Try Free and Start Using Realistic Verified 301a Dumps Instantly [Q75-Q90]

Rate this post

Try Free and Start Using Realistic Verified 301a Dumps Instantly

301a Actual Questions – Instant Download 150 Questions

Exam Topics of F5 301a: BIG-IP LTM Specialist: Architect Set-Up & Deploy Exam

The following will be discussed in this section:

Differentiate between performance issue types (i.e. Latency, Congestion, broken content)
Explain how to modify user properties
Determine use cases for disabling a member
Given an HA pair, describe the appropriate strategy for deploying a new software image
Given a scenario, discuss when it is appropriate to create a UCS archive
Explain how to create a user U/A
Distinguish between disabling a member and forcing it down
Articulate the characteristics of a pool member that has been disabled or forced offline (Such as for new connections, persisted connections, etc.)
Understand how to get performance statistics in addition to the those shown in the dashboard (Overview – Performance)
Identify which modules are licensed and/or provisioned U/A
Given a situation where a pool member has been disabled but still appears to be receiving traffic, determine the cause
Determine use cases for forcing down a member
Given a description of an application, identify the correct virtual server configured for it (HTTP/HTTPS, TCP/UDP, VLANsenabled, route-domain)

NO.75 What should an LTM Specialist configure on an LTM device to send AVR notification emails?

Email notification to be sent via iControl from the LTM device

Syslog on the LTM device to send to an SMTP server

Custom SNMP traps on the LTM device for AVR notifications

Email notification to be sent via SMTP from the LTM device

NO.76 An LTM Specialist needs to provide access to a 8BG-IP to device for a company’s support person access to the BIG IP device, but are NOT allowed to change any settings All support the support remote access to the BIG-IP device, but are NOT allowed to change ant settings. All support have accounts in the company’s Active Directory Which method is appropriate to provide access for the support personnel to the BIG-JP device?

configure remote authentication for all users with a default user role of Guest

configure remote authentication and map support personnel users to the Guest user role

configure remote authentication and map support personnel users to the Operator user role

configure remote authentication for all users with a default user role of Operator

NO.77 An LTM is configure an application that is separated into several subdomains across multiple virtual servers. Many of these subdomains require encryption and could be accessed by anyone on the internet. The configuration must NOT result in SSL warnings to end users.
How should the LTM Specialist configure the SSL profiles for these virtual servers?

Obtain an SSL certificate for each subdomain, make a ServerSSL profile for each subdomain, and apply to the related SSL Virtual Server.

Obtain a wildcard certificate, create one ClientSSL profile and apply to all SSL Virtual Servers

Create a self-singed SSL certificate for each subdomain make a ClientSSL profile for each subdomain, and apply to the related SSL Virtual server

Create a self-singed SSL certificate for each subdomain make a Client profile for each SSL Virtual Server

The topic is that there are multiple domain names in the business, and HTTPS services are provided to the internet, and users cannot be allowed to generate SSL alarms. The require client ssl and use CA certificate instead of self-singed certificate. And multiple domain names, you can use wildcard certificates.

NO.78 Refer to the exhibit.

The http monitor is applied to a pool All members are enabled One pool member stops responding TCP port 80. The server still responds to ping.
What is the resulting status of this pool member?

Available (Enabled)

Offline (Disabled)

Unavailable (Disabled)

Unknown (Enabled)

NO.79 An LTM Specialist needs to configures virtual server that uses PVA or OPVA Which virtual server type should be used?

Stateless

Performance (HTTP)

Standard

Performance (Layer 4)

NO.80 The network team introduces a new subnet 10.10.22.0/24 to the network. The route needs to be configured on the F5 device to access this network via the 30.30.30.158 gateway.
How should the LTM Specialist configure this route?

Tmsh modify net route 10.10.22/24 gw 30.30.30.158

Tmsh create net route 10.10.22/24 gw 30.30.30.158

Tmsh changey net route 10.10.22/24 gw 30.30.30.158

Tmsh add net route 10.10.22/24 gw 30.30.30.158

NO.81 A virtual server configuration for traffic destined to a server is as shown:

FTP traffic is destined to the 192.168.1.101 server from the source of 192.168.2.129.
Based on precedence, which virtual server accepts this traffic?

MyVS4

MyV53

MyVS1

MyVS2

NO.82 An LTM Specialist has detected that a brute force login attack is occurring against the SSH service via a BIG-IP management interface. Login attempts are occurring from many IPs within the internal company network. BIG-IP SSH access restrictions are in place as follows:

The LTM Specialist has determined that SSH access should only occur from the 192.168.1.0/24 and 172.16.254.0/23 networks.
Which tmsh command should the LTM Specialist use to permit access from the desired networks only?

modify.sys sshd allow add {”192.168. 10/24 , ” ”172. 16 2540/23”)

modify /sys sshd login disable (”10.0.00/8”, ”172 16.0 0/12”, ”192. 168.0.0/16”)

modify/sys allow replace-all-with {”192.168.1.00/24”, ”192.16.254.0/23”}

modify/sys sshd login enable {”192.166.10/24”” ”172.16 254 0/23

Select C to overwrite the existing network’s allow configuration over the specified network segment.

NO.83 AN LTM Specialist receives reports that an external company application is having reliability issues. The F5 Administrator finds the following in /vat/log/ltm file.

The LTM Specialist determines that the F5 LTM device is entering into Aggressive Mode Adaptive Reaping, which is causing the site reliability issues.
What is the most likely reason that the LTM device has entered into Aggressive Mode Adaptive Reaping?

The LTM device exceeds licensed traffic limits.

The site has too many licensed modules.

The LTM device has not provisioned AVR.

The site is under DDOS attack

NO.84 An LTM Specialist must reconfigure a BIG-IP system that load balances traffic to a web application. The security department has informed the LTM Specialist that the following cipher string must be used for TLS connections from BIG-IP to the web application.
NATIVE:IMDS:EXPORT:IDHE:EDH@SPEED
In which virtual server profile should the cipher string be configured?

Server SSL
CB. Client SSL

SPDY profile

Rewrite profile

Require SSL and flow F5 to server, server ssl

NO.85 Two LTM devices must be manually configured to restrict in the same Device Group.
What is the correct order of steps to meet this requirement?

Configure VLAN, Configure-Sync IP, Configure Failover type, Establish Device Trust, Sync Device Trust, Create type, Establish Device Sync Device Trust, Create Device Group.

Configure VLAN, Configure Self-IPs, Configure Config-Sync IP. Configure Failover type, Establish Device Trust, Sync Device Trust, Create Device Group.

Configure Self-IPs, Configure VLAN, Configure Config-Sync IP. Configure Failover type, Establish Device Trust, Sync Device Trust, Create Device Group

Configure VLAN, Configure Config-Sync IP. Configure Self-IPs. Configure Failover type. Establish Device Trust, Create Device Group

NO.86 TWO LTM devices are in the same Device Group and configured for Ac live/Standby Failover. The LTM Specialist observes that the HA Active and Standby device constantly changes state. All network links use the default route domain A dedicated fiber ink is used for the HA connection with a latency of 250 ms but no packet loss.
What is causing the change in failover state to occur?

The HA network is using the default routing domain.

The HA network is using multicast IP.

The HA network is not configured for mirroring.

The HA network latency is too high.

NO.87 An LTM specialist needs to create a new account with the admin role called “newadmin’ and access to all partitions.
Which tmsh command should be executed?

create /auth user newadmin partition-access add {all-partitions {role admin }} prompt for-password.

create /users newadmin partition-access add {all-partitions {role admin JJ prompt for-password.

create /user newadmin partition-access add (all-partitions {role admin }} prompt- for-password.

create / sys user newadmin partition-access add (all-partitions {role admin )} prompt-for-password.

Examining the use of commands, the creation of user is subordinate to auth

NO.88 An LTM device provides load balancing to a web application? The LTM device has two dual-core processors and a licensed SSL Transactions Per Second (TPS) limit of 500 CMP is enabled.
TLS connections are used between client systems and virtual servers on the LTM device, as well as from the LTM device to servers used as part of LTM pool.
TLS enabled virtual servers utilize certificates based on 2048-bit keys During a peak period. 2560 new TLS transactions per second are attempted to the web application via the LTM device.
What will happen in this scenario?

560 new TLS transactions will be silently discarded due to the SSL TPS license limit

Nothing: TLS transactions per second are NOT affected by an SSL TPS license limit

2060 new TLS transactions will be silently discarded due to the SSL TPS license limit

Nothing: 2560 TLS transactions per second is within the SSI TPS license limit.

NO.89 A new iRule needs to be tested. The LTM Specialist needs to measure page load times and monitor potential changes in memory usage A load test is scheduled.
Which two features should the LTM Specialist use to monitor these requirements? (Choose two.)

Tmsh show memory

Analytics

Tmsh show sys proc-info

Tmsh show sys provision
Explanation
Need to detect memory changes in real time, use to Page load times with Analytics profile

NO.90 An application requires load balancing functionality. The application must be encrypted to the client.
Certain content must be manipulated by the following IRule:

Which set of profiles must be applied to the virtual server?