F5-CTS-LTM Practice Test 3 — 25 Questions

Question 1

You are managing an LTM and notice that some traffic is not being load-balanced as expected. You see that an iRule is applied to the virtual server. What is the most likely reason the iRule is overriding the load-balancing method?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The iRule explicitly selects a pool or node.. iRules are processed before standard load balancing in the BIG-IP pipeline. When an iRule contains commands like 'pool' or 'node', it can explicitly select a destination server, effectively bypassing the configured load-balancing algorithm. This is a common point of confusion for administrators, as the iRule logic can override the expected behavior of the pool's load-balancing method.

Answer

The iRule is only triggered when the pool is empty.

Answer

The load-balancing method is incompatible with iRules.

Answer

The iRule is disabled by the current license.

Question 2

Refer to the exhibit. What happens to the user session if the 'my_app_cookie' is not present in the initial client request?

Accepted Answer

The BIG-IP inserts a cookie in the response.. With the 'insert' method, the BIG-IP will inject a persistence cookie into the HTTP response header sent to the client. The client browser will then store this cookie and include it in all subsequent requests. This allows the BIG-IP to correctly route the user back to the same backend server on future requests without the backend application needing to handle the session tracking logic itself.

Answer

The request is dropped by the LTM.

Answer

The LTM forces a redirect to the login page.

Answer

Persistence is permanently disabled for that session.

Question 3

Refer to the exhibit. An administrator checks the status of 'web_pool' and observes the output shown. What is the most likely cause for the pool being offline?

Accepted Answer

The health monitors assigned to the pool members are failing.. The output indicates that the pool is offline because all members are unavailable. In LTM, a pool's availability status is determined by the health of its members. When all monitors fail or the members are manually disabled, the pool enters an offline state. This is a fundamental concept for troubleshooting service outages, as it immediately identifies that the issue lies with the backend servers rather than the VIP.

Answer

The Virtual Server associated with the pool is disabled.

Answer

The load balancing method is set to Round Robin.

Answer

The license for the LTM module has expired.

Question 4

Which health monitor type should be used when you need to verify that a web server is not only responding to TCP connections but also returning the correct content for a specific page?

Accepted Answer

HTTP monitor with 'send' and 'receive' strings.. An HTTP or HTTPS monitor is required to validate application-layer content. Simple TCP monitors only verify that the port is open and listening; they cannot confirm if the web server is actually serving pages or returning errors. By configuring an HTTP monitor with a 'send' and 'receive' string, the BIG-IP can ensure the application is functioning correctly, not just the network stack.

Answer

TCP Half-Open monitor.

Answer

ICMP monitor.

Answer

SNMP DCA monitor.

Question 5

An administrator needs to ensure that client SSL traffic is terminated at the BIG-IP LTM while maintaining persistence based on a specific session cookie. Which profile combination correctly enables this functionality?

Accepted Answer

Client SSL profile and Cookie Persistence profile. To terminate SSL, a Client SSL profile must be assigned to the Virtual Server. To persist based on a cookie, a Cookie Persistence profile must be enabled. This combination is standard for web applications requiring secure transport and session stickiness. Understanding this architecture is vital because the LTM must decrypt traffic to inspect and insert the persistence cookie, allowing the BIG-IP to make intelligent load-balancing decisions based on application-layer data.

Answer

Server SSL profile and Source Address Affinity profile

Answer

Client SSL profile and Source Address Affinity profile

Answer

Server SSL profile and Cookie Persistence profile

Question 6

A virtual server is configured with a 'Least Connections' load balancing method. Under what specific scenario would this method be more effective than 'Round Robin'?

Accepted Answer

When backend servers process requests with varying execution times.. Least Connections is ideal when backend servers handle requests of varying complexity or duration. Because it tracks active connections, it avoids sending new requests to a server that is already busy, whereas Round Robin blindly rotates through all servers. This ensures better distribution of load in environments where some requests take significantly longer to process, preventing any single server from becoming a bottleneck during traffic spikes.

Answer

When all backend servers are identical in hardware specifications.

Answer

When the application consists of simple, static web pages.

Answer

When the virtual server is configured with a high persistence timeout.

Question 7

When configuring a BIG-IP LTM, what is the significance of the 'Service Down Action' setting on a virtual server?

Accepted Answer

It defines how the BIG-IP handles traffic when no pool members are available.. The 'Service Down Action' determines the behavior of the BIG-IP when all pool members are marked as 'Down' by the health monitor. Options include rejecting the connection, dropping it, or sending it to a fallback host. This setting is crucial for user experience, as it allows the administrator to provide a clean error response instead of letting the connection hang or time out during a total service outage.

Answer

It sets the timeout for health monitor probes.

Answer

It determines the number of concurrent connections allowed.

Answer

It enables compression for the virtual server.

Question 8

A client is experiencing intermittent connection resets when accessing an application via an LTM Virtual Server. The administrator notices that 'OneConnect' is enabled on the virtual server. What is the most likely cause for these resets?

Accepted Answer

The server-side application does not properly handle persistent connections.. OneConnect enables connection pooling, which allows the BIG-IP to keep server-side connections open for reuse. However, if the server-side application or web server doesn't support persistent HTTP connections or lacks proper keep-alive handling, it may prematurely close the connection. This mismatch results in the BIG-IP attempting to use a stale connection, leading to resets when the server rejects the subsequent HTTP requests.

Answer

The client browser is incompatible with HTTP/2.

Answer

The Virtual Server's timeout value is too high.

Answer

The load balancing method is set to 'Least Connections'.

Question 9

Which component is responsible for monitoring the availability of pool members in a BIG-IP environment?

Accepted Answer

The Local Traffic Manager (LTM) monitor, which performs periodic status checks.. Health monitors are the entities that periodically verify the status of pool members. By sending specific probes (TCP, HTTP, ICMP, etc.), they determine if a resource is healthy. If a monitor fails, the BIG-IP marks the resource as 'down' and ceases sending traffic to it, ensuring that users are never routed to unresponsive or malfunctioning application nodes.

Answer

The iRule engine, which executes logic to check server response times.

Answer

The Virtual Server 'Status' setting, which acts as a heartbeat monitor.

Answer

The ConfigSync process, which replicates server status across the device group.

Question 10

Which TWO of the following are benefits of using SNAT (Source Network Address Translation) on a BIG-IP LTM?

Accepted Answer

Simplifies return routing for backend servers.. SNAT simplifies return routing by ensuring traffic returns to the BIG-IP rather than the client, and it hides the backend infrastructure from the public internet. By SNATing the traffic to the BIG-IP's self-IP, the backend server sees the request as coming from the BIG-IP. This prevents asymmetric routing issues and enhances security by abstracting the backend server IP addresses from the end-user environment.

Answer

Increases the encryption speed of the SSL handshake.

Answer

Improves the load balancing algorithm's accuracy.

Answer

Enables the use of cookie-based persistence.

Question 11

An application requires persistence based on a specific custom header named 'X-Session-ID'. The LTM Specialist has confirmed the header is always present in requests. Which persistence method is most appropriate?

Accepted Answer

Universal persistence. Universal persistence is the only method that allows the BIG-IP to persist traffic based on arbitrary data found within the request. By extracting the value of the 'X-Session-ID' header using an iRule and mapping it to a persistence record, the BIG-IP can ensure that all requests with the same session ID are consistently routed to the same backend server, regardless of the client's IP address.

Answer

Cookie Insert persistence

Answer

Source Address persistence

Answer

Hash persistence

Question 12

Which component of the BIG-IP LTM architecture is primarily responsible for the initial processing and decision-making regarding whether a packet should be forwarded to a pool member?

Accepted Answer

The Virtual Server. The Local Traffic Manager (LTM) module utilizes virtual servers to intercept incoming traffic. The virtual server acts as the central point of control, evaluating incoming packets against configured rules, policies, and profiles. This architecture allows the LTM to make intelligent load balancing decisions, ensuring traffic is directed to the most appropriate pool member based on system state, performance, and specific business logic requirements.

Answer

The Pool Member

Answer

The Health Monitor

Answer

The iControl API

Question 13

An LTM is configured with a 'OneConnect' profile. What is the primary purpose of this feature?

Accepted Answer

To reuse backend TCP connections for multiple client requests.. OneConnect enables TCP connection pooling between the BIG-IP and the backend servers. By keeping backend connections open even after a client request finishes, the LTM avoids the overhead of repeated TCP handshakes. This is essential for high-performance web applications, as it significantly reduces latency and server CPU consumption, allowing the backend servers to handle a higher volume of concurrent user requests more efficiently than they could with per-request connection establishment.

Answer

To encrypt traffic between the BIG-IP and the backend servers.

Answer

To enable persistence for HTTP traffic.

Answer

To limit the number of concurrent connections per client.

Question 14

An administrator needs to ensure that a pool member remains part of the load balancing rotation only if it responds to specific HTTP GET requests on port 80, rather than just TCP SYN. Which action should the administrator perform?

Accepted Answer

Create and assign an HTTP monitor with a specific 'Send' and 'Receive' string.. To validate application-level health rather than just network reachability, a custom monitor is required. By creating an HTTP or HTTPS monitor, the BIG-IP sends specific requests and verifies the content of the response. This ensures that the web service itself is functional, not just the underlying operating system or network stack, preventing the delivery of requests to unresponsive or malfunctioning application services.

Answer

Configure an ICMP monitor on the pool member.

Answer

Enable the 'Priority Group Activation' feature on the pool.

Answer

Change the pool's Load Balancing method to 'Least Connections'.

Question 15

Which statement best describes the difference between a 'Node' and a 'Pool Member' in the BIG-IP LTM configuration?

Accepted Answer

Nodes represent the physical IP, whereas pool members represent the service port.. A Node is a device defined by its IP address, which exists independently of any pool. A Pool Member is an instance of a node assigned to a specific pool, often including port and monitor settings. This distinction is crucial because multiple pools can reference the same node, allowing administrators to manage health and load balancing for different services independently on the same physical backend server.

Answer

Nodes are defined at the virtual server level, while pool members are defined globally.

Answer

Nodes are only used for health monitoring, while pool members handle traffic.

Answer

Pool members are not required for load balancing traffic.

Question 16

What is the primary function of a BIG-IP LTM monitor?

Accepted Answer

To determine the availability of a pool member.. Monitors are used to verify the operational status and health of backend pool members. By periodically checking specific services, the BIG-IP ensures that traffic is only sent to functional servers. This prevents black-holing traffic and maintains high availability, as the BIG-IP will automatically stop sending requests to any member that fails its configured health check, providing seamless failover for users.

Answer

To encrypt traffic between the client and the BIG-IP.

Answer

To balance traffic load across multiple pool members.

Answer

To translate source IP addresses for outgoing traffic.

Question 17

Which component is responsible for executing iRules on the BIG-IP LTM system?

Accepted Answer

The Data Plane (TMM).. The Traffic Management Microkernel (TMM) is the core engine of the BIG-IP system responsible for processing all traffic. iRules are executed directly within TMM as packets are processed, allowing for line-rate traffic manipulation. This architecture ensures that complex logic, such as header modification or persistence redirection, occurs in real-time with minimal latency, which is a major advantage of the LTM's purpose-built hardware acceleration and software design.

Answer

The Control Plane (MCPD).

Answer

The Linux Kernel.

Answer

The REST API daemon (restjavad).

Question 18

An LTM administrator needs to ensure that client SSL traffic is offloaded at the BIG-IP while maintaining end-to-end encryption to the backend servers. Which profile configuration is required to achieve this?

Accepted Answer

Assign both a Client SSL profile and a Server SSL profile to the virtual server.. To achieve SSL offloading with backend encryption, the LTM must terminate the client-side SSL using a Client SSL profile and then initiate a new SSL connection to the server using a Server SSL profile. This architecture, known as SSL Bridging, is critical for organizations needing to perform deep packet inspection or Layer 7 load balancing while maintaining security compliance protocols between the load balancer and the internal server pool members.

Answer

Apply only a Client SSL profile to the virtual server.

Answer

Configure a FastL4 profile with SSL persistence enabled.

Answer

Disable the Client SSL profile and enable a Server SSL profile only.

Question 19

Refer to the exhibit. The virtual server 'vs_secure_site' is showing as 'offline'. What is the most immediate step to take to restore service?

Accepted Answer

Investigate the pool members and health monitor status.. When a virtual server status is 'offline' due to 'no available members', it indicates that all pool members associated with that virtual server have failed their health checks. The most immediate and logical step is to inspect the pool members and their monitors to identify why they are failing, as the virtual server cannot function without at least one healthy backend server.

Answer

Delete and recreate the virtual server.

Answer

Restart the BIG-IP TMM service.

Answer

Change the virtual server IP address.

Question 20

When using an iRule to select a pool, what happens if the iRule contains a logic error that results in no pool being selected?

Accepted Answer

The system selects the default pool defined on the VS.. If an iRule does not issue a 'pool' command, the BIG-IP defaults to the pool defined on the Virtual Server itself. If no pool is defined on the VS, the connection is reset. Understanding this fallback behavior is vital for debugging complex iRule logic. If an administrator fails to account for all conditions in an iRule, the traffic may behave unpredictably, falling back to default settings rather than failing outright.

Answer

The connection is immediately dropped.

Answer

The system routes traffic to the first pool in the list.

Answer

The iRule execution stops and returns an error to the client.