Updated Jun 18, 2023 301b Exam Dumps – PDF Questions and Testing Engine [Q112-Q135]

Rate this post

Updated Jun 18, 2023 301b Exam Dumps – PDF Questions and Testing Engine

New (2023) F5 301b Exam Dumps

The F5 301b exam covers a wide range of topics related to F5 LTM systems, including system configuration, management, and troubleshooting. The exam also covers advanced topics such as traffic management, application delivery, high availability, and security. It is a comprehensive exam that ensures that candidates are equipped with the skills and knowledge needed to maintain and troubleshoot F5 LTM systems.

NEW QUESTION 112
— Exhibit –

— Exhibit —
Refer to the exhibits.
Users are able to access the application when connecting directly to the web server but are unsuccessful when connecting to the virtual server. Return traffic bypasses the LTM device using Layer 2 nPath routing.
Which configuration change resolves this problem?

Enable a SNAT pool on the LTM device.

Disable address translation on the LTM device.

Configure a route on the web server to the client subnet.

Configure the virtual server to listen on port 80 on the LTM device.

Configure the VIP address on the loopback interface of the web server.

NEW QUESTION 113
Users in a branch office are reporting a website is always slow. No other users are experiencing the problem.
The LTM Specialist tests the website from the external VLAN along with testing the servers directly. All tests indicate normal behavior. The environment is a single HTTP virtual server on the external VLAN with a single pool containing three HTTP pool members on the internal VLAN.
Which two locations are most appropriate to collect additional protocol analyzer data? (Choose two.)

a user’s machine

the switch local to the user

the LTM device’s internal VLAN

the LTM device’s external VLAN

a user’s Active Directory authentication

NEW QUESTION 114
Which iRule will reject any connection originating from a 10.0.0.0/8 network?

when CLIENT_ACCEPTED {
set remote_ip [IP::addr [IP::remote_addr] mask 8]
switch $remote_ip {
“10.0.0.0” { reject }
“11.0.0.0” { pool pool_http1}
default { pool http_pool }
}
}

when CLIENT_ACCEPTED {
set remote_ip [IP::addr [IP::local_addr] mask 8]
switch $remote_ip {
“10.0.0.0” { reject }
“11.0.0.0” { pool pool_http1}
default { pool http_pool }
}
}

when CLIENT_ACCEPTED {
set remote_ip [IP::addr [IP::client_addr] mask 255.0.0.0]
switch $remote_ip {
“10.0.0.0” { reject }
“11.0.0.0” { pool pool_http1}
default { pool http_pool }
}
}

when CLIENT_ACCEPTED {
set remote_ip [IP::addr [IP::local_addr] mask 255.0.0.0]
switch $remote_ip {
“10.0.0.0” { reject }
“11.0.0.0” { pool pool_http1}
default { pool http_pool }
}
}

NEW QUESTION 115
— Exhibit – — Exhibit -Refer to the exhibit. A layer 2 nPath routing configuration has been deployed. A packet capture contains a client

connection packet with the following properties:
Source IP: <Virtual Server>
Destination IP: <Client A>
At which two locations could the packet capture have been taken? (Choose two.)

the network interface of web server

the DMZ interface of the Internet firewall

the internal interface of the Internet firewall

the external VLAN interface of the LTM device

NEW QUESTION 116
— Exhibit- — Exhibit –

Refer to the exhibit.
An LTM Specialist is troubleshooting an issue with an application configured on an LTM device. The application works properly when accessed directly via the servers; however, it does not work when accessed via the LTM device. The virtual server, 192.168.1.211:443, is configured to SNAT using the address 192.168.1.144 and references a pool with the member 192.168.10.80:443. The virtual server has no Client or Server SSL profiles associated.
Which configuration change will allow the application to function through the virtual server?

Change pool member port to 8443.

Change virtual server port to 8443.

Add SSL off-loading to the pool member.

Add Client and Server SSL profiles to the virtual server.

NEW QUESTION 117
An FTP monitor is NOT working correctly.
Which three pieces of information does the LTM Specialist need to provide to ensure a properly working FTP monitor? (Choose three.)

alias

File path

username

password

FTP server port

FTP server IP address

NEW QUESTION 118
— Exhibit –

— Exhibit —
Refer to the exhibits.
An LTM Specialist is troubleshooting an issue with one of the virtual servers on an LTM device, and all requests are receiving errors. Testing directly against the server generates no errors. The LTM Specialist has captured the request and response on both client and server sides of the LTM device.
What should the LTM Specialist do to fix this issue?

Remove “header-erase Host” in http profile.

Configure SNAT Automap on the virtual server.

Assign OneConnect profile to the virtual server.

Set “redirect-rewrite” to “selective” in http profile.

NEW QUESTION 119
— Exhibit-

— Exhibit –
Refer to the exhibit.
An LTM Specialist is performing an HTTP trace on the client side of the LTM device and notices there are many undesired headers being sent by the server in the response. The LTM Specialist wants to remove all response headers except “Set-Cookie” and “Location.”
How should the LTM Specialist modify the HTTP profile to remove undesired headers from the HTTP response?

Enter the desired header names in the ‘Request Header Insert’ field.

Enter the undesired header names in the ‘Request Header Erase’ field.

Enter the undesired header names in the ‘Response Header Erase’ field.

Enter the desired header names in the ‘Response Headers Allowed’ field.

NEW QUESTION 120
— Exhibit –

— Exhibit –
Refer to the exhibit.
A company uses a complex piece of client software that connects to one or more virtual servers (VS) hosted on an LTM device. The client software is experiencing issues. An LTM Specialist is tasked with finding the cause of the problem.
The LTM Specialist has the tcpdump extract and knows the client software has at least one connection to a VS on port 1990. However, when a tcpdump runs on the internal VLAN, there is no record of port 1990 in the tcpdump.
Why is there no record of port 1990 in the tcpdump?

The LTM device drops the connection.

Port 1990 is a well-known port, so its use is restricted.

The LTM device performs a Port Address Translation (PAT).

The LTM device performs a Network Address Translation (NAT).

Explanation:
— Exhibit –

— Exhibit -Refer to the exhibit. A company uses a complex piece of client software that connects to one or more virtual servers
hosted on an LTM device. The client software is experiencing issues. An LTM Specialist must determine the cause of the problem.
The LTM Specialist has the tcpdump extract and knows the client source IP is 168.210.232.5. Assuming no wildcard virtual servers, how many distinct virtual servers does the client connect to on the LTM device?
A.2
B.3
C.4
D.6

NEW QUESTION 121
An active/standby pair of LTM devices deployed with network failover are working as desired. After external personnel perform maintenance on the network, the LTM devices are active/active rather than active/standby. No changes were made on the LTM devices during the network maintenance.
Which two actions would help determine the cause of the malfunction? (Choose two.)

checking that the configurations are synchronized

checking the configuration of the VLAN used for failover

checking the configuration of the VLAN used for mirroring

checking the open ports in firewalls between the LTM devices

checking synchronization of system clocks among the network devices

NEW QUESTION 122
Users are experiencing low throughput when downloading large files over a high-speed WAN connection.
Extensive packet loss was found to be an issue but CANNOT be eliminated.
Which two TCP profile settings should be modified to compensate for the packet loss in the network? (Choose two.)

slow start

proxy options

proxy buffer low

proxy buffer high

Nagle’s algorithm

NEW QUESTION 123
— Exhibit –

— Exhibit -Refer to the exhibit.
A web application is configured to allow sessions to continue even after a user computer is shut down for the night. A new LTM device is configured to load balance the web application to several servers. The application owner reports that application users are logged out of the web application whenever their browser is restarted or computer is rebooted.
What is the problem?

The virtual server does NOT have persistence configured.

The virtual server does NOT have persistence mirroring configured.

The cookie set by the LTM device does NOT have an “Expires” value.

The cookie set by the server is NOT being passed to client by the LTM device.

NEW QUESTION 124
— Exhibit –

— Exhibit -Refer to the exhibit.
An administrator created a monitor to a pool member web server, which resulted in a pool member that is marked red. The administrator knows the web server is working when it is accessed from another computer.
What should the administrator do to correct the problem?

Change the default gateway on the server.

Create a SNAT in the LTM device configuration.

Change the route to the client in the LTM configuration.

Change the username and/or password on the monitor.

NEW QUESTION 125
An LTM Specialist is troubleshooting an HTTP monitor. The pool member is accessible directly through a browser, but the HTTP monitor is marking the pool member as down.
GET / HTTP/1.1
HTTP/1.1 400 Bad Request DatE. Tue, 23 Oct 2012 21:39:07 GTM Server: Apache/2.2.22 (FreeBSD) PHP/5.4.4 mod_ssl/2.2.22 OpenSSL/0.9.8q DAV/2 Content-LengtH. 226 Connection: close Content-TypE. text/html; charset=iso-8859-1
How should the LTM Specialist resolve this issue?

Add ‘200 OK’ to the monitor’s receive string.

Add ‘Connection: closern’ to the monitor’s send string.

Change the interval on the monitor from 5 seconds to 30 seconds.

Change the HTTP version in the send string from HTTP/1.1 to HTTP/1.0.

NEW QUESTION 126
An application is configured on an LTM device:
Virtual server: 10.0.0.1:80 (VLAN vlan301)
SNAT IP: 10.0.0.1
Pool members: 10.0.1.1:8080, 10.0.1.2:8080, 10.0.1.3:8080 (VLAN vlan302) Which packet capture should the LTM Specialist perform on the LTM device command line interface to capture only server traffic specifically for this application?

tcpdump -ni 0.0:nnn -s 0 ‘host 10.0.0.1’ -w /var/tmp/trace.cap

tcpdump -ni vlan301 -s 0 ‘port 80 and host 10.0.0.1’ -w /var/tmp/trace.cap

tcpdump -ni vlan302 -s 0 ‘port 8080 and (host 10.0.1.1 or host 10.0.1.2 or host 10.0.1.3)’ -w /var/tmp/ trace.cap

tcpdump -ni 0.0:nnn -s 0 ‘(port 80 and host 10.0.0.1) or (port 8080 and host 10.0.1.1 or host 10.0.1.2 or host 10.0.1.3)’ -w /var/tmp/trace.cap

NEW QUESTION 127
An LTM Specialist needs to rewrite text within an HTML response from a web server. A client is sending the following HTTP request:
GET / HTTP/1.1
Host: www.example.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:16.0) Gecko/20100101 Firefox/16.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-LanguagE. en-US,en;q=0.5 Accept-EncodinG. gzip, deflate Cache-Control: no-cache Connection: keep-alive CookiE. somecookie=1 HTTP/1.1 200 OK Server: Apache/2.2.15 (Unix) Last-ModifieD. Wed, 12 Aug 2009 00:00:30 GMT Accept-Ranges: bytes Content-LengtH. 1063 X-Cnection: close Content-TypE. text/html; charset=UTF-8 Vary: Accept-Encoding Content-EncodinG. gzip Connection: Keep-Alive Although a stream profile has been added to the virtual server, the content within the HTTP response is NOT being matched and therefore NOT modified.
Which header field is contributing to the issue?

HTTP Method

Cookie content

User-Agent Value

Accept-Encoding header

NEW QUESTION 128
— Exhibit –

— Exhibit –
Refer to the exhibit.
An LTM Specialist is troubleshooting a sync-failover group of three BIG-IP LTM devices. The command used is “tmsh run cm watch-devicegroup-device.”
What does the output mean?

Configuration is synchronized between all the devices.

Configuration is not synchronized. Some modifications have been done on bigipA.

Configuration is not synchronized. Some modifications have been done on bigipB.

Configuration is not synchronized. Some modifications have been done on bigipC.

NEW QUESTION 129
There is a fault with an LTM device load balanced trading application that resides on directly connected VLAN vlan-301. The application virtual server is 10.0.0.1:80 with trading application backend servers on subnet
192.168.0.0/25. The LTM Specialist wants to save a packet capture with complete payload for external analysis.
Which command should the LTM Specialist execute on the LTM device command line interface?

tcpdump -vvv -w /var/tmp/trace.cap ‘net 192.168.0.0/25’

tcpdump -vvv -s 0 -w /var/tmp/trace.cap ‘net 192.168.0.0/25’

tcpdump -vvv -nni vlan-301 -w /var/tmp/trace.cap ‘net 192.168.0.0/25’

tcpdump -vvv -s 0 -nni vlan-301 -w /var/tmp/trace.cap ‘net 192.168.0.0/25’

NEW QUESTION 130
The following decoded TCPDump capture shows the trace of a failing health monitor.
00:00:13.245104 IP 10.29.29.60.51947 > 10.0.0.12.http: P 1:59(58) ack 1 win 46 <nop,nop,timestamp 2494782300 238063789> out slot1/tmm3 lis=
0x0000: 4500 006e 3b19 4000 4006 ce0c 0a1d 1d3c E..n;.@.@……<
0x0010: 0a00 000c caeb 0050 8be5 aca3 dd65 e3e1 …….P…..e..
0x0020: 8018 002e 1b41 0000 0101 080a 94b3 5b5c …..A……..[
0x0030: 0e30 90ad 4745 5420 2f74 6573 745f 7061 .0..GET./test_pa
0x0040: 6765 2e68 746d 6c20 4854 5450 312e 310d ge.html.HTTP1.1.
0x0050: 0a48 6f73 743a 200d 0a43 6f6e 6e65 6374 .Host:…Connect
0x0060: 696f 6e3a 2043 6c6f 7365 0d0a 0d0a 0105 ion:.Close……
0x0070: 0100 0003 00 ….. 00:00:13.245284 IP 10.0.0.12.http > 10.29.29.60.51947: . ack 59 win 362 <nop,nop,timestamp 238063789 2494782300> in slot1/tmm3 lis=
0x0000 0ffd 0800 4500 00c9 6f68 4000 8006 755d ….E…oh@…u]
0x0010 0a29 0015 0a29 0103 0050 e0d6 4929 90eb .)…)…P..I)..
0x0020 6f12 d83c 8019 fab3 9b31 0000 0101 080a o..<…..1……
0x0030 0068 4e10 5240 6150 4854 5450 2f31 2e31 .hN.R@aPHTTP/1.1
0x0040 2034 3030 2042 6164 2052 6571 7565 7374 .400.Bad.Request
0x0050 0d0a 436f 6e74 656e 742d 5479 7065 3a20 ..Content-Type:.
0x0060 7465 7874 2f68 746d 6c0d 0a44 6174 653a text/html..Date:
0x0070 2054 6875 2c20 3231 204a 616e 2032 3031 .Mon,.01.Jan.201
0x0080 3020 3138 3a35 383a 3537 2047 4d54 0d0a 2.00:00:01.GMT..
0x0090 436f 6e6e 6563 7469 6f6e 3a20 636c 6f73 Connection:.clos
0x00a0 650d 0a43 6f6e 7465 6e74 2d4c 656e 6774 e..Content-Lengt
0x00b0 683a 2032 300d 0a0d 0a3c 6831 3e42 6164 h:.20….<h1>Bad
0x00c0 2052 6571 7565 7374 3c2f 6831 3e .Request</h1>
The health monitor is sending the string shown in the capture; however, the server response is NOT as expected. The correct response should be an HTML page including the string ‘SERVER IS UP’.
What is the issue?

The /test_page.html does NOT exist on the web server.

Incorrect syntax in send string. ‘HTTP1.1’ should be ‘HTTP/1.1’.

Incorrect syntax in send string. ‘Connection: Close’ should be ‘Connection: Open’.

The wrong HTTP version is specified in the send string. Version 1.2 should be used instead of version 1.1.

NEW QUESTION 131
A failover event is recorded in the log messages:
Jan 01 00:00:50 BIG-IP notice sod[5855]: 01140029:5: HA proc_running tmm fails action is go offline and down links.
Jan 01 00:00:50 BIG-IP notice sod[5855]: 010c0050:5: Sod requests links down.
Jan 01 00:00:50 BIG-IP notice sod[5855]: 010c0054:5: Offline for traffic group /Common/traffic-group-1.
Jan 01 00:00:50 BIG-IP notice sod[5855]: 010c003e:5: Offline
Jan 01 00:00:50 BIG-IP notice logger: /usr/bin/tmipsecd –tmmcount 4 ==> /usr/bin/bigstart stop racoon Jan 01 00:00:50 BIG-IP info lacpd[5502]: 01160016:6: Failover event detected. (Switchboard failsafe disabled while offline)
Jan 01 00:00:51 BIG-IP err bcm56xxd[5296]: 012c0010:3: Failover event detected. Marking external interfaces down. bsx.c(3633)
Jan 01 00:00:51 BIG-IP info bcm56xxd[5296]: 012c0015:6: Link: 1.1 is DOWN Jan 01 00:00:56 BIG-IP notice mcpd[5318]: 0107143c:5: Connection to CMI peer 10.0.0.3 has been removed
Jan 01 00:00:56 BIG-IP notice mcpd[5318]: 0107143a:5: CMI reconnect timer: enabled Jan 01 00:00:56 BIG-IP notice mcpd[5318]: 01071431:5: Attempting to connect to CMI peer 10.0.0.3 port
6699
What is the cause of the failover?

TMM failed, and VLAN fail-safe initiated the failover.

TMM failed, and system fail-safe initiated the failover.

Loss of connection to CMI peer 10.0.0.3 initiated the failover.

A switchboard failure caused system fail-safe to initiate the failover.

NEW QUESTION 132
A failover event is recorded in the following log messages:
Jan 01 00:56:56 BIG-IP notice mcpd[5318]: 01070727:5: Pool /Common/my-pool member /Common/10.0.0.10:80 monitor status down.
Jan 01 00:56:56 BIG-IP notice sod[5855]: 010c0045:5: Leaving active, group score 10 peer group score 20.
Jan 01 00:56:56 BIG-IP notice sod[5855]: 010c0052:5: Standby for traffic group /Common/traffic-group-1.
Jan 01 00:56:56 BIG-IP notice sod[5855]: 010c0018:5: Standby
Jan 01 00:57:06 BIG-IP notice logger: /usr/bin/tmipsecd –tmmcount 4 ==> /usr/bin/bigstart stop racoon
What is the cause of the failover?

The HA group score changed.

No traffic is seen on traffic-group-1.

The peer device left the traffic group.

The racoon service stopped responding.

NEW QUESTION 133
An LTM Specialist has been asked to configure a virtual server to distribute connections between a pool of two application servers with addresses 172.16.20.1 and 172.16.20.2. The application servers are listening on TCP ports 80 and 443. The application administrators have asked that clients be directed to the same node for both HTTP and HTTPS requests within the same session.
Virtual servers vs_http and vs_https have been created, listening on 1.2.3.100:80 and 1.2.3.100:443, respectively.
Which configuration option will result in the desired behavior?

Create pool app_pool with members 172.16.20.1:any and 172.16.20.2:any Assign app_pool as the default pool for both vs_http and vs_https Disable port translation for vs_http and vs_https

Create pool http_pool with members 172.16.20.1:80 and 172.16.20.2:80 Assign pool http_pool as the default pool for both vs_https and vs_https Disable port translation for vs_https Create an SSL persistence profile with “match across virtual servers” enabled Assign the persistence profile to vs_http.

Create pool http_pool with members 172.16.20.1:80 and 172.16.20.2:80 Create pool https_pool with members 172.16.20.1:443 and 172.16.20.2:443 Assign http_pool as the default pool for vs_http Assign https_pool as the default pool for vs_https Create a source address persistence profile with “match across services” enabled Assign the persistence profile to vs_http and vs_https

Create pool http_pool with members 172.16.20.1:80 and 172.16.20.2:80 Create pool https_pool with members 172.16.20.1:443 and 172.16.20.2:443 Assign http_pool as the default pool for vs_http Assign https_pool as the default pool for vs_https Create an SSL persistence profile with “match across virtual servers” enabled Assign the persistence profile to vs_http

NEW QUESTION 134
— Exhibit –

— Exhibit —
Refer to the exhibit.
An LTM Specialist is reviewing the virtual server configuration on an LTM device.
Which two actions should the LTM Specialist perform to minimize the virtual server configuration? (Choose two.)

Remove ‘snat automap’ from the virtual server.

Remove the ‘http’ profile from the virtual server.

Remove the ‘default_class’ from the virtual server.

Combine ‘acct_class’ and ‘marketing_class’ into one class and update associations on the virtual server.

Combine ‘marketing_class’ and ‘default_class’ into one class and update associations on the virtual server.

NEW QUESTION 135
An LTM Specialist is troubleshooting virtual server 10.0.0.1:443 residing on VLAN vlan301. The web application is accessed via www.example.com. The LTM Specialist wants to save a packet capture with complete decrypted payload for external analysis.
Which command should the LTM Specialist execute on the LTM device command line interface?

tcpdump -vvv -s 0 ‘host 10.0.0.1 and port 443’ -w /var/tmp/trace.cap

tcpdump -vvv -s 0 -ni vlan301 ‘host 10.0.0.1 and port 443’ -w /var/tmp/trace.cap

ssldump -Aed -k /config/filestore/files_d/Common_d/certificate_key_d/:Common:www.example.com.key_1
> /var/tmp/trace.cap

ssldump -Aed -ni vlan301 -k /config/filestore/files_d/Common_d/certificate_key_d/
:Common:www.example.com.key_1 > /var/tmp/trace.cap

The F5 301b exam is a highly respected certification in the IT industry, and it is recognized by many organizations and employers worldwide. The certification is a testament to a candidate’s expertise in F5 LTM systems maintenance and troubleshooting, and it can lead to better job opportunities and higher salaries. Moreover, the certification is valid for two years, after which candidates must recertify to maintain their certification status.

Updated Verified Pass 301b Exam – Real Questions and Answers: https://www.examstorrent.com/301b-exam-dumps-torrent.html

admin

You May Also Like

Leave a Reply Cancel reply