New 2021 Guaranteed Success with ExamcollectionPass 301b Dumps F5 PDF Questions
Exceptional Practice To LTM Specialist: Maintain & Troubleshoot Pass the First Time
NEW QUESTION 91
The pool members are serving up simple static web content. The current virtual server configuration is given as follows: tmsh list ltm virtual simple
ltm virtual simple { destination 10.10.10.10:80 ip-protocol tcp mask 255.255.255.255 profiles { http { } httpcompression { } oneconnect { } tcp { } } snat automap vlans-disabled }
tmsh list ltm pool simple_pool ltm pool simple_pool { members {
10.10.10.11:80 {
address 10.10.10.11 }
10.10.10.12:80
{
address 10.10.10.12 }
10.10.10.12:80
{
address 10.10.10.13 }
}
}
Which three objects in the virtual server configuration can be removed without disrupting functionality of the virtual server? (Choose three.)
- A. http
- B. httpcompression
- C. oneconnect
- D. tcp
- E. snat automap
Answer: A,B,C
NEW QUESTION 92
-- Exhibit -
-- Exhibit -
Refer to the exhibit.
A user is unable to access a secure application via a virtual server.
What is the cause of the issue?
- A. The virtual server does NOT have a pool configured.
- B. The virtual server does NOT have a client SSL profile configured.
- C. The client and server CANNOT agree on a common cipher.
- D. The client authentication failed.
Answer: D
NEW QUESTION 93
An LTM Specialist must perform a hot fix installation from the command line.
What is the correct procedure to ensure that the installation is successful?
- A. import the hot fix to the /var/shared/images directory
check the integrity of the file with an md5 checksum
tmsh install sys software hotfix <hotfix_name>.iso volume <volume_name> - B. import the hot fix to the /shared/images directory
check the integrity of the file with an md5 checksum
tmsh install sys software hotfix <hotfix_name>.iso volume <volume_name> - C. import the hot fix to the /shared/images directory
check the integrity of the file with an md5 checksum
tmsh apply sys software hotfix volume <volume_name> <hotfix_name>.iso - D. import the hot fix to the /var/shared/images directory
check the integrity of the file with an md5 checksum
tmsh apply sys software hotfix volume <volume_name> <hotfix_name>.iso
Answer: B
NEW QUESTION 94
An LTM Specialist connects to an LTM device via the serial console cable and receives unreadable output.
The LTM Specialist is using the appropriate cable and connecting it to the correct serial port.
Which command should the LTM Specialist run through ssh to verify that the baud rate settings for the serial port are correct on the LTM device?
- A. tmsh show /ltm console
- B. tmsh list /sys console
- C. tmsh show /sys console
- D. tmsh edit /sys console
Answer: C
Explanation:
Explanation/Reference:
NEW QUESTION 95
-- Exhibit-
-- Exhibit --
Refer to the exhibit.
An LTM Specialist has uploaded a qkview to F5 iHealth.
Within the GUI, what is the correct procedure to comply with the recommendation shown in the exhibit?
- A. Obtain product version image from release.f5.com.
Overwrite existing image with new product version image.
Select product version image and click Install.
Select the available disk and volume set name. - B. Log a call requesting the product version image via websupport.f5.com
Import product version image.
Install image onto BIG-IP platform.
Select product version image and click Install.
Select the available disk and volume set name. - C. Obtain product version image from images.f5.com.
Overwrite existing image with new product version image.
Select product version image and click Install.
Select the available disk and volume set name. - D. Obtain product version image from downloads.f5.com.
Import product version image.
Install image onto BIG-IP platform.
Select product version image and click Install.
Select the available disk and volume set name.
Answer: D
NEW QUESTION 96
An LTM Specialist is troubleshooting an issue with a new virtual server. When connecting through the virtual server, clients receive the message "Unable to connect" in the browser, although connections directly to the pool member show the application is functioning correctly. The LTM device configuration is:
ltm virtual /Common/vs_https { destination /Common/10.10.1.110:443 ip-protocol udp mask 255.255.255.255 pool /Common/pool_https profiles { /Common/udp { } } translate-address enabled translate-port enabled vlans-disabled }
ltm pool /Common/pool_https { members { /Common/172.16.20.1:443 { address 172.16.20.1 } } }
What issue is the LTM Specialist experiencing?
- A. The pool member is marked down by a monitor.
- B. The virtual server is disabled on all VLANs.
- C. The pool member is marked down administratively.
- D. The virtual server is configured for the incorrect protocol.
Answer: D
NEW QUESTION 97
-- Exhibit -
-- Exhibit --
Refer to the exhibits.
An LTM Specialist has configured a virtual server to distribute connections to a pool of application servers and to offload SSL processing. The application fails to work as expected when connecting to the virtual server. It does work when clients connect directly to the application. Two packet captures were taken at the application server.
What is the root cause of the problem?
- A. The SSL handshake between the LTM device and the server is failing.
- B. The LTM device is sending non-SSL traffic to an SSL port.
- C. The application servers are NOT listening on port 80.
- D. The virtual server does NOT have a clientSSL profile assigned.
Answer: B
NEW QUESTION 98
An LTM Specialist notices the following error on the stdout console:
mcpd[2395]: 01070608:0: License is not operational(expired or digital signature does not match contents) Which command should be executed to verify the LTM device license?
- A. tmsh show /sys license
- B. tmsh show /sys license status
- C. tmsh /util bigpipe version
- D. bigpipe version
Answer: A
Explanation:
Explanation/Reference:
NEW QUESTION 99
-- Exhibit-
-- Exhibit -
Refer to the exhibit.
A virtual server is set up on an LTM device as follows:
Virtual server address 78.24.213.79
Default Persistence ProfilE.source_addr, 600s.
Pool NamE.Pool1
Pool Members: 10.72.250.52:80 and 10.72.250.60:80 (both on Internal Vlan)
There are several current connections to the virtual server, and pool member
10.72.250.52:80 has been set to a "Disabled" state.
A tcpdump on the Internal Vlan shows traffic going to 10.72.250.52:80.
How soon after the persistence table query was run can existing connections be
refreshed/renewed to ensure that no requests are sent to 10.72.250.52?
- A. 539 seconds
- B. 590 seconds
- C. 460 seconds
- D. 196 seconds
- E. 591 seconds
Answer: A
NEW QUESTION 100
-- Exhibit-
-- Exhibit -
Refer to the exhibit.
An LTM Specialist is investigating reports that users are unable to perform some commands through an FTP virtual server. The users are receiving the FTP error "500 Illegal PORT command." The virtual server is configured to SNAT using automap. The LTM Specialist performs a capture on the server side of the LTM device.
Why is the server returning this error?
- A. Active IP address in LOGIN command
- B. Active IP address in PORT command
- C. PORT command disallowed
- D. LIST command disallowed
Answer: B
NEW QUESTION 101
An LTM Specialist wants to allow access to the Always On Management (AOM) from the network.
Which two methods should the LTM Specialist use to configure the AOM interface? (Choose two.)
- A. Choose the network configurator in the AOM menu on the serial port.
- B. Configure the AOM network address in the GUI under System>Platform.
- C. Configure the AOM IP from the front panel buttons and LCD.
- D. Log in to the Host via ssh, "ssh aom", and modify the network configuration file.
Answer: A,D
NEW QUESTION 102
-- Exhibit-
-- Exhibit -
Refer to the exhibits.
An LTM device has been configured for load balancing a number of different application servers. Configuration changes need to be made to the LTM device to allow administrative management of the servers in 172.16.10/24, 172.16.20/24, and 172.16.30/24 networks. The servers require outbound access to numerous destinations for operations.
Which solution has the simplest configuration changes while maintaining functionality and basic security?
- A. Enable 172.16.10.0:0/24, 172.16.20.0:0/24, and 172.16.30.0:0/24 on ingress VLAN(s), and enable 0.0.0.0:0/0.0.0.0 on egress VLAN(s).
- B. Replace 172.16.10.0:0/24, 172.16.20.0:0/24, and 172.16.30.0:0/24, with 172.16.0.0:0/16, and keep 0.0.0.0:0/0.0.0.0.
- C. Enable 172.16.10.0:0/24, 172.16.20.0:0/24, and 172.16.30.0:0/24 on egress VLAN(s), and enable 0.0.0.0:0/0.0.0.0 on ingress VLAN(s).
- D. Remove 172.16.10.0:0/24, 172.16.20.0:0/24, and 172.16.30.0:0/24, and keep 0.0.0.0:0/0.0.0.0 enabled on all VLANs.
Answer: A
NEW QUESTION 103
What is the recommended procedure for upgrading a major TMOS release on a BIG-IP platform?
- A. 1. Take a configuration backup.
2.Upload the device code.
3.Install device code to the non-active volume.
4.Reboot the device to the non-active volume.
5.Renew the device license. - B. 1. Renew the device license.
2.Take a configuration backup.
3.Upload the device code.
4.Install device code to the non-active volume.
5.Reboot the device to the non-active volume. - C. 1. Renew the device license.
2.Take a configuration backup.
3.Reboot the device to the non-active volume.
4.Upload the device code.
5.Install device code to the current volume. - D. 1. Take a configuration backup.
2.Reboot the device to the non-active volume.
3.Renew the device license.
4.Upload the device code.
5. Install device code to the current volume.
Answer: B
NEW QUESTION 104
-- Exhibit -
-- Exhibit --
Refer to the exhibits.
A virtual server has been configured for SSL offload on a single-arm network. On average, the virtual server will be handling 100,000 connections, with a peak of 130,000 connections. Between the virtual server and the web servers there is a single reverse proxy to provide site caching. The proxy is configured to perform source IP persistence before contacting the web servers. The site is logging users out immediately after logging them in.
What should the LTM Specialist do to resolve this issue?
- A. Configure the virtual server HTTP profile to insert an X-Forwarded-For header.
- B. Create an iRule to add client IP persistence to a SNAT pool member.
- C. Change the virtual server server-side TCP profile to tcp-lan-optimized.
- D. Add a source address persistence profile to the virtual server.
Answer: B
NEW QUESTION 105
-- Exhibit - -- Exhibit -
Refer to the exhibit.
An LTM Specialist configures a virtual server that balances HTTP connections to a pool of three application servers. Approximately one out of every three connections to the virtual server fails.
Which two actions will resolve the problem? (Choose two.)
- A. Verify that port lockdown is set to allow port 80.
- B. Enable SNAT automap on the virtual server.
- C. Verify the default gateway on the application servers.
- D. Assign a custom HTTP monitor to the pool.
- E. Increase the TCP timeout value in the default TCP profile.
Answer: B,C
NEW QUESTION 106
-- Exhibit -
-- Exhibit --
Refer to the exhibits.
An LTM Specialist uses the information in the logs to determine the cause of a failover event in a high- availability (HA) pair.
What caused the failover?
- A. The configuration reload request caused the config to reload and the device to failover.
- B. The overdog process crashed.
- C. The system was administratively rebooted.
- D. The process bcm56xxd received SIGTERM from the watchdog process.
Answer: C
NEW QUESTION 107
The pool members are serving up simple static web content.
The current virtual server configuration is given as follows:
tmsh list ltm virtual simple
ltm virtual simple {
destination 10.10.10.10:80
ip-protocol tcp
mask 255.255.255.255
profiles {
http { }
httpcompression { }
oneconnect { }
tcp { }
}
snat automap
vlans-disabled
}
tmsh list ltm pool simple_pool
ltm pool simple_pool {
members {
10.10.10.11:80 {
address 10.10.10.11 }
10.10.10.12:80 {
address 10.10.10.12 }
10.10.10.12:80 {
address 10.10.10.13 }
}
}
Which three objects in the virtual server configuration can be removed without disrupting functionality of the virtual server? (Choose three.)
- A. http
- B. httpcompression
- C. oneconnect
- D. tcp
- E. snat automap
Answer: A,B,C
NEW QUESTION 108
An LTM Specialist configures two LTM devices in a high-availability pair with trusts established and device groups configured properly using network failover. After several months, the LTM Specialist notices that changes made to one LTM device do NOT cause the synchronization status to update to "changes pending," and this device does NOT synchronize with the device group.
Which two steps should the LTM Specialist take to identify the issue? (Choose two.)
- A. Verify that ConfigSync is using the management IP address.
- B. Verify that the devices are not using self-signed certificates.
- C. Verify that NTP is synchronized.
- D. Verify the network connectivity between the devices.
- E. Verify that port lockdown on the ConfigSync interface is set to allow port 1026.
Answer: C,D
NEW QUESTION 109
-- Exhibit- -- Exhibit -
Refer to the exhibits.
Which two servers are missing two frequently used URLs? (Choose two.)
- A. 172.16.20.1 /text.txt /browserspecific.html
- B. 172.16.20.3 /text.one /browserspecific.html
- C. 172.16.20.2 /text.one /browserspecific.html
- D. 172.16.20.2 /text.one /text.txt
- E. 172.16.20.1 /text.one /text.txt
Answer: B,D
NEW QUESTION 110
-- Exhibit - -- Exhibit -Refer to the exhibit.
An LTM Specialist is reviewing the 'test' partition.
Which objects, in order, can be removed from the partition?
- A. delete pool test1_pool, delete node 10.1.1.2, delete node 10.1.1.1
- B. delete node 10.1.1.2, delete pool test2_pool
- C. delete pool test1_pool, delete pool test2_pool, delete node 10.1.1.3
- D. delete pool test1_pool, delete node 10.1.1.2
- E. delete virtual test1_vs, delete pool test2_pool, delete node 10.1.1.1
Answer: D
NEW QUESTION 111
-- Exhibit-
-- Exhibit -
Refer to the exhibit.
The decoded TCPDump capture is a trace of a failing health monitor. The health monitor is sending the string shown in the capture; however, the server response is NOT as expected. The receive string is set to 'SERVER IS UP'.
What is the solution?
- A. The GET request Host header field requires a host name.
- B. Incorrect syntax in send string. 'Connection: Close' should be 'Connection: Open'.
- C. Incorrect syntax in send string. 'HTTP/1.1' should be 'HTTP1.1'.
- D. The /test_page.html does NOT exist on the web server and should be added.
Answer: D
NEW QUESTION 112
-- Exhibit-
-- Exhibit --
Refer to the exhibit.
Which step should an LTM Specialist take next to finish upgrading to HD1.3?
- A. Install hotfix to HD1.3
- B. Relicense HD1.3
- C. Activate HD1.3
- D. Install image to HD1.3
Answer: C
NEW QUESTION 113
The LTM device is configured to provide load balancing to a set of web servers that implement access control lists (ACL) based on the source IP address of the client. The ACL is at the network level and the web server is configured to send a TCP reset back to the client if it is NOT permitted to connect.
The virtual server is configured with the default OneConnect profile.
The ACL is defined on the web server as:
Permit: 192.168.136.0/24 Deny: 192.168.116.0/24
The packet capture is taken of two individual client flows to a virtual server with IP address
192.168.136.100.
Client A - Src IP 192.168.136.1 - Virtual Server 192.168.136.100:
Clientside:
09:35:11.073623 IP 192.168.136.1.55684 > 192.168.136.100.80: S 869998901:869998901(0) win
8192 <mss 1460,nop,wscale 2,nop,nop,sackOK>
09:35:11.073931 IP 192.168.136.100.80 > 192.168.136.1.55684: S 2273668949:2273668949(0)
ack 869998902 win 4380 <mss 1460,nop,wscale 0,sackOK,eol>
09:35:11.074928 IP 192.168.136.1.55684 > 192.168.136.100.80: . ack 1 win 16425 09:35:11.080936 IP 192.168.136.1.55684 > 192.168.136.100.80: P 1:299(298) ack 1 win 16425 09:35:11.081029 IP 192.168.136.100.80 > 192.168.136.1.55684: . ack 299 win 4678
Serverside:
09:35:11.081022 IP 192.168.136.1.55684 > 192.168.116.128.80: S 685865802:685865802(0) win
4380 <mss 1460,nop,wscale 0,sackOK,eol>
09:35:11.081928 IP 192.168.116.128.80 > 192.168.136.1.55684: S 4193259095:4193259095(0)
ack 685865803 win 5840 <mss 1460,nop,nop,sackOK,nop,wscale 6>
09:35:11.081943 IP 192.168.136.1.55684 > 192.168.116.128.80: . ack 1 win 4380 09:35:11.081955 IP 192.168.136.1.55684 > 192.168.116.128.80: P 1:299(298) ack 1 win 4380 09:35:11.083765 IP 192.168.116.128.80 > 192.168.136.1.55684: . ack 299 win 108
Client B - Src IP 192.168.116.1 - Virtual Server 192.168.136.100:
Clientside:
09:36:11.244040 IP 192.168.116.1.55769 > 192.168.136.100.80: S 3320618938:3320618938(0)
win 8192 <mss 1460,nop,wscale 2,nop,nop,sackOK>
09:36:11.244152 IP 192.168.136.100.80 > 192.168.116.1.55769: S 3878120666:3878120666(0)
ack 3320618939 win 4380 <mss 1460,nop,wscale 0,sackOK,eol>
09:36:11.244839 IP 192.168.116.1.55769 > 192.168.136.100.80: . ack 1 win 16425 09:36:11.245830 IP 192.168.116.1.55769 > 192.168.136.100.80: P 1:299(298) ack 1 win 16425 09:36:11.245922 IP 192.168.136.100.80 > 192.168.116.1.55769: . ack 299 win 4678
Serverside:
09:36:11.245940 IP 192.168.136.1.55684 > 192.168.116.128.80: P 599:897(298) ack 4525 win 09:36:11.247847 IP 192.168.116.128.80 > 192.168.136.1.55684: P 4525:5001(476) ack 897 win
Why was the second client flow permitted by the web server?
- A. SNAT automap was enabled on the virtual server.
- B. A source address persistence profile is assigned to the virtual server.
- C. The idle TCP session from the first client was re-used.
- D. A global SNAT is defined.
Answer: C
NEW QUESTION 114
......
301b EXAM DUMPS WITH GUARANTEED SUCCESS: https://www.examcollectionpass.com/F5/301b-practice-exam-dumps.html
Best Quality F5 301b Exam Questions: https://drive.google.com/open?id=1REhcs3sLx3VLcqWoO1QuLh7zzIFs6MX8