In preparation for a maintenance task, an LTM Specialist performs a "Force to Standby" on LTM device Unit 1. LTM device Unit 2 becomes active as expected. The maintenance task requires the reboot of Unit 1. Shortly after the reboot is complete, the LTM Specialist discovers that Unit 1 has become active and Unit 2 has returned to standby. What would cause this behavior?
-
A
Unit 1 is set with the redundancy state preference of active in devices groups.
-
B
Unit 1 is set with the redundancy state preference of active in high availability.
-
C
A traffic group is configured with Auto Failback, and Unit 1 is the default device.
-
D
A device group is configured with Auto Failback, and Unit 1 is the default device.
Reveal answer details
Close answer details
Refer to the exhibits.   An LTM device has been configured for load balancing a number of different application servers. Configuration changes need to be made to the LTM device to allow administrative management of the servers in 172.16.10/24, 172.16.20/24, and 172.16.30/24 networks. The servers require outbound access to numerous destinations for operations. Which solution has the simplest configuration changes while maintaining functionality and basic security?
-
A
Remove 172.16.10.0:0/24, 172.16.20.0:0/24, and 172.16.30.0:0/24, and keep 0.0.0.0:0/0.0.0.0 enabled on all VLANs.
-
B
Replace 172.16.10.0:0/24, 172.16.20.0:0/24, and 172.16.30.0:0/24, with 172.16.0.0:0/16, and keep 0.0.0.0:0/0.0.0.0.
-
C
Enable 172.16.10.0:0/24, 172.16.20.0:0/24, and 172.16.30.0:0/24 on ingress VLAN(s), and enable 0.0.0.0:0/0.0.0.0 on egress VLAN(s).
-
D
Enable 172.16.10.0:0/24, 172.16.20.0:0/24, and 172.16.30.0:0/24 on egress VLAN(s), and enable 0.0.0.0:0/0.0.0.0 on ingress VLAN(s).
Reveal answer details
Close answer details
An application is configured on an LTM device: Virtual server: 10.0.0.1:80 (VLAN vlan301) SNAT IP: 10.0.0.1 Pool members: 10.0.1.1:8080, 10.0.1.2:8080, 10.0.1.3:8080 (VLAN vlan302) Which packet capture should the LTM Specialist perform on the LTM device command line interface to capture only server traffic specifically for this application?
-
A
tcpdump -ni 0.0:nnn -s 0 'host 10.0.0.1' -w /var/tmp/trace.cap
-
B
tcpdump -ni vlan301 -s 0 'port 80 and host 10.0.0.1' -w /var/tmp/trace.cap
-
C
tcpdump -ni vlan302 -s 0 'port 8080 and (host 10.0.1.1 or host 10.0.1.2 or host 10.0.1.3)' -w /var/tmp/ trace.cap
-
D
tcpdump -ni 0.0:nnn -s 0 '(port 80 and host 10.0.0.1) or (port 8080 and host 10.0.1.1 or host 10.0.1.2 or host 10.0.1.3)' -w /var/tmp/trace.cap
Reveal answer details
Close answer details
An LTM device is monitoring pool members on port 80. The LTM device is using an HTTP monitor with a send string of GET / and a blank receive string. What would cause the pool members to be marked down?
-
A
A pool member responds with an HTTP 200 series response code.
-
B
A pool member responds with an HTTP 300 series response code.
-
C
A pool member responds with an HTTP 400 series response code.
-
D
A pool member responds with an HTTP 500 series response code.
-
E
A pool member does NOT acknowledge the connection SYN on port 80.
Reveal answer details
Close answer details
An LTM Specialist is troubleshooting virtual server 10.0.0.1:443 residing on VLAN vlan301. The web application is accessed via www.example.com. The LTM Specialist wants to save a packet capture with complete decrypted payload for external analysis. Which command should the LTM Specialist execute on the LTM device command line interface?
-
A
tcpdump -vvv -s 0 'host 10.0.0.1 and port 443' -w /var/tmp/trace.cap
-
B
tcpdump -vvv -s 0 -ni vlan301 'host 10.0.0.1 and port 443' -w /var/tmp/trace.cap
-
C
ssldump -Aed -k /config/filestore/files_d/Common_d/certificate_key_d/:Common:www.example.com.key_1 > /var/tmp/trace.cap
-
D
ssldump -Aed -ni vlan301 -k /config/filestore/files_d/Common_d/certificate_key_d/:Common:www.example.com.key_1 > /var/tmp/trace.cap
Reveal answer details
Close answer details
Refer to the exhibit.  An HTTP monitor always marks the nodes in the pool as down. The monitor's definition and the HTTP headers from the monitor request and response are provided. What is the issue?
-
A
The response is compressed.
-
B
The send string is incorrect.
-
C
The monitor timeout is too short.
-
D
The monitor is NOT configured to follow the redirect.
Reveal answer details
Close answer details
Which iRule will reject any connection originating from a 10.0.0.0/8 network?
-
A
when CLIENT_ACCEPTED { set remote_ip [IP::addr [IP::remote_addr] mask 8] switch $remote_ip { "10.0.0.0" { reject } "11.0.0.0" { pool pool_http1} default { pool http_pool } } }
-
B
when CLIENT_ACCEPTED { set remote_ip [IP::addr [IP::local_addr] mask 8] switch $remote_ip { "10.0.0.0" { reject } "11.0.0.0" { pool pool_http1} default { pool http_pool } } }
-
C
when CLIENT_ACCEPTED { set remote_ip [IP::addr [IP::client_addr] mask 255.0.0.0] switch $remote_ip { "10.0.0.0" { reject } "11.0.0.0" { pool pool_http1} default { pool http_pool } } }
-
D
when CLIENT_ACCEPTED { set remote_ip [IP::addr [IP::local_addr] mask 255.0.0.0] switch $remote_ip { "10.0.0.0" { reject } "11.0.0.0" { pool pool_http1} default { pool http_pool } } }
Reveal answer details
Close answer details
Refer to the exhibit.  An LTM Specialist is upgrading the LTM devices. Which device should be upgraded first?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
An LTM device is serving an FTP virtual server that has three pool members. The FTP pool members are monitored via TCP port 21. Customers are reporting that they are able to log in, but are sometimes unable to upload files to the server. Which monitor should the LTM Specialist configure to verify that the servers can handle file uploads?
-
A
-
B
-
C
-
D
-
E
Reveal answer details
Close answer details
Question 10
Single choice
An LTM Specialist has installed a hotfix that updated the SCCP firmware package. Which command will ensure that the host subsystem and SCCP reboot?
-
A
-
B
-
C
-
D
The reboot should be initiated via the HTTPS administration GUI.
Reveal answer details
Close answer details
Question 11
Single choice
Refer to the exhibit.  An LTM Specialist is troubleshooting an issue with a new virtual server. When connecting through the virtual server, clients receive the message "The connection was reset" in the browser. Connections directly to the pool member show the application is functioning correctly. What is the issue?
-
A
The pool member is failing the monitor check.
-
B
The pool member default gateway is set incorrectly.
-
C
The virtual server is configured with the incorrect SNAT address.
-
D
The virtual server is processing encrypted traffic as plain-text HTTP.
Reveal answer details
Close answer details
Question 12
Single choice
Refer to the exhibits.    Users are able to access the application when connecting to the virtual server but are unsuccessful when connecting directly to the application servers. The LTM Specialist wants to allow direct access to the application servers. Which configuration change resolves this problem?
-
A
Enable port 443 on the virtual server.
-
B
Configure a SNAT pool on the LTM device.
-
C
Disable address translation on the virtual server.
-
D
Configure an IP Forwarding virtual server on the LTM device.
-
E
Configure a route to the web server subnet on the network router.
Reveal answer details
Close answer details
Question 13
Single choice
An LTM Specialist is investigating reports from users that SSH connections are being terminated unexpectedly. SSH connections are load balanced through a virtual server. The users experiencing this problem are running SQL queries that take upwards of 15 minutes to return with no screen output. The virtual server is standard with a pool associated and no other customizations. What is causing the SSH connections to terminate?
-
A
-
B
-
C
The virtual server has no persistence.
-
D
The pool has Reselect Retries set to 0.
Reveal answer details
Close answer details
Question 14
Single choice
Refer to the exhibit.  A user is unable to access a secure application via a virtual server. What is the cause of the issue?
-
A
The client authentication failed.
-
B
The virtual server does NOT have a pool configured.
-
C
The client and server CANNOT agree on a common cipher.
-
D
The virtual server does NOT have a client SSL profile configured.
Reveal answer details
Close answer details
Question 15
Single choice
Refer to the exhibit.  An administrator created a monitor to a pool member web server, which resulted in a pool member that is marked red. The administrator knows the web server is working when it is accessed from another computer. What should the administrator do to correct the problem?
-
A
Change the default gateway on the server.
-
B
Create a SNAT in the LTM device configuration.
-
C
Change the route to the client in the LTM configuration.
-
D
Change the username and/or password on the monitor.
Reveal answer details
Close answer details
Question 16
Single choice
Refer to the exhibit.  An LTM Specialist has a virtual server set up on the LTM device as per the exhibit. The LTM Specialist receives reports of intermittent issues. Some clients are connecting fine while others are failing to connect. The LTM Specialist does a tcpdump on the relevant interfaces, with the following results extracted: What is causing the intermittent issues?
-
A
The firewall is dropping the packets from WS1.
-
B
The default gateway is inaccessible from WS1.
-
C
The load balancing (LB) method is inappropriate.
-
D
The pool members have been set up as an active/standby pair, with WS1 as the standby.
Reveal answer details
Close answer details
Question 17
Single choice
An LTM Specialist needs to modify the logging level for tcpdump execution events. Checking the BigDB Key, the following is currently configured: sys db log.tcpdump.level { value "Notice" } Which command should the LTM Specialist execute on the LTM device to change the logging level to informational?
-
A
tmsh set /sys db log.tcpdump.level value informational
-
B
tmsh set /sys db log.tcpdump.level status informational
-
C
tmsh modify /sys db log.tcpdump.level value informational
-
D
tmsh modify /sys db log.tcpdump.level status informational
Reveal answer details
Close answer details
Question 18
Single choice
An LTM device has been configured to log the reasons for generating TCP RST packets. The following log entry occurs: "01230140:3: RST sent from 192.168.1.100:80 to 192.168.1.124:39272, [0x112d82a:1721] {peer} TCP RST from remote system." Which condition will trigger this log entry?
-
A
A virtual server connection limit has been reached.
-
B
The host at the other end terminated the TCP connection.
-
C
The LTM device reset the connection because no pool members are available.
-
D
The LTM device has reached the maximum number of allowed attempts to send the data segment to the affected TCP connection.
Reveal answer details
Close answer details
Question 19
Single choice
An LTM Specialist configured a virtual server to load balance a custom application. The application works when it is tested from within the firewall but it fails when tested externally. The pool member address is 192.168.200.10:80. A capture from an external client shows: GET /index.jsp HTTP/1.1 Host: 207.206.201.100 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:15.0) Gecko/20100101 Firefox/15.0.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Connection: keep-alive HTTP/1.1 302 Found DatE. Wed, 17 Oct 2012 23:09:55 GMT Server: Apache/2.2.15 (CentOS) Location: http://192.168.200.10/user/home.jsp Content-LengtH. 304 Connection: close What is the solution to this issue?
-
A
Assign a SNAT pool to the virtual server.
-
B
Add a Web Acceleration Profile to the virtual server.
-
C
Configure redirect rewrite option in the HTTP profile.
-
D
Configure a content filter on the backend web server.
Reveal answer details
Close answer details
Question 20
Single choice
An F5 LTM Specialist needs to perform an LTM device configuration backup prior to RMA swap. Which command should be executed on the command line interface to create a backup?
-
A
bigpipe config save /var/tmp/backup.ucs
-
B
tmsh save /sys ucs /var/tmp/backup.ucs
-
C
tmsh save /sys config /var/tmp/backup.ucs
-
D
tmsh save /sys config ucs /var/tmp/backup.ucs
Reveal answer details
Close answer details
Question 21
Single choice
There is a fault with an LTM device load balanced trading application that resides on directly connected VLAN vlan-301. The application virtual server is 10.0.0.1:80 with trading application backend servers on subnet 192.168.0.0/25. The LTM Specialist wants to save a packet capture with complete payload for external analysis. Which command should the LTM Specialist execute on the LTM device command line interface?
-
A
tcpdump -vvv -w /var/tmp/trace.cap 'net 192.168.0.0/25'
-
B
tcpdump -vvv -s 0 -w /var/tmp/trace.cap 'net 192.168.0.0/25'
-
C
tcpdump -vvv -nni vlan-301 -w /var/tmp/trace.cap 'net 192.168.0.0/25'
-
D
tcpdump -vvv -s 0 -nni vlan-301 -w /var/tmp/trace.cap 'net 192.168.0.0/25'
Reveal answer details
Close answer details
Question 22
Single choice
Refer to the exhibit.  An LTM Specialist is investigating intermittent page load issues being reported by users. What should the LTM Specialist do to resolve the issue?
-
A
Remove HTTP monitor on the pool.
-
B
Assign an HTTP monitor to the pool.
-
C
Select least connections load balancing method on virtual server.
-
D
Remove least connections load balancing method on virtual server.
Reveal answer details
Close answer details
Question 23
Single choice
The LTM Specialist is writing a custom HTTP monitor for a web application and has viewed the content by accessing the site directly via their browser. The monitor continually fails. The monitor configuration is: ltm monitor http /Common/exampleComMonitor { defaults-from /Common/http destination *:* interval 5 recv "Recent Searches" send "GET /app/feed/current\?uid=20145 HTTP/1.1\\r\\nHost: www.example.com\\r\\nAccept-EncodinG. gzip, deflate\\r\\nConnection: close\\r\\n\\r\\n" time-until-up 0 timeout 16 } A trace shows the following request and response: Request: GET /app/feed/current?uid=20145 HTTP/1.1 Host www.example.com Accept-Encoding gzip, deflate Connection: close Response: HTTP/1.1 302 Moved Temporarily Date Wed, 17 Oct 2012 18:45:52 GMT Server Apache Location https://example.com/login.jsp Content-Encoding gzip Content-Type text/html;charset=UTF-8 Set-CookiE. JSESSIONID=261EFFBDA8EC3036FBCC22D991AC6835; Path=/app/feed/current? uid=20145 What is the problem?
-
A
The request does NOT include a User-Agent header.
-
B
The HTTP monitor does NOT support monitoring jsp pages.
-
C
The request does NOT include any cookies and the application is expecting a session cookie.
-
D
The request includes an Accept-Encoding so the server is responding with a gzipped result and LTM monitors CANNOT handle gzipped responses.
Reveal answer details
Close answer details
Question 24
Multiple choice
Refer to the exhibit.  An LTM Specialist configures a virtual server that balances HTTP connections to a pool of three application servers. Approximately one out of every three connections to the virtual server fails. Which two actions will resolve the problem? (Choose two.)
-
A
Assign a custom HTTP monitor to the pool.
-
B
Enable SNAT automap on the virtual server.
-
C
Verify that port lockdown is set to allow port 80.
-
D
Verify the default gateway on the application servers.
-
E
Increase the TCP timeout value in the default TCP profile.
Reveal answer details
Close answer details
Question 25
Single choice
What do the following iRule commands do when they are used in the same iRule? set hsl [HSL::open -proto UDP -pool syslog_server_pool] HSL::send $hsl "<190> [HTTP::host] from [whereis [IP::client_addr] country continent state city zip] , IP: [IP::client_addr]"
-
A
The commands set up a high-speed logging connection and then send the geographical database to the server.
-
B
The commands set up a high-speed logging connection and then send the host header and client geographical detail to the connection.
-
C
The commands set up a high-speed logging connection and then send the host header, HTTP payload, and client geographical detail to the connection.
-
D
The commands set up a high-speed logging connection to the LTM device and then send the host header and client geographical detail to the connection.
Reveal answer details
Close answer details
Question 26
Single choice
The end users of a web application need to verify that their browsers received the complete message-body from the web server. Which HTTP header will accomplish this?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Question 27
Single choice
An LTM device is running BIG-IP v10.2.0 software. The LTM Specialist is tasked with upgrading the LTM device to BIG-IP v11.2.0 HF1. The LTM Specialist starts the upgrade process by selecting the uploaded Hotfix and installing to an unused volume. After 10 minutes, the LTM Specialist checks the status of the upgrade process and notices that the process is stalled at 0%. What should the LTM Specialist verify?
-
A
the selected volume has sufficient space available
-
B
the base software version exists on the LTM device
-
C
the LTM device has been restarted into maintenance mode
-
D
the LTM device has an available Internet connection via the management interface
Reveal answer details
Close answer details
Question 28
Single choice
An LTM Specialist defines a receive string in the HTTP monitor and then assigns it to the HTTP pool. The monitor has an interval of 5 seconds and a timeout of 16 seconds. If the receive string is NOT seen in the the HTTP payload after 20 seconds, how does the LTM device mark the monitor status?
-
A
-
B
-
C
-
D
-
E
Reveal answer details
Close answer details
Question 29
Multiple choice
Users in a branch office are reporting a website is always slow. No other users are experiencing the problem. The LTM Specialist tests the website from the external VLAN along with testing the servers directly. All tests indicate normal behavior. The environment is a single HTTP virtual server on the external VLAN with a single pool containing three HTTP pool members on the internal VLAN. Which two locations are most appropriate to collect additional protocol analyzer data? (Choose two.)
-
A
-
B
the switch local to the user
-
C
the LTM device's internal VLAN
-
D
the LTM device's external VLAN
-
E
a user's Active Directory authentication
Reveal answer details
Close answer details
Question 30
Single choice
In which file would the LTM Specialist find virtual server configurations?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Question 31
Single choice
There are three servers in the pool: 172.16.20.1, 172.16.20.2, and 172.16.20.3, with the virtual IP address 10.0.20.88. A user CANNOT connect to an HTTP application. To understand the problem and find a solution, the LTM Specialist runs two concurrent traces on the LTM device, with the following results: Trace on client side: tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on 0.0, link-type EN10MB (Ethernet), capture size 96 bytes 22:22:07.423759 IP 172.16.20.100.53875 > 10.0.20.88.80: S 998346084:998346084(0) win 5840 <mss 1460,sackOK,timestamp 67942058 0,nop,wscale 4> 22:22:07.424056 IP 10.0.20.88.80 > 172.16.20.100.53875: S 4671780:4671780(0) ack 998346085 win 4380 <mss 1460,nop,wscale 0,nop,nop,timestamp 2392362490 67942058,sackOK,eol> 22:22:07.424776 IP 172.16.20.100.53875 > 10.0.20.88.80: . ack 1 win 365 <nop,nop,timestamp 67942058 2392362490> 22:22:07.424790 IP 172.16.20.100.53875 > 10.0.20.88.80: P 1:149(148) ack 1 win 365 <nop,nop,timestamp 67942058 2392362490> 22:22:07.424891 IP 10.0.20.88.80 > 172.16.20.100.53875: . ack 149 win 4528 <nop,nop,timestamp 2392362491 67942058> 22:22:12.024850 IP 10.0.20.88.80 > 172.16.20.100.53875: R 1:1(0) ack 149 win 4528 6 packets captured 6 packets received by filter 0 packets dropped by kernel Trace on server side: tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on internal, link-type EN10MB (Ethernet), capture size 96 bytes 22:22:07.424881 IP 172.16.20.100.53875 > 172.16.20.2.80: S 51116678:51116678(0) win 4380 <mss 1460,nop,wscale 0,nop,nop,timestamp 2392362491 0,sackOK,eol> 22:22:08.424893 IP 172.16.20.100.53875 > 172.16.20.2.80: S 51116678:51116678(0) win 4380 <mss 1460,nop,wscale 0,nop,nop,timestamp 2392363491 0,sackOK,eol> 22:22:09.625082 IP 172.16.20.100.53875 > 172.16.20.2.80: S 51116678:51116678(0) win 4380 <mss 1460,nop,wscale 0,nop,nop,timestamp 2392364691 0,sackOK,eol> 22:22:10.825194 IP 172.16.20.100.53875 > 172.16.20.2.80: S 51116678:51116678(0) win 4380 <mss 1460,sackOK,eol> 4 packets captured 4 packets received by filter 0 packets dropped by kernel What should the LTM Specialist do to solve the problem?
-
A
Edit the packet filter rules.
-
B
Modify the monitor of the pool.
-
C
Enable the virtual server.
-
D
Configure the virtual server to use SNAT.
Reveal answer details
Close answer details
Question 32
Single choice
While investigating the cause of a device failover, an LTM Specialist discovers the following events in /var/ log/ltm: 01010029:5: Clock advanced by 518 ticks 01010029:5: Clock advanced by 505 ticks 01010029:5: Clock advanced by 590 ticks 01010029:5: Clock advanced by 568 ticks 01010029:5: Clock advanced by 1681 ticks 01010029:5: Clock advanced by 6584 ticks 01140029:5: HA daemon_heartbeat tmm fails action is failover and restart. 010c0026:5: Failover condition, active attempting to go standby. Which issue caused the failover?
-
A
-
B
-
C
VLAN Fail-safe heartbeats
-
D
HA missing heartbeat packets
Reveal answer details
Close answer details
|