Question 1

An LTM Specialist is tasked with ensuring that the syslogs for the LTM device are sent to a remote syslog

server.

The following is an extract from the config file detailing the node and monitor that the LTM device is using for

the

remote syslog server:

monitor

Syslog_15002 {

defaults from udp

dest *:15002

}

node 91.223.45.231 {

monitor Syslog_15002

screen RemoteSYSLOG

}

There seem to be problems communicating with the remote syslog server. However, the pool monitor shows

that the remote server is up.

The network department has confirmed that there are no firewall rules or networking issues preventing the

LTM device from

communicating with the syslog server. The department responsible for the remote syslog server indicates that

there may

be problems with the syslog server. The LTM Specialist checks the BIG-IP LTM logs for errors relating to the

remote syslog

server. None are found. The LTM Specialist does a tcpdump:

tcpdump -nn port 15002, with the following results:

21:28:36.395543 IP 192.168.100.100.44772 > 91.223.45.231.15002: UDP, length 19

21:28:36.429073 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 169

21:28:36.430714 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 181

21:28:36.840524 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 169

21:28:36.846547 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 181

21:28:39.886343 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 144

NotE. 192.168.100.100 is the self IP of the LTM device.

Why are there no errors for the remote syslog server in the log files?

Options :

A : The -log option for tcpdump needs to be used.

B :

The monitor type used is inappropriate.

C : The "verbose" logging option needs to be enabled for the pool.

D :

When the remote syslog sever fails, it returns to service before the timeout for the monitor has expired.

Answer: B

Question 2

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

A pair of LTM devices are deployed in a high-availability (HA) pair as the diagram shows. After inserting a new

rule on the firewalls, the LTM devices become Standby. The rule drops all outbound sessions to the Internet.

Only inbound connections are allowed from the Internet. There are no other changes to the environment.

What triggered the LTM device failover?

Options :

A : HA Group

B : Auto Failback

C : VLAN Failsafe

D :

Gateway Failsafe

Answer: D

Question 3

An LTM device is load balancing SIP traffic. An LTM Specialist notices that sometimes the SIP request is being

load balanced to the same server as the initial connection.

Which setting in the UDP profile will make the LTM device more evenly distribute the SIP traffic?

Options :

A : Enable Datagram LB

B : Disable Datagram LB

C : Set Timeout to Indefinite

D :

Set Timeout to Immediate

Answer: A

Question 4

Internet clients connecting to a virtual server to download a file are experiencing about 150 ms of latency and

no packet loss.

Which built-in client-side TCP profile provides the highest throughput?

Options :

A : tcp

B : tcp-legacy

C : tcp-lan-optimized

D : tcp-wan-optimized

Answer: D

Question 5

-- Exhibit –

-- Exhibit --

Refer to the exhibits.

After upgrading LTM from v10 to v11, users are unable to connect to an application. The virtual server is using

a client SSL profile for re-terminating SSL for payload inspection, but a server SSL profile is being used to reencrypt the request.

A client side ssldump did NOT show any differences between the traffic going directly to the server and the

traffic being processed by the LTM device. However, packet capture was done on the server, and differences

were noted.

Which modification will allow the LTM device to process the traffic correctly?

Options :

A :

Enable Strict Resume.

B :

Change Secure Renegotiation to "Request."

C :

Enable ProxySSL option in the server SSL profile.

D :

Change to different ciphers on the server SSL profile.

Answer: B