F5 301A Online Practice Questions and Exam Preparation

F5 301A Online Questions & Answers

• Question 11:

  Refer to the Exhibit.

  

  An LTM Specialist notices that two members in a pool are overloaded. To relive the existing members a fourth member (10.128.20.14) is brought up. How many member will receive and process new connections?

  A. 4
  B. 3
  C. 2
  D. 1
  C. 2

• Question 12:

  A new web application is being deployed Mutual SSL authentication must be used to authenticate clients. Which of the following two tasks must be completed to meet the requirements? (Choose two)

  A. configure the server SSL profile with "Client Certificate" Set to require
  B. configure the client SSL profile with "Client Certificate" set to require
  C. instruct the desktop team to update the web browser to the most recent release
  D. generate a CSR to register a certificate with the CA
  E. configure the client SSL profile with the Trusted .Certificate Authorities
  B. configure the client SSL profile with "Client Certificate" set to require
  E. configure the client SSL profile with the Trusted .Certificate Authorities

• Question 13:

  An LTM Specialist is configuring a virtual server with an IP address. Which configuration is unsupported?

  A. Performance 14 virtual server with an HTTP profile
  B. Standard virtual server with an HTTP profile
  C. Performance 14 virtual server with a FastHTTP profile
  D. Standard virtual server with a TCP profile
  A. Performance 14 virtual server with an HTTP profile

• Question 14:

  An LTM Specialist is removing some of the load off an existing cluster by adding a adding a third BIG- IP device to the device group. The new device can deliver twice the performance of the other two devices. The LTM Specialist needs to

  make sure that the BIG-IP device with the highest available capacity is always selected to take over a traffic group in the event of a failover.

  Which failover method is most appropriate?

  A. Ordered List
  B. Load Aware
  C. HA Group
  D. HA Capacity
  A. Ordered List

• Question 15:

  Refer to the exhibit.

  

  An LTM Specialist has multiple SNAT and virtual server objects configured as in the bigip.conf shown. The LTM Specialist tests a connection from a client with. IP 172.163.31.11 to 192.168.0.100:80. Which two objects will show an increase in Local Traffic statistics connections?

  A. VS_AandSNAT_B
  B. VS_BandSNAT_B
  C. VS_ B and SNAT A
  D. VS_A and SNAT A
  A. VS_AandSNAT_B

• Question 16:

  An LTM Specialist needs to load balance an application using an LTM device to meet the requirements:

  1.

  The application servers do NOT Support SSL, but client access to the application should be secured.

  2.

  Multiple requests from the same client should be sent to the same pool member.

  3.

  All pool members will have roughly the same processing power, and traffic should be distributed evenly.

  The LTM device is NOT the pool members' default gateway. Which configuration should the LTM Specialist.

  A. a performance 14 virtual server with a SNAT and cookie persistence
  B. a performance L4 virtual server with a Client SSL profile and Source Address persistence
  C. A performance L4 virtual server with a SNAT, HTTP profile. Server SSL profile, and cookie persistence
  D. A standard virtual server with a SNAT, HTTP profile Server SSL profile, and cookie persistence
  E. A standard virtual server with a SNAT, HTTP profile, Client profile, andd cookie persistance.
  E. A standard virtual server with a SNAT, HTTP profile, Client profile, andd cookie persistance.

• Question 17:

  An LTM Specialist needs to create a virtual server to pass TCP traffic to three pool members. Which two virtual server types should be used to meet the requirements? (Choose two) A. Performance (Layer A)

  B. Standard
  C. Forwarding (IP)
  D. Stateless
  E. Forwarding (Layer 2)
  B. Standard

• Question 18:

  An LTM Specialist has detected that a brute force login attack is occurring against the SSH service via a BIG-IP management interface. Login attempts are occurring from many IPs within the internal company network. BIG-IP SSH access restrictions are in place as follows:

  

  The LTM Specialist has determined that SSH access should only occur from the 192.168.1.0/24 and 172.16.254.0/23 networks. Which tmsh command should the LTM Specialist use to permit access from the desired networks only?

  A. modify.sys sshd allow add {''192.168. 10/24 , '' ''172. 16 2540/23'')
  B. modify /sys sshd login disable (''10.0.00/8'', ''172 16.0 0/12'', ''192. 168.0.0/16'')
  C. modify/sys allow replace-all-with {''192.168.1.00/24'', ''192.16.254.0/23''}
  D. modify/sys sshd login enable {''192.166.10/24'''' ''172.16 254 0/23
  C. modify/sys allow replace-all-with {''192.168.1.00/24'', ''192.16.254.0/23''}

• Question 19:

  Exhibit.

  

  - The ITM devices LTM 1 and LTM2 are configured in Device Group X (Sync-Failover)

  -LTM3 and LTM4 are configured in Device Group Y (Sync-Only)

  -

  An LTM specialist configures Device Group Z (Sync-Only) to keep several profiles in (sync-Only) to keep several profiles in sync across all devices.

  -

  Device GROUP X has four Traffic Groups A.B.C and D configured.

  -

  Device Group Y has four Traffic Groups E, F. G, and H configured

  -Auto Fallback IS NOT Enabled.

  -

  Each Device group is healthy and able to pass traffic for any traffic group assigned to that Device Group.

  The data center that contains LTM2 and LTM4 loses power. After 10 minutes; power is restored and all devices are up and healthy.

  What is the state of each Traffic Group on each ITM device after power is restored?

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

• Question 20:

  An LTM Specialist must reconfigure a BIG-IP system that load balances traffic to a web application. The security department has informed the LTM Specialist that the following cipher string must be used for TLS connections from BIG-IP to

  the web application.

  NATIVE:IMDS:EXPORT:IDHE:EDH@SPEED

  In which virtual server profile should the cipher string be configured?

  A. Server SSL
  B. Client SSL
  C. SPDY profile
  D. Rewrite profile
  A. Server SSL