32

A virtual server for a set of web services is constructed on an LTM device. The LTM Specialist has created an iRule and applied this iRule to the virtual server:

when HTTP_REQUEST {

switch [HTTP::uri] {

"/ws1/ws.jsp" {

log local0. "[HTTP::uri]-Redirected to JSP Pool"

pool JSP

}

default { log local0. "[HTTP::uri]-Redirected to Non-JSP Pool"

pool NonJSP

}

}

}

However, the iRule is NOT behaving as expected. Below is a snapshot of the log:

/WS1/ws.jsp-Redirected to JSP Pool

/WS1/ws.jsp-Redirected to JSP Pool

/WS1/ws.jsp-Redirected to JSP Pool

/WS1/WS.jsp-Redirected to Non-JSP Pool

/ws1/WS.jsp-Redirected to Non-JSP Pool

/WS1/ws.jsp-Redirected to JSP Pool

/ws1/ws.jsp-Redirected to Non-JSP Pool

What should the LTM Specialist do to resolve this?

Options:

A.

Use the followinG. switch -lc [HTTP::uri]

B.

Use the followinG. switch [string tolower [HTTP::uri]]

C.

Set the "Case Sensitivity" option of each member to "None".

D.

Select the "Process Case-Insensitivity" option for the virtual server.

Buy Now
Questions 33

An LTM device is deployed in a one-armed topology. The virtual server, clients, and web servers are connected on the LTM device internal VLAN. A client tries to connect to the virtual server and is unable to establish a connection. A packet capture from the LTM device internal VLAN shows that the HTTP request is being forwarded to the web server.

From which two additional locations should protocol analyzer data be collected? (Choose two.)

Options:

A.

network interface of web server

B.

network interface of client machine

C.

internal VLAN interface of LTM device

D.

external VLAN interface of LTM device

E.

any network interface of the Internet firewall

Buy Now
Questions 34

-- Exhibit –

301b Question 34

-- Exhibit --

Refer to the exhibit.

An LTM Specialist configures a virtual server to load balance to a pool of FTP servers. File transfers are failing. The virtual server is configured as follows:

ltm virtual ftp_vs {

destination 10.10.1.103:ftp

ip-protocol tcp

mask 255.255.255.255

pool ftp_pool

profiles {

tcp { }

}

vlans-disabled

}

Which change will resolve the problem?

Options:

A.

Add an FTP monitor to the pool.

B.

Add an FTP profile to the virtual server.

C.

Enable loose initiation in the TCP profile.

D.

Increase the TCP timeout value in the TCP profile.

Buy Now
Questions 35

A web application requires the client to provide the destination server and service identification.

Which HTTP header will supply this information?

Options:

A.

Host

B.

From

C.

Expect

D.

Connection

Buy Now
Questions 36

-- Exhibit –

301b Question 36

301b Question 36

-- Exhibit --

Refer to the exhibits.

Users are able to access the application when connecting directly to the web server but are unsuccessful when connecting to the virtual server. Return traffic bypasses the LTM device using Layer 2 nPath routing.

Which configuration change resolves this problem?

Options:

A.

Enable a SNAT pool on the LTM device.

B.

Disable address translation on the LTM device.

C.

Configure a route on the web server to the client subnet.

D.

Configure the virtual server to listen on port 80 on the LTM device.

E.

Configure the VIP address on the loopback interface of the web server.

Buy Now
Questions 37

A web developer has created a custom HTTP call to a backend application. The HTTP headers being sent by the HTTP call are:

GET / HTTP/1.1

User-Agent: MyCustomApp (v1.0)

Accept: text/html

Cache-Control: no-cache

Connection: keep-alive

CookiE. somecookie=1

The backend server is responding with the following:

HTTP/1.1 400 Bad Request

DatE. Wed, 20 Jul 2012 17:22:41 GMT

Connection: close

Why is the HTTP web server responding with a HTTP 400 Bad Request?

Options:

A.

The client request does NOT include a Host header.

B.

The User-Agent header contains an invalid character.

C.

The web server is NOT expecting a keep-alive connection.

D.

The web server is configured to accept HTTP 1.0 requests only.

Buy Now
Questions 38

Given this as the first packet displayed of an ssldump:

2 2 1296947622.6313 (0.0001) S > CV3.1(74) Handshake

ServerHello

Version 3.1

random[32]=

19 21 d7 55 c1 14 65 63 54 23 62 b7 c4 30 a2 f0

b8 c4 20 06 86 ed 9c 1f 9e 46 0f 42 79 45 8a 29

session_id[32]=

c4 44 ea 86 e2 ba f5 40 4b 44 b4 c2 3a d8 b4 ad

4c dc 13 0d 6c 48 f2 70 19 c3 05 f4 06 e5 ab a9

cipherSuite TLS_RSA_WITH_RC4_128_SHA

compressionMethod NULL

In reviewing the rest of the ssldump, the application data is NOT being decrypted.

Why is ssldump failing to decrypt the application data?

Options:

A.

The application data is encrypted with SSLv3.

B.

The application data is encrypted with TLSv1.

C.

The data is contained within a resumed TLS session.

D.

The BigDB Key Log.Tcpdump.Level needs to be adjusted.

Buy Now
Questions 39

-- Exhibit –

301b Question 39

301b Question 39

-- Exhibit --

Refer to the exhibits.

After upgrading LTM from v10 to v11, users are unable to connect to an application. The virtual server is using a client SSL profile for re-terminating SSL for payload inspection, but a server SSL profile is being used to re-encrypt the request.

A client side ssldump did NOT show any differences between the traffic going directly to the server and the traffic being processed by the LTM device. However, packet capture was done on the server, and differences were noted.

Which modification will allow the LTM device to process the traffic correctly?

Options:

A.

Enable Strict Resume.

B.

Change Secure Renegotiation to "Request."

C.

Enable ProxySSL option in the server SSL profile.

D.

Change to different ciphers on the server SSL profile.

Buy Now
Questions 40

-- Exhibit –

301b Question 40

-- Exhibit --

Refer to the exhibit.

Which pool can be removed without affecting client traffic?

Options:

A.

ftp_pool

B.

http_pool

C.

server1_80

D.

server_pool

Buy Now
Questions 41

An HA pair of LTM devices configured in Active-Standby mode stops responding to traffic and causes an outage. The Active device becomes Standby, but the partner device stays in Standby mode instead of taking over as Active. A reboot and restart of the services brings the LTM device to Active mode for a short time, but then it goes into Standby mode again.

Which two configuration components caused this condition? (Choose two.)

Options:

A.

VLAN Fail-safe

B.

System Fail-safe

C.

Gateway Fail-safe

D.

Switch Board Failure

E.

Link down on Failover

Buy Now
Questions 42

-- Exhibit –

301b Question 42

-- Exhibit --

Refer to the exhibit.

An LTM Specialist is troubleshooting a new HTTP monitor on a pool. The pool member is functioning correctly when accessed directly through a browser, although the monitor is marking the member as down. As part of the troubleshooting, the LTM Specialist has captured the monitor traffic via tcpdump.

How should the LTM Specialist resolve this issue?

Options:

A.

Add the 'http' monitor to the pool.

B.

Add the 'icmp' monitor to the node.

C.

Modify the receive string to valid content.

D.

Correct the firewall rules on the pool member.

Buy Now
Questions 43

A user is having issues with connectivity to an HTTPS virtual server. The virtual server is on the LTM device's external vlan, and the pools associated with the virtual server are on the internal vlan. An LTM Specialist does a tcpdump on the external interface and notices that the host header is incomplete.

In which location should the LTM Specialist put a traffic analyzer to gather the most pertinent data?

Options:

A.

server

B.

external VLAN

C.

internal VLAN

D.

client machine

Buy Now
Questions 44

-- Exhibit –

301b Question 44

-- Exhibit --

Refer to the exhibit.

An LTM Specialist has uploaded a qkview to F5 iHealth.

Within the GUI, what is the correct procedure to comply with the recommendation shown in the exhibit?

Options:

A.

Obtain product version image from release.f5.com.

Overwrite existing image with new product version image.

Select product version image and click Install.

Select the available disk and volume set name.

B.

Obtain product version image from images.f5.com.

Overwrite existing image with new product version image.

Select product version image and click Install.

Select the available disk and volume set name.

C.

Obtain product version image from downloads.f5.com.

Import product version image.

Install image onto BIG-IP platform.

Select product version image and click Install.

Select the available disk and volume set name.

D.

Log a call requesting the product version image via websupport.f5.com

Import product version image.

Install image onto BIG-IP platform.

Select product version image and click Install.

Select the available disk and volume set name.

Buy Now
Questions 45

A BIG-IP Operator has made a grave error and deleted a few virtual servers on the active LTM device fronting the web browsing proxies. The BIG-IP Operator has NOT yet performed a configuration sync.

Which command should the LTM Specialist execute on the active LTM device to force a failover to the standby node and restore web browsing?

Options:

A.

tmsh /sys failover standby

B.

tmsh run /sys failover standby

C.

tmsh /sys failover status standby

D.

tmsh run /sys failover status standby

Buy Now
Questions 46

What is a benefit provided by F5 Enterprise Manager?

Options:

A.

Enterprise Manager allows administrators to analyze traffic flow and create custom application IPS signatures.

B.

Enterprise Manager allows administrators to establish baseline application usage and generate an alert if an administratively set threshold for the application is exceeded.

C.

Enterprise Manager allows administrators to identify application vulnerabilities. Virtual patches are then automatically generated and applied to remediate the detected application vulnerability.

D.

Enterprise Manager allows administrators to monitor all application traffic. Configuration optimization suggestions based on the observed traffic patterns are then generated for the administrator to review and apply.

Buy Now
Questions 47

An LTM device has a virtual server configured as a Performance Layer 4 virtual listening on 0.0.0.0:0 to perform routing of packets to an upstream router. The client machine at IP address 192.168.0.4 is attempting to contact a host upstream of the LTM device on IP address 10.0.0.99.

The network flow is asymmetrical, and the following TCP capture displays:

# tcpdump -nnni 0.0 'host 192.168.0.4 and host 10.0.0.99'

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode

listening on 0.0, link-type EN10MB (Ethernet), capture size 96 bytes

05:07:55.499954 IP 192.168.0.4.35345 > 10.0.0.99.443: S 3205656213:3205656213(0) ack 3267995082 win 1480

05:07:55.499983 IP 10.0.0.99.443 > 192.168.0.4.35345: R 1:1(0) ack 1 win 0

05:07:56.499960 IP 192.168.0.4.35345 > 10.0.0.99.443: S 3205656213:3205656213(0) ack 3267995082 win 1480

05:07:56.499990 IP 10.0.0.99.443 > 192.168.0.4.35345: R 1:1(0) ack 1 win 0

4 packets captured

Which option within the fastL4 profile needs to be enabled by the LTM Specialist to prevent the LTM device from rejecting the flow?

Options:

A.

Loose Close

B.

Loose Initiation

C.

Reset on Timeout

D.

Generate Initial Sequence Number

Buy Now
Questions 48

-- Exhibit –

301b Question 48

-- Exhibit --

Refer to the exhibit.

An LTM Specialist configures a virtual server that balances HTTP connections to a pool of three application servers. Approximately one out of every three connections to the virtual server fails.

Which two actions will resolve the problem? (Choose two.)

Options:

A.

Assign a custom HTTP monitor to the pool.

B.

Enable SNAT automap on the virtual server.

C.

Verify that port lockdown is set to allow port 80.

D.

Verify the default gateway on the application servers.

E.

Increase the TCP timeout value in the default TCP profile.

Buy Now
Questions 49

A new VLAN vlan301 has been configured on a highly available LTM device in partition ApplicationA. A new directly connected backend server has been placed on vlan301. However, there are connectivity issues pinging the default gateway. The VLAN self IPs configured on the LTM devices are 192.168.0.251 and 192.168.0.252 with floating IP 192.168.0.253. The LTM Specialist needs to perform a packet capture to assist with troubleshooting the connectivity.

Which command should the LTM Specialist execute on the LTM device command line interface to capture the attempted pings to the LTM device default gateway on VLAN vlan301?

Options:

A.

tcpdump -ni /ApplicationA/vlan301 'host 192.168.0.253'

B.

tcpdump -ni vlan301 'host 192.168.0.253'

C.

tcpdump -ni /ApplicationA/vlan301 'host 192.168.0.251 or host 192.168.0.252'

D.

tcpdump -ni vlan301 'host 192.168.0.251 or host 192.168.0.252'

Buy Now
Questions 50

-- Exhibit –

301b Question 50

-- Exhibit --

Refer to the exhibit.

An LTM Specialist is troubleshooting an issue with an application configured on an LTM device. The application works properly when accessed directly via the servers; however, it does not work when accessed via the LTM device. The virtual server, 192.168.1.211:443, is configured to SNAT using the address 192.168.1.144 and references a pool with the member 192.168.10.80:443. The virtual server has no Client or Server SSL profiles associated.

Which configuration change will allow the application to function through the virtual server?

Options:

A.

Change pool member port to 8443.

B.

Change virtual server port to 8443.

C.

Add SSL off-loading to the pool member.

D.

Add Client and Server SSL profiles to the virtual server.

Buy Now
Questions 51

-- Exhibit –

301b Question 51

-- Exhibit --

Refer to the exhibit.

A web application is configured to allow sessions to continue even after a user computer is shut down for the night. A new LTM device is configured to load balance the web application to several servers. The application owner reports that application users are logged out of the web application whenever their browser is restarted or computer is rebooted.

What is the problem?

Options:

A.

The virtual server does NOT have persistence configured.

B.

The virtual server does NOT have persistence mirroring configured.

C.

The cookie set by the LTM device does NOT have an "Expires" value.

D.

The cookie set by the server is NOT being passed to client by the LTM device.

Buy Now
Questions 52

A virtual server for a set of web services is constructed on an LTM device. The LTM Specialist has created an iRule and applied this iRule to the virtual server:

when HTTP_REQUEST {

switch [HTTP::uri] {

"/WS1/ws.jsp" {

log local0. "[HTTP::uri]-Redirected to JSP Pool"

pool JSP

}

default { log local0. "[HTTP::uri]-Redirected to Non-JSP Pool"

pool NonJSP

}

}

}

However, the iRule is NOT behaving as expected. Below is a snapshot of the log:

/WS1/ws.jsp-Redirected to JSP Pool

/WS1/ws.jsp-Redirected to JSP Pool

/WS1/ws.jsp-Redirected to JSP Pool

/WS1/WS.jsp-Redirected to Non-JSP Pool

/ws1/WS.jsp-Redirected to Non-JSP Pool

/WS1/ws.jsp-Redirected to JSP Pool

/ws1/ws.jsp-Redirected to Non-JSP Pool

What is the problem?

Options:

A.

The condition in the iRule is case sensitive.

B.

The 'switch' command in the iRule has been used incorrectly.

C.

The pool members of both pools need to be set up as case-insensitive members.

D.

The "Process Case-Insensitivity" option for the virtual server needs to be selected.

Buy Now
Questions 53

An LTM Specialist has just captured trace /var/tmp/trace.cap for site www.example.com while listening on virtual address 10.0.0.1:443 configured on partition ApplicationA. The data payload being captured is SSL encrypted.

Which command should the LTM Specialist execute to decrypt the data payload?

Options:

A.

ssldump -Aed -nr /var/tmp/trace.cap -k /config/filestore/files_d/Common_d/certificate_d/:Common:www.example.com.crt_1

B.

ssldump -Aed -nr /var/tmp/trace.cap -k /config/filestore/files_d/Common_d/certificate_key_d/:Common:www.example.com.key_1

C.

ssldump -Aed -nr /var/tmp/trace.cap -k /config/filestore/files_d/ApplicationA_d/certificate_d/:ApplicationA:www.example.com.crt_1

D.

ssldump -Aed -nr /var/tmp/trace.cap -k /config/filestore/files_d/ApplicationA_d/certificate_key_d/:ApplicationA:www.example.com.key_1

Buy Now
Questions 54

An LTM Specialist defines a receive string in the HTTP monitor and then assigns it to the HTTP pool. The monitor has an interval of 5 seconds and a timeout of 16 seconds.

If the receive string is NOT seen in the the HTTP payload after 20 seconds, how does the LTM device mark the monitor status?

Options:

A.

offline

B.

unknown

C.

available

D.

unavailable

E.

forced offline

Buy Now
Questions 55

Given:

Filesystem Size Used Avail Use% Mounted on

/dev/md11 248M 248M 0 100% /

/dev/md13 3.0G 76M 2.8G 3% /config

/dev/md12 1.7G 1.1G 476M 71% /usr

/dev/md14 3.0G 214M 2.6G 8% /var

/dev/md0 30G 2.2G 26G 8% /shared

/dev/md1 6.9G 288M 6.3G 5% /var/log

none 3.9G 452K 3.9G 1% /dev/shm

none 3.9G 19M 3.9G 1% /var/tmstat

none 3.9G 1.2M 3.9G 1% /var/run

prompt 4.0M 12K 4.0M 1% /var/prompt

/dev/md15 12G 8.3G 3.1G 74% /var/lib/mysql

Which command is used to produce this output?

Options:

A.

df

B.

du

C.

lsof

D.

ps

E.

vmstat

Buy Now
Questions 56

An LTM Specialist notices the following error on the stdout console:

mcpd[2395]: 01070608:0: License is not operational(expired or digital signature does not match contents)

Which command should be executed to verify the LTM device license?

Options:

A.

bigpipe version

B.

tmsh show /sys license

C.

tmsh /util bigpipe version

D.

tmsh show /sys license status

Buy Now
Questions 57

An LTM Specialist troubleshooting an issue looks at the following /var/log/ltm entries:

Oct 2 04:52:42 slot1/tmm7 crit tmm7[21734]: 01010201:2: Inet port exhaustion on 10.143.109.5 to 10.143.147.150:53 (proto 17)

Oct 2 05:37:16 slot1/tmm7 crit tmm7[21734]: 01010201:2: Inet port exhaustion on 10.143.109.5 to 10.143.147.150:53 (proto 17)

Oct 2 05:57:32 slot1/tmm2 crit tmm2[21729]: 01010201:2: Inet port exhaustion on 10.143.109.5 to 10.143.147.150:53 (proto 17)

Oct 2 06:30:03 slot1/tmm7 crit tmm7[21734]: 01010201:2: Inet port exhaustion on 10.143.109.5 to 10.143.147.150:53 (proto 17)

Oct 2 06:37:44 slot1/tmm2 crit tmm2[21729]: 01010201:2: Inet port exhaustion on 10.143.109.5 to 10.143.147.150:53 (proto 17)

Oct 2 06:47:05 slot1/tmm5 crit tmm5[21732]: 01010201:2: Inet port exhaustion on 10.143.109.5 to 10.143.147.150:53 (proto 17)

Which configuration item should the LTM Specialist review to fix the issue?

Options:

A.

SNAT Pool

B.

Pool Member

C.

Port Lockdown

D.

Virtual Server Port Translation

Buy Now
Questions 58

An LTM device is load balancing telnet and ssh applications in a client/server environment experiencing significant packet delay.

Which setting in the TCP profile should reduce the amount of packet delay?

Options:

A.

disable Bandwidth Delay

B.

disable Nagle's Algorithm

C.

enable Proxy Maximum Segment

D.

increase Maximum Segment Retransmissions

Buy Now
Questions 59

-- Exhibit –

301b Question 59

-- Exhibit --

Refer to the exhibit.

An LTM Specialist is investigating intermittent page load issues being reported by users.

What should the LTM Specialist do to resolve the issue?

Options:

A.

Remove HTTP monitor on the pool.

B.

Assign an HTTP monitor to the pool.

C.

Select least connections load balancing method on virtual server.

D.

Remove least connections load balancing method on virtual server.

Buy Now
Questions 60

A web application is meant to log the URI of the resource that responded to the client's initial Request-URI.

Which HTTP header will supply this information?

Options:

A.

Via

B.

Server

C.

Trailer

D.

Referer

Buy Now
Questions 61

-- Exhibit –

301b Question 61

-- Exhibit --

Refer to the exhibit.

An LTM Specialist is reviewing the 'test' partition.

Which objects, in order, can be removed from the partition?

Options:

A.

delete pool test1_pool, delete node 10.1.1.2

B.

delete node 10.1.1.2, delete pool test2_pool

C.

delete pool test1_pool, delete node 10.1.1.2, delete node 10.1.1.1

D.

delete virtual test1_vs, delete pool test2_pool, delete node 10.1.1.1

E.

delete pool test1_pool, delete pool test2_pool, delete node 10.1.1.3

Buy Now
Questions 62

An F5 LTM Specialist needs to perform an LTM device configuration backup prior to RMA swap.

Which command should be executed on the command line interface to create a backup?

Options:

A.

bigpipe config save /var/tmp/backup.ucs

B.

tmsh save /sys ucs /var/tmp/backup.ucs

C.

tmsh save /sys config /var/tmp/backup.ucs

D.

tmsh save /sys config ucs /var/tmp/backup.ucs

Buy Now
Exam Code: 301b
Exam Name: LTM Specialist: Maintain & Troubleshoot
Last Update: Apr 30, 2026
Questions: 209

PDF + Testing Engine

$63.52  $181.49

Testing Engine

$50.57  $144.49
buy now 301b testing engine

PDF (Q&A)

$43.57  $124.49
buy now 301b pdf