Easily To Pass New F5 301b Dumps with 210 Questions
Latest 301b Study Guides 2022 - With Test Engine PDF
Exam Blueprint
As was mentioned above, the F5 301B-LTM Specialist: Maintain and Troubleshoot test is the 2nd one in the series that the professional needs to pass to complete his or her F5-CTS, LTM certification. This exam verifies that candidates are able to perform basic F5 product designing and implementation tasks while knowing how to improve the efficacy of the Application Delivery Network. The score comes with two-year validity and requires one to get recertified before the expiration date.
All the F5 exams follow almost the same pattern. F5 301B is 90-minute long and consists of 80 questions. Out of these, only 70 are scored and the remaining 10 are beta or pilot items. The test is computer-based and the questions are mostly provided in the multiple-choice format while some of the tasks may be of the scenario-based type. The passing score is 245 out of 350. Finally, the registration fee is $180, excluding the local taxes.
How to book the F5 301b Exam
These are following steps for registering the F5 301b exam. Step 1: Visit to F5 Candidate Portal Exam Registration Step 2: Signup/Login to F5 account Step 3: After creating F5 account Select your testing center from PearsonVUE Step 4: Select Date, time and confirm with payment method
NEW QUESTION 113
-- Exhibit -
-- Exhibit --
Refer to the exhibits.
When observing the AVR statistics for the HTTPS_VS, an LTM Specialist realizes that HTTP status codes are NOT being recorded.
How should the LTM Specialist modify the configuration to record the HTTP status codes?
- A. enable Collected Entities, Response Codes on the analytics profile
- B. assign a streaming profile to the virtual server
- C. enable Statistics Logging Type, External on the analytics profile
- D. assign client SSL and server SSL profiles to the virtual server
Answer: A
NEW QUESTION 114
Which procedure should an LTM Specialist follow to move a configuration from a 1500 to a 1600 hardware platform during an upgrade?
- A. tmsh save sys backup file filename.scf copy the file from the /var/local/scf directory from one device to the other tmsh load sys backup file filename.scf
- B. tmsh save sys config file filename.scf copy the file from the /var/local/scf directory from one device to the other tmsh load sys config file filename.scf
- C. tmsh save sys backup file filename.scf copy the file from the /var/local/ucs directory from one device to the other tmsh load sys backup file filename.scf
- D. tmsh save sys config file filename.scf copy the file from the /var/local/ucs directory from one device to the other tmsh load sys config file filename.scf
Answer: B
NEW QUESTION 115
An LTM device has been configured to log the reasons for generating TCP RST packets.
The following log entry occurs:
"01230140:3: RST sent from 192.168.1.100:80 to 192.168.1.124:39272, [0x112d82a:1721] {peer} TCP RST from remote system." Which condition will trigger this log entry?
- A. The host at the other end terminated the TCP connection.
- B. A virtual server connection limit has been reached.
- C. The LTM device reset the connection because no pool members are available.
- D. The LTM device has reached the maximum number of allowed attempts to send the data segment to the affected TCP connection.
Answer: A
Explanation:
Explanation
NEW QUESTION 116
-- Exhibit-
-- Exhibit -
Refer to the exhibits.
An LTM Specialist is troubleshooting an application configured on an LTM device on a one-armed configuration. The application is NOT working through the LTM device but does work when accessed directly via the application servers. The virtual server
192.168.1.211:443 is configured to SNAT using the address 192.168.1.144 and references a pool with the member 192.168.10.80:443. No Client or Server SSL profiles are associated. The LTM Specialist has collected two traffic captures to help determine the issue.
What is the problem with the configuration on the LTM device?
- A. Pool member is configured to use wrong port.
- B. Virtual server is configured to use wrong port.
- C. Virtual server is configured without SSL Profiles.
- D. Pool member is configured for SSL off-loading.
Answer: A
NEW QUESTION 117
An LTM Specialist has a single HTTPS virtual server doing SSL termination. No server SSL profile is defined. The pool members are on the internal VLAN answering on HTTP port 80. Users with certain browsers are experiencing issues.
Which two locations are most appropriate to gather packets needed to determine the SSL issue? (Choose two.)
- A. server interface
- B. LTM device's management interface
- C. LTM device's internal VLAN
- D. user's computer
- E. LTM device's external VLAN
Answer: D,E
NEW QUESTION 118
An LTM Specialist has just manually failed the active LTM device over to the standby LTM device.
The LTM Specialist notices the newly active LTM device is NOT currently receiving traffic. The LTM Specialist verifies the newly active device is responding to ARP but still no traffic is hitting the virtual servers. The LTM Specialist also notices that the virtual servers eventually start responding.
What should be added to the configuration to resolve the problem?
- A. vlan failsafe
- B. connection mirroring
- C. network failover
- D. floating self IP
- E. MAC masquerading
Answer: E
NEW QUESTION 119
What do the following iRule commands do when they are used in the same iRule?
set hsl [HSL::open -proto UDP -pool syslog_server_pool]
HSL::send $hsl "<190> [HTTP::host] from [whereis [IP::client_addr] country continent state city zip] , IP:
[IP::client_addr]"
- A. The commands set up a high-speed logging connection and then send the host header and client geographical detail to the connection.
- B. The commands set up a high-speed logging connection and then send the host header, HTTP payload, and client geographical detail to the connection.
- C. The commands set up a high-speed logging connection to the LTM device and then send the host header and client geographical detail to the connection.
- D. The commands set up a high-speed logging connection and then send the geographical database to the server.
Answer: A
NEW QUESTION 120
What is a benefit provided by F5 Enterprise Manager?
- A. Enterprise Manager allows administrators to analyze traffic flow and create custom application IPS signatures.
- B. Enterprise Manager allows administrators to identify application vulnerabilities. Virtual patches are then automatically generated and applied to remediate the detected application vulnerability.
- C. Enterprise Manager allows administrators to monitor all application traffic. Configuration optimization suggestions based on the observed traffic patterns are then generated for the administrator to review and apply.
- D. Enterprise Manager allows administrators to establish baseline application usage and generate an alert if an administratively set threshold for the application is exceeded.
Answer: D
NEW QUESTION 121
An LTM Specialist has a single HTTPS virtual server doing SSL termination. No server SSL profile is defined. The pool members are on the internal VLAN answering on HTTP port 80. Users with certain browsers are experiencing issues.
Which two locations are most appropriate to gather packets needed to determine the SSL issue? (Choose two.)
- A. server interface
- B. LTM device's management interface
- C. LTM device's internal VLAN
- D. user's computer
- E. LTM device's external VLAN
Answer: D,E
NEW QUESTION 122
An LTM Specialist troubleshooting an issue looks at the following /var/log/ltm entries:
Oct 2 04:52:42 slot1/tmm7 crit tmm7[21734]: 01010201:2: Inet port exhaustion on 10.143.109.5 to
10.143.147.150:53
(proto 17)
Oct 2 05:37:16 slot1/tmm7 crit tmm7[21734]: 01010201:2: Inet port exhaustion on 10.143.109.5 to
10.143.147.150:53
(proto 17)
Oct 2 05:57:32 slot1/tmm2 crit tmm2[21729]: 01010201:2: Inet port exhaustion on 10.143.109.5 to
10.143.147.150:53
(proto 17)
Oct 2 06:30:03 slot1/tmm7 crit tmm7[21734]: 01010201:2: Inet port exhaustion on 10.143.109.5 to
10.143.147.150:53
(proto 17)
Oct 2 06:37:44 slot1/tmm2 crit tmm2[21729]: 01010201:2: Inet port exhaustion on 10.143.109.5 to
10.143.147.150:53
(proto 17)
Oct 2 06:47:05 slot1/tmm5 crit tmm5[21732]: 01010201:2: Inet port exhaustion on 10.143.109.5 to
10.143.147.150:53
(proto 17)
Which configuration item should the LTM Specialist review to fix the issue?
- A. Pool Member
- B. Port Lockdown
- C. Virtual Server Port Translation
- D. SNAT Pool
Answer: D
NEW QUESTION 123
-- Exhibit -
-- Exhibit --
Refer to the exhibits.
An LTM Specialist is troubleshooting an application configured on an LTM device on a one-armed configuration. The application is NOT working through the LTM device but does work when accessed directly via the application servers. The virtual server 192.168.1.211:443 is configured to SNAT using the address 192.168.1.144 and references a pool with the member 192.168.10.80:443. No Client or Server SSL profiles are associated. The LTM Specialist has collected two traffic captures to help determine the issue.
What is the problem with the configuration on the LTM device?
- A. Pool member is configured to use wrong port.
- B. Virtual server is configured to use wrong port.
- C. Virtual server is configured without SSL Profiles.
- D. Pool member is configured for SSL off-loading.
Answer: A
NEW QUESTION 124
-- Exhibit -
-- Exhibit -
Refer to the exhibits.
An LTM Specialist is troubleshooting an application configured on an LTM device on a one-armed configuration. The application is NOT working through the LTM device but does work when accessed directly via the application servers. The virtual server 192.168.1.211:443 is configured to SNAT using the address 192.168.1.144 and references a pool with the member
192.168.10.80:443. No Client or Server SSL profiles are associated. The LTM Specialist has collected two traffic captures to help determine the issue.
What is the problem with the configuration on the LTM device?
- A. Pool member is configured to use wrong port.
- B. Virtual server is configured to use wrong port.
- C. Virtual server is configured without SSL Profiles.
- D. Pool member is configured for SSL off-loading.
Answer: A
NEW QUESTION 125
-- Exhibit -
-- Exhibit --
Refer to the exhibit.
An LTM Specialist has created a virtual server to load balance traffic to a pool of HTTPS servers. The servers use client certificates for user authentication. The virtual server has clientssl, serverssl, and http profiles enabled. Clients are unable to connect to the application through the virtual server. Clients are able to connect to the application servers directly.
What is the root cause of the problem?
- A. The LTM device does NOT trust the issuing CA of the client certificate.
- B. The application server does NOT support 2048-bit keys.
- C. The clientssl profile is NOT set to require a client certificate.
- D. The application server does NOT see the client certificate due to SSL offload.
Answer: D
NEW QUESTION 126
An application is configured on an LTM device:
Virtual server: 10.0.0.1:80 (VLAN vlan301)
SNAT IP: 10.0.0.1
Pool members: 10.0.1.1:8080, 10.0.1.2:8080, 10.0.1.3:8080 (VLAN vlan302) Which packet capture should the LTM Specialist perform on the LTM device command line interface to capture only client traffic specifically for this virtual server?
- A. tcpdump -ni vlan301 -s 0 'port 80 and host 10.0.0.1' -w /var/tmp/trace.cap
- B. tcpdump -ni vlan302 -s 0 'port 8080 and host 10.0.1.1 or host 10.0.1.2 or host 10.0.1.3' -w /var/tmp/ trace.cap
- C. tcpdump -ni 0.0:nnn -s 0 '(port 80 and host 10.0.0.1) or (port 8080 and host 10.0.1.1 or host 10.0.1.2 or host 10.0.1.3)' -w /var/tmp/trace.cap
- D. tcpdump -ni vlan301 -s 0 'port 8080 and host 10.0.1.1 or host 10.0.1.2 or host 10.0.1.3' -w /var/tmp/ trace.cap
- E. tcpdump -ni 0.0:nnn -s 0 'host 10.0.0.1' -w /var/tmp/trace.cap
Answer: A
NEW QUESTION 127
A failover event is recorded in the log messages:
Jan 01 00:00:50 BIG-IP notice sod[5855]: 01140029:5: HA proc_running tmm fails action is go offline and down links.
Jan 01 00:00:50 BIG-IP notice sod[5855]: 010c0050:5: Sod requests links down.
Jan 01 00:00:50 BIG-IP notice sod[5855]: 010c0054:5: Offline for traffic group /Common/traffic-group-1.
Jan 01 00:00:50 BIG-IP notice sod[5855]: 010c003e:5: Offline
Jan 01 00:00:50 BIG-IP notice logger: /usr/bin/tmipsecd --tmmcount 4 ==> /usr/bin/bigstart stop racoon Jan 01 00:00:50 BIG-IP info lacpd[5502]: 01160016:6: Failover event detected. (Switchboard failsafe disabled while offline)
Jan 01 00:00:51 BIG-IP err bcm56xxd[5296]: 012c0010:3: Failover event detected. Marking external interfaces down. bsx.c(3633)
Jan 01 00:00:51 BIG-IP info bcm56xxd[5296]: 012c0015:6: Link: 1.1 is DOWN Jan 01 00:00:56 BIG-IP notice mcpd[5318]: 0107143c:5: Connection to CMI peer 10.0.0.3 has been removed
Jan 01 00:00:56 BIG-IP notice mcpd[5318]: 0107143a:5: CMI reconnect timer: enabled Jan 01 00:00:56 BIG-IP notice mcpd[5318]: 01071431:5: Attempting to connect to CMI peer 10.0.0.3 port
6699
What is the cause of the failover?
- A. A switchboard failure caused system fail-safe to initiate the failover.
- B. Loss of connection to CMI peer 10.0.0.3 initiated the failover.
- C. TMM failed, and system fail-safe initiated the failover.
- D. TMM failed, and VLAN fail-safe initiated the failover.
Answer: C
NEW QUESTION 128
Given the log entry:
011f0005:3: HTTP header (32800) exceeded maximum allowed size of 32768 (Client sidE. vip=/Common/ VS_web profile=http pool=/Common/POOL_web client_ip=10.0.0.1) Which HTTP profile setting can be modified temporarily to resolve the issue?
- A. Increase Maximum Header size
- B. Decrease Maximum Header size
- C. Decrease Maximum Header Count
- D. Decrease Maximum Requests
- E. Increase Maximum Requests
- F. Increase Maximum Header Count
Answer: A
NEW QUESTION 129
-- Exhibit-
-- Exhibit -
Refer to the exhibit.
The decoded TCPDump capture is a trace of a failing health monitor. The health monitor is sending the string shown in the capture; however, the server response is NOT as expected. The receive string is set to 'SERVER IS UP'.
What is the solution?
- A. The /test_page.html does NOT exist on the web server and should be added.
- B. Incorrect syntax in send string. 'Connection: Close' should be 'Connection: Open'.
- C. Incorrect syntax in send string. 'HTTP/1.1' should be 'HTTP1.1'.
- D. The GET request Host header field requires a host name.
Answer: A
NEW QUESTION 130
An LTM device is monitoring pool members on port 80. The LTM device is using an HTTP monitor with a send string of GET / and a blank receive string.
What would cause the pool members to be marked down?
- A. A pool member responds with an HTTP 300 series response code.
- B. A pool member responds with an HTTP 200 series response code.
- C. A pool member responds with an HTTP 400 series response code.
- D. A pool member responds with an HTTP 500 series response code.
- E. A pool member does NOT acknowledge the connection SYN on port 80.
Answer: E
NEW QUESTION 131
Internet clients connecting to a virtual server to download a file are experiencing about 150 ms of latency and no packet loss.
Which built-in client-side TCP profile provides the highest throughput?
- A. tcp-legacy
- B. tcp-lan-optimized
- C. tcp
- D. tcp-wan-optimized
Answer: D
NEW QUESTION 132
An LTM Specialist has a OneConnect profile and HTTP profile configured on a virtual server to load balance an HTTP application.
The following HTTP headers are seen in a network trace when a client connects to the virtual server:
Clientside:
GET / HTTP/1.1
Host: 192.168.136.100
User-Agent: Mozilla/5.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-EncodinG. gzip, deflate
Connection: keep-alive
Serverside:
HTTP/1.1 200 OK
DatE. 5 Jun 1989 17:06:55 GMT
Server: Apache/2.2.14 (Ubuntu)
Vary: Accept-Encoding
Content-EncodinG. gzip
Content-LengtH. 3729
X-Cnection: close
Content-TypE. text/html
The LTM Specialist notices the OneConnect feature is working incorrectly.
Why is OneConnect functioning incorrectly?
- A. Server must support HTTP/0.9.
- B. Client must support HTTP/1.0.
- C. Client must support HTTP keep-alive.
- D. Server must support HTTP keep-alive.
Answer: D
NEW QUESTION 133
An LTM Specialist configures an HTTP monitor as follows:
ltm monitor http stats_http_monitor { defaults-from http destination *:*
interval 5
recv "Health check: OK"
send "GET /stats/stats.html HTTP/1.1\\r\\nHost: www.example.com\\r\\nAccept-EncodinG. gzip,
deflate\\r\\nConnection: close\\r\\n\\r\\n"
time-until-up 0
timeout 16
}
The monitor is marking all nodes as down. A trace of the HTTP conversation shows the following:
GET /stats/stats.html HTTP/1.1
Host: www.example.com
Accept-EncodinG. gzip, deflate
Connection: close
HTTP/1.1 401 Authorization Required
DatE. Tue, 23 Oct 2012 19:38:56 GMT
Server: Apache/2.2.15 (Unix)
WWW-AuthenticatE. Basic realm="Please enter your credentials"
Content-LengtH. 480
Connection: close
Content-TypE. text/html; charset=iso-8859-1
Which action will resolve the problem?
- A. Add a backslash before the colon in the receive string.
- B. Add a valid username and password to the monitor.
- C. Use an HTTPS monitor with a valid certificate instead.
- D. Add an NTLM profile to the virtual server.
Answer: B
NEW QUESTION 134
......
301b Dumps and Exam Test Engine: https://www.actual4dumps.com/301b-study-material.html
Get New 301b Practice Test Questions Answers : https://drive.google.com/open?id=1SfNznx-UuIWAgbFuBmOsWG1gdK49rof_