Latest Oct 26, 2021 Real 301b Exam Dumps Questions Valid 301b Dumps PDF
F5 301b Exam Dumps - PDF Questions and Testing Engine
For more info visit:
NEW QUESTION 33
-- Exhibit -
-- Exhibit --
Refer to the exhibit.
An LTM Specialist has uploaded a qkview to F5 iHealth.
Within the GUI, what is the correct procedure to comply with the recommendation shown in the exhibit?
- A. Obtain product version image from release.f5.com.
Overwrite existing image with new product version image.
Select product version image and click Install.
Select the available disk and volume set name. - B. Log a call requesting the product version image via websupport.f5.com Import product version image.
Install image onto BIG-IP platform.
Select product version image and click Install.
Select the available disk and volume set name. - C. Obtain product version image from downloads.f5.com.
Import product version image.
Install image onto BIG-IP platform.
Select product version image and click Install.
Select the available disk and volume set name. - D. Obtain product version image from images.f5.com.
Overwrite existing image with new product version image.
Select product version image and click Install.
Select the available disk and volume set name.
Answer: C
NEW QUESTION 34
An LTM device is deployed in a one-armed topology. The virtual server, clients, and web servers are connected on the LTM device internal VLAN. A client tries to connect to the virtual server and is unable to establish a connection. A packet capture from the LTM device internal VLAN shows that the HTTP request is being forwarded to the web server.
From which two additional locations should protocol analyzer data be collected? (Choose two.)
- A. network interface of web server
- B. network interface of client machine
- C. any network interface of the Internet firewall
- D. external VLAN interface of LTM device
- E. internal VLAN interface of LTM device
Answer: A,B
NEW QUESTION 35
The active LTM device in a high-availability (HA) pair performs a failover at the same time the network team reports an outage of a switch on the network.
Which two items could have caused the failover event? (Choose two.)
- A. an Auditor role that has access to the GUI
- B. a monitor on a pool in an HA group
- C. a VLAN fail-safe setting
- D. the standby LTM that was rebooted
- E. the standby LTM that lost connectivity on the failover VLAN
Answer: B,C
NEW QUESTION 36
An LTM Specialist sees these entries in /var/log/ltm:
Oct 25 03:34:31 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborteD.172.16.20.1:443
Oct 25 03:34:32 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborteD.172.16.20.1:443
Oct 25 03:34:32 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborteD.172.16.20.1:443
Oct 25 03:34:32 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborteD.172.16.20.1:443
Oct 25 03:34:32 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborteD.172.16.20.1:443
Oct 25 03:34:33 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborteD.172.16.20.1:443
Assume 172.16.20.0/24 is attached to the VLAN "internal."
What should the LTM Specialist use to troubleshoot this issue?
- A. curl -d - -k https://172.16.20.1
- B. tcpdump -i internal host 172.16.20.1 > /shared/ssl.pcap ssldump < /shared/ssl.pcap
- C. ssldump -i internal host 172.16.20.1
- D. tcpdump -s 64 -i internal -w /shared/ssl.pcap host 172.16.20.1 ssldump -r /shared/ssl.pcap
Answer: C
NEW QUESTION 37
-- Exhibit -
-- Exhibit --
Refer to the exhibit.
An LTM Specialist has created a virtual server to load balance traffic to a pool of HTTPS servers. The servers use client certificates for user authentication. The virtual server has clientssl, serverssl, and http profiles enabled. Clients are unable to connect to the application through the virtual server. Clients are able to connect to the application servers directly.
What is the root cause of the problem?
- A. The LTM device does NOT trust the issuing CA of the client certificate.
- B. The application server does NOT support 2048-bit keys.
- C. The application server does NOT see the client certificate due to SSL offload.
- D. The clientssl profile is NOT set to require a client certificate.
Answer: C
NEW QUESTION 38
-- Exhibit -
-- Exhibit --
Refer to the exhibit.
An LTM Specialist sets up AVR alerts and notifications for a specific virtual server if the server latency exceeds 50ms. The LTM Specialist simulates a fault so that the server latency is consistently exceeding the 50ms threshold; however, no alerts are being received.
Which configuration should the LTM Specialist modify to achieve the expected results?
- A. The metric "Page Load Time" needs to be enabled to ensure that the correct information is collected.
- B. SNMP alerting should be enabled to allow e-mail to be sent to the support team.
- C. The rule should be adjusted to trigger when server latency is above 50ms.
- D. User Agents needs to be enabled to ensure the correct information is collected to trigger the alert.
Answer: C
NEW QUESTION 39
The LTM Specialist is in the process of creating a USB boot drive for the purpose of restoring the BIG-IP software to an LTM device. A separate LTM device has been selected for the purpose of creating the USB boot drive. The BIG-IP software ISO has already been uploaded and mounted on the separate LTM device.
Which command should the LTM Specialist use to trigger the LTM device to install the BIGIP software to the USB boot drive?
- A. install
- B. tmsh
- C. bigip_software_create
- D. mkdisk
Answer: D
NEW QUESTION 40
The end users of a web application need to verify that their browsers received the complete message-body from the web server.
Which HTTP header will accomplish this?
- A. Range
- B. Accept-Ranges
- C. Content-Length
- D. Expect
Answer: C
NEW QUESTION 41
An LTM Specialist has configured a virtual server for www.example.com, load balancing connections to a pool of application servers that provide a shopping cart application. Cookie persistence is enabled on the virtual server. Users are able to connect to the application, but the user's shopping cart fails to update. A traffic capture shows the following:
Request: GET /cart/updatecart.php HTTP/1.1 Host: www.example.com Connection: keep-alive Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_5) AppleWebKit/537.4 (KHTML,
like Gecko) Chrome/22.0.1229.94 Safari/537.4 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-EncodinG.gzip,deflate,sdch Accept-LanguagE.en-US,en;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3 CookiE.BIGipServerwebstore_pool=353636524.20480.0000
Response:
HTTP/1.1 200 OK
DatE.Wed, 24 Oct 2012 18:00:13 GMT
Server: Apache/2.2.22 (Ubuntu)
X-Powered-By: PHP/5.3.10-1ubuntu3.1
Set-CookiE.cartID=647A5EA6657828C69DB8188981CB5; path=/;
domain=wb01.example.com
Keep-AlivE.timeout=5, max=100
Connection: Keep-Alive
Content-TypE.text/html
No changes can be made to the application.
What should the LTM Specialist do to resolve the problem?
- A. Enable source address persistence as a fallback persistence method.
- B. Create a universal persistence profile on the cartID cookie.
- C. Use an iRule to rewrite the cartID cookie domain.
- D. Create a cookie persistence profile with "match across services" enabled.
Answer: C
NEW QUESTION 42
The LTM device is configured for RADIUS authentication. Remote logins are failing and the LTM Specialist must verify the RADIUS configuration.
How should the LTM Specialist check the RADIUS server and shared secret configured on the LTM device?
- A. tmsh show running-config /auth radius
- B. tmsh show running-config /sys auth radius
- C. tmsh show running-config /auth configuration
- D. tmsh show running-config /sys auth radius-server
Answer: A
NEW QUESTION 43
An LTM Specialist is troubleshooting an issue with a new virtual server. When connecting through the virtual server, clients receive the message "The connection was reset" in the browser, although connections directly to the pool member show the application is functioning correctly.
ltm pool srv1_https_pool {
members {
192.168.2.1:https{
address 192.168.2.1
}
}
}
ltm virtual https_example_vs {
destination 192.168.1.155:https
ip-protocol tcp
mask 255.255.255.255
pool srv1_https_pool
profiles {
http { }
tcp { }
}
snat automap
vlans-disabled
}
How should the LTM Specialist resolve this issue?
- A. Remove the HTTP profile from the virtual server.
- B. Add a ClientSSL profile to the virtual server.
- C. Enable HTTP monitoring on the pool.
- D. Disable SNAT Automap on the virtual server.
Answer: A
NEW QUESTION 44
When re-licensing an LTM device from the command line interface, which tmsh command should the LTM Specialist use to generate the required information to provide on the F5 licensing portal?
- A. tmsh generate /sys dossier
- B. tmsh run /util get-dossier
- C. tmsh install /sys license registration-key
- D. tmsh list /sys registration-key
Answer: B
NEW QUESTION 45
An F5 LTM Specialist needs to perform an LTM device configuration backup prior to RMA swap.
Which command should be executed on the command line interface to create a backup?
- A. bigpipe config save /var/tmp/backup.ucs
- B. tmsh save /sys config ucs /var/tmp/backup.ucs
- C. tmsh save /sys config /var/tmp/backup.ucs
- D. tmsh save /sys ucs /var/tmp/backup.ucs
Answer: D
NEW QUESTION 46
-- Exhibit-
-- Exhibit -
Refer to the exhibit.
An LTM Specialist has created a virtual server to load balance traffic to a pool of HTTPS servers. The servers use client certificates for user authentication. The virtual server has clientssl, serverssl, and http profiles enabled. Clients are unable to connect to the application through the virtual server. Clients are able to connect to the application servers directly.
What is the root cause of the problem?
- A. The LTM device does NOT trust the issuing CA of the client certificate.
- B. The application server does NOT support 2048-bit keys.
- C. The application server does NOT see the client certificate due to SSL offload.
- D. The clientssl profile is NOT set to require a client certificate.
Answer: C
NEW QUESTION 47
-- Exhibit- -- Exhibit -Refer to the exhibit.
An LTM device is used to load balance web content over a secure channel.
The developers of the web content have done a trace using an HTTP profiler application.
They believe that allowing the LTM device to compress traffic to the client will improve
performance. The client can utilize GZIP or deflate compression algorithms.
An LTM Specialist must implement the compression.
The LTM Specialist has completed the following actions:
1.Create the relevant profile.
2.Apply the relevant profile to the virtual server (VS).
After applying the relevant profile, the LTM device is failing to compress the traffic. Instead,
the traffic is being served with an error.
What is the problem?
- A. The LTM device CANNOT SSL offload the traffic in order to read and compress it.
- B. The incorrect compression algorithm is applied to the compression profile.
- C. The Protocol Profile (Client) option of "Allow Compression" needs to be enabled.
- D. The Protocol Profile (Server) option of "Allow Compression" needs to be enabled.
Answer: A
NEW QUESTION 48
An LTM Specialist configured a virtual server to load balance a custom application. The application works when it is tested from within the firewall but it fails when tested externally. The pool member address is 192.168.200.10:80. A capture from an external client shows:
GET /index.jsp HTTP/1.1 Host: 207.206.201.100 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:15.0) Gecko/20100101 Firefox/15.0.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Connection: keep-alive HTTP/1.1 302 Found DatE. Wed, 17 Oct 2012 23:09:55 GMT Server: Apache/2.2.15 (CentOS) Location: http://192.168.200.10/user/home.jsp Content-LengtH. 304 Connection: close
What is the solution to this issue?
- A. Assign a SNAT pool to the virtual server.
- B. Configure redirect rewrite option in the HTTP profile.
- C. Add a Web Acceleration Profile to the virtual server.
- D. Configure a content filter on the backend web server.
Answer: B
NEW QUESTION 49
An LTM Specialist realizes that a datacenter engineer has changed the console baud rate.
Which command determines the current baud rate via the command line interface?
- A. tmsh list /sys baud-rate
- B. tmsh show /ltm console
- C. tmsh show /sys console
- D. tmsh list /net baud-rate
Answer: C
NEW QUESTION 50
Given this as the first packet displayed of an ssldump:
2 2 1296947622.6313 (0.0001) S>CV3.1(74) Handshake ServerHello Version 3.1 random[32]= 19 21 d7 55 c1 14 65 63 54 23 62 b7 c4 30 a2 f0 b8 c4 20 06 86 ed 9c 1f 9e 46 0f 42 79 45 8a 29 session_id[32]= c4 44 ea 86 e2 ba f5 40 4b 44 b4 c2 3a d8 b4 ad 4c dc 13 0d 6c 48 f2 70 19 c3 05 f4 06 e5 ab a9 cipherSuite TLS_RSA_WITH_RC4_128_SHA compressionMethod NULL
In reviewing the rest of the ssldump, the application data is NOT being decrypted.
Why is ssldump failing to decrypt the application data?
- A. The application data is encrypted with SSLv3.
- B. The BigDB Key Log.Tcpdump.Level needs to be adjusted.
- C. The data is contained within a resumed TLS session.
- D. The application data is encrypted with TLSv1.
Answer: C
NEW QUESTION 51
-- Exhibit -
-- Exhibit -
Refer to the exhibit.
A pair of LTM devices is configured for HA.
What happens if the pool member server with IP address 10.0.0.4 becomes totally unresponsive to the active LTM device, but is still responsive to the standby LTM device?
- A. The HTTP application will be unavailable via the LTM device.
- B. The HA-group will disable the trunk my_trunk.
- C. The HA-group will initiate a fail-over because the threshold is set to 2.
- D. The HA-group will initiate a fail-over because the HA-Group score will be zero.
Answer: C
NEW QUESTION 52
The end users of a web application need to verify that their browsers received the complete message-body from the web server.
Which HTTP header will accomplish this?
- A. Range
- B. Accept-Ranges
- C. Content-Length
- D. Expect
Answer: C
NEW QUESTION 53
What is the recommended procedure for upgrading a major TMOS release on a BIG-IP platform?
- A. 1. Renew the device license.
2.Take a configuration backup.
3.Reboot the device to the non-active volume.
4.Upload the device code.
5.Install device code to the current volume. - B. 1. Take a configuration backup.
2.Upload the device code.
3.Install device code to the non-active volume.
4.Reboot the device to the non-active volume.
5.Renew the device license. - C. 1. Take a configuration backup.
2.Reboot the device to the non-active volume.
3.Renew the device license.
4.Upload the device code.
5. Install device code to the current volume. - D. 1. Renew the device license.
2.Take a configuration backup.
3.Upload the device code.
4.Install device code to the non-active volume.
5.Reboot the device to the non-active volume.
Answer: D
NEW QUESTION 54
-- Exhibit -
-- Exhibit --
Refer to the exhibit.
A user is unable to access a secure application via a virtual server.
What is the cause of the issue?
- A. The virtual server does NOT have a pool configured.
- B. The client and server CANNOT agree on a common cipher.
- C. The virtual server does NOT have a client SSL profile configured.
- D. The client authentication failed.
Answer: D
NEW QUESTION 55
......
F5 BIG-IP Local Traffic Manager (LTM) Specialist: Maintain & Troubleshoot 301b Exam
F5 BIG-IP Local Traffic Manager (LTM) Specialist: Maintain & Troubleshoot 301b Exam is related to F5 Certified Technology Specialists Certification. This 301b Exam validates the ability to do all major task such as design, implement, maintain and troubleshoot of advanced F5 product features to enhance the effectiveness of an Application Delivery Network. This 301b exam also tests the candidates have strong understanding the process of underlying principles from SSL-based VPN implementation to symmetric or asymmetric acceleration and have the ability to draw on that insight to integrate Local Traffic Manager into existing networks as well as new implementations. Network Administrator and Network Engineer. usually, hold or pursue this certification and you can expect the same job roles after completion of this certification.
Reliable F5 Networks Certification Study Materials 301b Dumps PDF Oct 26, 2021 Recently Updated Questions: https://www.validexam.com/301b-latest-dumps.html
Latest 301b Exam Dumps for Pass Guaranteed: https://drive.google.com/open?id=1t_yGeL9-zpNiq4tFORrOMYzVqdg2gs1s