F5 F5 Certifications 301A Questions & Answers

• Question 51:

  An LTM specialist needs to upgrade a VCMP quest in an HA Setup with minimum interruption for all VCMP

  guest instances.

  In which should the LTM Specialist perform this upgrade?

  A. Relicense the host. Failover all guest's active traffic-groups to the other host, copy image to gest, create guest UCS install and set boot location to new volume, reboot

  B. Failover this specific guest's active traffic-group to the other Host, Relicense the guest, copy image to guest , create guest UCS, install and set boot location to new volume, reboot

  C. Failover all guests' active traffic-group to the other Host, Relicense the host, copy image to guest, create guest UCS, install and set boot location to new volume , reboot

  D. Failover all guests' active traffic-group to the other host, copy image to guest, create guest UCS install and set boot location to new volume, reboot, Relicense the host

  Correct Answer: C

  Switch guest, reactive, license first and then upgrade.

• Question 52:

  An LTM Specialist needs to use a set of addresses to access an Internet website in an outbound

  configuration.

  Which feature should the LTM Specialist configure?

  A. NAT pool

  B. NAT address

  C. SNAT pool

  D. SNAT address

  Correct Answer: C

• Question 53:

  TWO LTM devices are in the same Device Group and configured for Ac live/Standby Failover. The LTM Specialist observes that the HA Active and Standby device constantly changes state. All network links use the default route domain A dedicated fiber ink is used for the HA connection with a latency of 250 ms but no packet loss. What is causing the change in failover state to occur?

  A. The HA network is using the default routing domain.

  B. The HA network is using multicast IP.

  C. The HA network is not configured for mirroring.

  D. The HA network latency is too high.

  Correct Answer: B

  

• Question 54:

  An LTM Specialist is experiencing issues in a failover event. Certain long-lasting FTP event. Certain long-lasting FTP connections using a single node pool are forced to reconnect. The bigip.conf extract is shown:

  

  What does the LTM Specialist need to change in the configuration to avoid this issue?

  A. snatpool

  B. persistence mirroring

  C. connection mirroring

  D. ftp profile

  Correct Answer: C

  The stem mentions that it is a single server node, so there is no need to consider the factors of session maintenance. The actual requirement is to maintain the original connection status during failover. You need to configure connection mirroring to synchronize the connection status between the devices in the cluster in real time.

• Question 55:

  An LTM Specialist has detected that a brute force login attack is occurring against the SSH service via a BIG-IP management interface. Login attempts are occurring from many IPs within the internal company network. BIG-IP SSH access restrictions are in place as follows:

  

  The LTM Specialist has determined that SSH access should only occur from the 192.168.1.0/24 and

  172.16.254.0/23 networks.

  Which tmsh command should the LTM Specialist use to permit access from the desired networks only?

  A. modify.sys sshd allow add {''192.168. 10/24 , '' ''172. 16 2540/23'')

  B. modify /sys sshd login disable (''10.0.00/8'', ''172 16.0 0/12'', ''192. 168.0.0/16'')

  C. modify/sys allow replace-all-with {''192.168.1.00/24'', ''192.16.254.0/23''}

  D. modify/sys sshd login enable {''192.166.10/24'''' ''172.16 254 0/23

  Correct Answer: C

  Select C to overwrite the existing network's allow configuration over the specified network segment.

• Question 56:

  Refer to the exhibit.

  

  The LTM devices LTM3 and LTM2 have four Traffic Groups defined with approximately the sar of failover objects defined in each group.

  -

  Traffic Groups A and C have Default Device set to LTM1

  -

  Traffic Groups Band D have Default Device set to LTM2.

  -

  Traffic Groups B and C do NOT have Auto Failback enabled. Traffic Groups A and D have Auto Failback

  enabled with a timeout value of 60 seconds.

  -

  Traffic Groups A and D have Auto Fallback enabled with a timeout value of 60 seconds. Both LTM

  devices are healthy and able to pass traffic for any Traffic Group. LTM1 loses connectivity on interface 1.4.

  The LTM Specialists notified 60 seconds after the interface goes down.

  What is the state of the Traffic Groups on each LTM device?

  A.

  LTM1: Traffic Group C LTM2: Traffic Groups A, B, and 0

  B.

  LTM1: No Traffic Groups LTM2: Traffic Groups A, B. C, and D

  C.

  LTM1: Traffic Groups A, B, C, and D LTM2: No Traffic Groups

  D.

  LTM1: Traffic Groups B and C LTM2: Traffic Groups A and 0

  Correct Answer: B

  If the 1.4 port is down and failsafe is triggered, the whole machine will become a standby, and all Traffic Groups will be cut away, and no Traffic Group will remain.

• Question 57:

  An LTM specialist needs to create a new account with the admin role called "newadmin' and access to all

  partitions.

  Which tmsh command should be executed?

  A. create /auth user newadmin partition-access add {all-partitions {role admin }} prompt for- password.

  B. create /users newadmin partition-access add {all-partitions {role admin JJ prompt for-password.

  C. create /user newadmin partition-access add (all-partitions {role admin }} prompt- for-password.

  D. create / sys user newadmin partition-access add (all-partitions {role admin )} prompt-for- password.

  Correct Answer: A

  Examining the use of commands, the creation of user is subordinate to auth

• Question 58:

  An application is making heavy use of a large, high-quality JPEG image file. An LTM Specialist needs to enhance page load times without increasing server load. Which profile should be applied to the virtual server to perform this task?

  A. Response Adapt

  B. OneConnect

  C. FastHTTP

  D. Web Acceleration

  Correct Answer: D

• Question 59:

  The picture belongs to static content, you can configure static content cache in FS to meet this demand An LTM Specialist must configure session persistence for a highly available, highly utilized web-based application.

  *

  The following requirements are provided:

  *

  http proxy setup for security persistence information available to the HA peer in case of failover The LTM

  Specialist needs to minimize additional burden on the LTM device to the greatest extent possible.

  Which persistence profile should be used?

  A.

  Cookie insert

  B.

  Universal

  C.

  Source Address Affinity

  D.

  Destination Address Affinity

  Correct Answer: A

• Question 60:

  Four members in a server pool have similar hardware platforms. An LTM Specialist needs the load balancing method that can select the server with the fewest entries in the persistence table. Which load balancing method should the LTM Specialist use?

  A. Observed

  B. Dynamic Ratio

  C. Least Sessions

  D. Leas Connections

  Correct Answer: C