Latest [Sep 20, 2021] 301b Exam with Accurate LTM Specialist: Maintain & Troubleshoot PDF Questions
Take a Leap Forward in Your Career by Earning F5 210 Questions
NEW QUESTION 62
-- Exhibit -
-- Exhibit --
Refer to the exhibit.
Based on the output of the tmsh interface show command, what is the issue?
- A. There are too many drops on inbound traffic on interface 1.1.
- B. Interfaces 2.1 and 2.2 are defective and need replacement.
- C. Flow Control is NOT configured on the management interface.
- D. There is a duplex mismatch on the management interface.
Answer: D
NEW QUESTION 63
-- Exhibit -
-- Exhibit --
Refer to the exhibit.
An LTM Specialist has uploaded a qkview to F5 iHealth.
Within the GUI, what is the correct procedure to comply with the recommendation shown in the
exhibit?
- A. Obtain product version image from release.f5.com.
Overwrite existing image with new product version image.
Select product version image and click Install.
Select the available disk and volume set name. - B. Log a call requesting the product version image via websupport.f5.com
Import product version image.
Install image onto BIG-IP platform.
Select product version image and click Install.
Select the available disk and volume set name. - C. Obtain product version image from images.f5.com.
Overwrite existing image with new product version image.
Select product version image and click Install.
Select the available disk and volume set name. - D. Obtain product version image from downloads.f5.com.
Import product version image.
Install image onto BIG-IP platform.
Select product version image and click Install.
Select the available disk and volume set name.
Answer: D
NEW QUESTION 64
An LTM Specialist needs to rewrite text within an HTML response from a web server. A client is sending the following HTTP request:
GET / HTTP/1.1
Host: www.example.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:16.0) Gecko/20100101 Firefox/16.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-LanguagE. en-US,en;q=0.5 Accept-EncodinG. gzip, deflate Cache-Control: no-cache Connection: keep-alive CookiE. somecookie=1 HTTP/1.1 200 OK Server: Apache/2.2.15 (Unix) Last-ModifieD. Wed, 12 Aug 2009 00:00:30 GMT Accept-Ranges: bytes Content-LengtH. 1063 X-Cnection: close Content-TypE. text/html; charset=UTF-8 Vary: Accept-Encoding Content-EncodinG. gzip Connection: Keep-Alive Although a stream profile has been added to the virtual server, the content within the HTTP response is NOT being matched and therefore NOT modified.
Which header field is contributing to the issue?
- A. HTTP Method
- B. Accept-Encoding header
- C. Cookie content
- D. User-Agent Value
Answer: B
Explanation:
Explanation
NEW QUESTION 65
The LTM device is configured to provide load balancing to a set of web servers that implement access control lists (ACL) based on the source IP address of the client. The ACL is at the network level and the web server is configured to send a TCP reset back to the client if it is NOT permitted to connect.
The virtual server is configured with the default OneConnect profile.
The ACL is defined on the web server as:
Permit: 192.168.136.0/24
Deny: 192.168.116.0/24
The packet capture is taken of two individual client flows to a virtual server with IP address
192.168.136.100.
Client A - Src IP 192.168.136.1 - Virtual Server 192.168.136.100:
Clientside:
09:35:11.073623 IP 192.168.136.1.55684 > 192.168.136.100.80: S 869998901:869998901(0) win 8192
<mss 1460,nop,wscale 2,nop,nop,sackOK>
09:35:11.073931 IP 192.168.136.100.80 > 192.168.136.1.55684: S 2273668949:2273668949(0) ack
869998902 win 4380 <mss 1460,nop,wscale 0,sackOK,eol>
09:35:11.074928 IP 192.168.136.1.55684 > 192.168.136.100.80: . ack 1 win 16425
09:35:11.080936 IP 192.168.136.1.55684 > 192.168.136.100.80: P 1:299(298) ack 1 win 16425
09:35:11.081029 IP 192.168.136.100.80 > 192.168.136.1.55684: . ack 299 win 4678 Serverside:
09:35:11.081022 IP 192.168.136.1.55684 > 192.168.116.128.80: S 685865802:685865802(0) win 4380
<mss 1460,nop,wscale 0,sackOK,eol>
09:35:11.081928 IP 192.168.116.128.80 > 192.168.136.1.55684: S 4193259095:4193259095(0) ack
685865803 win 5840 <mss 1460,nop,nop,sackOK,nop,wscale 6>
09:35:11.081943 IP 192.168.136.1.55684 > 192.168.116.128.80: . ack 1 win 4380
09:35:11.081955 IP 192.168.136.1.55684 > 192.168.116.128.80: P 1:299(298) ack 1 win 4380
09:35:11.083765 IP 192.168.116.128.80 > 192.168.136.1.55684: . ack 299 win 108 Client B - Src IP 192.168.116.1 - Virtual Server 192.168.136.100:
Clientside:
09:36:11.244040 IP 192.168.116.1.55769 > 192.168.136.100.80: S 3320618938:3320618938(0) win 8192
<mss 1460,nop,wscale 2,nop,nop,sackOK>
09:36:11.244152 IP 192.168.136.100.80 > 192.168.116.1.55769: S 3878120666:3878120666(0) ack
3320618939 win 4380 <mss 1460,nop,wscale 0,sackOK,eol>
09:36:11.244839 IP 192.168.116.1.55769 > 192.168.136.100.80: . ack 1 win 16425
09:36:11.245830 IP 192.168.116.1.55769 > 192.168.136.100.80: P 1:299(298) ack 1 win 16425
09:36:11.245922 IP 192.168.136.100.80 > 192.168.116.1.55769: . ack 299 win 4678 Serverside:
09:36:11.245940 IP 192.168.136.1.55684 > 192.168.116.128.80: P 599:897(298) ack 4525 win 8904
09:36:11.247847 IP 192.168.116.128.80 > 192.168.136.1.55684: P 4525:5001(476) ack 897 win 142 Why was the second client flow permitted by the web server?
- A. SNAT automap was enabled on the virtual server.
- B. A source address persistence profile is assigned to the virtual server.
- C. The idle TCP session from the first client was re-used.
- D. A global SNAT is defined.
Answer: C
NEW QUESTION 66
-- Exhibit -
-- Exhibit --
Refer to the exhibit.
Which profile could be removed or changed on this virtual server to reduce CPU load on the LTM device without increasing server side bandwidth usage?
- A. httpcompression
- B. tcp
- C. http
- D. optimized-caching
Answer: A
NEW QUESTION 67
Which two alerting capabilities can be enabled from within an application visibility reporting (AVR) analytics profile? (Choose two.)
- A. e-mail
- B. SNMP
- C. high speed logging (HSL)
- D. LCD panel alert
- E. sFlow
Answer: A,B
NEW QUESTION 68
An LTM device pool has suddenly been marked down by a monitor. The pool consists of members
10.0.1.1:443 and 10.0.1.2:443 and are verified to be listening. The affected virtual server is
10.0.0.1:80.
Which two tools should the LTM Specialist use to troubleshoot the associated HTTPS pool monitor via the command line interface? (Choose two.)
- A. tcpdump
- B. curl
- C. ssldump
- D. telnet
Answer: B,C
NEW QUESTION 69
-- Exhibit -
-- Exhibit --
Refer to the exhibits.
A virtual server has been configured for SSL offload on a single-arm network. On average, the virtual server will be handling 100,000 connections, with a peak of 130,000 connections. Between the virtual server and the web servers there is a single reverse proxy to provide site caching. The proxy is configured to perform source IP persistence before contacting the web servers. The site is logging users out immediately after logging them in.
What should the LTM Specialist do to resolve this issue?
- A. Configure the virtual server HTTP profile to insert an X-Forwarded-For header.
- B. Create an iRule to add client IP persistence to a SNAT pool member.
- C. Change the virtual server server-side TCP profile to tcp-lan-optimized.
- D. Add a source address persistence profile to the virtual server.
Answer: B
NEW QUESTION 70
-- Exhibit- -- Exhibit -
Refer to the exhibit.
A user is unable to access a secure application via a virtual server.
What is the cause of the issue?
- A. The virtual server does NOT have a pool configured.
- B. The virtual server does NOT have a client SSL profile configured.
- C. The client and server CANNOT agree on a common cipher.
- D. The client authentication failed.
Answer: D
NEW QUESTION 71
An LTM Specialist is investigating reports from users that SSH connections are being terminated unexpectedly.
SSH connections are load balanced through a virtual server. The users experiencing this problem are running SQL queries that take upwards of 15 minutes to return with no screen output. The virtual server is standard with a pool associated and no other customizations.
What is causing the SSH connections to terminate?
- A. The virtual server has no persistence.
- B. The pool has Reselect Retries set to 0.
- C. UDP IP ToS
- D. TCP idle timeout
Answer: D
NEW QUESTION 72
-- Exhibit -
-- Exhibit -
Refer to the exhibit.
An LTM Specialist is troubleshooting an issue with an application configured on an LTM device. The application works properly when accessed directly via the servers; however, it does not work when accessed via the LTM device. The virtual server, 192.168.1.211:443, is configured to SNAT using the address 192.168.1.144 and references a pool with the member 192.168.10.80:443. The virtual server has no Client or Server SSL profiles associated.
Which configuration change will allow the application to function through the virtual server?
- A. Change pool member port to 8443.
- B. Add Client and Server SSL profiles to the virtual server.
- C. Change virtual server port to 8443.
- D. Add SSL off-loading to the pool member.
Answer: A
NEW QUESTION 73
The LTM device is configured for RADIUS authentication. Remote logins are failing and the LTM Specialist must verify the RADIUS configuration.
How should the LTM Specialist check the RADIUS server and shared secret configured on the LTM device?
- A. tmsh show running-config /auth radius
- B. tmsh show running-config /sys auth radius
- C. tmsh show running-config /auth configuration
- D. tmsh show running-config /sys auth radius-server
Answer: A
NEW QUESTION 74
-- Exhibit - -- Exhibit -
Refer to the exhibit.
Which URL should be reported to the server/application team as getting user-visible errors?
- A. /page14.cgi
- B. /env.cgi
- C. /browserspecific.html
- D. /reflector.php
Answer: A
NEW QUESTION 75
-- Exhibit-
-- Exhibit --
Refer to the exhibit.
An LTM Specialist is upgrading the LTM devices.
Which device should be upgraded first?
- A. Device A
- B. Device C
- C. Device D
- D. Device B
Answer: B
NEW QUESTION 76
An application is configured on an LTM device:
Virtual server: 10.0.0.1:80 (VLAN vlan301)
SNAT IP: 10.0.0.1
Pool members: 10.0.1.1:8080, 10.0.1.2:8080, 10.0.1.3:8080 (VLAN vlan302)
Which packet capture should the LTM Specialist perform on the LTM device command line interface to capture only server traffic specifically for this application?
- A. tcpdump -ni vlan302 -s 0 'port 8080 and (host 10.0.1.1 or host 10.0.1.2 or host 10.0.1.3)' -w /var/tmp/trace.cap
- B. tcpdump -ni 0.0:nnn -s 0 'host 10.0.0.1' -w /var/tmp/trace.cap
- C. tcpdump -ni 0.0:nnn -s 0 '(port 80 and host 10.0.0.1) or (port 8080 and host 10.0.1.1 or host
10.0.1.2 or host 10.0.1.3)' -w /var/tmp/trace.cap - D. tcpdump -ni vlan301 -s 0 'port 80 and host 10.0.0.1' -w /var/tmp/trace.cap
Answer: A
NEW QUESTION 77
A virtual server for a set of web services is constructed on an LTM device. The LTM Specialist has created an iRule and applied this iRule to the virtual server:
when HTTP_REQUEST {
switch [HTTP::uri] {
"/WS1/ws.jsp" {
log local0. "[HTTP::uri]-Redirected to JSP Pool"
pool JSP
}
default { log local0. "[HTTP::uri]-Redirected to Non-JSP Pool"
pool NonJSP
}
}
}
However, the iRule is NOT behaving as expected. Below is a snapshot of the log:
/WS1/ws.jsp-Redirected to JSP Pool
/WS1/ws.jsp-Redirected to JSP Pool
/WS1/ws.jsp-Redirected to JSP Pool
/WS1/WS.jsp-Redirected to Non-JSP Pool
/ws1/WS.jsp-Redirected to Non-JSP Pool
/WS1/ws.jsp-Redirected to JSP Pool
/ws1/ws.jsp-Redirected to Non-JSP Pool
What is the problem?
- A. The 'switch' command in the iRule has been used incorrectly.
- B. The condition in the iRule is case sensitive.
- C. The pool members of both pools need to be set up as case-insensitive members.
- D. The "Process Case-Insensitivity" option for the virtual server needs to be selected.
Answer: B
NEW QUESTION 78
-- Exhibit -
-- Exhibit --
Refer to the exhibit.
An LTM Specialist is investigating reports that users are unable to perform some commands through an FTP virtual server. The users are receiving the FTP error "500 Illegal PORT command." The virtual server is configured to SNAT using automap. The LTM Specialist performs a capture on the server side of the LTM device.
Why is the server returning this error?
- A. Active IP address in LOGIN command
- B. Active IP address in PORT command
- C. PORT command disallowed
- D. LIST command disallowed
Answer: B
NEW QUESTION 79
An LTM Specialist configures the following iRule on an LTM device:
when HTTP_REQUEST {
if {[string tolower [HTTP::uri]] contains "/URI1/" } {
pool Pool1
}
elseif {[string tolower [HTTP::uri]] contains "/URI2/" } {
pool Pool2
}
elseif {[string tolower [HTTP::uri]] contains "/URI3/" } {
pool Pool3
}
else { pool Pool4}
}
Given the following request: http://www.example.comURI1/index.html?fu=bar&pass=1234 Which pool will be selected by the iRule?
- A. Pool2
- B. Pool3
- C. Pool4
- D. Pool1
Answer: C
NEW QUESTION 80
-- Exhibit-
-- Exhibit -
Refer to the exhibit.
A pair of LTM devices are deployed in a high-availability (HA) pair as the diagram shows. After inserting a new rule on the firewalls, the LTM devices become Standby. The rule drops alloutbound sessions to the Internet. Only inbound connections are allowed from the Internet. There are no other changes to the environment.
What triggered the LTM device failover?
- A. Auto Failback
- B. HA Group
- C. VLAN Failsafe
- D. Gateway Failsafe
Answer: D
NEW QUESTION 81
The LTM Specialist is writing a custom HTTP monitor for a web application and has viewed the content by accessing the site directly via their browser. The monitor continually fails. The monitor configuration is:
ltm monitor http /Common/exampleComMonitor {
defaults-from /Common/http
destination *:*
interval 5
recv "Recent Searches"
send "GET /app/feed/current\?uid=20145 HTTP/1.1\\r\\nHost: www.example.com\\r\\nAccept-EncodinG.
gzip, deflate\\r\\nConnection: close\\r\\n\\r\\n"
time-until-up 0
timeout 16
}
A trace shows the following request and response:
Request:
GET /app/feed/current?uid=20145 HTTP/1.1
Host www.example.com
Accept-Encoding gzip, deflate
Connection: close
Response:
HTTP/1.1 302 Moved Temporarily
Date Wed, 17 Oct 2012 18:45:52 GMT
Server Apache
Location https://example.com/login.jsp
Content-Encoding gzip
Content-Type text/html;charset=UTF-8
Set-CookiE. JSESSIONID=261EFFBDA8EC3036FBCC22D991AC6835; Path=/app/feed/current?
uid=20145
What is the problem?
- A. The request includes an Accept-Encoding so the server is responding with a gzipped result and LTM monitors CANNOT handle gzipped responses.
- B. The request does NOT include a User-Agent header.
- C. The request does NOT include any cookies and the application is expecting a session cookie.
- D. The HTTP monitor does NOT support monitoring jsp pages.
Answer: C
NEW QUESTION 82
-- Exhibit-
-- Exhibit --
Refer to the exhibit.
Which step should an LTM Specialist take next to finish upgrading to HD1.3?
- A. Install hotfix to HD1.3
- B. Relicense HD1.3
- C. Activate HD1.3
- D. Install image to HD1.3
Answer: C
NEW QUESTION 83
-- Exhibit-
-- Exhibit -
Refer to the exhibits.
An LTM Specialist is troubleshooting an application configured on an LTM device on a one-armed configuration. The application is NOT working through the LTM device but does work when accessed directly via the application servers. The virtual server
192.168.1.211:443 is configured to SNAT using the address 192.168.1.144 and references a pool with the member 192.168.10.80:443. No Client or Server SSL profiles are associated. The LTM Specialist has collected two traffic captures to help determine the issue.
What is the problem with the configuration on the LTM device?
- A. Pool member is configured for SSL off-loading.
- B. Virtual server is configured without SSL Profiles.
- C. Pool member is configured to use wrong port.
- D. Virtual server is configured to use wrong port.
Answer: C
NEW QUESTION 84
-- Exhibit -
-- Exhibit --
Refer to the exhibit.
An LTM Specialist is troubleshooting a new HTTP monitor on a pool. The pool member is functioning correctly when accessed directly through a browser, although the monitor is marking the member as down.
As part of the troubleshooting, the LTM Specialist has captured the monitor traffic via tcpdump.
How should the LTM Specialist resolve this issue?
- A. Modify the receive string to valid content.
- B. Correct the firewall rules on the pool member.
- C. Add the 'icmp' monitor to the node.
- D. Add the 'http' monitor to the pool.
Answer: A
NEW QUESTION 85
......
Authentic Best resources for 301b Online Practice Exam: https://www.practicedump.com/301b_actualtests.html
Practice To 301b - PracticeDump Remarkable Practice On your LTM Specialist: Maintain & Troubleshoot Exam: https://drive.google.com/open?id=159UEEqQgTGT8s_WnPl_5c-LGLd_mZ24N