Question 1
Multiple choice
A virtual server is configured to handle https traffic. The clientssl profile is configured to use a2048- bit RSA key. Due to security requirements, is the LTM Specialist needs to use a 4096-bit RSA key in the future. What two effects will this change have on the BIG-IP device? (Choose two)
-
A
Increase of CPU usage on the BIG-IP device
-
B
Decrease to 20% of licensed TPS
-
C
Decrease to 90% of licensed TPS
-
D
Increased of concurrent connection on client-side
-
E
Increase of TLS Renegotiation
Reveal answer details
Close answer details
An LTM Specialist needs to use the tmsh command to create a pool named http_pool with member 10.10.101:80 on an LTM device. Which expression should the LTM Specialist use?
-
A
# tmsh create pool http_pool members {10.10.10.101:80}
-
B
# tmsh create pool http_pool members add {10.10.10.101:80}
-
C
# tmsh create it pool http_pool members {10.10.10.101:80}
-
D
# tmsh create itm pool http_pool member {10.10.10.101:80}
Reveal answer details
Close answer details
Correct answerC
ExplanationThe option should be wrong, it should ne itm instead of it, the correct command is:tmsh create itm pool http_pool members add (10.10.10.101:80}
An LTM device load balances a pool of routers. The LTM device needs to verify path availability to an HTTP server with the IP address 192 168.10 10. located beyond the routers. Which monitor type and parameters arc required?
-
A
HTTP monitor alias address 192 168.10 10. and set the alias to port 80
-
B
TCP monitor, alias address 192.168.10.10. and set the alias to port 80
-
C
TCP monitor change transparent option to Yes. set alias address 192.168.10.10. and set the alias to port 80
-
D
TCP monitor, change transparent option to Yes, and sot the alias to port 80
Reveal answer details
Close answer details
In an iApp, which configuration protects against accidental changes to an application Services configuration?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
An LTM is configure an application that is separated into several subdomains across multiple virtual servers. Many of these subdomains require encryption and could be accessed by anyone on the internet. The configuration must NOT result in SSL warnings to end users. How should the LTM Specialist configure the SSL profiles for these virtual servers?
-
A
Obtain an SSL certificate for each subdomain, make a ServerSSL profile for each subdomain, and apply to the related SSL Virtual Server.
-
B
Obtain a wildcard certificate, create one ClientSSL profile and apply to all SSL Virtual Servers
-
C
Create a self-singed SSL certificate for each subdomain make a ClientSSL profile for each subdomain, and apply to the related SSL Virtual server
-
D
Create a self-singed SSL certificate for each subdomain make a Client profile for each SSL Virtual Server
Reveal answer details
Close answer details
Correct answerB
ExplanationThe topic is that there are multiple domain names in the business, and HTTPS services are provided to the internet, and users cannot be allowed to generate SSL alarms. The require client ssl and use CA certificate instead of self-singed certificate. And multiple domain names, you can use wildcard certificates.
An LTM Specialist creates an Analytics wide to show the type of browsers used to access a certain application. However, the generated statistics only sum up all transaction for that application under one item called "Aggregated.' ' What should the LTM Specialist do to resolve this problem?
-
A
Verify that the Analytics profile is assigned to the applications virtual server.
-
B
Make sure `'User Agent'' is selected in the Analytics profile.
-
C
Drill down into the stats to show the User Agents correlated in the Aggregated group.
-
D
Make sure `'User Sessions'' is selected in the Analytics profile
Reveal answer details
Close answer details
An unwanted IP address tries to connect to the configuration utility via Self IP An LTM Specialist needs to block the attempts based on the IP address. How should the ITM Specialist block the attempts without affecting other users?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Question 8
Multiple choice
An LTM Specialist needs to assign a health monitor to a pool with two pool members 10.10.10 101 and 10.10.10.102 Both pool members are listening on port 8080 with TCP. The health of the application depends on the health of an another server (10 10 10 100) that runs port 9080 with TCP. Which two custom TCP monitors should be selected as the pool's health monitors' (Choose two)
-
A
a custom TCP monitor that works on port 9080 with 10.10.10.100 as alias address
-
B
a custom TCP monitor that works on port 9080,
-
C
a custom TCP monitor that works on port 8080
-
D
a custom TCP monitor that works on port 9080 with 10,10.10.101 as alias address
-
E
a custom TCP monitor that works on port 8080 with 10.10.10.101 as alias address
-
F
a custom TCP monitor that works on port 8080 with 10.10.10.102 is alias address
Reveal answer details
Close answer details
An LTM Specialist regularly provides analytics reports that show that traffic generated by different subnets within the organization. The LTM Specialist needs show the associate department names next the IP addresses in the reports. Which step should the LTM Specialist take to meet this requirement?
-
A
use an iRule to change the output of the report
-
B
export the report and add the department names manually
-
C
create VLANs for each subnet and set the name accordingly
-
D
define active subnets and assign a name to certain subnets
Reveal answer details
Close answer details
Question 10
Single choice
An LTM Specialist is configuring a virtual server with an IP address. Which configuration is unsupported?
-
A
Performance 14 virtual server with an HTTP profile
-
B
Standard virtual server with an HTTP profile
-
C
Performance 14 virtual server with a FastHTTP profile
-
D
Standard virtual server with a TCP profile
Reveal answer details
Close answer details
Question 11
Single choice
What should an LTM Specialist configure on an LTM device to send AVR notification emails?
-
A
Email notification to be sent via iControl from the LTM device
-
B
Syslog on the LTM device to send to an SMTP server
-
C
Custom SNMP traps on the LTM device for AVR notifications
-
D
Email notification to be sent via SMTP from the LTM device
Reveal answer details
Close answer details
Question 12
Multiple choice
An application is sensitive to packet loss and unexpected session termination. A pair of LTM devices is configured in an Active/Standby high availability configuration. SNATS are NOT used and the virtual server contains a Universal Persistence profile. which two actions must an LTM Specialist take to ensure the sessions are maintained between the client and server during an LTM device failover event while maintaining maximum uptime? (Choose two.)
-
A
configure a serial failover cable for mirror traffic
-
B
configure a OneConnect profile to mirror connections
-
C
configure a VLAN and primary mirroring address for mirror traffic
-
D
enable Mirroring for a virtual server and persistence profile
-
E
enable Clone Pools for a virtual server and a persistence profile
Reveal answer details
Close answer details
Question 13
Multiple choice
set payload {CACHE :: payload} } Which two profiles should be used on the virtual server? (Choose two.)
-
A
-
B
-
C
-
D
-
E
Reveal answer details
Close answer details
Question 14
Single choice
An LTM Specialist needs to provide statistics regarding the round-trip time between the clients and the servers. Which metric should be part of the analytics profile to provide that information?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Question 15
Multiple choice
An LTM Administrator receives an email from the NOC stating that the switch connected to the backend server was shut down for maintenance. The BIG-IP device handles only UDP traffic. The BIG IP device did not fail over to a DR location when no pool members were available. When the LTM Administrator checks the pool, it confirms that the monitor is still marking UP the pool member. A tcpdump of the traffic shows the following output:  A list of the monitor configuration shows the following:  Which two modifications to the LTM configuration will mark this pool member down, when the switch is down? (Choose two.)
-
A
increase the timeout to three times the interval
-
B
add a reverse string to the game monitor
-
C
enable reverse and wait for the next connection
-
D
also assign a gatewayjcmp monitor to the pool
-
E
enable manuai-resume on the same monitor
Reveal answer details
Close answer details
Question 16
Single choice
An LTM device needs to be configured a virtual server. The application requires SSL encryption from the client to the server and an X-Forwarded-For added by the LTM device. Which virtual server type should the LTM Specialist use?
-
A
-
B
-
C
-
D
-
E
Reveal answer details
Close answer details
Question 17
Single choice
An LTM Specialist needs to load balance an application using an LTM device to meet the requirements: 1. The application servers do NOT Support SSL, but client access to the application should be secured. 2. Multiple requests from the same client should be sent to the same pool member. 3. All pool members will have roughly the same processing power, and traffic should be distributed evenly. The LTM device is NOT the pool members' default gateway. Which configuration should the LTM Specialist.
-
A
a performance 14 virtual server with a SNAT and cookie persistence
-
B
a performance L4 virtual server with a Client SSL profile and Source Address persistence
-
C
A performance L4 virtual server with a SNAT, HTTP profile. Server SSL profile, and cookie persistence
-
D
A standard virtual server with a SNAT, HTTP profile Server SSL profile, and cookie persistence
-
E
A standard virtual server with a SNAT, HTTP profile, Client profile, andd cookie persistance.
Reveal answer details
Close answer details
Question 18
Single choice
A new DNS virtual server has been configured. Testing reveals that DNS server has failed to accept DNS over TCP. The configuration of the virtual server is as follows:  Which action should be taken to correct this issue?
-
A
create a new virtual server with the service port of 53 and the protocol set to TC
-
B
change the profile set on the virtual server To TCP/UDP
-
C
change the profile set on the virtual server to TCP
-
D
add a TCP prone to the existing virtual server.
Reveal answer details
Close answer details
Question 19
Single choice
Refer to the exhibit.  The http monitor is applied to a pool All members are enabled One pool member stops responding TCP port 80. The server still responds to ping. What is the resulting status of this pool member?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Question 20
Single choice
Exhibit.  The LTM devices LTM1 and LTM2 are configured in a Device Group (Sync Failover) with Network Failover configured on both the management and HA and Internal VLANS. and ConfigSync is confined in a Device Group (Sync Failover) with Network Failover and internal are tagged on a single trunk with subnets Connection Mirroring is configured on both the HA interlace directly connected between LTM1 and LTM2, and the management interlace is connected to a management switch. The LTM devices have four Traffic Groups defined, and both LTM devices are healthy and capable of passing traffic for any of the Traffic Groups. An LTM Specialist disconnects the cable for the HA network in an effort to test failover. Which HA functionality works in this case?
-
A
ConfigSync does NOT work. Connection Mirroring floes NOT work.
-
B
ConfigSync works Connection Mirroring works
-
C
ConfigSync works. Connection Mirroring docs NOT work
-
D
ConfigSync does NOT work; Connection Mirroring works
Reveal answer details
Close answer details
Question 21
Single choice
An LTM device an application that requires all connections to be secured via SSL The device must verify that request contain a specific cookie before allowing the request to be sent to the pool member. Which virtual server type should an LTM Specialist configure on the LTM device?
-
A
-
B
-
C
-
D
-
E
Reveal answer details
Close answer details
Question 22
Single choice
To improve application security, an LTM Specialist must configure a BIG application access. The BIG IP system to authenticate the client certificate before permitting application access. The BIG-IP system must also support the ability to red to redirect users to a certificate enrolment system without generating a browser error. Within the Client SSL profile, which value should the LTM Specialist select for the Client Certificate option?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Question 23
Single choice
Refer to the exhibit.  The http monitor is applied to a pool. All members are enabled. One server responds as follows.  What is the resulting status of this poo! member?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerB
ExplanationThe first picture "Send String" and "Receive String" are not clear. Send String should be "GOOD", the response packet does not contain this keyword. Receive Disable String is completely unclear. If the response packet contains the content of Receive Disable String at this time, it will be Available (Disabled), If the content of Receive Disable String is not included, then Offline (Enabled).
|