F5 301B Online Practice Questions and Exam Preparation

F5 301B Online Questions & Answers

• Question 111:

  An LTM Specialist sees these entries in /var/log/ltm:

  Oct 25 03:34:31 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborteD. 172.16.20.1:443 Oct 25 03:34:32 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server

  (see RFC5746) aborteD. 172.16.20.1:443 Oct 25 03:34:32 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborteD. 172.16.20.1:443 Oct 25 03:34:32 tmm warning tmm[7150]: 01260017:4:

  Connection attempt to insecure SSL server (see RFC5746) aborteD. 172.16.20.1:443 Oct 25 03:34:32 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborteD. 172.16.20.1:443 Oct 25

  03:34:33

  tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborteD. 172.16.20.1:443 Assume 172.16.20.0/24 is attached to the VLAN "internal." What should the LTM Specialist use to troubleshoot this issue?

  A. curl -d - -k https://172.16.20.1
  B. ssldump -i internal host 172.16.20.1
  C. tcpdump -i internal host 172.16.20.1 > /shared/ssl.pcap ssldump < /shared/ssl.pcap
  D. tcpdump -s 64 -i internal -w /shared/ssl.pcap host 172.16.20.1 ssldump -r /shared/ssl.pcap
  B. ssldump -i internal host 172.16.20.1

• Question 112:

  An LTM Specialist realizes that a datacenter engineer has changed the console baud rate. Which command determines the current baud rate via the command line interface?

  A. tmsh show /ltm console
  B. tmsh show /sys console
  C. tmsh list /sys baud-rate
  D. tmsh list /net baud-rate
  B. tmsh show /sys console

• Question 113:

  An LTM Specialist connects to an LTM device via the serial console cable and receives unreadable output. The LTM Specialist is using the appropriate cable and connecting it to the correct serial port.

  Which command should the LTM Specialist run through ssh to verify that the baud rate settings for the serial port are correct on the LTM device?

  A. tmsh list /sys console
  B. tmsh edit /sys console
  C. tmsh show /sys console
  D. tmsh show /ltm console
  C. tmsh show /sys console

  ---

  Explanation/Reference:

• Question 114:

  Refer to the exhibit.

  

  An LTM Specialist is troubleshooting an issue with an application configured on an LTM device. The application works properly when accessed directly via the servers; however, it does not work when accessed via the LTM device. The virtual

  server, 192.168.1.211:443, is configured to SNAT using the address 192.168.1.144 and references a pool with the member 192.168.10.80:443. The virtual server has no Client or Server SSL profiles associated.

  Which configuration change will allow the application to function through the virtual server?

  A. Change pool member port to 8443.
  B. Change virtual server port to 8443.
  C. Add SSL off-loading to the pool member.
  D. Add Client and Server SSL profiles to the virtual server.
  A. Change pool member port to 8443.

  ---

  Explanation/Reference:

• Question 115:

  An LTM device has been configured to log the reasons for generating TCP RST packets.

  The following log entry occurs:

  "01230140:3: RST sent from 192.168.1.100:80 to 192.168.1.124:39272, [0x112d82a:1721] {peer} TCP RST from remote system."

  Which condition will trigger this log entry?

  A. A virtual server connection limit has been reached.
  B. The host at the other end terminated the TCP connection.
  C. The LTM device reset the connection because no pool members are available.
  D. The LTM device has reached the maximum number of allowed attempts to send the data segment to the affected TCP connection.
  B. The host at the other end terminated the TCP connection.

• Question 116:

  Refer to the exhibit.

  

  An LTM Specialist is working on an LTM 11.0.0 installation and has identified a security vulnerability as shown in the exhibit. The LTM Specialist is tasked with applying the latest available hotfix to resolve the problem. Which procedure resolves the problem?

  A. Browse to System > Software Management > Hotfix List. Import TMOS 11.2.0 to the available hotfix images. Select the imported hotfix image and installation location and click Install.
  B. Browse to System > Software Management > Hotfix List. Import 11.1.0.HF3 to the available hotfix images. Select the imported hotfix image and installation location and click Install.
  C. Browse to System > Software Management > Image List. Import TMOS 11.2.0 to the available hotfix images. Select the imported hotfix image and installation location and click Install.
  D. Browse to System > Software Management > Image List. Import 11.1.0.HF3 to the available hotfix images. Select the imported hotfix image and installation location and click Install.
  B. Browse to System > Software Management > Hotfix List. Import 11.1.0.HF3 to the available hotfix images. Select the imported hotfix image and installation location and click Install.

  ---

  Explanation/Reference:

• Question 117:

  Given the log entry:

  011f0005:3: HTTP header (32800) exceeded maximum allowed size of 32768 (Client sidE. vip=/Common/VS_web profile=http pool=/Common/POOL_web client_ip=10.0.0.1)

  Which HTTP profile setting can be modified temporarily to resolve the issue?

  A. Increase Maximum Requests
  B. Decrease Maximum Requests
  C. Increase Maximum Header Count
  D. Decrease Maximum Header Count
  E. Increase Maximum Header size
  F. Decrease Maximum Header size
  E. Increase Maximum Header size

  ---

  Explanation/Reference:

• Question 118:

  Refer to the exhibits.

  

  

  Users are able to access the application when connecting to the virtual server but are unsuccessful when connecting directly to the application servers. The LTM Specialist wants to allow direct access to the application servers. Why are users unable to connect directly to the application servers?

  A. The router does NOT have a route to the server subnet.
  B. The web server does NOT have a correct default gateway.
  C. The LTM device does NOT have a SNAT on the External VLAN.
  D. The LTM device does NOT have an IP Forwarding virtual server on the Internal VLAN.
  E. The LTM device does NOT have an IP Forwarding virtual server on the External VLAN.
  B. The web server does NOT have a correct default gateway.

  ---

  Explanation/Reference:

• Question 119:

  An LTM device is load balancing SIP traffic. An LTM Specialist notices that sometimes the SIP request is being load balanced to the same server as the initial connection. Which setting in the UDP profile will make the LTM device more evenly distribute the SIP traffic?

  A. Enable Datagram LB
  B. Disable Datagram LB
  C. Set Timeout to Indefinite
  D. Set Timeout to Immediate
  A. Enable Datagram LB

• Question 120:

  In which file would the LTM Specialist find virtual server configurations?

  A. bigip.conf
  B. bigip_sys.conf
  C. bigip_base.conf
  D. profile_base.conf
  A. bigip.conf