F5 Networks 301b Practice Test : Free Online Preparation

Free F5 Networks 301b Exam Questions

-- Exhibit --

Refer to the exhibit.

A pair of LTM devices are deployed in a high-availability (HA) pair as the diagram shows. After inserting a new

rule on the firewalls, the LTM devices become Standby. The rule drops all outbound sessions to the Internet.

Only inbound connections are allowed from the Internet. There are no other changes to the environment.

What triggered the LTM device failover?

-- Exhibit --

Refer to the exhibits.

After upgrading LTM from v10 to v11, users are unable to connect to an application. The virtual server is using

a client SSL profile for re-terminating SSL for payload inspection, but a server SSL profile is being used to reencrypt the request.

A client side ssldump did NOT show any differences between the traffic going directly to the server and the

traffic being processed by the LTM device. However, packet capture was done on the server, and differences

were noted.

Which modification will allow the LTM device to process the traffic correctly?

Enable Strict Resume.

Change Secure Renegotiation to "Request."

Enable ProxySSL option in the server SSL profile.

Change to different ciphers on the server SSL profile.

An LTM device is load balancing SIP traffic. An LTM Specialist notices that sometimes the SIP request is being

load balanced to the same server as the initial connection.

Which setting in the UDP profile will make the LTM device more evenly distribute the SIP traffic?

Set Timeout to Immediate

A new VLAN vlan301 has been configured on a highly available LTM device in partition ApplicationA. A new

directly connected backend server has been placed on vlan301. However, there are connectivity issues pinging

the default gateway. The VLAN self IPs configured on the LTM devices are 192.168.0.251 and 192.168.0.252

with floating IP 192.168.0.253. The LTM Specialist needs to perform a packet capture to assist with

troubleshooting the connectivity.

Which command should the LTM Specialist execute on the LTM device command line interface to capture the

attempted pings to the LTM device default gateway on VLAN vlan301?

tcpdump -ni /ApplicationA/vlan301 'host 192.168.0.253'

tcpdump -ni /ApplicationA/vlan301 'host 192.168.0.251 or host 192.168.0.252'

tcpdump -ni vlan301 'host 192.168.0.251 or host 192.168.0.252'

-- Exhibit --

Refer to the exhibit.

A client attempts to connect from a Google Chrome browser to a virtual server on a BIG-IP LTM. The virtual

server is SSL Offloaded. When the client connects, the client receives an SSL error. The client receives the

same errors when trying Mozilla Firefox and Internet Explorer browsers.

The LTM Specialist does an ssldump on the virtual server and receives the results as per the exhibit.

How should this be resolved?

Upgrade the client to support the appropriate SSL cipher suite.

Select the appropriate "SSL Profile (Client)" in the virtual server settings.

Adjust the SSL key length in the SSL profile to match the minimum required by the client.