Question 1

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

A pair of LTM devices are deployed in a high-availability (HA) pair as the diagram shows. After inserting a new

rule on the firewalls, the LTM devices become Standby. The rule drops all outbound sessions to the Internet.

Only inbound connections are allowed from the Internet. There are no other changes to the environment.

What triggered the LTM device failover?

Options :

A : HA Group

B : Auto Failback

C : VLAN Failsafe

D :

Gateway Failsafe

Answer: D

Question 2

A new VLAN vlan301 has been configured on a highly available LTM device in partition ApplicationA. A new

directly connected backend server has been placed on vlan301. However, there are connectivity issues pinging

the default gateway. The VLAN self IPs configured on the LTM devices are 192.168.0.251 and 192.168.0.252

with floating IP 192.168.0.253. The LTM Specialist needs to perform a packet capture to assist with

troubleshooting the connectivity.

Which command should the LTM Specialist execute on the LTM device command line interface to capture the

attempted pings to the LTM device default gateway on VLAN vlan301?

Options :

A :

tcpdump -ni /ApplicationA/vlan301 'host 192.168.0.253'

B : tcpdump -ni vlan301 'host 192.168.0.253'

C :

tcpdump -ni /ApplicationA/vlan301 'host 192.168.0.251 or host 192.168.0.252'

D :

tcpdump -ni vlan301 'host 192.168.0.251 or host 192.168.0.252'

Answer: A

Question 3

An LTM Specialist must perform a packet capture on a virtual server with an applied standard FastL4 profile.

The virtual server 10.0.0.1:443 resides on vlan301.

Which steps should the LTM Specialist take to capture the data payload successfully while ensuring no other

virtual servers are affected?

Options :

A :

The standard FastL4 profile should have PVA acceleration disabled. Then the packet capture tcpdump -ni

vlan301 should be executed on the command line interface.

B :

The packet capture tcpdump -ni vlan301 should be executed on the command line interface. There is no

need to change profiles or PVA acceleration.

C :

A new FastL4 profile should be created and applied to the virtual server with PVA acceleration disabled.

Then the packet capture tcpdump -ni vlan301 should be executed on the command line interface.

D :

The LTM device is under light load. The traffic should be mirrored to a dedicated sniffing device. On the

sniffing device, the packet capture tcpdump -ni vlan301 should be executed.

Answer: C

Question 4

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

An LTM Specialist has uploaded a qkview to F5 iHealth.

Within the GUI, what is the correct procedure to comply with the recommendation shown in the exhibit?

Options :

A :

Obtain product version image from release.f5.com.

Overwrite existing image with new product version image.

Select product version image and click Install.

Select the available disk and volume set name.

B :

Obtain product version image from images.f5.com.

Overwrite existing image with new product version image.

Select product version image and click Install.

Select the available disk and volume set name.

C :

Obtain product version image from downloads.f5.com.

Import product version image.

Install image onto BIG-IP platform.

Select product version image and click Install.

Select the available disk and volume set name.

D :

Log a call requesting the product version image via websupport.f5.com

Import product version image.

Install image onto BIG-IP platform.

Select product version image and click Install.

Select the available disk and volume set name.

Answer: C

Question 5

-- Exhibit –

-- Exhibit --

Refer to the exhibits.

After upgrading LTM from v10 to v11, users are unable to connect to an application. The virtual server is using

a client SSL profile for re-terminating SSL for payload inspection, but a server SSL profile is being used to reencrypt the request.

A client side ssldump did NOT show any differences between the traffic going directly to the server and the

traffic being processed by the LTM device. However, packet capture was done on the server, and differences

were noted.

Which modification will allow the LTM device to process the traffic correctly?

Options :

A :

Enable Strict Resume.

B :

Change Secure Renegotiation to "Request."

C :

Enable ProxySSL option in the server SSL profile.

D :

Change to different ciphers on the server SSL profile.

Answer: B

Free 301b Mock Exam – Practice Online Confidently

Buying Options: