F5-CTS-LTM BIG-IP Local Traffic Manager Practice Test 11 — 15 Questions

Question 1

When deploying a BIG-IP LTM in a high-availability (HA) pair, what is the purpose of the 'Failover' cable or link?

Accepted Answer

To detect the failure of the peer device via heartbeat signals.. The failover link, often implemented via dedicated network interfaces or shared backplanes, is used for the continuous exchange of heartbeat signals between the two BIG-IP devices. This ensures that each unit knows the operational status of its peer. If the heartbeat is lost, the standby unit assumes the active unit has failed and triggers a failover, promoting itself to active to maintain service continuity.

Answer

To synchronize the configuration files across both units.

Answer

To mirror active connection states for seamless failover.

Answer

To increase the total throughput capacity of the cluster.

Question 2

An administrator implements Priority Group Activation on a pool containing four web servers. Two servers are assigned priority 10, and two servers are assigned priority 5. The minimum active members parameter is set to 2. One priority 10 member fails. What is the precise traffic distribution behavior of the BIG-IP system?

Accepted Answer

Traffic is balanced exclusively between the single remaining priority 10 member and the two priority 5 members.. Priority Group Activation directs traffic to the highest available priority group until the number of active members in that group drops below the specified minimum active members threshold. When one priority 10 member fails, one remains active, which is below the minimum threshold of 2, triggering activation of the lower priority group while keeping the remaining priority 10 member active.

Answer

Traffic ceases entirely for all pool members until administrators manually intervene and adjust the priority group thresholds via TMOS.

Answer

Traffic distribution shifts completely to the two priority 5 servers, and the remaining priority 10 server is taken offline immediately.

Answer

Traffic is distributed strictly among the two priority 5 servers while the remaining priority 10 server acts as a standby hot spare.

Question 3

Refer to the exhibit. An administrator notices that users connecting to both port 80 and port 443 are being persisted to the same backend server. Why is this occurring?

Accepted Answer

The 'match-across-services' setting is enabled in the persistence profile.. The persistence profile /Common/my_src_persist has 'match-across-services' enabled. This feature instructs the BIG-IP to ignore the destination port when calculating the persistence record. Consequently, when a client hits the virtual server on port 80, the persistence record is created based on the source IP. When the same client subsequently hits a virtual server on port 443, the BIG-IP identifies the existing persistence entry and directs the traffic to the same pool member.

Answer

The persistence timeout is too high, causing records to overlap across services.

Answer

The persistence profile is applied to the virtual server without a mask.

Answer

The virtual server is using a shared pool, forcing persistence across services.

Question 4

Which TWO of the following are valid methods to offload SSL processing from the backend servers to the BIG-IP system? (Choose two)

Accepted Answer

Configure Client-side SSL profile on the virtual server and leave the backend pool unencrypted.. SSL Offloading is a primary function of LTM, allowing the BIG-IP to perform the resource-intensive cryptographic tasks. By terminating the SSL connection at the BIG-IP, the backend servers can focus on application logic. The two common architectures are SSL Termination (Client-side SSL) and SSL Bridging (Client-side and Server-side SSL), both of which effectively remove the encryption burden from the backend pool members.

Answer

Configure Server-side SSL profile on the virtual server and leave the client traffic unencrypted.

Answer

Disable SSL on the virtual server and enable it on the pool.

Answer

Configure an iRule to forward unencrypted packets to the backend servers.

Question 5

An administrator needs to perform a graceful shutdown of a server in a load-balanced pool without interrupting existing user sessions. Which action should be taken?

Accepted Answer

Set the node status to 'Disabled'.. To gracefully remove a node, the administrator should set the node or pool member state to 'Disabled'. When a node is 'Disabled', the BIG-IP stops sending new connections to it but allows existing connections to persist until they complete or time out. This is critical for maintaining a positive user experience during maintenance windows, preventing the immediate termination of active sessions that would occur if the node were set to 'Forced Offline'.

Answer

Set the node status to 'Forced Offline'.

Answer

Delete the node from the pool configuration.

Answer

Disable the health monitor associated with the node.

Question 6

Which load balancing algorithm would be best suited for a pool of servers where the servers have significantly different hardware specifications and processing capabilities?

Accepted Answer

Ratio (member). When servers in a pool are heterogeneous, using a simple round-robin approach causes faster servers to sit idle while slower servers become overloaded. The 'Ratio' algorithm allows administrators to assign a weight to each server, ensuring that higher-capacity servers receive a proportionally larger share of the traffic, which optimizes the overall system performance and prevents bottlenecking on the weaker backend hardware.

Answer

Round Robin

Answer

Least Connections

Answer

Fastest

Question 7

An LTM is configured with a OneConnect profile. What is the primary purpose of this feature in the context of HTTP connections?

Accepted Answer

To multiplex multiple client requests over a single server-side TCP connection.. OneConnect allows the BIG-IP to reuse existing connections between the BIG-IP and the backend servers. By multiplexing multiple client requests onto a smaller set of established TCP connections, it significantly reduces the overhead associated with the TCP three-way handshake and slow-start mechanism on the backend servers. This is particularly valuable for high-traffic environments where connection setup latency can become a major bottleneck for the application's response time.

Answer

To increase the number of TCP connections allowed to the backend servers.

Answer

To enable persistent connections between the client and the BIG-IP.

Answer

To provide SSL offloading for non-HTTP traffic types.

Question 8

Refer to the exhibit. What is the impact of using the 'tcp-lan-optimized' profile on this virtual server?

Accepted Answer

It is inappropriate if the clients are connecting over the Internet.. The 'tcp-lan-optimized' profile is designed for high-speed, low-latency environments like LANs. It modifies TCP settings to be less aggressive than 'tcp-wan-optimized'. Using it on a connection where the client is accessing over the internet (WAN) can result in poor performance, as the settings do not account for the high latency and packet loss typically encountered on public networks compared to local infrastructure.

Answer

It improves performance for clients connecting over long-distance WAN links.

Answer

It provides faster window scaling for high-latency connections.

Answer

It disables TCP keep-alives to save memory on the BIG-IP.

Question 9

What is the primary function of a 'Clone Pool' in an LTM virtual server configuration?

Accepted Answer

To mirror incoming traffic to an out-of-band monitoring device.. A Clone Pool is used for traffic replication. It allows the BIG-IP to send a copy of the traffic (packets) to a secondary destination, such as an IDS (Intrusion Detection System) or a packet capture device, without affecting the primary traffic flow to the actual application servers. This is a common requirement for security compliance and troubleshooting, as it allows deep packet inspection on traffic that is intended for the production backend.

Answer

To provide high availability for the backend pool members.

Answer

To distribute traffic across two different data centers simultaneously.

Answer

To act as a backup pool if the primary pool fails.

Question 10

An administrator wants to use a single Virtual Server to handle both HTTP and HTTPS traffic for the same domain. What is the recommended way to achieve this?

Accepted Answer

Use two Virtual Servers and an iRule to redirect port 80 to 443.. The most efficient way to manage both HTTP and HTTPS is to create two separate virtual servers: one on port 80 and one on port 443. The port 80 virtual server should then use an iRule to redirect users to the HTTPS virtual server. This ensures that all traffic is encrypted while providing a seamless user experience, as the user only needs to type the domain name to be redirected correctly.

Answer

Use a single Virtual Server on port 80 with an iRule to handle SSL.

Answer

Use a single Virtual Server with 'Any' port enabled.

Answer

Create one Virtual Server on 443 and disable port 80.

Question 11

Which component of the BIG-IP LTM system is responsible for performing health checks on backend servers to determine if they are capable of accepting new connections?

Accepted Answer

The Health Monitor. Health monitors are the LTM component used to periodically verify the status of pool members. By sending specific requests—such as ICMP, TCP, or HTTP—the LTM determines if a server is healthy. If a monitor fails, the LTM marks the member as 'down' and stops sending traffic to it, which is essential for maintaining application availability and preventing users from hitting broken services.

Answer

The Persistence Profile

Answer

The SNAT Automap

Answer

The Virtual Server

Question 12

A virtual server is configured with a 'Least Connections' load balancing method. Under what specific scenario would this method be more effective than 'Round Robin'?

Accepted Answer

When backend servers process requests with varying execution times.. Least Connections is ideal when backend servers handle requests of varying complexity or duration. Because it tracks active connections, it avoids sending new requests to a server that is already busy, whereas Round Robin blindly rotates through all servers. This ensures better distribution of load in environments where some requests take significantly longer to process, preventing any single server from becoming a bottleneck during traffic spikes.

Answer

When all backend servers are identical in hardware specifications.

Answer

When the application consists of simple, static web pages.

Answer

When the virtual server is configured with a high persistence timeout.

Question 13

Refer to the exhibit. The web_pool is currently offline with zero active members. An LTM Specialist checks the backend servers and finds they are both responding to pings. What is the most likely reason for the pool being offline?

Accepted Answer

The health monitor is misconfigured or the service is down.. The pool status is 'offline' and 'children are down' despite servers being reachable via ping. This indicates the health monitor configured on the pool is failing, likely because the specific service (e.g., HTTP on port 80) is not responding or the monitor is misconfigured. Ping only tests network layer connectivity, whereas LTM monitors test application-layer availability, which is the standard for determining if a server can actually process traffic.

Answer

The virtual server is disabled.

Answer

The default route on the BIG-IP is missing.

Answer

The SNAT pool is exhausted.

Question 14

Why would an LTM Specialist choose to implement a SNAT Automap instead of a SNAT pool?

Accepted Answer

To reduce administrative overhead for simple configurations.. SNAT Automap is the simplest way to manage source translation because it automatically uses the BIG-IP's floating self-IP address. It is ideal for environments where a dedicated pool of IP addresses is not required. This reduces administrative complexity and configuration overhead, which is beneficial for smaller deployments or scenarios where the backend servers only need to see the BIG-IP as the source of traffic.

Answer

To increase security by using multiple source IP addresses.

Answer

To prevent port exhaustion on the BIG-IP.

Answer

To allow backend servers to track unique client IP addresses.

Question 15

Refer to the exhibit. An LTM Specialist wants to ensure that persistence is maintained even if a client switches between different virtual services that share the same pool members. Based on the configuration, will this work?

Accepted Answer

Yes, because 'match-across-services' is enabled.. The persistence profile has 'match-across-services' enabled. This setting allows the BIG-IP to maintain the same persistence record across different virtual servers that share the same pool. This is crucial for complex applications where a user might initiate a session on one virtual service and be directed to another, as it ensures session affinity remains consistent throughout the user's entire journey across the application.

Answer

No, because the cookie name must be unique per virtual server.

Answer

No, because 'expiration 0' prevents persistence across services.

Answer

Yes, but only if the virtual servers share the same IP address.