F5 301b 問題集

質問 1：
Given the iRule:
when HTTP_REQUEST {
if {([HTTP::username] ne "") and ([HTTP::password] ne "") } {
log local0. "client ip [IP::remote_addr] credentials provided [HTTP::username] [HTTP::password]"}
else {
pool old_application_pool
}
}
The associated virtual server has a default pool named new_application_pool.
Which functionality does the iRule provide?
A. Allows clients with credentials to access the old_application_pool and logs the attempted access of clients with credentials to the new_application_pool.
B. Allows clients without credentials to access the old_application_pool and logs the attempted access of clients without credentials to the new_application_pool.
C. Allows clients with credentials to access the old_application_pool and logs the access of clients without credentials to the new_application_pool.
D. Allows clients without credentials to access the old_application_pool and logs the access of clients with credentials to the new_application_pool.
正解：D

質問 2：
A failover event is recorded in the following log messages:
Jan 01 00:56:56 BIG-IP notice mcpd[5318]: 01070727:5: Pool /Common/my-pool member /Common/10.0.0.10:80 monitor status down.
Jan 01 00:56:56 BIG-IP notice sod[5855]: 010c0045:5: Leaving active, group score 10 peer group score 20.
Jan 01 00:56:56 BIG-IP notice sod[5855]: 010c0052:5: Standby for traffic group /Common/traffic-group-1.
Jan 01 00:56:56 BIG-IP notice sod[5855]: 010c0018:5: Standby
Jan 01 00:57:06 BIG-IP notice logger: /usr/bin/tmipsecd --tmmcount 4 ==> /usr/bin/bigstart stop racoon
What is the cause of the failover?
A. The HA group score changed.
B. The peer device left the traffic group.
C. The racoon service stopped responding.
D. No traffic is seen on traffic-group-1.
正解：A

質問 3：
-- Exhibit-

-- Exhibit -
Refer to the exhibit.
Which profile could be removed or changed on this virtual server to reduce CPU load on the LTM device without increasing server side bandwidth usage?
A. http
B. httpcompression
C. tcp
D. optimized-caching
正解：B

質問 4：
-- Exhibit-

-- Exhibit --
Refer to the exhibit.
The virtual server is listening on port 443.
What is the solution to the problem?
A. Add an SSL Client profile to the existing virtual server.
B. Modify the virtual server HTTP Profile to 'Redirect RewritE.All'.
C. Modify the virtual server HTTP Profile to 'Redirect RewritE.Matching'.
D. Modify the virtual server TCP profile to disable Nagle's Algorithm.
正解：B

質問 5：
An LTM Specialist is troubleshooting virtual server 10.0.0.1:443 residing on VLAN vlan301. The web application is accessed via www.example.com. The LTM Specialist wants to save a packet capture with complete decrypted payload for external analysis.
Which command should the LTM Specialist execute on the LTM device command line interface?
A. ssldump -Aed -ni vlan301 -k /config/filestore/files_d/Common_d/certificate_key_d/:Common:www.example.com.key_1 > /var/tmp/trace.cap
B. ssldump -Aed -k /config/filestore/files_d/Common_d/certificate_key_d/:Common:www.example.com.key_1 > /var/tmp/trace.cap
C. tcpdump -vvv -s 0 -ni vlan301 'host 10.0.0.1 and port 443' -w /var/tmp/trace.cap
D. tcpdump -vvv -s 0 'host 10.0.0.1 and port 443' -w /var/tmp/trace.cap
正解：A

質問 6：
An LTM Specialist receives a request to monitor the network path through a member, but NOT the member itself.
Which monitor option should the LTM Specialist enable or configure?
A. Alias address
B. Reverse
C. Transparent
D. Time until up
E. Up interval
正解：C

質問 7：
Which iRule will reject any connection originating from a 10.0.0.0/8 network?
A. when CLIENT_ACCEPTED {
set remote_ip [IP::addr [IP::client_addr] mask 255.0.0.0]
switch $remote_ip {
"10.0.0.0" { reject }
"11.0.0.0" { pool pool_http1}
default { pool http_pool }
}
}
B. when CLIENT_ACCEPTED {
set remote_ip [IP::addr [IP::local_addr] mask 255.0.0.0]
switch $remote_ip {
"10.0.0.0" { reject }
"11.0.0.0" { pool pool_http1}
default { pool http_pool }
}
}
C. when CLIENT_ACCEPTED {
set remote_ip [IP::addr [IP::local_addr] mask 8]
switch $remote_ip {
"10.0.0.0" { reject }
"11.0.0.0" { pool pool_http1}
default { pool http_pool }
}
}
D. when CLIENT_ACCEPTED {
set remote_ip [IP::addr [IP::remote_addr] mask 8]
switch $remote_ip {
"10.0.0.0" { reject }
"11.0.0.0" { pool pool_http1}
default { pool http_pool }
}
}
正解：A

質問 8：
Users in a branch office are reporting a website is always slow. No other users are experiencing the problem. The LTM Specialist tests the website from the external VLAN along with testing the servers directly. All tests indicate normal behavior. The environment is a single HTTP virtual server on the external VLAN with a single pool containing three HTTP pool members on the internal VLAN.
Which two locations are most appropriate to collect additional protocol analyzer data? (Choose two.)
A. the LTM device's external VLAN
B. the LTM device's internal VLAN
C. a user's Active Directory authentication
D. the switch local to the user
E. a user's machine
正解：D,E

質問 9：
An F5 LTM Specialist needs to perform an LTM device configuration backup prior to RMA swap.
Which command should be executed on the command line interface to create a backup?
A. bigpipe config save /var/tmp/backup.ucs
B. tmsh save /sys config ucs /var/tmp/backup.ucs
C. tmsh save /sys config /var/tmp/backup.ucs
D. tmsh save /sys ucs /var/tmp/backup.ucs
正解：D