[Jan 25, 2022] Updates Up to 365 days On Valid 301b Braindumps
Best Quality301b Exam Questions F5 Test To Gain Brilliante Result
NEW QUESTION 65
An LTM Specialist is creating a custom EAV monitor.
In which directory should the LTM Specialist upload the script?
- A. /usr/bin/monitors
- B. /usr/monitors
- C. /config/templates
- D. /config/monitors
- E. /usr/monitor
Answer: D
NEW QUESTION 66
A failover event is recorded in the following log messages:
Jan 01 00:56:56 BIG-IP notice mcpd[5318]: 01070727:5: Pool /Common/my-pool member / Common/10.0.0.10:80 monitor status down.
Jan 01 00:56:56 BIG-IP notice sod[5855]: 010c0045:5: Leaving active, group score 10 peer group score
20.
Jan 01 00:56:56 BIG-IP notice sod[5855]: 010c0052:5: Standby for traffic group /Common/traffic-group-1.
Jan 01 00:56:56 BIG-IP notice sod[5855]: 010c0018:5: Standby
Jan 01 00:57:06 BIG-IP notice logger: /usr/bin/tmipsecd --tmmcount 4 ==> /usr/bin/bigstart stop racoon What is the cause of the failover?
- A. The racoon service stopped responding.
- B. No traffic is seen on traffic-group-1.
- C. The HA group score changed.
- D. The peer device left the traffic group.
Answer: C
NEW QUESTION 67
An LTM Specialist is tasked with ensuring that the syslogs for the LTM device are sent to a remote syslog server.
The following is an extract from the config file detailing the node and monitor that the LTM device is using for the
remote syslog server:
monitor Syslog_15002 { defaults from udp dest *:15002 }
node 91.223.45.231 { monitor Syslog_15002 screen RemoteSYSLOG }
There seem to be problems communicating with the remote syslog server. However, the pool monitor shows that the remote server is up.
The network department has confirmed that there are no firewall rules or networking issues preventing the LTM device from
communicating with the syslog server. The department responsible for the remote syslog server indicates that there may
be problems with the syslog server. The LTM Specialist checks the BIG-IP LTM logs for errors relating to the remote syslog server. None are found. The LTM Specialist does a tcpdump:
tcpdump -nn port 15002, with the following results: 21:28:36.395543 IP 192.168.100.100.44772 > 91.223.45.231.15002: UDP, length 19 21:28:36.429073 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 169 21:28:36.430714 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 181 21:28:36.840524 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 169 21:28:36.846547 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 181 21:28:39.886343 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 144
NotE.192.168.100.100 is the self IP of the LTM device.
Why are there no errors for the remote syslog server in the log files?
- A. When the remote syslog sever fails, it returns to service before the timeout for the monitor has expired.
- B. The -log option for tcpdump needs to be used.
- C. The monitor type used is inappropriate.
- D. The "verbose" logging option needs to be enabled for the pool.
Answer: C
NEW QUESTION 68
An LTM Specialist is tasked with ensuring that the syslogs for the LTM device are sent to a remote syslog server.
The following is an extract from the config file detailing the node and monitor that the LTM device is using for the remote syslog server:
monitor
Syslog_15002 {
defaults from udp
dest *:15002
}
node 91.223.45.231 {
monitor Syslog_15002
screen RemoteSYSLOG
}
There seem to be problems communicating with the remote syslog server. However, the pool monitor shows that the remote server is up.
The network department has confirmed that there are no firewall rules or networking issues preventing the LTM device from communicating with the syslog server. The department responsible for the remote syslog server indicates that there may be problems with the syslog server. The LTM Specialist checks the BIG-IP LTM logs for errors relating to the remote syslog server. None are found. The LTM Specialist does a tcpdump:
tcpdump -nn port 15002, with the following results:
21:28:36.395543 IP 192.168.100.100.44772 > 91.223.45.231.15002: UDP, length 19
21:28:36.429073 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 169
21:28:36.430714 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 181
21:28:36.840524 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 169
21:28:36.846547 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 181
21:28:39.886343 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 144 NotE. 192.168.100.100 is the self IP of the LTM device.
Why are there no errors for the remote syslog server in the log files?
- A. When the remote syslog sever fails, it returns to service before the timeout for the monitor has expired.
- B. The -log option for tcpdump needs to be used.
- C. The monitor type used is inappropriate.
- D. The "verbose" logging option needs to be enabled for the pool.
Answer: C
NEW QUESTION 69
An LTM Specialist must perform a packet capture on a virtual server with an applied standard FastL4 profile. The virtual server 10.0.0.1:443 resides on vlan301.
Which steps should the LTM Specialist take to capture the data payload successfully while ensuring no other virtual servers are affected?
- A. A new FastL4 profile should be created and applied to the virtual server with PVA acceleration disabled. Then the packet capture tcpdump -ni vlan301 should be executed on the command line interface.
- B. The LTM device is under light load. The traffic should be mirrored to a dedicated sniffing device. On the sniffing device, the packet capture tcpdump -ni vlan301 should be executed.
- C. The packet capture tcpdump -ni vlan301 should be executed on the command line interface. There is no need to change profiles or PVA acceleration.
- D. The standard FastL4 profile should have PVA acceleration disabled. Then the packet capture tcpdump -ni vlan301 should be executed on the command line interface.
Answer: A
NEW QUESTION 70
Given the log entry:
011f0005:3: HTTP header (32800) exceeded maximum allowed size of 32768 (Client sidE. vip=/Common/ VS_web profile=http pool=/Common/POOL_web client_ip=10.0.0.1)
Which HTTP profile setting can be modified temporarily to resolve the issue?
- A. Increase Maximum Header size
- B. Decrease Maximum Header size
- C. Decrease Maximum Header Count
- D. Decrease Maximum Requests
- E. Increase Maximum Requests
- F. Increase Maximum Header Count
Answer: A
NEW QUESTION 71
Users are experiencing low throughput when downloading large files over a high-speed WAN connection.
Extensive packet loss was found to be an issue but CANNOT be eliminated.
Which two TCP profile settings should be modified to compensate for the packet loss in the network?
(Choose two.)
- A. proxy buffer low
- B. Nagle's algorithm
- C. proxy buffer high
- D. proxy options
- E. slow start
Answer: A,C
NEW QUESTION 72
An LTM Specialist is troubleshooting a problem on an eCommerce website. The user browses the online store using port 80, adding items to the shopping cart. The user then clicks the "Checkout" button on the site, which redirects the user to port 443 for the checkout process. Suddenly, the user's shopping cart is shown as empty. The shopping cart data is stored in memory on the server, and the default source address persistence profile is used on both virtual servers.
How should the LTM Specialist resolve this issue?
- A. Create a custom persistence profile and enable "Match Across Services."
- B. Add an HTTP profile to both virtual servers.
- C. Create a custom persistence profile and enable "Map Proxies."
- D. Enable SNAT Automap on both virtual servers.
Answer: A
NEW QUESTION 73
There is a fault with an LTM device load balanced trading application that resides on directly connected VLAN vlan-301. The application virtual server is 10.0.0.1:80 with trading application backend servers on subnet 192.168.0.0/25. The LTM Specialist wants to save a packet capture with complete payload for external analysis.
Which command should the LTM Specialist execute on the LTM device command line interface?
- A. tcpdump -vvv -s 0 -nni vlan-301 -w /var/tmp/trace.cap 'net 192.168.0.0/25'
- B. tcpdump -vvv -nni vlan-301 -w /var/tmp/trace.cap 'net 192.168.0.0/25'
- C. tcpdump -vvv -w /var/tmp/trace.cap 'net 192.168.0.0/25'
- D. tcpdump -vvv -s 0 -w /var/tmp/trace.cap 'net 192.168.0.0/25'
Answer: A
NEW QUESTION 74
The LTM device is configured to provide load balancing to a set of web servers that implement access control lists (ACL) based on the source IP address of the client. The ACL is at the network level and the web server is configured to send a TCP reset back to the client if it is NOT permitted to connect.
The virtual server is configured with the default OneConnect profile.
The ACL is defined on the web server as:
Permit: 192.168.136.0/24 Deny: 192.168.116.0/24
The packet capture is taken of two individual client flows to a virtual server with IP address
192.168.136.100.
Client A - Src IP 192.168.136.1 - Virtual Server 192.168.136.100:
Clientside:
09:35:11.073623 IP 192.168.136.1.55684 > 192.168.136.100.80: S 869998901:869998901(0) win
8192 <mss 1460,nop,wscale 2,nop,nop,sackOK>
09:35:11.073931 IP 192.168.136.100.80 > 192.168.136.1.55684: S 2273668949:2273668949(0)
ack 869998902 win 4380 <mss 1460,nop,wscale 0,sackOK,eol>
09:35:11.074928 IP 192.168.136.1.55684 > 192.168.136.100.80: . ack 1 win 16425 09:35:11.080936 IP 192.168.136.1.55684 > 192.168.136.100.80: P 1:299(298) ack 1 win 16425 09:35:11.081029 IP 192.168.136.100.80 > 192.168.136.1.55684: . ack 299 win 4678
Serverside:
09:35:11.081022 IP 192.168.136.1.55684 > 192.168.116.128.80: S 685865802:685865802(0) win
4380 <mss 1460,nop,wscale 0,sackOK,eol>
09:35:11.081928 IP 192.168.116.128.80 > 192.168.136.1.55684: S 4193259095:4193259095(0)
ack 685865803 win 5840 <mss 1460,nop,nop,sackOK,nop,wscale 6>
09:35:11.081943 IP 192.168.136.1.55684 > 192.168.116.128.80: . ack 1 win 4380 09:35:11.081955 IP 192.168.136.1.55684 > 192.168.116.128.80: P 1:299(298) ack 1 win 4380 09:35:11.083765 IP 192.168.116.128.80 > 192.168.136.1.55684: . ack 299 win 108
Client B - Src IP 192.168.116.1 - Virtual Server 192.168.136.100:
Clientside:
09:36:11.244040 IP 192.168.116.1.55769 > 192.168.136.100.80: S 3320618938:3320618938(0)
win 8192 <mss 1460,nop,wscale 2,nop,nop,sackOK>
09:36:11.244152 IP 192.168.136.100.80 > 192.168.116.1.55769: S 3878120666:3878120666(0)
ack 3320618939 win 4380 <mss 1460,nop,wscale 0,sackOK,eol>
09:36:11.244839 IP 192.168.116.1.55769 > 192.168.136.100.80: . ack 1 win 16425 09:36:11.245830 IP 192.168.116.1.55769 > 192.168.136.100.80: P 1:299(298) ack 1 win 16425 09:36:11.245922 IP 192.168.136.100.80 > 192.168.116.1.55769: . ack 299 win 4678
Serverside:
09:36:11.245940 IP 192.168.136.1.55684 > 192.168.116.128.80: P 599:897(298) ack 4525 win 09:36:11.247847 IP 192.168.116.128.80 > 192.168.136.1.55684: P 4525:5001(476) ack 897 win
Why was the second client flow permitted by the web server?
- A. SNAT automap was enabled on the virtual server.
- B. A global SNAT is defined.
- C. A source address persistence profile is assigned to the virtual server.
- D. The idle TCP session from the first client was re-used.
Answer: D
NEW QUESTION 75
Internet clients connecting to a virtual server to download a file are experiencing about 150 ms of latency and no packet loss.
Which built-in client-side TCP profile provides the highest throughput?
- A. tcp-legacy
- B. tcp-lan-optimized
- C. tcp
- D. tcp-wan-optimized
Answer: D
NEW QUESTION 76
-- Exhibit -
-- Exhibit -
Refer to the exhibit.
An LTM Specialist is performing an HTTP trace on the client side of the LTM device and notices there are many undesired headers being sent by the server in the response. The LTM Specialist wants to remove all response headers except "Set-Cookie" and "Location."
How should the LTM Specialist modify the HTTP profile to remove undesired headers from the HTTP response?
- A. Enter the desired header names in the 'Response Headers Allowed' field.
- B. Enter the undesired header names in the 'Response Header Erase' field.
- C. Enter the desired header names in the 'Request Header Insert' field.
- D. Enter the undesired header names in the 'Request Header Erase' field.
Answer: A
NEW QUESTION 77
An HA pair of LTM devices configured in Active-Standby mode stops responding to traffic and causes an outage. The Active device becomes Standby, but the partner device stays in Standby mode instead of taking over as Active. A reboot and restart of the services brings the LTM device to Active mode for a short time, but then it goes into Standby mode again.
Which two configuration components caused this condition? (Choose two.)
- A. Gateway Fail-safe
- B. System Fail-safe
- C. VLAN Fail-safe
- D. Switch Board Failure
- E. Link down on Failover
Answer: A,C
NEW QUESTION 78
-- Exhibit -
-- Exhibit --
Refer to the exhibit.
A failover has just occured on BIG-IP1. BIG-IP2 is now active and manages traffic as expected. Both Bigip's are set with a gateway failsafe to check the reachability of the main border router. Switches have performed as expected.
Where should the LTM Specialist check for potential issues?
- A. Network Interface 2.1 of BIG-IP 2
- B. Network Interface 2.1 of BIG-IP 1
- C. Network Interface 1.1 of BIG-IP 1
- D. Network Interface 2.2 of BIG-IP 1
- E. Network Interface 1.1 of BIG-IP 2
- F. Network Interface 2.2 of BIG-IP 2
Answer: B
NEW QUESTION 79
-- Exhibit - -- Exhibit -
Refer to the exhibits.
An LTM Specialist configures a virtual server for an internal application to perform client-side encryption while allowing the server-side traffic to be unencrypted. Application users report that images are NOT loading through the virtual server; however, images load when going directly to the server.
What should the LTM Specialist configure to allow the images to load through the virtual server?
- A. HTTP profile with "SSL Offload" disabled
- B. HTTP profile with "SSL Offload" enabled
- C. Stream profile with source "http:" and target "https:"
- D. Stream profile with target "http:" and source "https:"
Answer: C
NEW QUESTION 80
A stand-alone LTM device is to be paired with a second LTM device to create an active/standby pair. The current stand-alone LTM device is in production and has several VLANs with floating IP addresses configured.
The appropriate device service clustering (DSC) configurations are in place on both LTM devices.
Which two non-specific DSC settings should the LTM Specialist configure on the second LTM device to ensure no errors are reported when attempting to synchronize for the first time? (Choose two.)
- A. VLANs
- B. default route
- C. self IP addresses
- D. pools
Answer: A,C
NEW QUESTION 81
An LTM Specialist needs to rewrite text within an HTML response from a web server. A client is sending the HTTP request below:
GET / HTTP/1.1
Host: www.f5.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:16.0) Gecko/20100101 Firefox/16.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-LanguagE. en-US,en;q=0.5 Accept-EncodinG. gzip, deflate Cache-Control: no-cache Connection: keep-alive CookiE. somecookie=1 Although a stream profile has been added to the virtual server, the content within the HTTP response is NOT being matched, and therefore NOT modified.
Which HTTP header should the LTM Specialist remove from the request to ensure the content can be matched and modified?
- A. Accept
- B. Accept-Encoding
- C. Connection
- D. Cache-Control
Answer: B
NEW QUESTION 82
A new VLAN vlan301 has been configured on a highly available LTM device in partition ApplicationA. A new directly connected backend server has been placed on vlan301. However, there are connectivity issues pinging the default gateway. The VLAN self IPs configured on the LTM devices are 192.168.0.251 and 192.168.0.252 with floating IP
192.168.0.253. The LTM Specialist needs to perform a packet capture to assist with troubleshooting the connectivity.
Which command should the LTM Specialist execute on the LTM device command line interface to capture the attempted pings to the LTM device default gateway on VLAN vlan301?
- A. tcpdump -ni /ApplicationA/vlan301 'host 192.168.0.253'
- B. tcpdump -ni vlan301 'host 192.168.0.253'
- C. tcpdump -ni /ApplicationA/vlan301 'host 192.168.0.251 or host 192.168.0.252'
- D. tcpdump -ni vlan301 'host 192.168.0.251 or host 192.168.0.252'
Answer: A
NEW QUESTION 83
An LTM device has a virtual server configured as a Performance Layer 4 virtual listening on 0.0.0.0:0 to perform routing of packets to an upstream router. The client machine at IP address 192.168.0.4 is attempting to contact a host upstream of the LTM device on IP address 10.0.0.99.
The network flow is asymmetrical, and the following TCP capture displays:
# tcpdump -nnni 0.0 'host 192.168.0.4 and host 10.0.0.99'
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on 0.0, link-type EN10MB (Ethernet), capture size 96 bytes
05:07:55.499954 IP 192.168.0.4.35345 > 10.0.0.99.443: S 3205656213:3205656213(0) ack 3267995082 win 1480
05:07:55.499983 IP 10.0.0.99.443 > 192.168.0.4.35345: R 1:1(0) ack 1 win 0
05:07:56.499960 IP 192.168.0.4.35345 > 10.0.0.99.443: S 3205656213:3205656213(0) ack 3267995082 win 1480
05:07:56.499990 IP 10.0.0.99.443 > 192.168.0.4.35345: R 1:1(0) ack 1 win 0
4 packets captured
Which option within the fastL4 profile needs to be enabled by the LTM Specialist to prevent the LTM device from rejecting the flow?
- A. Loose Close
- B. Generate Initial Sequence Number
- C. Reset on Timeout
- D. Loose Initiation
Answer: D
NEW QUESTION 84
Given a tcpdump on an LTM device from both sides of a connection on the External and Internal VLANs, how should an LTM Specialist determine if SNAT is enabled for a particular pool?
- A. by checking to see if the Source IP is carried through from the External Vlan to the Internal Vlan
- B. by checking to see if the Destination port is carried through from the External Vlan to the Internal Vlan
- C. by checking to see if the Source port is carried through from the External Vlan to the Internal Vlan
- D. by checking to see if the Destination IP is carried through from the External Vlan to the Internal Vlan
Answer: A
NEW QUESTION 85
There is a fault with an LTM device load balanced trading application that resides on directly connected VLAN vlan-301. The application virtual server is 10.0.0.1:80 with trading application backend servers on subnet
192.168.0.0/25. The LTM Specialist wants to save a packet capture with complete payload for external analysis.
Which command should the LTM Specialist execute on the LTM device command line interface?
- A. tcpdump -vvv -s 0 -nni vlan-301 -w /var/tmp/trace.cap 'net 192.168.0.0/25'
- B. tcpdump -vvv -nni vlan-301 -w /var/tmp/trace.cap 'net 192.168.0.0/25'
- C. tcpdump -vvv -w /var/tmp/trace.cap 'net 192.168.0.0/25'
- D. tcpdump -vvv -s 0 -w /var/tmp/trace.cap 'net 192.168.0.0/25'
Answer: A
NEW QUESTION 86
-- Exhibit-
-- Exhibit -
Refer to the exhibits.
Users are able to access the application when connecting to the virtual server but are unsuccessful when connecting directly to the application servers. The LTM Specialist wants to allow direct access to the application servers.
Which configuration change resolves this problem?
- A. Configure a route to the web server subnet on the network router.
- B. Configure an IP Forwarding virtual server on the LTM device.
- C. Enable port 443 on the virtual server.
- D. Disable address translation on the virtual server.
- E. Configure a SNAT pool on the LTM device.
Answer: B
NEW QUESTION 87
-- Exhibit -
-- Exhibit --
Refer to the exhibit.
A layer 2 nPath routing configuration has been deployed. A packet capture contains a client connection packet with the following properties:
Source IP: <Virtual Server>
Destination IP: <Client A>
At which two locations could the packet capture have been taken? (Choose two.)
- A. the DMZ interface of the Internet firewall
- B. the internal interface of the Internet firewall
- C. the network interface of web server
- D. the external VLAN interface of the LTM device
Answer: B,C
NEW QUESTION 88
......
Focus on 301b All-in-One Exam Guide For Quick Preparation: https://www.validtorrent.com/301b-valid-exam-torrent.html
Tested Material Used To 301b: https://drive.google.com/open?id=1w5PwoiMqGvz9TfK_HoYEvlQ7bnpGieIu