Free 301b Exam Questions and Answers | by Exam-Dumps.net (Page: 7)

QUESTION: 31

A web application requires knowledge of the client's true IP address for logging and analysis purposes. Instances of the application that can decode X-Forwarded-For HTTP headers reside in pool_a, while pool_b instances assume the source IP is the true address of the client.
Which iRule provides the proper functionality?

when HTTP_DATA {
if {[HTTP::header exists X-Forwarded-For]}{
pool pool_a
} else {
pool pool_b
}
}
when HTTP_RESPONSE {
if {[HTTP::header exists X-Forwarded-For]}{
pool pool_a
} else {
pool pool_b
}
}
when HTTP_REQUEST {
if {[HTTP::header exists X-Forwarded-For]}{
pool pool_a
} else {
pool pool_b
}
}
when HTTP_OPEN {
if {[HTTP::header exists X-Forwarded-For]}{
pool pool_a
} else {
pool pool_b
}
}

Answer(s): C

Reveal Solution Next Question

QUESTION: 32

Which iRule will reject any connection originating from a 10.0.0.0/8 network?

when CLIENT_ACCEPTED {
set remote_ip [IP::addr [IP::remote_addr] mask 8]
switch $remote_ip {
"10.0.0.0" { reject }
"11.0.0.0" { pool pool_http1}
default { pool http_pool }
}
}
when CLIENT_ACCEPTED {
set remote_ip [IP::addr [IP::local_addr] mask 8]
switch $remote_ip {
"10.0.0.0" { reject }
"11.0.0.0" { pool pool_http1}
default { pool http_pool }
}
}
when CLIENT_ACCEPTED {
set remote_ip [IP::addr [IP::client_addr] mask 255.0.0.0] switch $remote_ip {
"10.0.0.0" { reject }
"11.0.0.0" { pool pool_http1}
default { pool http_pool }
}
}
when CLIENT_ACCEPTED {
set remote_ip [IP::addr [IP::local_addr] mask 255.0.0.0] switch $remote_ip {
"10.0.0.0" { reject }
"11.0.0.0" { pool pool_http1}
default { pool http_pool }
}
}

Answer(s): C

Reveal Solution Next Question

QUESTION: 33

There is a fault with an LTM device load balanced trading application that resides on directly connected VLAN vlan-301. The application virtual server is 10.0.0.1:80 with trading application backend servers on subnet 192.168.0.0/25. The LTM Specialist wants to save a packet capture with complete payload for external analysis.
Which command should the LTM Specialist execute on the LTM device command line interface?

tcpdump -vvv -w /var/tmp/trace.cap 'net 192.168.0.0/25'
tcpdump -vvv -s 0 -w /var/tmp/trace.cap 'net 192.168.0.0/25'
tcpdump -vvv -nni vlan-301 -w /var/tmp/trace.cap 'net 192.168.0.0/25'
tcpdump -vvv -s 0 -nni vlan-301 -w /var/tmp/trace.cap 'net 192.168.0.0/25'

Answer(s): D

Reveal Solution Next Question

QUESTION: 34

An LTM Specialist has just captured trace /var/tmp/trace.cap for site www.example.com while listening on virtual address 10.0.0.1:443 configured on partition Application A. The data payload being captured is SSL encrypted.
Which command should the LTM Specialist execute to decrypt the data payload?

ssldump -Aed -nr /var/tmp/trace.cap -k
/config/filestore/files_d/Common_d/certificate_d/:Common:www.example.com.crt_1
ssldump -Aed -nr /var/tmp/trace.cap -k
/config/filestore/files_d/Common_d/certificate_key_d/:Common:www.example.com.key_1
ssldump -Aed -nr /var/tmp/trace.cap -k
/config/filestore/files_d/ApplicationA_d/certificate_d/:ApplicationA:www.example.com.crt_1
ssldump -Aed -nr /var/tmp/trace.cap -k
/config/filestore/files_d/ApplicationA_d/certificate_key_d/:ApplicationA:www.example.com.key_1

Answer(s): B

Reveal Solution Next Question

QUESTION: 35

An LTM Specialist must perform a packet capture on a virtual server with an applied standard FastL4 profile. The virtual server 10.0.0.1:443 resides on vlan301.
Which steps should the LTM Specialist take to capture the data payload successfully while ensuring no other virtual servers are affected?

The standard FastL4 profile should have PVA acceleration disabled. Then the packet capture tcpdump -ni vlan301 should be executed on the command line interface.
The packet capture tcpdump -ni vlan301 should be executed on the command line interface.
There is no need to change profiles or PVA acceleration.
A new FastL4 profile should be created and applied to the virtual server with PVA acceleration disabled. Then the packet capture tcpdump -ni vlan301 should be executed on the command line interface.
The LTM device is under light load. The traffic should be mirrored to a dedicated sniffing device. On the sniffing device, the packet capture tcpdump -ni vlan301 should be executed.

Answer(s): C

Reveal Solution Next Question

F5 301b Exam (page: 7) F5 BIG-IP Local Traffic Manager (LTM) Specialist: Maintain & Troubleshoot Updated on: 28-Jul-2025

QUESTION: 31

QUESTION: 32

QUESTION: 33

QUESTION: 34

QUESTION: 35

F5 301b Exam (page: 7)
F5 BIG-IP Local Traffic Manager (LTM) Specialist: Maintain & Troubleshoot
Updated on: 28-Jul-2025