F5-CTS-LTM BIG-IP Local Traffic Manager Practice Test 13 — 15 Questions

Question 1

An administrator needs to monitor the health of a web service that uses an unconventional port and requires a specific string to be returned in the response. Which monitor type should be used?

Accepted Answer

An HTTP monitor with the 'Send String' and 'Receive String' configured.. The HTTP monitor is designed for checking web services. By specifying the port and the 'Receive String' field, the administrator can verify that the server is not only listening but also returning the expected content. This is essential for detecting 'grey failure' scenarios where a server responds to a TCP connection but serves an error page or an incomplete application response.

Answer

A standard TCP monitor with the port defined in the monitor configuration.

Answer

An ICMP monitor added to the pool member's health monitor list.

Answer

An external monitor script that performs a shell command to check the service.

Question 2

An administrator observes that the BIG-IP is not correctly load balancing traffic across all members of a pool. What is the most likely cause if the load balancing method is set to 'Least Connections'?

Accepted Answer

Persistence is enabled, causing the BIG-IP to bypass the load balancing algorithm for existing sessions.. The 'Least Connections' method is highly dependent on the accuracy of the connection table. If persistence is configured, the BIG-IP will ignore the least connections algorithm for any request that is part of an existing session. This is a frequent point of confusion where administrators expect even distribution but see skewed results because users are 'stuck' to specific servers due to their persistence records.

Answer

The pool members are in different subnets, preventing the load balancer from seeing all connections.

Answer

The 'Ratio' load balancing method is implicitly overriding the 'Least Connections' setting.

Answer

The TCP profile is set to 'OneConnect', which prevents the tracking of individual connections.

Question 3

An LTM administrator needs to allow a specific external IP address to access a restricted management interface via a virtual server, while blocking all others. What is the most efficient way to implement this?

Accepted Answer

Use an iRule or Local Traffic Policy on the virtual server to check the source IP.. The most efficient way to control access at the BIG-IP level is using an LTM Local Traffic Policy or an iRule. While a packet filter or AFM can work, LTM-specific policies are integrated directly into the virtual server configuration. By checking the client IP address in the policy, the administrator can perform a 'drop' or 'reset' action for unauthorized traffic, ensuring high performance.

Answer

Apply a packet filter to the VLAN that blocks all traffic except the specific IP.

Answer

Modify the pool member's firewall to allow only the BIG-IP's self IP address.

Answer

Assign a 'None' profile to the virtual server to force an error on unauthorized connections.

Question 4

An administrator wants to reduce the load on the backend servers by caching static content. Which BIG-IP feature should be configured?

Accepted Answer

Apply a Web Acceleration profile with an enabled cache object.. The Web Acceleration profile provides built-in HTTP caching capabilities. By enabling this on a virtual server, the BIG-IP can cache static assets like images, CSS, and JS files, serving them directly from memory and significantly reducing the number of requests that reach the backend web servers. This is a highly effective way to improve application performance and scalability without modifying the backend application code.

Answer

Enable the 'OneConnect' profile to pool backend connections.

Answer

Create an iRule to store request data in the BIG-IP session table.

Answer

Configure the 'HTTP-Compress' profile to shrink the size of responses.

Question 5

Which component is responsible for monitoring the availability of pool members in a BIG-IP environment?

Accepted Answer

The Local Traffic Manager (LTM) monitor, which performs periodic status checks.. Health monitors are the entities that periodically verify the status of pool members. By sending specific probes (TCP, HTTP, ICMP, etc.), they determine if a resource is healthy. If a monitor fails, the BIG-IP marks the resource as 'down' and ceases sending traffic to it, ensuring that users are never routed to unresponsive or malfunctioning application nodes.

Answer

The iRule engine, which executes logic to check server response times.

Answer

The Virtual Server 'Status' setting, which acts as a heartbeat monitor.

Answer

The ConfigSync process, which replicates server status across the device group.

Question 6

An administrator is configuring a new virtual server and needs to ensure that it only accepts traffic on a specific VLAN. How should this be configured?

Accepted Answer

By modifying the 'Enabled VLANs and Tunnels' setting in the virtual server properties.. Configuring VLAN-specific access for a virtual server is done within the 'Resources' or 'Configuration' tab of the virtual server settings. By default, a virtual server listens on all enabled VLANs. Restricting this to a single VLAN enhances security by preventing unauthorized traffic from other network segments from reaching the virtual server and potentially exposing the application to unnecessary risk.

Answer

By applying a packet filter to the virtual server object in the GUI.

Answer

By adding a static route in the routing table for that VLAN.

Answer

By creating a SNAT pool that only contains IPs from the specific VLAN.

Question 7

Which object acts as the primary configuration component that defines the destination IP address and service port for incoming client traffic?

Accepted Answer

Virtual Server. The Virtual Server is the fundamental LTM object that listens for client traffic. It acts as the gatekeeper, receiving packets on a defined IP and port, and then applying profiles, policies, and iRules before load balancing the traffic to a pool. Understanding the role of the Virtual Server is essential for all LTM operations, as it is the entry point for every application serviced by the BIG-IP device.

Answer

Pool

Answer

Node

Answer

Profile

Question 8

An administrator wants to ensure that a specific server in a pool receives more traffic than others due to its higher hardware capacity. Which load balancing method should be used?

Accepted Answer

Ratio. The 'Ratio' load balancing method allows an administrator to assign a weight to each pool member. A server with a higher ratio will receive a proportionally larger number of connections compared to servers with lower ratios. This is the correct method for load balancing in heterogeneous environments where hardware performance varies, ensuring that more capable servers handle a larger share of the overall traffic load.

Answer

Round Robin

Answer

Least Connections

Answer

Fastest

Question 9

Refer to the exhibit. An administrator wants to modify this configuration to support persistence for this application. Which command should be added to the virtual server configuration?

Accepted Answer

persist /Common/cookie. To enable persistence on a Virtual Server, you must attach a persistence profile to the 'persist' attribute of the virtual server object. Simply having the pool members defined is insufficient for maintaining session affinity. This is a core concept in BIG-IP configuration; without a persistence profile, the LTM defaults to the load balancing algorithm, which may bounce users between different servers, breaking application sessions.

Answer

profile /Common/cookie

Answer

persistence-mode cookie

Answer

pool /Common/pool_http persist

Question 10

What is the primary function of the LTM 'OneConnect' profile in an environment with high-volume short-lived connections?

Accepted Answer

It multiplexes client-side and server-side connections to reduce server CPU load.. OneConnect enables TCP connection multiplexing. It allows the BIG-IP to keep backend TCP connections open even after a client has closed its connection. By reusing these existing idle connections for new client requests, the LTM significantly reduces the overhead on backend servers associated with the TCP three-way handshake and slow-start process, which is essential for scaling performance in high-traffic web environments.

Answer

It compresses HTTP traffic to reduce bandwidth usage.

Answer

It caches static content to prevent repetitive requests to backend servers.

Answer

It performs SSL decryption to offload cryptographic tasks.

Question 11

An LTM administrator is configuring a new virtual server and needs to ensure that only specific source networks can access the application. Which TWO methods can be used to restrict access?

Accepted Answer

Configure an iRule in the CLIENT_ACCEPTED event to drop connections from unauthorized IPs.. Restricting access is a fundamental security requirement for LTM deployments. Using either an iRule to drop unauthorized connections or a Local Traffic Policy is a standard security practice. These methods provide granular control, allowing administrators to filter traffic based on source IP, CIDR blocks, or other criteria before the request is processed by the pool, effectively mitigating unauthorized access at the network edge.

Answer

Set the virtual server type to 'Forwarding (IP)'.

Answer

Assign a FastL4 profile to the virtual server to block unwanted traffic.

Answer

Increase the 'Idle Timeout' value in the TCP profile.

Question 12

Refer to the exhibit. Why would an administrator enable 'map-to-ipv6' in a source-address persistence profile?

Accepted Answer

It creates a unified persistence table for both IPv4 and IPv6 clients.. In dual-stack environments, both IPv4 and IPv6 clients might access the same application. The 'map-to-ipv6' feature ensures that IPv4 addresses are normalized into an IPv6-compatible format within the persistence table. This creates a unified persistence context, allowing the BIG-IP to correctly track and persist traffic from both address types to the same backend server, maintaining session consistency across different network protocols.

Answer

It forces all traffic to be converted to IPv6 for backend server processing.

Answer

It allows the LTM to translate IPv6 client requests to IPv4 backend servers.

Answer

It is required for performance optimization on the BIG-IP management plane.

Question 13

An administrator needs to modify the HTTP response header to hide the server version for security reasons. Which tool is most appropriate?

Accepted Answer

An iRule in the 'HTTP_RESPONSE' event with 'HTTP::header remove Server'.. An iRule using the 'HTTP_RESPONSE' event is the most flexible way to modify headers. Using the 'HTTP::header remove' command, an administrator can strip sensitive version information from the 'Server' header before the response reaches the client. This is a common security hardening task that prevents potential attackers from fingerprinting the backend server version and identifying known vulnerabilities associated with that specific platform.

Answer

A Local Traffic Policy with a 'header' modify action.

Answer

A customized HTTP profile that blocks the 'Server' header.

Answer

A custom monitor with 'header-strip' enabled.

Question 14

Which load balancing method is best suited for a pool where servers have significantly different processing capabilities and hardware specifications?

Accepted Answer

Ratio (member). The 'Ratio' load balancing method allows administrators to assign weights to pool members, directing more traffic to more powerful servers. In heterogeneous environments, using a static method like Round Robin would overwhelm weaker servers while underutilizing stronger ones. Ratio-based load balancing provides the necessary control to optimize performance and server utilization based on the actual capacity of each individual backend node in the cluster.

Answer

Round Robin

Answer

Least Connections

Answer

Observed

Question 15

When configuring a custom monitor, what happens if the 'Time Until Up' is set to 0?

Accepted Answer

The monitor marks the node as up after the first success.. Setting 'Time Until Up' to zero disables the 'slow start' or 'delayed up' feature of the health monitor. The member is marked 'Up' immediately upon the first successful probe. This is crucial for environments where rapid recovery is required, but it can lead to 'flapping' if the server is unstable. Understanding monitor timing is vital for ensuring high availability without introducing unnecessary instability in the backend pool infrastructure.

Answer

The monitor will never mark the node as up.

Answer

The monitor will fail to send any probes.

Answer

The monitor will use the default system timeout.