BIG-IP LTM Specialist: Architect, Setup and Deploy 301a Exam Questions

1. In an iApp, which configuration protects against accidental changes to an application Services configuration?

2. An LTM device load balances a pool of routers. The LTM device needs to verify path availability to an HTTP server with the IP address 192 168.10 10. located beyond the routers.

Which monitor type and parameters arc required?

3. An LTM Specialist has detected that a brute force login attack is occurring against the SSH service via a BIG-IP management interface. Login attempts are occurring from many IPs within the internal company network.

BIG-IP SSH access restrictions are in place as follows:

The LTM Specialist has determined that SSH access should only occur from the 192.168.1.0/24 and 172.16.254.0/23 networks.

Which tmsh command should the LTM Specialist use to permit access from the desired networks only?

4. Four members in a server pool have similar hardware platforms. An LTM Specialist needs the load balancing method that can select the server with the fewest entries in the persistence table.

Which load balancing method should the LTM Specialist use?

5. A web server’s default gateway is the network router. The LTM Specialist needs to introduce an LTM device to load balance to the web servers without changing the server’s default gateway.

Which deployment method and settings should the LTM Specialist use to ensure correct traffic flow and that the web servers can obtain the actual con IP addresses?

6. An LTM device needs an additional traffic group.

Which configuration item is required?

7. An LTM device configuration is as shown:

What should be the two expected outcomes based on this configuration? (Choose two.)

8. An LTM Specialist needs to deploy a virtual server that will load balance traffic targeting https://register.example.com to a set of three web servers. Persistence needs to be ensured. No persistence mirroring is allowed SSL offloading is required.

A fourth web server with fewer resources will be used to handle requests from engine bots to https://register.example.comvrobots.txt by an iRule. The (Rule will use the HTTP_REQUEST event. .

What are the required profile and persistence settings to implement this

9. One LTM device in an HA pair of LTM devices is unable to reach its default gateway. An HA Failover event needs to happen.

Which configuration item enables this behavior?

10. An LTM Specialist upgrades the switching infrastructure and the backend servers on the LAN segments.

The LTM Specialist notices a 20% memory usage increase on the BIG-IP device while handling the same number of concurrent connections.

A comparison of statistics pre-upgrade and post-upgrade shows a significant reduction on the following:

– RTT between the BIG-IP device and the backend servers

– Packet drops in the switch

Time to First Byte (TTFB)

The LTM Specialist is concerned with the scalability of the number of concurrent connections with the new memory usage.

Which setting should be changed to reduce the memory usage on the BIG-IP device?

11. An application is sensitive to packet loss and unexpected session termination. A pair of LTM devices is configured in an Active/Standby high availability configuration. SNATS are NOT used and the virtual server contains a Universal Persistence profile.

which two actions must an LTM Specialist take to ensure the sessions are maintained between the client and server during an LTM device failover event while maintaining maximum uptime? (Choose two.)

12. AN LTM Specialist needs to determine the delay between an LTM device and the internal web server for a specific client.

Which two AVR reporting options should the LTM Specialist enable to measure the delay? (Choose two.)

13. An LTM Specialist has recently taken over administration or an LTM device that has experienced resource availability issues. The LTM device will need to be solely used for load balancing and SSL offload. Previously, the LTM device was also used to provide statistical analysis of application traffic. However, that functionality has been moved to a third party solution.

Based on the output below, which configuration change should be made to ensure the LTM module receives the most amount of resources?

14. A virtual server with SNAT automap enabled selects pool member 10.20.0.10.443 for the server-side flow. The client side flow source IP is 192.168.0.10.

Which source IP should be expected in the server-side connection?

15. An LTM Specialist plans to enable connection mirroring for a virtual server in an HA environment.

What must the LTM Specialist consider before implementing the configuration change?

16. An LTM Specialist needs to create an iRule that creates persistence records based on a

JSESSIONID cookie. If a persistence record already exists, then the iRule must persist the client connection according to the existing record.

Which persistence profile enables the iRule to meet these requirements?

17. Remote office users are having performance issues with a virtual hosted on the F5 LTM. The LTM Specialist reviews the configuration for the virtual server and determine that some settings are set with default profiles.

Which profile should the LTM Specialist enable to improve virtual server performance?

18. The network team introduces a new subnet 10.10.22.0/24 to the network. The route needs to be configured on the F5 device to access this network via the 30.30.30.158 gateway.

How should the LTM Specialist configure this route?

19. An LTM Specialist regularly provides analytics reports that show that traffic generated by different subnets within the organization. The LTM Specialist needs show the associate department names next the IP addresses in the reports.

Which step should the LTM Specialist take to meet this requirement?

20. The picture belongs to static content, you can configure static content cache in FS to meet this demand

An LTM Specialist must configure session persistence for a highly available, highly utilized web-based application.

* The following requirements are provided:

* http proxy setup for security

persistence information available to the HA peer in case of failover

The LTM Specialist needs to minimize additional burden on the LTM device to the greatest extent possible.

Which persistence profile should be used?

21. AN LTM Specialist receives reports that an external company application is having reliability issues. The F5 Administrator finds the following in /vat/log/ltm file.

The LTM Specialist determines that the F5 LTM device is entering into Aggressive Mode Adaptive Reaping, which is causing the site reliability issues.

What is the most likely reason that the LTM device has entered into Aggressive Mode Adaptive Reaping?

22. An unwanted IP address tries to connect to the configuration utility via Self IP An LTM Specialist needs to block the attempts based on the IP address.

How should the ITM Specialist block the attempts without affecting other users?

23. An LTM Specialist discovers an issue with the custom http monitor that returns in a false positive status.

The end users cannot get the right website, but the http monitor marks the pool member UP.

What is causing the false positive result?

24. To improve application security, an LTM Specialist must configure a BIG application access. The BIG IP system to authenticate the client certificate before permitting application access. The BIG-IP system must also support the ability to red to redirect users to a certificate enrolment system without generating a browser error.

Within the Client SSL profile, which value should the LTM Specialist select for the Client Certificate option?

25. Refer to the exhibit.

The http monitor is applied to a pool All members are enabled One pool member stops responding TCP port 80. The server still responds to ping.

What is the resulting status of this pool member?

26. A LTM device needs to load balance active and passive FTP traffic while using only a single virtual server.

Which virtual server type should an LTM Specialist configure on the LTM device?

27. An LTM Specialist needs to create two virtual servers.

The application has links for both HTTP and HTTPS version of application. The client must be persistence to a pool member, no matter which virtual server is accessed.

What must be selected in the Source Address Affinity persistence profile?

28. An LTM Specialist creates an Analytics wide to show the type of browsers used to access a certain application. However, the generated statistics only sum up all transaction for that application under one item called ‘ Aggregated.’’

What should the LTM Specialist do to resolve this problem?

29. Refer to the following iRule:

What is a complete list of profiles that must be applied to the virtual server for this iRule?

30. An LTM Specialist has trouble with SNMP traps in the management network.

The ITM Specialist takes the network capture shown to troubleshoot:

What should the UM Specialist change to capture packets related to this workflow?

31. An LTM Specialist needs to configure a setup for antivirus scanning of HTTP traffic with an internet Contact adaption Protocol (ICAP) server.

Which two server type should be used? (Choose two.)

32. An LTM Specialist needs to upgrade all guests on a Viprion eight CMP guests.

What is the maximum number of guests that the LTM Specialist should upgrade at once?

33. Which process can be eliminated by terminating SSL communication on the LTM device rather than the backend pool members?

34. Refer to the exhibit

Given the bigip conf extract shown where the servers only talk http on port 80, which node will receive the next user request?

35. Which Standard Virtual Server settings should an LTM Specialist use to load balance across routed path of two different ISPs?

36. An HTTP monitor is created and assigned to a pool with the following non-default configuration:

Interval: 7 seconds

Timeout: 22 seconds

Reverse: Yes

Send String: GET/status.html HTTP/1.1/r/nHost:test.example.com/r/nConnector:Close

Receive String: Up

The HTTP server sends the following response:

What is the resulting pool status?

37. An LTM Specialist needs to apply SNAT using currently used SNAT pool to a new virtual server.

What needs to be completed before applying that configuration change?

38. A virtual server is using a TCP profile based on the top-wan-optimized profile for a streaming application Users report videos are loading slowly.

Which setting should be modified in the TCP profile to optimize the application?

39. An LTM device an application that requires all connections to be secured via SSL The device must verify that request contain a specific cookie before allowing the request to be sent to the pool member.

Which virtual server type should an LTM Specialist configure on the LTM device?

40. TWO LTM devices are in the same Device Group and configured for Ac live/Standby Failover. The LTM Specialist observes that the HA Active and Standby device constantly changes state. All network links use the default route domain A dedicated fiber ink is used for the HA connection with a latency of 250 ms but no packet loss.

What is causing the change in failover state to occur?

41. A new web application is being deployed Mutual SSL authentication must be used to authenticate clients.

Which of the following two tasks must be completed to meet the requirements? (Choose two)

42. An TLM Specialist needs to configure a virtual server to terminate SSL connection on the LTM device.

Cryptographic information must be re-authorized for SSL sessions that remain open for longer than 30 seconds.

Which settings should the LTM Specialist configure in the client SSL profile?

43. An LTM Specialist observes decreased performance and intermittent connection reap LTM system.

Based on the configuration, which action will address these issues?

44. An LTM Specialist needs to provide access to a 8BG-IP to device for a company’s support person access to the BIG IP device, but are NOT allowed to change any settings All support the support remote access to the BIG-IP device, but are NOT allowed to change ant settings. All support have accounts in the company’s Active Directory

Which method is appropriate to provide access for the support personnel to the BIG-JP device?

45. A customer wants to select the pool for an application based on information found in the path of the URL.

For example:

http://www.example.com/app 1 should be sent to the app 1 pool

http.//www.exampie.com/app 2 should be sent to the app2 pool

Which two profiles need to be assigned to the virtual server? (Choose two.)

46. An LTM Specialist configures a new virtual server with a single pool member. The LTM Specialist has NOT defined a health monitor for the pool, pool member or node.

What is the status of the virtual server?

47. An LI M device is experiencing a high volume of traffic. The virtual server is struggling under the load. The problem appears to be on the server side connections. The virtual server is accepting connections . The virtual server is accepting connections on https and is configured with an SSL profile and http pool.

What should be added to increase the performance of the device?

48. Six servers have a varying number of connections that change based on the user load.

Which load balancing method should an LTM Specialist apply to divided the web application traffic to the servers on the relative performance trend?

49. A web server is being overloaded with HTTPS traffic. To decrease the load on the server, the LTM Specialist and the Server. Administrator decide to perform SSL offloading on the LTM device.

The configuration of the virtual server is as follows:

Which change must be made to the configuration to perform SSL offloading?

50. An LTM device provides load balancing to a web application? The LTM device has two dual-core processors and a licensed SSL Transactions Per Second (TPS) limit of 500 CMP is enabled.

TLS connections are used between client systems and virtual servers on the LTM device, as well as from the LTM device to servers used as part of LTM pool.

TLS enabled virtual servers utilize certificates based on 2048-bit keys

During a peak period. 2560 new TLS transactions per second are attempted to the web application via the LTM device.

What will happen in this scenario?