F5 F5 Certifications 301A Questions & Answers

• Question 121:

  A BIG IP system load balances connections to a web application. A TCP-based Denial of Service attack

  against the web application is occurring, which has caused very high memory utilization on the LTM device

  due to stale TCP connections.

  Which TCP profile option should be used to reduce memory utilization?

  A. Idle timeout

  B. Reset on timeout

  C. Slow Start

  D. Multipath TCP

  Correct Answer: A

• Question 122:

  A new DNS virtual server has been configured. Testing reveals that DNS server has failed to accept DNS over TCP. The configuration of the virtual server is as follows:

  

  Which action should be taken to correct this issue?

  A. create a new virtual server with the service port of 53 and the protocol set to TC

  B. change the profile set on the virtual server To TCP/UDP

  C. change the profile set on the virtual server to TCP

  D. add a TCP prone to the existing virtual server.

  Correct Answer: A

• Question 123:

  A LTM device needs to load balance active and passive FTP traffic while using only a single virtual server. Which virtual server type should an LTM Specialist configure on the LTM device?

  A. Forwarding (Layer 2)

  B. Standard

  C. Stateless

  D. DHCP relay

  E. Forwarding (IP)

  Correct Answer: E

• Question 124:

  Refer to the exhibit.

  

  An LTM Specialist has multiple SNAT and virtual server objects configured as in the bigip.conf shown. The LTM Specialist tests a connection from a client with. IP 172.163.31.11 to 192.168.0.100:80. Which two objects will show an increase in Local Traffic statistics connections?

  A. VS_AandSNAT_B

  B. VS_BandSNAT_B

  C. VS_ B and SNAT A

  D. VS_A and SNAT A

  Correct Answer: A

• Question 125:

  A virtual server is using a TCP profile based on the top-wan-optimized profile for a streaming application

  Users report videos are loading slowly.

  Which setting should be modified in the TCP profile to optimize the application?

  A. Disable Slow Start

  B. Disable Selective ACKs

  C. Disable Nagle's Algorithm

  D. Disable Reset on Timeout

  Correct Answer: A

• Question 126:

  An LI M device is experiencing a high volume of traffic. The virtual server is struggling under the load. The problem appears to be on the server side connections. The virtual server is accepting connections . The virtual server is accepting connections on https and is configured with an SSL profile and http pool. What should be added to increase the performance of the device?

  A. an HTTP Compression profile

  B. a One Connect profile

  C. smaller key to the SSL profile

  D. a SPDY profile

  Correct Answer: B

• Question 127:

  Exhibit.

  

  Webserver_pool consists of 6 members. phpAuction_80_pool consists of 2 members LTM1 is the current

  Active member.

  LTM1 loses connectivity to 3 of the 6 members in the webserver_pool LTM2 still has connectivity to all

  servers.

  What is the expected failover behavior?

  A. LTM1 Standby / LTM2 Standby

  B. LTM1 Active /LTM2 Active

  C. LTM1 Active / LTM2 Standby

  D. LTM1 Standby / LTM2 Active

  Correct Answer: C

• Question 128:

  The web application team requests help from the LTM Specialist to Improve the performance of their web sites that are load balanced by the F5 LTM device with a Standard Virtual Server. Which virtual server type will improve the performance of the web application servers?

  A. Performance (HTTP)

  B. Performance (Layer 4)

  C. Stateless

  D. Forwarding (IP)

  Correct Answer: A

• Question 129:

  A VCMP guest has the following characteristics:

  1.

  Resources allocated for CPU memory, network interfaces, and disk space

  2.

  Virtual disk created

  3.

  The guest is NOT running

  The guest is NOT running in which state is the VCMP guest

  A. Offline

  B. Deployed

  C. Provisioned

  D. Configured

  Correct Answer: C

• Question 130:

  An LTM Specialist needs to provide access to a 8BG-IP to device for a company's support person access to the BIG IP device, but are NOT allowed to change any settings All support the support remote access to the BIG-IP device, but are NOT allowed to change ant settings. All support have accounts in the company's Active Directory Which method is appropriate to provide access for the support personnel to the BIG-JP device?

  A. configure remote authentication for all users with a default user role of Guest

  B. configure remote authentication and map support personnel users to the Guest user role

  C. configure remote authentication and map support personnel users to the Operator user role

  D. configure remote authentication for all users with a default user role of Operator

  Correct Answer: B