Question 1

A new VLAN vlan301 has been configured on a highly available LTM device in partition ApplicationA. A new

directly connected backend server has been placed on vlan301. However, there are connectivity issues pinging

the default gateway. The VLAN self IPs configured on the LTM devices are 192.168.0.251 and 192.168.0.252

with floating IP 192.168.0.253. The LTM Specialist needs to perform a packet capture to assist with

troubleshooting the connectivity.

Which command should the LTM Specialist execute on the LTM device command line interface to capture the

attempted pings to the LTM device default gateway on VLAN vlan301?

Options :

A :

tcpdump -ni /ApplicationA/vlan301 'host 192.168.0.253'

B : tcpdump -ni vlan301 'host 192.168.0.253'

C :

tcpdump -ni /ApplicationA/vlan301 'host 192.168.0.251 or host 192.168.0.252'

D :

tcpdump -ni vlan301 'host 192.168.0.251 or host 192.168.0.252'

Answer: A

Question 2

An LTM Specialist configures the following iRule on an LTM device:

when HTTP_REQUEST {

if {[string tolower [HTTP::uri]] contains "/URI1/" } {

pool Pool1

}

elseif {[string tolower [HTTP::uri]] contains "/URI2/" } {

pool Pool2

}

elseif {[string tolower [HTTP::uri]] contains "/URI3/" } {

pool Pool3

}

else { pool Pool4}

}

Given the following request: http://www.example.comURI1/index.html?fu=bar&pass=1234

Which pool will be selected by the iRule?

Options :

A : Pool1

B : Pool2

C : Pool3

D : Pool4

Answer: D

Question 3

An LTM Specialist must perform a packet capture on a virtual server with an applied standard FastL4 profile.

The virtual server 10.0.0.1:443 resides on vlan301.

Which steps should the LTM Specialist take to capture the data payload successfully while ensuring no other

virtual servers are affected?

Options :

A :

The standard FastL4 profile should have PVA acceleration disabled. Then the packet capture tcpdump -ni

vlan301 should be executed on the command line interface.

B :

The packet capture tcpdump -ni vlan301 should be executed on the command line interface. There is no

need to change profiles or PVA acceleration.

C :

A new FastL4 profile should be created and applied to the virtual server with PVA acceleration disabled.

Then the packet capture tcpdump -ni vlan301 should be executed on the command line interface.

D :

The LTM device is under light load. The traffic should be mirrored to a dedicated sniffing device. On the

sniffing device, the packet capture tcpdump -ni vlan301 should be executed.

Answer: C

Question 4

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

A client attempts to connect from a Google Chrome browser to a virtual server on a BIG-IP LTM. The virtual

server is SSL Offloaded. When the client connects, the client receives an SSL error. The client receives the

same errors when trying Mozilla Firefox and Internet Explorer browsers.

The LTM Specialist does an ssldump on the virtual server and receives the results as per the exhibit.

How should this be resolved?

Options :

A : Set the virtual server to listen on port 443 (HTTPS).

B :

Upgrade the client to support the appropriate SSL cipher suite.

C :

Select the appropriate "SSL Profile (Client)" in the virtual server settings.

D :

Adjust the SSL key length in the SSL profile to match the minimum required by the client.

Answer: C

Question 5

An application owner claims an LTM device is delaying delivery of an HTTP application. The LTM device has

two VLANs, an internal and an external. The application servers reside on the internal VLAN. The virtual server

and clients reside on the external VLAN.

With appropriate filters applied, which solution is most efficient for obtaining packet captures in order to

investigate the claim of delayed delivery?

Options :

A : one capture on interface 0.0

B : one capture on the internal interface

C : one capture on the external interface

D : one capture on the management interface

Answer: A