Question 1

An LTM Specialist configures a new HTTP virtual server on an LTM device external VLAN. The web servers

are connected to the LTM device internal VLAN. Clients trying to connect to the virtual server are unable to

establish a connection. A packet capture shows an HTTP response from a web server to the client and then a

reset from the client to the web server.

From which two locations could the packet capture have been collected? (Choose two.)

Options :

A :

network interface of web server

B :

network interface of client machine

C : internal VLAN interface of the LTM device

D : external VLAN interface of the LTM device

E : management VLAN interface of the LTM device

Answer: A,B

Question 2

An LTM Specialist has a single HTTPS virtual server doing SSL termination. No server SSL profile is

defined. The pool members are on the internal VLAN answering on HTTP port 80. Users with certain

browsers are experiencing issues.

Which two locations are most appropriate to gather packets needed to determine the SSL issue? (Choose two.)

Options :

A : server interface

B : user-s computer

C : LTM device-s external VLAN

D : LTM device-s internal VLAN

E : LTM device-s management interface

Answer: B,C

Question 3

An LTM device needs an additional traffic group.

Which configuration item is required?

Options :

A :

Default device

B :

Group name

C :

MAC Masquerade Address

D :

Auto Fallback Timeout

Answer: B

Question 4

-- Exhibit –

-- Exhibit --

Refer to the exhibits.

A customer requests to offload SSL for an internal website. The front page of the website loads correctly;

however, selecting links on the page fails.

How should the LTM Specialist fix the issue?

Options :

A :

Create a new SNAT pool.

Add internal network IPs to the SNAT pool.

Add the SNAT pool to the VS.

B :

Create a new HTTP profile.

Enable Insert X-Forwarded-For.

Add the new HTTP profile to the VS.

C :

Create a new HTTP profile.

Enable redirect rewrite.

Add the new HTTP profile to the VS.

D :

Create a new Server SSL profile.

Enable Proxy SSL.

Add the Server SSL profile to the VS.

Answer: C

Question 5

A BIG-IP Administrator configures a Virtual Server. Users report that they always receive a TCP RST packet to the BIG-IP system when attempting to connect to it. What is the possible reason for this issue?

Options :

A : The virtual server Type is set to Internal

B : The virtual server Type is set to Reject

C : The virtual server Type is set to Drop

D : The virtual server Type is set to Stateless

Answer: B