[Apr 28, 2023] Free F5 Networks Certification Study Materials 301b Exam Question
301b dumps & F5 Networks Certification Study Materials sure practice dumps
NEW QUESTION # 48
-- Exhibit -
-- Exhibit --
Refer to the exhibit.
An LTM Specialist is troubleshooting an HTTP monitor that is marking a pool member as down.
Connecting to the pool member directly through a browser shows the application is up and functioning correctly.
ltm monitor http http_mon {
defaults-from http
destination *:*
interval 5
recv "200 OK"
send "GET /\\r\\n"
time-until-up 0
timeout 16
}
What is the issue?
- A. The request is NOT being received by the pool member.
- B. The pool member is responding without HTTP headers.
- C. The pool member is responding with a 404.
- D. The HTTP headers are compressed.
Answer: B
NEW QUESTION # 49
The pool members are serving up simple static web content.
The current virtual server configuration is given as follows:
tmsh list ltm virtual simple
ltm virtual simple {
destination 10.10.10.10:80
ip-protocol tcp
mask 255.255.255.255
profiles {
http { }
httpcompression { }
oneconnect { }
tcp { }
}
snat automap
vlans-disabled
}
tmsh list ltm pool simple_pool
ltm pool simple_pool {
members {
10.10.10.11:80 {
address 10.10.10.11 }
10.10.10.12:80 {
address 10.10.10.12 }
10.10.10.12:80 {
address 10.10.10.13 }
}
}
Which three objects in the virtual server configuration can be removed without disrupting functionality of the virtual server? (Choose three.)
- A. httpcompression
- B. http
- C. oneconnect
- D. tcp
- E. snat automap
Answer: A,B,C
NEW QUESTION # 50
An LTM Specialist with the Administrator role and terminal access of "tmsh" logs in via ssh and is in the Traffic Manager Shell. The LTM Specialist wants to enter the bash shell to review log files.
Which command does the LTM Specialist need to run to access the bash shell?
- A. run /cli bash
- B. run /util bash
- C. quit
- D. exit
Answer: B
NEW QUESTION # 51
The end users of a web application need to verify that their browsers received the complete message-body from the web server.
Which HTTP header will accomplish this?
- A. Range
- B. Content-Length
- C. Expect
- D. Accept-Ranges
Answer: B
Explanation:
Explanation/Reference:
NEW QUESTION # 52
An LTM Specialist configures an HTTP monitor as follows:
ltm monitor http stats_http_monitor {
defaults-from http
destination *:*
interval 5
recv "Health check: OK"
send "GET /stats/stats.html HTTP/1.1\\r\\nHost: www.example.com\\r\\nAccept-EncodinG. gzip, deflate\
\r\\nConnection: close\\r\\n\\r\\n"
time-until-up 0
timeout 16
}
The monitor is marking all nodes as down. A trace of the HTTP conversation shows the following:
GET /stats/stats.html HTTP/1.1
Host: www.example.com
Accept-EncodinG. gzip, deflate
Connection: close
HTTP/1.1 401 Authorization Required
DatE. Tue, 23 Oct 2012 19:38:56 GMT
Server: Apache/2.2.15 (Unix)
WWW-AuthenticatE. Basic realm="Please enter your credentials"
Content-LengtH. 480
Connection: close
Content-TypE. text/html; charset=iso-8859-1
Which action will resolve the problem?
- A. Use an HTTPS monitor with a valid certificate instead.
- B. Add a valid username and password to the monitor.
- C. Add a backslash before the colon in the receive string.
- D. Add an NTLM profile to the virtual server.
Answer: B
NEW QUESTION # 53
-- Exhibit -
-- Exhibit --
Refer to the exhibit.
An LTM Specialist is investigating reports that users are unable to perform some commands through an FTP virtual server. The LTM Specialist performs a capture on the server side of the LTM device.
What is the issue with the application?
- A. data connection failing
- B. LIST command disallowed
- C. command connection failing
- D. PORT command disallowed
Answer: A
NEW QUESTION # 54
A web application sends information about message integrity and content life time to the client.
Which two HTTP headers should be used in sending the client information? (Choose two.)
- A. Expires
- B. Content-MD5
- C. Content-Length
- D. Expect
- E. Content-Range
- F. ETag
Answer: A,B
NEW QUESTION # 55
-- Exhibit -
-- Exhibit --
Refer to the exhibit.
A user is unable to access an HTTP application via a virtual server.
What is the cause of the failure?
- A. The Connection: Keep-Alive header is set.
- B. The host header requires a host name.
- C. The virtual server is in the disabled state.
- D. There is no pool member available to service the request.
Answer: D
NEW QUESTION # 56
-- Exhibit - -- Exhibit -
Refer to the exhibit.
A failover has just occured on BIG-IP1. BIG-IP2 is now active and manages traffic as expected. Both Bigip's are set with a gateway failsafe to check the reachability of the main border router. Switches have performed as expected.
Where should the LTM Specialist check for potential issues?
- A. Network Interface 1.1 of BIG-IP 2
- B. Network Interface 1.1 of BIG-IP 1
- C. Network Interface 2.1 of BIG-IP 2
- D. Network Interface 2.1 of BIG-IP 1
- E. Network Interface 2.2 of BIG-IP 2
- F. Network Interface 2.2 of BIG-IP 1
Answer: D
NEW QUESTION # 57
An LTM Specialist troubleshooting an issue looks at the following /var/log/ltm entries:
Oct 2 04:52:42 slot1/tmm7 crit tmm7[21734]: 01010201:2: Inet port exhaustion on
10.143.109.5 to 10.143.147.150:53 (proto 17)
Oct 2 05:37:16 slot1/tmm7 crit tmm7[21734]: 01010201:2: Inet port exhaustion on
10.143.109.5 to 10.143.147.150:53 (proto 17)
Oct 2 05:57:32 slot1/tmm2 crit tmm2[21729]: 01010201:2: Inet port exhaustion on
10.143.109.5 to 10.143.147.150:53 (proto 17)
Oct 2 06:30:03 slot1/tmm7 crit tmm7[21734]: 01010201:2: Inet port exhaustion on
10.143.109.5 to 10.143.147.150:53 (proto 17)
Oct 2 06:37:44 slot1/tmm2 crit tmm2[21729]: 01010201:2: Inet port exhaustion on
10.143.109.5 to 10.143.147.150:53 (proto 17)
Oct 2 06:47:05 slot1/tmm5 crit tmm5[21732]: 01010201:2: Inet port exhaustion on
10.143.109.5 to 10.143.147.150:53 (proto 17)
Which configuration item should the LTM Specialist review to fix the issue?
- A. SNAT Pool
- B. Port Lockdown
- C. Pool Member
- D. Virtual Server Port Translation
Answer: A
NEW QUESTION # 58
An LTM Specialist needs to rewrite text within an HTML response from a web server. A client is sending the HTTP request below:
GET / HTTP/1.1 Host: www.f5.com User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:16.0) Gecko/20100101 Firefox/16.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-LanguagE.en-US,en;q=0.5 Accept-EncodinG.gzip, deflate Cache-Control: no-cache Connection: keep-alive CookiE.somecookie=1
Although a stream profile has been added to the virtual server, the content within the HTTP response is NOT being matched, and therefore NOT modified.
Which HTTP header should the LTM Specialist remove from the request to ensure the content can be matched and modified?
- A. Accept
- B. Cache-Control
- C. Connection
- D. Accept-Encoding
Answer: D
NEW QUESTION # 59
The output of a tmsh command is: ------------------------------------------------------------ Net::Interface Name Status Bits Bits Errs Errs Drops Drops Colli In Out In Out In Out sions ----------------------------------------------------------- 1.1 down 0 0 0 0 0 0 0 1.2 up 191.4K 0 0 0 374 0 0 1.3 down 0 0 0 0 0
0 0 1.4 up 22.5K 0 0 0 44 0 0 2.1 miss 0 0 0 0 0 0 0 2.2 miss 0 0 0 0 0 0 0 mgmt up 43.2G 160.0G 0 0 0 0 0
Which command was executed on the LTM device to show the output?
- A. tmsh /net show interface status
- B. tmsh /net show interface
- C. tmsh show /net interface status
- D. tmsh show /net interface
Answer: D
NEW QUESTION # 60
-- Exhibit-
-- Exhibit -Refer to the exhibit. An LTM Specialist is working on an LTM 11.0.0 installation and has identified a security
vulnerability as shown in the exhibit. The LTM Specialist is tasked with applying the latest
available hotfix to resolve the problem.
Which procedure resolves the problem?
- A. Browse to System > Software Management > Hotfix List.
Import TMOS 11.2.0 to the available hotfix images.
Select the imported hotfix image and installation location and click Install. - B. Browse to System > Software Management > Hotfix List.
Import 11.1.0.HF3 to the available hotfix images.
Select the imported hotfix image and installation location and click Install. - C. Browse to System > Software Management > Image List.
Import 11.1.0.HF3 to the available hotfix images.
Select the imported hotfix image and installation location and click Install. - D. Browse to System > Software Management > Image List.
Import TMOS 11.2.0 to the available hotfix images.
Select the imported hotfix image and installation location and click Install.
Answer: B
NEW QUESTION # 61
A OneConnect profile is applied to a virtual server. The LTM Specialist would like the client source IP addresses within the 10.10.10.0/25 range to reuse an existing server side connection.
Which OneConnect profile source mask should the LTM Specialist use?
- A. 255.255.255.255
- B. 255.255.255.128
- C. 255.255.255.224
- D. 0.0.0.0
- E. 255.255.255.0
Answer: B
NEW QUESTION # 62
Which iRule will instruct the client's browser to avoid caching HTML server responses?
- A. when HTTP_RESPONSE {
if {[HTTP::header Content-Type] contains "html"} {
HTTP::header insert Pragma "no-cache"
HTTP::header insert Expires "Fri, 01 Jan 1990 00:00:00 GMT"
HTTP::header replace Cache-Control "no-cache,no-store,must-revalidate"
}
} - B. when HTTP_REQUEST {
if {[HTTP::header Content-Type] contains "html"} {
HTTP::header insert Pragma "no-cache"
HTTP::header insert Expires "Fri, 01 Jan 1990 00:00:00 GMT"
HTTP::header replace Cache-Control "no-cache,no-store,must-revalidate"
}
} - C. when HTTP_RESPONSE {
if {[HTTP::header Content-Type] equals "html"} {
HTTP::header insert Pragma "no-cache"
HTTP::header insert Expires "Fri, 01 Jan 1990 00:00:00 GMT"
HTTP::header replace Cache-Control "no-cache,no-store,must-revalidate"
}
} - D. when HTTP_REQUEST {
if {[HTTP::header Content-Type] equals "html"} {
HTTP::header insert Pragma "no-cache"
HTTP::header insert Expires "Fri, 01 Jan 1990 00:00:00 GMT"
HTTP::header replace Cache-Control "no-cache,no-store,must-revalidate"
}
}
Answer: A
NEW QUESTION # 63
An LTM Specialist is troubleshooting an issue with a new virtual server. When connecting through the virtual server, clients receive the message "Unable to connect" in the browser, although connections directly to the pool member show the application is functioning correctly. The LTM configuration is:
ltm virtual /Common/vs_https { destination /Common/10.10.1.110:443 ip-protocol udp mask 255.255.255.255 pool /Common/pool_https profiles { /Common/udp { } } translate-address enabled translate-port enabled vlans-disabled }
ltm pool /Common/pool_https { members { /Common/172.16.20.1:443 { address 172.16.20.1 } } }
How should the LTM Specialist resolve this issue?
- A. Add an HTTP profile to the virtual server.
- B. Enable the pool member on the correct VLAN.
- C. Select the correct protocol for the virtual server.
- D. Remove an HTTP monitor from the pool.
Answer: C
NEW QUESTION # 64
An LTM Specialist has been asked to configure a virtual server to distribute connections between a pool of two application servers with addresses 172.16.20.1 and 172.16.20.2. The application servers are listening on TCP ports 80 and 443. The application administrators have asked that clients be directed to the same node for both HTTP and HTTPS requests within the same session.
Virtual servers vs_http and vs_https have been created, listening on 1.2.3.100:80 and 1.2.3.100:443, respectively.
Which configuration option will result in the desired behavior?
- A. Create pool app_pool with members 172.16.20.1:any and 172.16.20.2:any Assign app_pool as the default pool for both vs_http and vs_https Disable port translation for vs_http and vs_https
- B. Create pool http_pool with members 172.16.20.1:80 and 172.16.20.2:80 Create pool https_pool with members 172.16.20.1:443 and 172.16.20.2:443 Assign http_pool as the default pool for vs_http Assign https_pool as the default pool for vs_https Create an SSL persistence profile with "match across virtual servers" enabled Assign the persistence profile to vs_http
- C. Create pool http_pool with members 172.16.20.1:80 and 172.16.20.2:80 Assign pool http_pool as the default pool for both vs_https and vs_https Disable port translation for vs_https Create an SSL persistence profile with "match across virtual servers" enabled Assign the persistence profile to vs_http.
- D. Create pool http_pool with members 172.16.20.1:80 and 172.16.20.2:80 Create pool https_pool with members 172.16.20.1:443 and 172.16.20.2:443 Assign http_pool as the default pool for vs_http Assign https_pool as the default pool for vs_https Create a source address persistence profile with "match across services" enabled Assign the persistence profile to vs_http and vs_https
Answer: D
NEW QUESTION # 65
The LTM Specialist is writing a custom HTTP monitor for a web application and has viewed the content by accessing the site directly via their browser. The monitor continually fails. The monitor configuration is:
ltm monitor http /Common/exampleComMonitor {
defaults-from /Common/http
destination *:*
interval 5
recv "Recent Searches"
send "GET /app/feed/current\?uid=20145 HTTP/1.1\\r\\nHost: www.example.com\\r\\nAccept-EncodinG.
gzip, deflate\\r\\nConnection: close\\r\\n\\r\\n"
time-until-up 0
timeout 16
}
A trace shows the following request and response:
Request:
GET /app/feed/current?uid=20145 HTTP/1.1
Host www.example.com
Accept-Encoding gzip, deflate
Connection: close
Response:
HTTP/1.1 302 Moved Temporarily
Date Wed, 17 Oct 2012 18:45:52 GMT
Server Apache
Location https://example.com/login.jsp
Content-Encoding gzip
Content-Type text/html;charset=UTF-8
Set-CookiE. JSESSIONID=261EFFBDA8EC3036FBCC22D991AC6835; Path=/app/feed/current?
uid=20145
What is the problem?
- A. The request does NOT include a User-Agent header.
- B. The request does NOT include any cookies and the application is expecting a session cookie.
- C. The request includes an Accept-Encoding so the server is responding with a gzipped result and LTM monitors CANNOT handle gzipped responses.
- D. The HTTP monitor does NOT support monitoring jsp pages.
Answer: B
NEW QUESTION # 66
The LTM device is configured to provide load balancing to a set of web servers that implement access control lists (ACL) based on the source IP address of the client. The ACL is at the networklevel and the web server is configured to send a TCP reset back to the client if it is NOT permitted to connect.
The virtual server is configured with the default OneConnect profile.
The ACL is defined on the web server as:
Permit: 192.168.136.0/24
Deny: 192.168.116.0/24
The packet capture is taken of two individual client flows to a virtual server with IP address
192.168.136.100.
Client A - Src IP 192.168.136.1 - Virtual Server 192.168.136.100:
Clientside:
09:35:11.073623 IP 192.168.136.1.55684 > 192.168.136.100.80: S 869998901:869998901(0) win 8192 <mss 1460,nop,wscale 2,nop,nop,sackOK>
09:35:11.073931 IP 192.168.136.100.80 > 192.168.136.1.55684: S 2273668949:2273668949(0) ack 869998902 win 4380 <mss 1460,nop,wscale 0,sackOK,eol>
09:35:11.074928 IP 192.168.136.1.55684 > 192.168.136.100.80: . ack 1 win 16425
09:35:11.080936 IP 192.168.136.1.55684 > 192.168.136.100.80: P 1:299(298) ack 1 win 16425 09:35:11.081029 IP 192.168.136.100.80 > 192.168.136.1.55684: . ack 299 win 4678
Serverside:
09:35:11.081022 IP 192.168.136.1.55684 > 192.168.116.128.80: S 685865802:685865802(0) win 4380 <mss 1460,nop,wscale 0,sackOK,eol>
09:35:11.081928 IP 192.168.116.128.80 > 192.168.136.1.55684: S 4193259095:4193259095(0) ack 685865803 win 5840 <mss 1460,nop,nop,sackOK,nop,wscale 6>
09:35:11.081943 IP 192.168.136.1.55684 > 192.168.116.128.80: . ack 1 win 4380
09:35:11.081955 IP 192.168.136.1.55684 > 192.168.116.128.80: P 1:299(298) ack 1 win 4380
09:35:11.083765 IP 192.168.116.128.80 > 192.168.136.1.55684: . ack 299 win 108
Client B - Src IP 192.168.116.1 - Virtual Server 192.168.136.100:
Clientside:
09:36:11.244040 IP 192.168.116.1.55769 > 192.168.136.100.80: S 3320618938:3320618938(0) win 8192 <mss 1460,nop,wscale 2,nop,nop,sackOK>
09:36:11.244152 IP 192.168.136.100.80 > 192.168.116.1.55769: S 3878120666:3878120666(0) ack 3320618939 win 4380 <mss 1460,nop,wscale 0,sackOK,eol>
09:36:11.244839 IP 192.168.116.1.55769 > 192.168.136.100.80: . ack 1 win 16425
09:36:11.245830 IP 192.168.116.1.55769 > 192.168.136.100.80: P 1:299(298) ack 1 win 16425
09:36:11.245922 IP 192.168.136.100.80 > 192.168.116.1.55769: . ack 299 win 4678
Serverside:
09:36:11.245940 IP 192.168.136.1.55684 > 192.168.116.128.80: P 599:897(298) ack 4525 win 8904
09:36:11.247847 IP 192.168.116.128.80 > 192.168.136.1.55684: P 4525:5001(476) ack 897 win 142 Why was the second client flow permitted by the web server?
- A. A global SNAT is defined.
- B. SNAT automap was enabled on the virtual server.
- C. A source address persistence profile is assigned to the virtual server.
- D. The idle TCP session from the first client was re-used.
Answer: D
NEW QUESTION # 67
An LTM Specialist is troubleshooting a problem on an eCommerce website. The user browses the online store using port 80, adding items to the shopping cart. The user then clicks the "Checkout" button on the site, which redirects the user to port 443 for the checkout process. Suddenly, the user's shopping cart is shown as empty.
The shopping cart data is stored in memory on the server, and the default source address persistence profile is used on both virtual servers.
How should the LTM Specialist resolve this issue?
- A. Create a custom persistence profile and enable "Match Across Services."
- B. Add an HTTP profile to both virtual servers.
- C. Create a custom persistence profile and enable "Map Proxies."
- D. Enable SNAT Automap on both virtual servers.
Answer: A
NEW QUESTION # 68
......
F5 301b Actual Questions and Braindumps: https://guidetorrent.dumpstorrent.com/301b-exam-prep.html