Full 301b Practice Test and 210 unique questions with explanations waiting just for you!
F5 Networks Certification Study Materials Dumps 301b Exam for Full Questions - Exam Study Guide
NEW QUESTION 88
What is the correct command to reset an LTM device to its default settings?
- A. tmsh set /sys config defaults
- B. tmsh load /sys config default
- C. tmsh reset-all default
- D. tmsh /util bigpipe reset-factory-defaults
Answer: B
NEW QUESTION 89
Which command will identify the active LTM device currently handling client traffic?
- A. b ha table show
- B. tmsh show /sys ha-status all-properties
- C. tmsh run /sys failover standby
- D. tmsh list /sys ha-status
- E. tmsh show /cm traffic-group
Answer: E
NEW QUESTION 90
An LTM device pair is configured for failover and connection mirroring. The LTM devices are configured with virtual servers for HTTP, HTTPS with SSL offload, and SSH. An event occurs that causes a failover. HTTP and SSH sessions active at the time of failover remain active, but HTTPS sessions are dropped.
What is the root cause of this problem?
- A. The SSL certificates on the LTM devices do NOT match.
- B. SNAT automap was NOT enabled for the HTTPS virtual servers.
- C. Connection mirroring was NOT enabled for the HTTPS virtual servers.
- D. Connection mirroring is incompatible with clientssl profiles.
Answer: D
NEW QUESTION 91
-- Exhibit -
-- Exhibit --
Refer to the exhibit.
Users report that a web application works incorrectly. Sometimes contextual data displayed on the web pages is accurate; other times it is inaccurate.
The LTM administrator looks at the connection table with a filter on one of the client IP addresses currently connected using the command "tmsh show sys connection cs-client-addr 10.0.20.1" with the following results:
10.0.20.1:60048 10.0.20.88:80 10.0.20.1:60048 172.16.20.1:80 tcp 3 (tmm: 0)
10.0.20.1:60050 10.0.20.88:80 10.0.20.1:60050 172.16.20.3:80 tcp 3 (tmm: 0)
10.0.20.1:60047 10.0.20.88:80 10.0.20.1:60047 172.16.20.2:80 tcp 3 (tmm: 0)
10.0.20.1:60049 10.0.20.88:80 10.0.20.1:60049 172.16.20.1:80 tcp 3 (tmm: 0) What is the solution to the problem?
- A. Modify the load balancing method attached to the pool.
- B. Modify the setup of the monitor bound to the pool used by the application.
- C. Synchronize the clock of the LTM device with NTP.
- D. Set up an HTTP cookie insert profile in the virtual server.
Answer: D
NEW QUESTION 92
-- Exhibit -
-- Exhibit -
Refer to the exhibit.
A pair of LTM devices is configured for HA.
What happens if the pool member server with IP address 10.0.0.4 becomes totally unresponsive to the active LTM device, but is still responsive to the standby LTM device?
- A. The HTTP application will be unavailable via the LTM device.
- B. The HA-group will disable the trunk my_trunk.
- C. The HA-group will initiate a fail-over because the HA-Group score will be zero.
- D. The HA-group will initiate a fail-over because the threshold is set to 2.
Answer: D
NEW QUESTION 93
-- Exhibit-
-- Exhibit -Refer to the exhibit.
An administrator created a monitor to a pool member web server, which resulted in a pool member that is marked red. The administrator knows the web server is working when it is accessed from another computer.
What should the administrator do to correct the problem?
- A. Change the route to the client in the LTM configuration.
- B. Change the username and/or password on the monitor.
- C. Change the default gateway on the server.
- D. Create a SNAT in the LTM device configuration.
Answer: B
NEW QUESTION 94
An LTM Specialist is troubleshooting virtual server 10.0.0.1:443 residing on VLAN vlan301. The web application is accessed via www.example.com. The LTM Specialist wants to save a packet capture with complete decrypted payload for external analysis.
Which command should the LTM Specialist execute on the LTM device command line interface?
- A. ssldump -Aed -k /config/filestore/files_d/Common_d/certificate_key_d/:Common:www.example.com.key_1
> /var/tmp/trace.cap - B. ssldump -Aed -ni vlan301 -k /config/filestore/files_d/Common_d/certificate_key_d/
:Common:www.example.com.key_1 > /var/tmp/trace.cap - C. tcpdump -vvv -s 0 'host 10.0.0.1 and port 443' -w /var/tmp/trace.cap
- D. tcpdump -vvv -s 0 -ni vlan301 'host 10.0.0.1 and port 443' -w /var/tmp/trace.cap
Answer: B
NEW QUESTION 95
-- Exhibit -
-- Exhibit --
Refer to the exhibit.
An LTM Specialist is performing an HTTP trace on the client side of the LTM device and notices there are many undesired headers being sent by the server in the response. The LTM Specialist wants to remove all response headers except "Set-Cookie" and "Location."
How should the LTM Specialist modify the HTTP profile to remove undesired headers from the HTTP response?
- A. Enter the undesired header names in the 'Response Header Erase' field.
- B. Enter the desired header names in the 'Request Header Insert' field.
- C. Enter the undesired header names in the 'Request Header Erase' field.
- D. Enter the desired header names in the 'Response Headers Allowed' field.
Answer: D
NEW QUESTION 96
An LTM device is load balancing SIP traffic. An LTM Specialist notices that sometimes the SIP request is being load balanced to the same server as the initial connection.
Which setting in the UDP profile will make the LTM device more evenly distribute the SIP traffic?
- A. Set Timeout to Immediate
- B. Enable Datagram LB
- C. Set Timeout to Indefinite
- D. Disable Datagram LB
Answer: B
NEW QUESTION 97
An LTM Specialist connects to an LTM device via the serial console cable and receives unreadable output.
The LTM Specialist is using the appropriate cable and connecting it to the correct serial port.
Which command should the LTM Specialist run through ssh to verify that the baud rate settings for the serial port are correct on the LTM device?
- A. tmsh show /ltm console
- B. tmsh list /sys console
- C. tmsh show /sys console
- D. tmsh edit /sys console
Answer: C
NEW QUESTION 98
-- Exhibit -
-- Exhibit -
Refer to the exhibits.
When observing the AVR statistics for the HTTPS_VS, an LTM Specialist realizes that HTTP status codes are NOT being recorded.
How should the LTM Specialist modify the configuration to record the HTTP status codes?
- A. enable Statistics Logging Type, External on the analytics profile
- B. enable Collected Entities, Response Codes on the analytics profile
- C. assign a streaming profile to the virtual server
- D. assign client SSL and server SSL profiles to the virtual server
Answer: B
NEW QUESTION 99
An LTM Specialist has been asked to configure a virtual server to distribute connections between a pool of two application servers with addresses 172.16.20.1 and 172.16.20.2. The application servers are listening on TCP ports 80 and 443. The application administrators have asked that clients be directed to the same node for both HTTP and HTTPS requests within the same session.
Virtual servers vs_http and vs_https have been created, listening on 1.2.3.100:80 and 1.2.3.100:443, respectively.
Which configuration option will result in the desired behavior?
- A. Create pool http_pool with members 172.16.20.1:80 and 172.16.20.2:80 Assign pool http_pool as the default pool for both vs_https and vs_https Disable port translation for vs_https
Create an SSL persistence profile with "match across virtual servers" enabled Assign the persistence profile to vs_http. - B. Create pool app_pool with members 172.16.20.1:any and 172.16.20.2:any Assign app_pool as the default pool for both vs_http and vs_https
Disable port translation for vs_http and vs_https - C. Create pool http_pool with members 172.16.20.1:80 and 172.16.20.2:80 Create pool https_pool with members 172.16.20.1:443 and 172.16.20.2:443 Assign http_pool as the default pool for vs_http
Assign https_pool as the default pool for vs_https
Create a source address persistence profile with "match across services" enabled Assign the persistence profile to vs_http and vs_https - D. Create pool http_pool with members 172.16.20.1:80 and 172.16.20.2:80 Create pool https_pool with members 172.16.20.1:443 and 172.16.20.2:443 Assign http_pool as the default pool for vs_http
Assign https_pool as the default pool for vs_https
Create an SSL persistence profile with "match across virtual servers" enabled Assign the persistence profile to vs_http
Answer: C
NEW QUESTION 100
An LTM Specialist configures a new HTTP virtual server on an LTM device external VLAN. The web servers are connected to the LTM device internal VLAN. Clients trying to connect to the virtual server are unable to establish a connection. A packet capture shows an HTTP response from a web server to the client and then a reset from the client to the web server.
From which two locations could the packet capture have been collected? (Choose two.)
- A. management VLAN interface of the LTM device
- B. network interface of client machine
- C. internal VLAN interface of the LTM device
- D. external VLAN interface of the LTM device
- E. network interface of web server
Answer: B,E
NEW QUESTION 101
Internet clients connecting to a virtual server to download a file are experiencing about 150 ms of latency and no packet loss.
Which built-in client-side TCP profile provides the highest throughput?
- A. tcp-wan-optimized
- B. tcp-legacy
- C. tcp
- D. tcp-lan-optimized
Answer: A
NEW QUESTION 102
A virtual server for a set of web services is constructed on an LTM device. The LTM Specialist has created an iRule and applied this iRule to the virtual server:
when HTTP_REQUEST {
switch [HTTP::uri] {
"/WS1/ws.jsp" {
log local0. "[HTTP::uri]-Redirected to JSP Pool"
pool JSP
}
default { log local0. "[HTTP::uri]-Redirected to Non-JSP Pool"
pool NonJSP
} } }
However, the iRule is NOT behaving as expected. Below is a snapshot of the log:
/WS1/ws.jsp-Redirected to JSP Pool /WS1/ws.jsp-Redirected to JSP Pool /WS1/ws.jsp-Redirected to JSP Pool /WS1/WS.jsp-Redirected to Non-JSP Pool /ws1/WS.jsp-Redirected to Non-JSP Pool /WS1/ws.jsp-Redirected to JSP Pool /ws1/ws.jsp-Redirected to Non-JSP Pool
What is the problem?
- A. The 'switch' command in the iRule has been used incorrectly.
- B. The condition in the iRule is case sensitive.
- C. The pool members of both pools need to be set up as case-insensitive members.
- D. The "Process Case-Insensitivity" option for the virtual server needs to be selected.
Answer: B
NEW QUESTION 103
An active/standby pair of LTM devices deployed with network failover are working as desired. After external personnel perform maintenance on the network, the LTM devices are active/active rather than active/standby. No changes were made on the LTM devices during the network maintenance.
Which two actions would help determine the cause of the malfunction? (Choose two.)
- A. checking the configuration of the VLAN used for failover
- B. checking the open ports in firewalls between the LTM devices
- C. checking synchronization of system clocks among the network devices
- D. checking that the configurations are synchronized
- E. checking the configuration of the VLAN used for mirroring
Answer: A,B
NEW QUESTION 104
An LTM Specialist defines a receive string in the HTTP monitor and then assigns it to the HTTP pool. The monitor has an interval of 5 seconds and a timeout of 16 seconds.
If the receive string is NOT seen in the the HTTP payload after 20 seconds, how does the LTM device mark the monitor status?
- A. unavailable
- B. available
- C. forced offline
- D. offline
- E. unknown
Answer: D
NEW QUESTION 105
-- Exhibit - -- Exhibit -
Refer to the exhibit.
An LTM Specialist is troubleshooting an HTTP monitor that is marking a pool member as down. Connecting to the pool member directly through a browser shows the application is up and functioning correctly.
ltm monitor http http_mon { defaults-from http destination *:* interval 5 recv "200 OK" send "GET /\\r\\n" time-until-up 0 timeout 16
}
What is the issue?
- A. The request is NOT being received by the pool member.
- B. The pool member is responding with a 404.
- C. The pool member is responding without HTTP headers.
- D. The HTTP headers are compressed.
Answer: C
NEW QUESTION 106
An LTM Specialist sees these entries in /var/log/ltm:
Oct 25 03:34:31 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborteD. 172.16.20.1:443
Oct 25 03:34:32 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborteD. 172.16.20.1:443
Oct 25 03:34:32 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborteD. 172.16.20.1:443
Oct 25 03:34:32 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborteD. 172.16.20.1:443
Oct 25 03:34:32 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborteD. 172.16.20.1:443
Oct 25 03:34:33 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborteD. 172.16.20.1:443
Assume 172.16.20.0/24 is attached to the VLAN "internal."
What should the LTM Specialist use to troubleshoot this issue?
- A. tcpdump -i internal host 172.16.20.1 > /shared/ssl.pcap
ssldump < /shared/ssl.pcap - B. ssldump -i internal host 172.16.20.1
- C. curl -d - -k https://172.16.20.1
- D. tcpdump -s 64 -i internal -w /shared/ssl.pcap host 172.16.20.1
ssldump -r /shared/ssl.pcap
Answer: B
NEW QUESTION 107
An FTP monitor is NOT working correctly.
Which three pieces of information does the LTM Specialist need to provide to ensure a properly working FTP monitor? (Choose three.)
- A. password
- B. FTP server port
- C. username
- D. FTP server IP address
- E. File path
- F. alias
Answer: A,C,E
NEW QUESTION 108
What does the following iRule do?
when CLIENT_ACCEPTED {
if { [matchclass [IP::client_addr] equals WebClient1-Whitelist1] }{
#log local0. "Valid client IP: [IP::client_addr] - forwarding traffic"
#Pool WebClient1
} else {
log local0. "Invalid client IP: [IP::client_addr] - discarding"
discard
}
}
- A. The iRule compares a client IP to a list. If the client IP is on the list, the client is sent to Pool WebClient1.
Otherwise, discard and log the discard. - B. The iRule compares a client IP to a list. If the client IP is on the list, discard and log the discard.
- C. The iRule compares a client IP to a list. If the client IP is NOT on the list, the client is sent to Pool WebClient1. Otherwise, discard and log the discard.
- D. The iRule compares a client IP to a list. If the client IP is NOT on the list, discard and log the discard.
Answer: D
NEW QUESTION 109
-- Exhibit- -- Exhibit -
Refer to the exhibit.
An LTM Specialist is troubleshooting a virtual server. Both the virtual server and the pool are showing blue squares for their statuses, and new clients report receiving "The connection was reset" through their browsers. Connections directly to the pool member are successful.
What is the issue?
- A. The node is marked as disabled.
- B. The virtual server is disabled on all VLANs.
- C. The pool member is disabled.
- D. The HTTP profile has incorrect settings.
Answer: A
NEW QUESTION 110
A client (10.10.1.30) connecting to an HTTPS virtual server (10.10.1.100) with a clientssl profile is getting an SSL error.
Which options will trace this issue?
- A. tcpdump -i external -X -e -nn -vvv -w /shared/ssl_problem.cap port 443 and host 10.10.1.30 ssldump -r /shared/ssl_problem.cap -n -x
- B. tcpdump -i external -X -s 0 -vvv src host 10.10.10.30 and dst host 10.10.1.100 and port 443 > /shared/ ssl_problem.cap
ssldump -r /shared/ssl_problem.cap -n -x - C. tcpdump -i external -s 0 -w /shared/ssl_problem.cap port 443 and host 10.10.10.30 and host
10.10.1.100
ssldump -r /shared/ssl_problem.cap -n -x - D. tcpdump -i external -X -e -nn -vv port 443 and host 10.10.1.100 and host 10.10.1.30 > /shared/ ssl_problem.cap
ssldump -n -x < /shared/ssl_problem.cap
Answer: C
NEW QUESTION 111
......
Authentic Best resources for 301b Online Practice Exam: https://www.actualcollection.com/301b-exam-questions.html