F5 301b 問題集

質問 1：
-- Exhibit-
-- Exhibit -
Refer to the exhibit.
An LTM Specialist has created a virtual server to load balance traffic to a pool of HTTPS servers. The servers use client certificates for user authentication. The virtual server has clientssl, serverssl, and http profiles enabled. Clients are unable to connect to the application through the virtual server. Clients are able to connect to the application servers directly.
What is the root cause of the problem?
A. The application server does NOT see the client certificate due to SSL offload.
B. The application server does NOT support 2048-bit keys.
C. The clientssl profile is NOT set to require a client certificate.
D. The LTM device does NOT trust the issuing CA of the client certificate.
正解：A

質問 2：
An application owner claims an LTM device is delaying delivery of an HTTP application. The LTM device has two VLANs, an internal and an external. The application servers reside on the internal VLAN. The virtual server and clients reside on the external VLAN.
With appropriate filters applied, which solution is most efficient for obtaining packet captures in order to investigate the claim of delayed delivery?
A. one capture on the external interface
B. one capture on interface 0.0
C. one capture on the internal interface
D. one capture on the management interface
正解：B

質問 3：
An LTM device has been configured to log the reasons for generating TCP RST packets.
The following log entry occurs:
"01230140:3: RST sent from 192.168.1.100:80 to 192.168.1.124:39272, [0x112d82a:1721] {peer} TCP RST from remote system."
Which condition will trigger this log entry?
A. The LTM device has reached the maximum number of allowed attempts to send the data segment to the affected TCP connection.
B. The LTM device reset the connection because no pool members are available.
C. A virtual server connection limit has been reached.
D. The host at the other end terminated the TCP connection.
正解：D

質問 4：
-- Exhibit-

-- Exhibit --
Refer to the exhibit.
Which step should an LTM Specialist take to utilize AVR?
A. provision AVR
B. install the AVR add-on
C. license the device for AVR
D. reboot the device
正解：A

質問 5：
-- Exhibit-

-- Exhibit -
Refer to the exhibits.
Users are able to access the application when connecting directly to the web server but are unsuccessful when connecting to the virtual server.
What is the cause of the application access problem?
A. The virtual server is NOT configured to listen on port 80.
B. The virtual server has address translation disabled.
C. The client has no route to the web server.
D. The web server is NOT responding on the correct port.
E. The virtual server has SNAT disabled.
正解：B

質問 6：
An LTM Specialist is working with an LTM device configured with 10 virtual servers on the same domain with a different key/cert pair per virtual. For examplE.www.example.com; ftp.example.com; ssh.example.com; ftps.example.com.
What should the LTM Specialist do to reduce the number of objects on the LTM device?
A. create a 0.0.0.0:0 virtual server thus eliminating all virtual servers
B. create a transparent virtual server thus eliminating all virtual servers
C. create a 0 port virtual server and have it answer for all protocols
D. create a wildcard certificate and use it on all *.example.com virtual servers
正解：D

質問 7：
-- Exhibit-

-- Exhibit -
Refer to the exhibit.
The decoded TCPDump capture is a trace of a failing health monitor. The health monitor is sending the string shown in the capture; however, the server response is NOT as expected. The receive string is set to 'SERVER IS UP'.
What is the solution?
A. Incorrect syntax in send string. 'HTTP/1.1' should be 'HTTP1.1'.
B. The /test_page.html does NOT exist on the web server and should be added.
C. The GET request Host header field requires a host name.
D. Incorrect syntax in send string. 'Connection: Close' should be 'Connection: Open'.
正解：B

質問 8：
An LTM HTTP pool has an associated monitor that sends a string equal to 'GET /test.html'.
Which two configurations could an LTM Specialist implement to allow server administrators to disable their pool member servers without logging into the LTM device? (Choose two.)
A. Set 'disable pool member' equal to 'SERVER UP' and ask the server team to set string 'SERVER DOWN' in test.html.
B. Set monitor to transparent and ask the server team to set string 'TRANSPARENT' in test.html.
C. Set 'receive disable string' equal to 'SERVER DOWN' and ask the server team to set string 'SERVER DOWN' in test.html.
D. Set 'alias' equal to 'SERVER DOWN' and ask the server team to set string 'SERVER DOWN' in test.html.
E. Set 'receive string' equal to 'SERVER UP and ask the server team to set string 'SERVER DOWN' in test.html.
正解：C,E

質問 9：
-- Exhibit-

-- Exhibit -
Refer to the exhibit.
A company uses a complex piece of client software that connects to one or more virtual servers (VS) hosted on an LTM device. The client software is experiencing issues. An LTM Specialist is tasked with finding the cause of the problem.
The LTM Specialist has the tcpdump extract and knows the client software has at least one connection to a VS on port 1990. However, when a tcpdump runs on the internal VLAN, there is no record of port 1990 in the tcpdump.
Why is there no record of port 1990 in the tcpdump?
A. The LTM device drops the connection.
B. The LTM device performs a Network Address Translation (NAT).
C. The LTM device performs a Port Address Translation (PAT).
D. Port 1990 is a well-known port, so its use is restricted.
E. Explanation:
-- Exhibit -

Macintosh HD:Users:danielkeller:Desktop:images 301b:LTMB211e1.png
-- Exhibit -
Refer to the exhibit.
A company uses a complex piece of client software that connects to one or more virtual servers hosted on an LTM device. The client software is experiencing issues. An LTM Specialist must determine the cause of the problem.
The LTM Specialist has the tcpdump extract and knows the client source IP is
168.210.232.5.
Assuming no wildcard virtual servers, how many distinct virtual servers does the client connect to on the LTM device?
A.2
B.3
C.4
D.6
正解：C