F5 LTM Specialist 301A Questions & Answers

• Question 11:

  An application requires load balancing functionality. The application must be encrypted to the client. Certain content must be manipulated by the following IRule: Which set of profiles must be applied to the virtual server?

  

  A. TCP, HTTP server SSL Stream

  B. TCP, HTTP, Client SSL, Stream

  C. TCP, HTTP, OnceConnect, Stream

  D. Fast L4, HTTP server SSL Stream

  Correct Answer: B

  Client encryption is required , clientssl, irule contains HTTP events and stream execution, http profile stream profile.

• Question 12:

  A virtual server is configured to handle https traffic. The clientssl profile is configured to use a2048- bit RSA key. Due to security requirements, is the LTM Specialist needs to use a 4096-bit RSA key in the future. What two effects will this change have on the BIG-IP device? (Choose two)

  A. Increase of CPU usage on the BIG-IP device

  B. Decrease to 20% of licensed TPS

  C. Decrease to 90% of licensed TPS

  D. Increased of concurrent connection on client-side

  E. Increase of TLS Renegotiation

  Correct Answer: AB

• Question 13:

  To improve application security, an LTM Specialist must configure a BIG application access. The BIG IP system to authenticate the client certificate before permitting application access. The BIG-IP system must also support the ability to red to redirect users to a certificate enrolment system without generating a browser error. Within the Client SSL profile, which value should the LTM Specialist select for the Client Certificate option?

  A. Require

  B. Request

  C. Demand

  D. ignore

  Correct Answer: A

• Question 14:

  Where does a LTM Specialist view all of the objects that are part of a deployed iApp?

  A. iAPP> Application Policy > Objects

  B. Local Traffic . Virtual Servers > Applications

  C. IAP > Application Service > Components

  D. Local Traffic > Network Map > View Map

  Correct Answer: C

• Question 15:

  Six servers have a varying number of connections that change based on the user load. Which load balancing method should an LTM Specialist apply to divided the web application traffic to the servers on the relative performance trend?

  A. Least Sessions

  B. Least Connections

  C. Predictive

  D. Ratio

  Correct Answer: C

• Question 16:

  Two LTM devices must be manually configured to restrict in the same Device Group. What is the correct order of steps to meet this requirement?

  A. Configure VLAN, Configure-Sync IP, Configure Failover type, Establish Device Trust, Sync Device Trust, Create type, Establish Device Sync Device Trust, Create Device Group.

  B. Configure VLAN, Configure Self-IPs, Configure Config-Sync IP. Configure Failover type, Establish Device Trust, Sync Device Trust, Create Device Group.

  C. Configure Self-IPs, Configure VLAN, Configure Config-Sync IP. Configure Failover type, Establish Device Trust, Sync Device Trust, Create Device Group

  D. Configure VLAN, Configure Config-Sync IP. Configure Self-IPs. Configure Failover type. Establish Device Trust, Create Device Group

  Correct Answer: B

• Question 17:

  An LTM Specialist must create a new virtual server for HTTP access. The LTM Specialist creates a forwarding virtual server to reach the resource. What is a potential result of this action?

  A. IP conflict result

  B. HTTP traffic is NOT allowed

  C. Other service ports could be allowed

  D. Packet filter allowances are also required

  Correct Answer: B

• Question 18:

  An LTM Specialist needs to configure a setup for antivirus scanning of HTTP traffic with an internet

  Contact adaption Protocol (ICAP) server.

  Which two server type should be used? (Choose two.)

  A. Standard

  B. Internal

  C. Performance HTTP

  D. Forwarding IP

  E. Stateless

  Correct Answer: AB

• Question 19:

  An LTM Specialist configures a new HTTPS virtual server that contains a valid example.com ssl certificate. The LTM Special receives an error in the browser when connecting. What must be added to the SSL Client profile to fix this issue?

  A. A sell-sign certificate

  B. A new example com certificate

  C. An intermediate certificate

  D. A public root certificate

  Correct Answer: C

• Question 20:

  TWO BIG-IP appliances need to be configured to load balance multiple firewall in a firewall sandwich, Which health monitor setting should be used to verify that the firewalls are able to forward traffic?

  A. Adaptive

  B. Reverse

  C. Transparent

  D. Up internal

  Correct Answer: C

  Sandwich architect firewalls are generally deployed transparently. You can enable Transparent to point to the next-hop address of the firewall and associate it with the firewall pool member for detection.