Weekend Sale Special Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: cramtreat

301b LTM Specialist: Maintain & Troubleshoot Questions and Answers

Questions 4

Which procedure should an LTM Specialist follow to move a configuration from a 1500 to a 1600 hardware platform during an upgrade?

Options:

A.

tmsh save sys config file filename.scf

copy the file from the /var/local/scf directory from one device to the other

tmsh load sys config file filename.scf

B.

tmsh save sys backup file filename.scf

copy the file from the /var/local/scf directory from one device to the other

tmsh load sys backup file filename.scf

C.

tmsh save sys backup file filename.scf

copy the file from the /var/local/ucs directory from one device to the other

tmsh load sys backup file filename.scf

D.

tmsh save sys config file filename.scf

copy the file from the /var/local/ucs directory from one device to the other

tmsh load sys config file filename.scf

Buy Now
Questions 5

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

Which step should an LTM Specialist take to utilize AVR?

Options:

A.

provision AVR

B.

reboot the device

C.

install the AVR add-on

D.

license the device for AVR

Buy Now
Questions 6

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

A client attempts to connect from a Google Chrome browser to a virtual server on a BIG-IP LTM. The virtual server is SSL Offloaded. When the client connects, the client receives an SSL error. After trying Mozilla Firefox and Internet Explorer browsers, the client still receives the same errors.

The LTM Specialist does an ssldump on the virtual server and receives the results as per the exhibit.

What is the problem?

Options:

A.

The SSL key length is incorrect.

B.

The BIG-IP LTM is NOT serving a certificate.

C.

The BIG-IP LTM is NOT listening on port 443.

D.

The client needs to be upgraded to the appropriate cipher-suite.

Buy Now
Questions 7

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

An LTM Specialist is troubleshooting a new HTTP monitor on a pool. The pool member is functioning correctly when accessed directly through a browser. However, the monitor is marking the member as down. The LTM Specialist captures the monitor traffic via tcpdump.

What is the issue?

Options:

A.

The server is marking the connection as closed.

B.

The pool member is rejecting the monitor request.

C.

The monitor request is NOT returning the page body.

D.

The 'time-until-up' setting on the monitor is incorrect.

Buy Now
Questions 8

A web application is meant to log the URI of the resource that responded to the client's initial Request-URI.

Which HTTP header will supply this information?

Options:

A.

Via

B.

Server

C.

Trailer

D.

Referer

Buy Now
Questions 9

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

An administrator created a monitor to a pool member web server, which resulted in a pool member that is marked red. The administrator knows the web server is working when it is accessed from another computer.

What should the administrator do to correct the problem?

Options:

A.

Change the default gateway on the server.

B.

Create a SNAT in the LTM device configuration.

C.

Change the route to the client in the LTM configuration.

D.

Change the username and/or password on the monitor.

Buy Now
Questions 10

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

Which profile could be removed or changed on this virtual server to reduce CPU load on the LTM device without increasing server side bandwidth usage?

Options:

A.

tcp

B.

http

C.

httpcompression

D.

optimized-caching

Buy Now
Questions 11

An LTM HTTP pool has an associated monitor that sends a string equal to 'GET /test.html'.

Which two configurations could an LTM Specialist implement to allow server administrators to disable their pool member servers without logging into the LTM device? (Choose two.)

Options:

A.

Set monitor to transparent and ask the server team to set string ‘TRANSPARENT’ in test.html.

B.

Set ‘receive string’ equal to 'SERVER UP and ask the server team to set string ‘SERVER DOWN’ in test.html.

C.

Set ‘alias’ equal to 'SERVER DOWN’ and ask the server team to set string ‘SERVER DOWN’ in test.html.

D.

Set ‘receive disable string’ equal to 'SERVER DOWN’ and ask the server team to set string ‘SERVER DOWN’ in test.html.

E.

Set ‘disable pool member’ equal to 'SERVER UP’ and ask the server team to set string ‘SERVER DOWN’ in test.html.

Buy Now
Questions 12

-- Exhibit –

-- Exhibit --

Refer to the exhibits.

Users are able to access the application when connecting to the virtual server but are unsuccessful when connecting directly to the application servers. The LTM Specialist wants to allow direct access to the application servers.

Why are users unable to connect directly to the application servers?

Options:

A.

The router does NOT have a route to the server subnet.

B.

The web server does NOT have a correct default gateway.

C.

The LTM device does NOT have a SNAT on the External VLAN.

D.

The LTM device does NOT have an IP Forwarding virtual server on the Internal VLAN.

E.

The LTM device does NOT have an IP Forwarding virtual server on the External VLAN.

Buy Now
Questions 13

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

An LTM Specialist configures a virtual server to perform client-side encryption while allowing the server-side traffic to be unencrypted. Application owners report that images are failing to load through the virtual server; however, images load when going directly to the server.

What is the problem with the images loading through the virtual server?

Options:

A.

Image references are for HTTP objects, not HTTPS.

B.

Image references are for HTTPS objects, not HTTP.

C.

The virtual server does not have "SSL Offloading" enabled.

D.

The virtual server does not have an HTTP profile associated.

Buy Now
Questions 14

Which command should an LTM Specialist use on the command line interface to show the health of RAID array hard drives?

Options:

A.

tmsh show /sys raid disk

B.

tmsh show /ltm raid disk

C.

tmsh show /sys raid status

D.

tmsh show /ltm disk status

Buy Now
Questions 15

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

A company uses a complex piece of client software that connects to one or more virtual servers (VS) hosted on an LTM device. The client software is experiencing issues. An LTM Specialist is tasked with finding the cause of the problem.

The LTM Specialist has the tcpdump extract and knows the client software has at least one connection to a VS on port 1990. However, when a tcpdump runs on the internal VLAN, there is no record of port 1990 in the tcpdump.

Why is there no record of port 1990 in the tcpdump?

Options:

A.

The LTM device drops the connection.

B.

Port 1990 is a well-known port, so its use is restricted.

C.

The LTM device performs a Port Address Translation (PAT).

D.

The LTM device performs a Network Address Translation (NAT).

Buy Now
Questions 16

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

A pair of LTM devices are configured for HA. The LTM Specialist observes from a capture that there is a successful connection from a client directly to a web server and an unsuccessful connection from a client via the LTM device to the same web server.

Which two solutions will solve the configuration problem? (Choose two.)

Options:

A.

Configure SNAT on the pool.

B.

Configure SNAT on the virtual server.

C.

Change server default gateway to point at LTM internal self IP.

D.

Change server default gateway to point at LTM internal floating IP.

Buy Now
Questions 17

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

An LTM Specialist creates a virtual server to load balance traffic to a pool of HTTPS servers. The servers use client certificates for user authentication. The virtual server has clientssl, serverssl, and http profiles enabled. Clients are unable to connect to the application through the virtual server, but they are able to connect to the application servers directly.

Which change to the LTM device configuration will resolve the problem?

Options:

A.

Install the server certificate/key and enable Proxy SSL.

B.

Use the serverssl-insecure-compatible serverssl profile.

C.

Configure the clientssl profile to require a client certificate.

D.

Install the client's issuing Certificate Authority certificate on the LTM device.

Buy Now
Questions 18

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

An LTM Specialist configures a virtual server to load balance to a pool of FTP servers. File transfers are failing. The virtual server is configured as follows:

ltm virtual ftp_vs {

destination 10.10.1.103:ftp

ip-protocol tcp

mask 255.255.255.255

pool ftp_pool

profiles {

tcp { }

}

vlans-disabled

}

Which change will resolve the problem?

Options:

A.

Add an FTP monitor to the pool.

B.

Add an FTP profile to the virtual server.

C.

Enable loose initiation in the TCP profile.

D.

Increase the TCP timeout value in the TCP profile.

Buy Now
Questions 19

What is the recommended procedure for upgrading a major TMOS release on a BIG-IP platform?

Options:

A.

1. Renew the device license.

2.Take a configuration backup.

3.Reboot the device to the non-active volume.

4.Upload the device code.

5.Install device code to the current volume.

B.

1. Take a configuration backup.

2.Upload the device code.

3.Install device code to the non-active volume.

4.Reboot the device to the non-active volume.

5.Renew the device license.

C.

1. Renew the device license.

2.Take a configuration backup.

3.Upload the device code.

4.Install device code to the non-active volume.

5.Reboot the device to the non-active volume.

D.

1. Take a configuration backup.

2.Reboot the device to the non-active volume.

3.Renew the device license.

4.Upload the device code.

5. Install device code to the current volume.

Buy Now
Questions 20

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

A pair of LTM devices are deployed in a high-availability (HA) pair as the diagram shows. After inserting a new rule on the firewalls, the LTM devices become Standby. The rule drops all outbound sessions to the Internet. Only inbound connections are allowed from the Internet. There are no other changes to the environment.

What triggered the LTM device failover?

Options:

A.

HA Group

B.

Auto Failback

C.

VLAN Failsafe

D.

Gateway Failsafe

Buy Now
Questions 21

An LTM device pair is configured for failover and connection mirroring. The LTM devices are configured with virtual servers for HTTP, HTTPS with SSL offload, and SSH. An event occurs that causes a failover. HTTP and SSH sessions active at the time of failover remain active, but HTTPS sessions are dropped.

What is the root cause of this problem?

Options:

A.

The SSL certificates on the LTM devices do NOT match.

B.

Connection mirroring is incompatible with clientssl profiles.

C.

SNAT automap was NOT enabled for the HTTPS virtual servers.

D.

Connection mirroring was NOT enabled for the HTTPS virtual servers.

Buy Now
Questions 22

An LTM Specialist needs to rewrite text within an HTML response from a web server. A client is sending the following HTTP request:

GET / HTTP/1.1

Host: www.example.com

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:16.0) Gecko/20100101 Firefox/16.0

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-LanguagE. en-US,en;q=0.5

Accept-EncodinG. gzip, deflate

Cache-Control: no-cache

Connection: keep-alive

CookiE. somecookie=1

HTTP/1.1 200 OK

Server: Apache/2.2.15 (Unix)

Last-ModifieD. Wed, 12 Aug 2009 00:00:30 GMT

Accept-Ranges: bytes

Content-LengtH. 1063

X-Cnection: close

Content-TypE. text/html; charset=UTF-8

Vary: Accept-Encoding

Content-EncodinG. gzip

Connection: Keep-Alive

Although a stream profile has been added to the virtual server, the content within the HTTP response is NOT being matched and therefore NOT modified.

Which header field is contributing to the issue?

Options:

A.

HTTP Method

B.

Cookie content

C.

User-Agent Value

D.

Accept-Encoding header

Buy Now
Questions 23

An LTM Specialist must perform a packet capture on a virtual server with an applied standard FastL4 profile. The virtual server 10.0.0.1:443 resides on vlan301.

Which steps should the LTM Specialist take to capture the data payload successfully while ensuring no other virtual servers are affected?

Options:

A.

The standard FastL4 profile should have PVA acceleration disabled. Then the packet capture tcpdump -ni vlan301 should be executed on the command line interface.

B.

The packet capture tcpdump -ni vlan301 should be executed on the command line interface. There is no need to change profiles or PVA acceleration.

C.

A new FastL4 profile should be created and applied to the virtual server with PVA acceleration disabled. Then the packet capture tcpdump -ni vlan301 should be executed on the command line interface.

D.

The LTM device is under light load. The traffic should be mirrored to a dedicated sniffing device. On the sniffing device, the packet capture tcpdump -ni vlan301 should be executed.

Buy Now
Questions 24

What is the correct command to reset an LTM device to its default settings?

Options:

A.

tmsh reset-all default

B.

tmsh set /sys config defaults

C.

tmsh load /sys config default

D.

tmsh /util bigpipe reset-factory-defaults

Buy Now
Questions 25

An LTM Specialist configures a new HTTP virtual server on an LTM device external VLAN. The web servers are connected to the LTM device internal VLAN. Clients trying to connect to the virtual server are unable to establish a connection. A packet capture shows an HTTP response from a web server to the client and then a reset from the client to the web server.

From which two locations could the packet capture have been collected? (Choose two.)

Options:

A.

network interface of web server

B.

network interface of client machine

C.

internal VLAN interface of the LTM device

D.

external VLAN interface of the LTM device

E.

management VLAN interface of the LTM device

Buy Now
Questions 26

Which command will identify the active LTM device currently handling client traffic?

Options:

A.

b ha table show

B.

tmsh list /sys ha-status

C.

tmsh show /cm traffic-group

D.

tmsh run /sys failover standby

E.

tmsh show /sys ha-status all-properties

Buy Now
Questions 27

There is a fault with an LTM device load balanced trading application that resides on directly connected VLAN vlan-301. The application virtual server is 10.0.0.1:80 with trading application backend servers on subnet 192.168.0.0/25. The LTM Specialist wants to save a packet capture with complete payload for external analysis.

Which command should the LTM Specialist execute on the LTM device command line interface?

Options:

A.

tcpdump -vvv -w /var/tmp/trace.cap 'net 192.168.0.0/25'

B.

tcpdump -vvv -s 0 -w /var/tmp/trace.cap 'net 192.168.0.0/25'

C.

tcpdump -vvv -nni vlan-301 -w /var/tmp/trace.cap 'net 192.168.0.0/25'

D.

tcpdump -vvv -s 0 -nni vlan-301 -w /var/tmp/trace.cap 'net 192.168.0.0/25'

Buy Now
Questions 28

Which command line interface command will check if the BIG-IP platform contains a packet velocity ASIC (PVA)?

Options:

A.

bigpipe platform show | grep -i pva

B.

tmsh show /sys hardware pva status

C.

tmsh show /sys hardware | grep -i pva

D.

tmsh show /ltm hardware | grep -i pva

Buy Now
Questions 29

An IT administrator wants to log which server is being load balanced to by a user with IP address 10.10.10.25.

Which iRule should the LTM Specialist use to fulfill the request?

Options:

A.

when SERVER_CONNECTED {

if { [IP::addr [IP::remote_addr]] equals 10.10.10.25]} {

log local0. "client 10.10.10.25 connected to pool member [IP::addr [LB::server addr]]" }

}

B.

when CLIENT_ACCEPTED {

if { [IP::addr [clientside [IP::remote_addr]] equals 10.10.10.25]} {

log local0. "client 10.10.10.25 connected to pool member [IP::addr [LB::server addr]]" }

}

C.

when SERVER_CONNECTED {

if { [IP::addr [clientside [IP::remote_addr]] equals 10.10.10.25]} {

log local0. "client 10.10.10.25 connected to pool member [IP::addr [LB::server addr]]" }

}

D.

when CLIENT_ACCEPTED {

if { [IP::addr [IP::remote_addr] equals 10.10.10.25]} {

log local0. "client 10.10.10.25 connected to pool member [IP::addr [LB::server addr]]" }

}

Buy Now
Questions 30

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

An LTM Specialist has created a virtual server to load balance traffic to a pool of HTTPS servers. The servers use client certificates for user authentication. The virtual server has clientssl, serverssl, and http profiles enabled. Clients are unable to connect to the application through the virtual server. Clients are able to connect to the application servers directly.

What is the root cause of the problem?

Options:

A.

The application server does NOT support 2048-bit keys.

B.

The clientssl profile is NOT set to require a client certificate.

C.

The LTM device does NOT trust the issuing CA of the client certificate.

D.

The application server does NOT see the client certificate due to SSL offload.

Buy Now
Questions 31

Which iRule will instruct the client's browser to avoid caching HTML server responses?

Options:

A.

when HTTP_REQUEST {

if {[HTTP::header Content-Type] equals "html"} {

HTTP::header insert Pragma "no-cache"

HTTP::header insert Expires "Fri, 01 Jan 1990 00:00:00 GMT"

HTTP::header replace Cache-Control "no-cache,no-store,must-revalidate"

}

}

B.

when HTTP_REQUEST {

if {[HTTP::header Content-Type] contains "html"} {

HTTP::header insert Pragma "no-cache"

HTTP::header insert Expires "Fri, 01 Jan 1990 00:00:00 GMT"

HTTP::header replace Cache-Control "no-cache,no-store,must-revalidate"

}

}

C.

when HTTP_RESPONSE {

if {[HTTP::header Content-Type] contains "html"} {

HTTP::header insert Pragma "no-cache"

HTTP::header insert Expires "Fri, 01 Jan 1990 00:00:00 GMT"

HTTP::header replace Cache-Control "no-cache,no-store,must-revalidate"

}

}

D.

when HTTP_RESPONSE {

if {[HTTP::header Content-Type] equals "html"} {

HTTP::header insert Pragma "no-cache"

HTTP::header insert Expires "Fri, 01 Jan 1990 00:00:00 GMT"

HTTP::header replace Cache-Control "no-cache,no-store,must-revalidate"

}

}

Buy Now
Exam Code: 301b
Exam Name: LTM Specialist: Maintain & Troubleshoot
Last Update: May 18, 2024
Questions: 209
301b pdf

301b PDF

$28  $80
301b Engine

301b Testing Engine

$33.25  $95
301b PDF + Engine

301b PDF + Testing Engine

$45.5  $130