Free 301b Exam Questions - Easiest Way for Success

Prepare for the F5 Networks 301b exam questions with our authentic preparation materials, including free 301b practice exam questions and answers. TheExamsLab provides all the support you need to succeed in the BIG-IP LTM Specialist: Maintain and Troubleshoot 301b exam. This dedication to student success is why we have the most satisfied 301b certification exam candidates worldwide.

Page: 1 / 43

Total 215 Questions | Updated On: Sep 13, 2024

Add To Cart

Question 1

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

A client attempts to connect from a Google Chrome browser to a virtual server on a BIG-IP LTM. The virtual

server is SSL Offloaded. When the client connects, the client receives an SSL error. The client receives the

same errors when trying Mozilla Firefox and Internet Explorer browsers.

The LTM Specialist does an ssldump on the virtual server and receives the results as per the exhibit.

How should this be resolved?

A : Set the virtual server to listen on port 443 (HTTPS).

B : Upgrade the client to support the appropriate SSL cipher suite.

C : Select the appropriate "SSL Profile (Client)" in the virtual server settings.

D : Adjust the SSL key length in the SSL profile to match the minimum required by the client.

Answer: C

Question 2

An HA pair of LTM devices configured in Active-Standby mode stops responding to traffic and causes an

outage. The Active device becomes Standby, but the partner device stays in Standby mode instead of taking

over as Active. A reboot and restart of the services brings the LTM device to Active mode for a short time, but

then it goes into Standby mode again.

Which two configuration components caused this condition? (Choose two.)

A : VLAN Fail-safe

B : System Fail-safe

C : Gateway Fail-safe

D : Switch Board Failure

E : Link down on Failover

Answer: A,C

Question 3

-- Exhibit –

-- Exhibit --

Refer to the exhibits.

After upgrading LTM from v10 to v11, users are unable to connect to an application. The virtual server is using

a client SSL profile for re-terminating SSL for payload inspection, but a server SSL profile is being used to reencrypt the request.

A client side ssldump did NOT show any differences between the traffic going directly to the server and the

traffic being processed by the LTM device. However, packet capture was done on the server, and differences

were noted.

Which modification will allow the LTM device to process the traffic correctly?

A : Enable Strict Resume.

B : Change Secure Renegotiation to "Request."

C : Enable ProxySSL option in the server SSL profile.

D : Change to different ciphers on the server SSL profile.

Answer: B

Question 4

An LTM Specialist is tasked with ensuring that the syslogs for the LTM device are sent to a remote syslog

server.

The following is an extract from the config file detailing the node and monitor that the LTM device is using for

the

remote syslog server:

monitor

Syslog_15002 {

defaults from udp

dest *:15002

}

node 91.223.45.231 {

monitor Syslog_15002

screen RemoteSYSLOG

}

There seem to be problems communicating with the remote syslog server. However, the pool monitor shows

that the remote server is up.

The network department has confirmed that there are no firewall rules or networking issues preventing the

LTM device from

communicating with the syslog server. The department responsible for the remote syslog server indicates that

there may

be problems with the syslog server. The LTM Specialist checks the BIG-IP LTM logs for errors relating to the

remote syslog

server. None are found. The LTM Specialist does a tcpdump:

tcpdump -nn port 15002, with the following results:

21:28:36.395543 IP 192.168.100.100.44772 > 91.223.45.231.15002: UDP, length 19

21:28:36.429073 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 169

21:28:36.430714 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 181

21:28:36.840524 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 169

21:28:36.846547 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 181

21:28:39.886343 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 144

NotE. 192.168.100.100 is the self IP of the LTM device.

Why are there no errors for the remote syslog server in the log files?

A : The -log option for tcpdump needs to be used.

B : The monitor type used is inappropriate.

C : The "verbose" logging option needs to be enabled for the pool.

D : When the remote syslog sever fails, it returns to service before the timeout for the monitor has expired.

Answer: B

Question 5

An LTM Specialist must perform a packet capture on a virtual server with an applied standard FastL4 profile.

The virtual server 10.0.0.1:443 resides on vlan301.

Which steps should the LTM Specialist take to capture the data payload successfully while ensuring no other

virtual servers are affected?

A : The standard FastL4 profile should have PVA acceleration disabled. Then the packet capture tcpdump -nivlan301 should be executed on the command line interface.

B : The packet capture tcpdump -ni vlan301 should be executed on the command line interface. There is noneed to change profiles or PVA acceleration.

C : A new FastL4 profile should be created and applied to the virtual server with PVA acceleration disabled.Then the packet capture tcpdump -ni vlan301 should be executed on the command line interface.

D : The LTM device is under light load. The traffic should be mirrored to a dedicated sniffing device. On thesniffing device, the packet capture tcpdump -ni vlan301 should be executed.

Answer: C

Page: 1 / 43

Total 215 Questions | Updated On: Sep 13, 2024

Add To Cart