[Q119-Q142] 301b Exam Brain Dumps – Study Notes and Theory [Apr-2023]

Rate this post

301b Exam Brain Dumps – Study Notes and Theory [Apr-2023]

100% Guaranteed Results 301b Unlimited 210 Questions

The F5 301b exam measures the candidate’s knowledge of the F5 LTM platform, including its architecture, protocols, and functionality. The exam also tests the candidate’s ability to install, configure, maintain, and troubleshoot F5 LTM products. Candidates must have a solid understanding of networking protocols, including TCP/IP, HTTP, and SSL/TLS, as well as a strong background in network security.

The F5 301b exam, also known as LTM Specialist: Maintaining and Troubleshooting, is an advanced certification test designed for professionals who work with F5 networks. This exam is one of the essential tests that F5 offers, and it is intended for network engineers, system administrators, and other IT professionals interested in becoming F5 specialists.

Exam Domains Overview

301B exam is based on three domains and tries to testify candidate’s knowledge on various topics, including the following:

Troubleshoot basic performance issues
The last section assesses if the test-taker is aware of LTM device logs issues, can find what can cause them, and what are the ways to construct a viable solution. Other skills needed include the ability to find out why LTM device failover problems arise as well as high availability and/or sync failure. Finally, applicants should know how to interpret log file messages, and more.
Troubleshoot basic hardware issues
As the title suggests, the second module is dedicated to the key issues and some of the most common ways to deal with them. This part of the outline is quite extensive and consists of 15 sub-domains. By going through all of them, the applicants will learn more about what all it takes to determine which iRule to use to resolve an application issue, the iRule functionality, how to correctly interpret the AVR information for defining performance issues as well as the LTM device misconfiguration, and how to choose the appropriate HTTP/HTTPS application headers.

Finding out the HTTP/HTTPS application errors & their solutions, comparing the traces to determine the root cause of an HTTP/HTTPS application problem and the best way to resolve it, finding out the right protocol analyzer tool, and identifying from where to gather the protocol analyzer data are also covered well in this exam domain along with the topic such as how to define monitor issues and solutions for them.
Maintain Application and LTM Device Health
This first section intends to check how the candidate determines the appropriate profile setting modifications in a given scenario along with sub-set of an LTM configuration, LTM device statistics, finding out the appropriate upgrade and recovery steps, ways to minimize application outages, benefits of custom alerting, and setting up custom alerts.

AVR alerting capabilities, vCMP environment upgrading, SCF and UCS files, performance statistics, and buffer settings in the TCP profile are some of the skills included in this exam domain.

Q119. — Exhibit –

— Exhibit —
Refer to the exhibit.
A client attempts to connect from a Google Chrome browser to a virtual server on a BIG-IP LTM.
The virtual server is SSL Offloaded. When the client connects, the client receives an SSL error.
The client receives the same errors when trying Mozilla Firefox and Internet Explorer browsers. The LTM Specialist does an ssldump on the virtual server and receives the results as per the exhibit.
How should this be resolved?

Set the virtual server to listen on port 443 (HTTPS).

Upgrade the client to support the appropriate SSL cipher suite.

Select the appropriate “SSL Profile (Client)” in the virtual server settings.

Adjust the SSL key length in the SSL profile to match the minimum required by the client.

Q120. — Exhibit –

— Exhibit –
Refer to the exhibit.
An LTM Specialist is troubleshooting an issue with an application configured on an LTM device. The application works properly when accessed directly via the servers; however, it does not work when accessed via the LTM device. The virtual server, 192.168.1.211:443, is configured to SNAT using the address 192.168.1.144 and references a pool with the member 192.168.10.80:443. The virtual server has no Client or Server SSL profiles associated.
Which configuration change will allow the application to function through the virtual server?

Change pool member port to 8443.

Change virtual server port to 8443.

Add SSL off-loading to the pool member.

Add Client and Server SSL profiles to the virtual server.

Q121. An LTM device has a virtual server configured as a Performance Layer 4 virtual listening on
0.0.0.0:0 to perform routing of packets to an upstream router. The client machine at IP address 192.168.0.4 is attempting to contact a host upstream of the LTM device on IP address 10.0.0.99.
The network flow is asymmetrical, and the following TCP capture displays:
# tcpdump -nnni 0.0 ‘host 192.168.0.4 and host 10.0.0.99’
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on 0.0, link-type EN10MB (Ethernet), capture size 96 bytes
05:07:55.499954 IP 192.168.0.4.35345 > 10.0.0.99.443: S 3205656213:3205656213(0) ack 3267995082 win 1480
05:07:55.499983 IP 10.0.0.99.443 > 192.168.0.4.35345: R 1:1(0) ack 1 win 0
05:07:56.499960 IP 192.168.0.4.35345 > 10.0.0.99.443: S 3205656213:3205656213(0) ack 3267995082 win 1480
05:07:56.499990 IP 10.0.0.99.443 > 192.168.0.4.35345: R 1:1(0) ack 1 win 0
4 packets captured
Which option within the fastL4 profile needs to be enabled by the LTM Specialist to prevent the LTM device from rejecting the flow?

Loose Close

Loose Initiation

Reset on Timeout

Generate Initial Sequence Number

Q122. — Exhibit-

— Exhibit -Refer to the exhibits.
Every monitor has the same Send String, Recv String, and an Alias of *:*. The LTM Specialist simplifies the configuration to minimize the number of monitors.
How many unique monitors remain?

Q123. An LTM Specialist is running the following packet capture on an LTM device:
ssldump -Aed -ni vlan301 ‘port 443’
Which two SSL record message details will the ssldump utility display by default? (Choose two.)

HTTP Version

User-Agent

ClientHello

ServerHello

Issuer

Q124. A virtual server for a set of web services is constructed on an LTM device. The LTM Specialist has created an iRule and applied this iRule to the virtual server:
when HTTP_REQUEST {
switch [HTTP::uri] {
“/ws1/ws.jsp” {
log local0. “[HTTP::uri]-Redirected to JSP Pool”
pool JSP
}
default { log local0. “[HTTP::uri]-Redirected to Non-JSP Pool”
pool NonJSP
} } } However, the iRule is NOT behaving as expected. Below is a snapshot of the log: /WS1/ws.jsp-Redirected to JSP Pool /WS1/ws.jsp-Redirected to JSP Pool /WS1/ws.jsp-Redirected to JSP Pool /WS1/WS.jsp-Redirected to Non-JSP Pool /ws1/WS.jsp-Redirected to Non-JSP Pool /WS1/ws.jsp-Redirected to JSP Pool /ws1/ws.jsp-Redirected to Non-JSP Pool
What should the LTM Specialist do to resolve this?

Use the followinG.switch -lc [HTTP::uri]

Use the followinG.switch [string tolower [HTTP::uri]]

Set the “Case Sensitivity” option of each member to “None”.

Select the “Process Case-Insensitivity” option for the virtual server.

Q125. — Exhibit – — Exhibit –

Refer to the exhibit.
An LTM Specialist is troubleshooting a new HTTP monitor on a pool. The pool member is functioning correctly when accessed directly through a browser, although the monitor is marking the member as down. As part of the troubleshooting, the LTM Specialist has captured the monitor traffic via tcpdump.
How should the LTM Specialist resolve this issue?

Add the ‘http’ monitor to the pool.

Add the ‘icmp’ monitor to the node.

Modify the receive string to valid content.

Correct the firewall rules on the pool member.

Q126. An LTM Specialist has a OneConnect profile and HTTP profile configured on a virtual server to load balance an HTTP application.
The following HTTP headers are seen in a network trace when a client connects to the virtual server:
Clientside:
GET / HTTP/1.1
Host: 192.168.136.100
User-Agent: Mozilla/5.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-EncodinG. gzip, deflate
Connection: keep-alive
Serverside:
HTTP/1.1 200 OK
DatE. 5 Jun 1989 17:06:55 GMT
Server: Apache/2.2.14 (Ubuntu)
Vary: Accept-Encoding
Content-EncodinG. gzip
Content-LengtH. 3729
X-Cnection: close
Content-TypE. text/html
The LTM Specialist notices the OneConnect feature is working incorrectly.
Why is OneConnect functioning incorrectly?

Client must support HTTP/1.0.

Client must support HTTP keep-alive.

Server must support HTTP/0.9.

Server must support HTTP keep-alive.

Q127. — Exhibit –

— Exhibit —
Refer to the exhibit.
An LTM Specialist is upgrading the LTM devices.
Which device should be upgraded first?

Device A

Device B

Device C

Device D

Q128. The output of a tmsh command is: ———————————————————— Net::Interface Name Status Bits Bits Errs Errs Drops Drops Colli In Out In Out In Out sions
———————————————————— 1.1 down 0 0 0 0 0 0 0 1.2 up 191.4K 0 0 0 374 0 0 1.3 down 0 0
0 0 0 0 0 1.4 up 22.5K 0 0 0 44 0 0 2.1 miss 0 0 0 0 0 0 0 2.2 miss 0 0 0 0 0 0 0 mgmt up 43.2G 160.0G 0 0 0 0
0
Which command was executed on the LTM device to show the output?

tmsh show /net interface

tmsh /net show interface status

tmsh /net show interface

tmsh show /net interface status

Q129. — Exhibit –

— Exhibit —
Refer to the exhibit.
An LTM Specialist has uploaded a qkview to F5 iHealth.
Within the GUI, what is the correct procedure to comply with the recommendation shown in the exhibit?

Obtain product version image from release.f5.com.
Overwrite existing image with new product version image.
Select product version image and click Install.
Select the available disk and volume set name.

Obtain product version image from images.f5.com.
Overwrite existing image with new product version image.
Select product version image and click Install.
Select the available disk and volume set name.

Obtain product version image from downloads.f5.com.
Import product version image.
Install image onto BIG-IP platform.
Select product version image and click Install.
Select the available disk and volume set name.

Log a call requesting the product version image via websupport.f5.com Import product version image.
Install image onto BIG-IP platform.
Select product version image and click Install.
Select the available disk and volume set name.

Q130. — Exhibit –

— Exhibit —
Refer to the exhibits.
After upgrading LTM from v10 to v11, users are unable to connect to an application. The virtual server is using a client SSL profile for re-terminating SSL for payload inspection, but a server SSL profile is being used to re-encrypt the request.
A client side ssldump did NOT show any differences between the traffic going directly to the server and the traffic being processed by the LTM device. However, packet capture was done on the server, and differences were noted.
Which modification will allow the LTM device to process the traffic correctly?

Enable Strict Resume.

Change Secure Renegotiation to “Request.”

Enable ProxySSL option in the server SSL profile.

Change to different ciphers on the server SSL profile.

Q131. — Exhibit-

— Exhibit –
Refer to the exhibits.
An LTM Specialist is troubleshooting an application configured on an LTM device on a one-armed configuration. The application is NOT working through the LTM device but does work when accessed directly via the application servers. The virtual server
192.168.1.211:443 is configured to SNAT using the address 192.168.1.144 and references a pool with the member 192.168.10.80:443. No Client or Server SSL profiles are associated. The LTM Specialist has collected two traffic captures to help determine the issue.
What is the problem with the configuration on the LTM device?

Pool member is configured to use wrong port.

Pool member is configured for SSL off-loading.

Virtual server is configured to use wrong port.

Virtual server is configured without SSL Profiles.

Q132. The LTM device is configured to provide load balancing to a set of web servers that implement access control lists (ACL) based on the source IP address of the client. The ACL is at the network level and the web server is configured to send a TCP reset back to the client if it is NOT permitted to connect.
The virtual server is configured with the default OneConnect profile.
The ACL is defined on the web server as:
Permit: 192.168.136.0/24 Deny: 192.168.116.0/24
The packet capture is taken of two individual client flows to a virtual server with IP address
192.168.136.100.
Client A – Src IP 192.168.136.1 – Virtual Server 192.168.136.100:
Clientside:
09:35:11.073623 IP 192.168.136.1.55684 > 192.168.136.100.80: S 869998901:869998901(0) win
8192 <mss 1460,nop,wscale 2,nop,nop,sackOK>
09:35:11.073931 IP 192.168.136.100.80 > 192.168.136.1.55684: S 2273668949:2273668949(0)
ack 869998902 win 4380 <mss 1460,nop,wscale 0,sackOK,eol>
09:35:11.074928 IP 192.168.136.1.55684 > 192.168.136.100.80: . ack 1 win 16425 09:35:11.080936 IP 192.168.136.1.55684 > 192.168.136.100.80: P 1:299(298) ack 1 win 16425 09:35:11.081029 IP 192.168.136.100.80 > 192.168.136.1.55684: . ack 299 win 4678
Serverside:
09:35:11.081022 IP 192.168.136.1.55684 > 192.168.116.128.80: S 685865802:685865802(0) win
4380 <mss 1460,nop,wscale 0,sackOK,eol>
09:35:11.081928 IP 192.168.116.128.80 > 192.168.136.1.55684: S 4193259095:4193259095(0)
ack 685865803 win 5840 <mss 1460,nop,nop,sackOK,nop,wscale 6>
09:35:11.081943 IP 192.168.136.1.55684 > 192.168.116.128.80: . ack 1 win 4380 09:35:11.081955 IP 192.168.136.1.55684 > 192.168.116.128.80: P 1:299(298) ack 1 win 4380 09:35:11.083765 IP 192.168.116.128.80 > 192.168.136.1.55684: . ack 299 win 108
Client B – Src IP 192.168.116.1 – Virtual Server 192.168.136.100:
Clientside:
09:36:11.244040 IP 192.168.116.1.55769 > 192.168.136.100.80: S 3320618938:3320618938(0)
win 8192 <mss 1460,nop,wscale 2,nop,nop,sackOK>
09:36:11.244152 IP 192.168.136.100.80 > 192.168.116.1.55769: S 3878120666:3878120666(0)
ack 3320618939 win 4380 <mss 1460,nop,wscale 0,sackOK,eol>
09:36:11.244839 IP 192.168.116.1.55769 > 192.168.136.100.80: . ack 1 win 16425 09:36:11.245830 IP 192.168.116.1.55769 > 192.168.136.100.80: P 1:299(298) ack 1 win 16425 09:36:11.245922 IP 192.168.136.100.80 > 192.168.116.1.55769: . ack 299 win 4678
Serverside:
09:36:11.245940 IP 192.168.136.1.55684 > 192.168.116.128.80: P 599:897(298) ack 4525 win 09:36:11.247847 IP 192.168.116.128.80 > 192.168.136.1.55684: P 4525:5001(476) ack 897 win
Why was the second client flow permitted by the web server?

A global SNAT is defined.

SNAT automap was enabled on the virtual server.

The idle TCP session from the first client was re-used.

A source address persistence profile is assigned to the virtual server.

Q133. An LTM Specialist is customizing local traffic logging.
Which traffic management OS alert level provides the most detail?

Alert

Notice

Critical

Emergency

Informational

Q134. A high-availability (HA) pair configuration uses only the hardwire serial cable connection to determine device state. A power outage occurs to the PDU powering the active unit. The standby unit takes over the active role as expected.
How is the peer unit able to determine the active unit is unavailable?

voltage loss on serial cable

no data stream received on serial port

no response on management interface

no heartbeat packets received on self IPs

Q135. A device group is made up of four members: LTM-A, LTM-B, LTM-C, and LTM-D. An LTM Specialist makes a configuration change on LTM-B. Later, a different LTM Specialist notices a “changes pending” message on all devices. When logged into LTM-D, the LTM Specialist attempts to config-sync to the device group. The sync operation fails.
Why is the LTM Specialist on LTM-D unable to synchronize the configuration to the group?

The changes made on LTM-B are invalid.

LTM-D has the lowest commit-id of the group.

NTP is NOT configured on the devices in the group.

LTM-B is the device eligible to initiate a config-sync.

Q136. An LTM Specialist loads a UCS file generated on a different LTM device and receives the following error message:
“mcpd[2395]: 01070608:0: License is not operational (expired or digital signature does not match contents)” Which command should the LTM Specialist use to prevent the error?

tmsh show /sys license

tmsh show /sys hardware

bigpipe config save /config.ucs

tmsh load /sys /ucs rma <path/to/UCS>

tmsh load /sys ucs <path/to/UCS> no-license

Q137. The LTM device is configured to provide load balancing to a set of web servers that implement access control lists (ACL) based on the source IP address of the client. The ACL is at the networklevel and the web server is configured to send a TCP reset back to the client if it is NOT permitted to connect.
The virtual server is configured with the default OneConnect profile.
The ACL is defined on the web server as:
Permit: 192.168.136.0/24
Deny: 192.168.116.0/24
The packet capture is taken of two individual client flows to a virtual server with IP address
192.168.136.100.
Client A – Src IP 192.168.136.1 – Virtual Server 192.168.136.100:
Clientside:
09:35:11.073623 IP 192.168.136.1.55684 > 192.168.136.100.80: S 869998901:869998901(0) win 8192 <mss 1460,nop,wscale 2,nop,nop,sackOK>
09:35:11.073931 IP 192.168.136.100.80 > 192.168.136.1.55684: S 2273668949:2273668949(0) ack 869998902 win 4380 <mss 1460,nop,wscale 0,sackOK,eol>
09:35:11.074928 IP 192.168.136.1.55684 > 192.168.136.100.80: . ack 1 win 16425
09:35:11.080936 IP 192.168.136.1.55684 > 192.168.136.100.80: P 1:299(298) ack 1 win 16425 09:35:11.081029 IP 192.168.136.100.80 > 192.168.136.1.55684: . ack 299 win 4678
Serverside:
09:35:11.081022 IP 192.168.136.1.55684 > 192.168.116.128.80: S 685865802:685865802(0) win 4380 <mss 1460,nop,wscale 0,sackOK,eol>
09:35:11.081928 IP 192.168.116.128.80 > 192.168.136.1.55684: S 4193259095:4193259095(0) ack 685865803 win 5840 <mss 1460,nop,nop,sackOK,nop,wscale 6>
09:35:11.081943 IP 192.168.136.1.55684 > 192.168.116.128.80: . ack 1 win 4380
09:35:11.081955 IP 192.168.136.1.55684 > 192.168.116.128.80: P 1:299(298) ack 1 win 4380
09:35:11.083765 IP 192.168.116.128.80 > 192.168.136.1.55684: . ack 299 win 108
Client B – Src IP 192.168.116.1 – Virtual Server 192.168.136.100:
Clientside:
09:36:11.244040 IP 192.168.116.1.55769 > 192.168.136.100.80: S 3320618938:3320618938(0) win 8192 <mss 1460,nop,wscale 2,nop,nop,sackOK>
09:36:11.244152 IP 192.168.136.100.80 > 192.168.116.1.55769: S 3878120666:3878120666(0) ack 3320618939 win 4380 <mss 1460,nop,wscale 0,sackOK,eol>
09:36:11.244839 IP 192.168.116.1.55769 > 192.168.136.100.80: . ack 1 win 16425
09:36:11.245830 IP 192.168.116.1.55769 > 192.168.136.100.80: P 1:299(298) ack 1 win 16425
09:36:11.245922 IP 192.168.136.100.80 > 192.168.116.1.55769: . ack 299 win 4678
Serverside:
09:36:11.245940 IP 192.168.136.1.55684 > 192.168.116.128.80: P 599:897(298) ack 4525 win 8904
09:36:11.247847 IP 192.168.116.128.80 > 192.168.136.1.55684: P 4525:5001(476) ack 897 win 142 Why was the second client flow permitted by the web server?

A global SNAT is defined.

SNAT automap was enabled on the virtual server.

The idle TCP session from the first client was re-used.

A source address persistence profile is assigned to the virtual server.

Q138. An LTM Specialist defines a receive string in the HTTP monitor and then assigns it to the HTTP pool. The monitor has an interval of 5 seconds and a timeout of 16 seconds.
If the receive string is NOT seen in the the HTTP payload after 20 seconds, how does the LTM device mark the monitor status?

offline

unknown

available

unavailable

forced offline

Q139. — Exhibit –

— Exhibit —
Refer to the exhibit.
Which URL should be reported to the server/application team as getting user-visible errors?

/env.cgi

/page14.cgi

/reflector.php

/browserspecific.html

Q140. The end users of a web application need to verify that their browsers received the complete message-body from the web server.
Which HTTP header will accomplish this?

Range

Expect

Accept-Ranges

Content-Length

Q141. — Exhibit-

— Exhibit —
Refer to the exhibit.
Which pool can be removed without affecting client traffic?

ftp_pool

http_pool

server1_80

server_pool

Q142. — Exhibit –

— Exhibit —
Refer to the exhibit.
An LTM Specialist is investigating reports that users are unable to perform some commands through an FTP virtual server. The LTM Specialist performs a capture on the server side of the LTM device.
What is the issue with the application?