F5-CTS-LTM BIG-IP Local Traffic Manager Practice Test 10 — 15 Questions

Question 1

Which profile type is required to inspect and modify HTTP headers on a BIG-IP LTM virtual server?

Accepted Answer

HTTP Profile. An HTTP profile is required to enable the LTM to parse, understand, and manipulate HTTP traffic. Without an HTTP profile, the BIG-IP processes traffic at the TCP layer, making it impossible to see or alter application-level headers. This is a foundational concept for implementing security policies, X-Forwarded-For injection, or traffic routing based on HTTP hostnames or path information.

Answer

TCP Profile

Answer

FastL4 Profile

Answer

Client SSL Profile

Question 2

When implementing SNAT Automap on a virtual server, what is the source IP address of the traffic as it arrives at the backend server?

Accepted Answer

The BIG-IP egress Self-IP address.. SNAT Automap causes the BIG-IP to translate the client's source IP address to the self-IP address of the egress interface used to communicate with the pool member. This is a key design pattern for ensuring that backend servers can reply directly to the BIG-IP without needing to update their default gateways, which is essential for deployments where the BIG-IP is not the default gateway for the backend servers.

Answer

The original client source IP address.

Answer

The Virtual Server IP address.

Answer

The default gateway address of the LTM.

Question 3

Refer to the exhibit. The monitor is failing even though the page exists. What is the most likely cause?

Accepted Answer

The receive string is too restrictive.. The 'recv' string is set to '200 OK', but the HTTP monitor often returns the full response, including headers. If the server response contains the status code without the exact string '200 OK', or if the casing differs, the monitor will fail. This scenario emphasizes the importance of precise regex or string matching in health monitors to avoid false negatives in service availability monitoring.

Answer

The monitor timeout is too low.

Answer

The HTTP version is unsupported.

Answer

The send string is missing the User-Agent header.

Question 4

Which load balancing algorithm is best suited for a pool of servers where each server has different hardware specifications and processing capacities?

Accepted Answer

Ratio. The 'Ratio' load balancing method allows administrators to assign a weighting to each server based on its actual performance capability. In mixed-hardware environments, this prevents lower-spec servers from becoming overwhelmed while ensuring that more powerful servers handle a proportionately larger share of the traffic, thus maximizing the efficiency and reliability of the overall application delivery infrastructure.

Answer

Round Robin

Answer

Least Connections

Answer

Fastest

Question 5

Which component is responsible for executing iRules on the BIG-IP LTM system?

Accepted Answer

The Data Plane (TMM).. The Traffic Management Microkernel (TMM) is the core engine of the BIG-IP system responsible for processing all traffic. iRules are executed directly within TMM as packets are processed, allowing for line-rate traffic manipulation. This architecture ensures that complex logic, such as header modification or persistence redirection, occurs in real-time with minimal latency, which is a major advantage of the LTM's purpose-built hardware acceleration and software design.

Answer

The Control Plane (MCPD).

Answer

The Linux Kernel.

Answer

The REST API daemon (restjavad).

Question 6

What is the primary benefit of using a 'OneConnect' profile in an HTTP virtual server?

Accepted Answer

It allows connection reuse to backend servers.. OneConnect enables TCP connection reuse between the BIG-IP and the backend servers. By maintaining a pool of established connections, the BIG-IP avoids the overhead of repeated TCP three-way handshakes for each client request. This is particularly important for HTTP/1.1 traffic, where it significantly reduces latency and server CPU utilization, making it a critical optimization for high-traffic web applications.

Answer

It encrypts traffic to the backend.

Answer

It compresses HTTP payload data.

Answer

It manages client persistence.

Question 7

Which monitoring method is most reliable for verifying that a web application is not just responding to TCP requests, but also returning correct application-layer data?

Accepted Answer

HTTP monitor. The HTTP monitor is specifically designed to perform application-layer verification by sending an actual HTTP request and waiting for a specific response string. This goes beyond simple TCP port checks, ensuring that the application server is fully functional, the web service is running, and the expected content is being served, which is vital for preventing 'false-up' states for failing web applications.

Answer

ICMP monitor

Answer

TCP monitor

Answer

SNMP monitor

Question 8

Refer to the exhibit. What happens to the user session if the 'my_app_cookie' is not present in the initial client request?

Accepted Answer

The BIG-IP inserts a cookie in the response.. With the 'insert' method, the BIG-IP will inject a persistence cookie into the HTTP response header sent to the client. The client browser will then store this cookie and include it in all subsequent requests. This allows the BIG-IP to correctly route the user back to the same backend server on future requests without the backend application needing to handle the session tracking logic itself.

Answer

The request is dropped by the LTM.

Answer

The LTM forces a redirect to the login page.

Answer

Persistence is permanently disabled for that session.

Question 9

Which command is used to view the current status and statistics of a pool from the command line?

Accepted Answer

tmsh show ltm pool. The 'tmsh show ltm pool' command is the standard method for viewing real-time pool status and traffic statistics. It provides a comprehensive view of member health, current connection counts, and traffic throughput. This is an essential skill for LTM administrators for performing quick health checks and verifying that traffic is being distributed as expected across the backend server farm without relying on the GUI.

Answer

tmsh list ltm pool

Answer

tmsh view ltm pool

Answer

tmsh display ltm pool

Question 10

Which TWO of the following are primary benefits of using an iApp Template for BIG-IP deployment?

Accepted Answer

Simplified management by grouping related LTM objects into a single logical entity.. iApp templates provide a structured, simplified interface for deploying complex applications. By abstracting the creation of multiple objects (virtual servers, pools, profiles, iRules) into a single deployment unit, they reduce the risk of human error and configuration drift. These templates are essential for maintaining consistency across large environments and ensuring that best practices are followed during every configuration step.

Answer

Automatic translation of proprietary application logic into F5 proprietary TCL scripts.

Answer

Direct execution of remote SQL queries to backend database servers for load balancing.

Answer

Automatic hardware upgrades of the BIG-IP platform when capacity is reached.

Question 11

Which health monitor type should be used when you need to verify that a web server is not only responding to TCP connections but also returning the correct content for a specific page?

Accepted Answer

HTTP monitor with 'send' and 'receive' strings.. An HTTP or HTTPS monitor is required to validate application-layer content. Simple TCP monitors only verify that the port is open and listening; they cannot confirm if the web server is actually serving pages or returning errors. By configuring an HTTP monitor with a 'send' and 'receive' string, the BIG-IP can ensure the application is functioning correctly, not just the network stack.

Answer

TCP Half-Open monitor.

Answer

ICMP monitor.

Answer

SNMP DCA monitor.

Question 12

Refer to the exhibit. The pool members are marked down. A manual test shows that 'curl -v -H "Host: www.example.com" http://<member_ip>/health.php' returns 'OK'. What is the most likely issue?

Accepted Answer

The 'receive' string does not account for the entire HTTP response body.. The health monitor configuration requires exact string matching for the 'receive' field. If the server returns extra whitespace, headers, or different formatting than expected by the BIG-IP, the match will fail. The monitor configuration in the exhibit is correct in syntax, but the 'receive' string must match exactly the data found in the raw response body, which often differs from how a terminal-based curl output displays information.

Answer

The monitor is missing the 'interval' and 'timeout' parameters.

Answer

The HTTP version in the send string is causing a protocol mismatch.

Answer

The connection should be set to 'Keep-Alive' instead of 'Close'.

Question 13

Which THREE criteria determine how a BIG-IP selects a pool member for a new client connection?

Accepted Answer

The configured load balancing method.. Load balancing decisions are multi-faceted. The BIG-IP considers the configured load balancing method (e.g., Round Robin, Least Connections), the status of the pool members (only active members are eligible), and any active persistence records that might override the load balancing method for returning clients. These three factors combine to ensure traffic is distributed intelligently and consistently across the available server pool.

Answer

The physical location of the client's ISP.

Answer

The CPU speed of the client's device.

Question 14

An administrator wants to ensure that all HTTP traffic is redirected to HTTPS. What is the most efficient way to perform this on a BIG-IP LTM?

Accepted Answer

Create a virtual server on port 80 with an iRule that performs a 301 redirect.. Creating a separate virtual server for port 80 that uses an iRule to issue an HTTP 301/302 redirect is the standard, cleanest method. This offloads the redirection logic from the main secure virtual server, keeping the configuration modular. It ensures that any insecure traffic is immediately directed to the secure listener, maintaining security compliance and simplifying the management of HTTP vs. HTTPS traffic.

Answer

Configure an HTTP profile on the virtual server to force SSL.

Answer

Modify the backend server settings to reject HTTP connections.

Answer

Use a SNAT pool to force all port 80 traffic to port 443.

Question 15

An administrator wants to use an iRule to log the 'Host' header of every incoming HTTP request. Which iRule event is most appropriate for this task?

Accepted Answer

HTTP_REQUEST. The 'HTTP_REQUEST' event triggers whenever a client sends an HTTP request, providing immediate access to the headers before the request is processed by the pool selection logic. This is the correct point in the request-response cycle to inspect and log headers. Using this event ensures that the logging logic executes for every single request, providing a full audit trail of host header usage.

Answer

CLIENT_ACCEPTED

Answer

HTTP_RESPONSE

Answer

LB_SELECTED