F5-CTS-LTM BIG-IP Local Traffic Manager Practice Test 4 — 15 Questions

Question 1

A company requires a highly available environment using BIG-IP LTM. Which TWO conditions must be met to ensure that a failover event occurs only when necessary? (Choose two)

Accepted Answer

Enable Network Failover on a dedicated, low-latency VLAN.. High Availability (HA) configuration requires careful tuning of failure triggers to prevent flapping. Establishing a dedicated heartbeat network ensures state synchronization without interference from production traffic. Monitoring specific services, such as interface status or gateway reachability, allows the BIG-IP to detect genuine failures. Proper configuration prevents unnecessary failovers, which could otherwise cause service disruption and impact user experience, especially during high-load scenarios where temporary latency might be misinterpreted as a system outage.

Answer

Set the failover state to 'Active' on all traffic groups.

Answer

Set the failover trigger to 'Any Service Down' for all services.

Answer

Disable device service clustering to prevent state corruption.

Question 2

Refer to the exhibit. An LTM Specialist is troubleshooting a virtual server that is returning a 'Connection refused' error. Given the provided configuration, what is the most likely cause?

Accepted Answer

The pool 'pool_test' has no available members.. The virtual server configuration lacks an HTTP profile, but more importantly, the 'Connection refused' error indicates the BIG-IP is not accepting the TCP SYN packet or has no valid pool members to process the request. Since the virtual server is defined but the pool is empty or all members are down, the BIG-IP is failing to proxy the connection, resulting in the standard TCP reset or refusal.

Answer

The virtual server is missing a default SNAT pool.

Answer

The virtual server is missing an HTTP profile.

Answer

The TCP profile 'tcp-lan-optimized' is incompatible with port 80.

Question 3

An LTM Specialist needs to ensure that all HTTP traffic is redirected to HTTPS. Which THREE components are necessary to achieve this? (Choose three)

Accepted Answer

An HTTP profile associated with the virtual server.. Redirecting traffic from HTTP to HTTPS requires a combination of LTM objects. An HTTP profile enables parsing, an iRule or Local Traffic Policy provides the redirection logic, and an SSL profile on the destination virtual server decrypts the secure traffic. This workflow is a fundamental requirement for securing web applications, as it forces users onto encrypted channels, protecting sensitive data from interception while maintaining a user-friendly access experience.

Answer

A SNAT pool with at least two IP addresses.

Answer

A Server SSL profile to re-encrypt the traffic.

Question 4

Which BIG-IP feature allows an LTM Specialist to view real-time traffic statistics and connection details for a specific virtual server?

Accepted Answer

Traffic Management Shell (tmsh). The 'tmsh show ltm virtual' command is the primary tool for real-time traffic analysis. It provides essential metrics such as current connections, total connections, and throughput. Monitoring these statistics is vital for performance tuning, troubleshooting connection failures, and capacity planning, as it allows specialists to observe how traffic patterns influence the BIG-IP resource utilization and overall application health.

Answer

iHealth

Answer

TCPDump

Answer

High Availability (HA) Group

Question 5

Which of the following describes the correct order of processing for BIG-IP LTM traffic as it moves through the system?

Accepted Answer

Virtual Server match, iRules/Policy, then Pool Selection.. Understanding the traffic flow is critical for troubleshooting. The BIG-IP processes traffic in a specific sequence: it hits the virtual server, matches an iRule/Policy, checks persistence, and finally selects a load-balancing pool. Knowing this order helps specialists isolate where a configuration change might be failing, such as identifying if a redirect rule is being ignored because it's processed after the load-balancing decision is already made.

Answer

Pool selection, then iRules, then persistence.

Answer

Persistence, then Virtual Server match, then iRules.

Answer

Pool selection, then Virtual Server match, then persistence.

Question 6

What is the purpose of the BIG-IP LTM 'Self IP' address?

Accepted Answer

To manage communication with backend servers.. Self IPs are used by the BIG-IP to communicate with backend servers and to act as a gateway for traffic. They are critical for network connectivity, enabling the BIG-IP to reach pool members for health checks and to forward client requests. Understanding Self IP configuration is essential for network troubleshooting, as it defines how the BIG-IP interacts with the various VLANs and subnets within the internal and external network topology.

Answer

To allow clients to connect to the virtual server.

Answer

To provide a management IP for the configuration utility.

Answer

To store SSL certificates and private keys.

Question 7

An LTM is configured with a Performance (L4) virtual server. Which TWO of the following statements regarding this virtual server type are true?

Accepted Answer

It requires the FastL4 profile to be applied.. Performance (L4) virtual servers use the BIG-IP hardware acceleration (FPGA/TMM) to process traffic at high speeds by bypassing the full TCP stack. This is highly efficient for high-throughput scenarios where deep packet inspection is not required. Understanding these limitations is vital for architects who must balance the need for extreme performance against the loss of advanced Layer 7 features provided by standard virtual servers.

Answer

It supports full iRules processing for HTTP header modification.

Answer

It performs full TCP termination at the virtual server level.

Answer

It supports cookie-based persistence for session affinity.

Question 8

When creating a custom health monitor, which THREE of the following parameters are required or commonly configured to ensure effective server monitoring?

Accepted Answer

Send String. A custom health monitor is essential for validating application-specific health. By configuring the 'Send' string, 'Receive' string, and 'Interval' values, the LTM can perform accurate probes. These parameters allow the F5 to simulate user behavior rather than just checking if a port is open, which is crucial for identifying application-level failures that a simple TCP check would miss.

Answer

Load Balancing Method

Answer

Persistence Profile

Question 9

Refer to the exhibit. An administrator wants to implement cookie-based persistence for 'vs_web'. Based on the provided configuration, what is the current issue?

Accepted Answer

The cookie persistence profile is not applied to the virtual server.. The virtual server 'vs_web' is currently configured to use 'source_addr' persistence, not the cookie-based persistence profile. Even though a cookie profile exists, it has not been assigned to the virtual server. Correcting this is a common task, as persistence mismatches are a frequent source of session-related application errors where users are not correctly routed to the same backend server.

Answer

The cookie name is invalid.

Answer

The virtual server is missing the 'persist' command.

Answer

The expiration value must be greater than zero.

Question 10

When configuring a SNAT Automap, which IP address does the BIG-IP use as the source address for backend traffic?

Accepted Answer

The BIG-IP Self-IP address.. SNAT Automap automatically chooses the most appropriate Self-IP address of the BIG-IP to use as the source address for traffic sent to the pool members. This is a convenient and commonly used configuration that ensures backend servers see the BIG-IP as the client, simplifying network routing by ensuring the return traffic always traverses the load balancer.

Answer

The virtual server IP address.

Answer

The client's original source IP address.

Answer

A random address from the 10.0.0.0/8 range.

Question 11

Which TWO of the following are valid ways to configure persistence on a BIG-IP LTM?

Accepted Answer

Source Address Persistence. Persistence is essential for applications requiring stateful sessions. BIG-IP supports various methods, including source address persistence for simple IP-based stickiness and cookie-based persistence for HTTP applications. Choosing the right method depends on the application architecture; cookie persistence is generally preferred for web apps, while source address is common for non-HTTP traffic.

Answer

DNS Persistence

Answer

Port-based Persistence

Answer

System-based Persistence

Question 12

An administrator configures a standard Virtual Server with a destination IP of 10.10.10.50, port 443, and assigns a FastL4 protocol profile alongside a Client SSL profile. Users report that HTTPS traffic fails to establish connections. What is the root cause of this misconfiguration?

Accepted Answer

The FastL4 profile cannot perform the Layer 7 processing required to terminate Client SSL profiles.. FastL4 operates at Layer 4 and processes TCP payloads directly without decrypting SSL traffic. Client SSL and Server SSL profiles require a full proxy architecture provided by the TCP profile at Layer 7. Combining Layer 4 performance profiles with Layer 7 SSL termination profiles prevents proper handshake completion and breaks application connectivity.

Answer

The FastL4 profile bypasses the local packet filter rules required for SSL negotiation.

Answer

The destination port 443 conflicts with the default port allocation mechanism within the FastL4 profile.

Answer

The Client SSL profile requires a specialized UDP multiplexing profile to handle handshake buffers.

Question 13

An administrator needs to implement OneConnect on a BIG-IP Virtual Server to optimize backend server connection utilization for HTTP/1.1 traffic. Which TWO actions occur when OneConnect is enabled? (Choose two)

Accepted Answer

Backend server-side connections are kept open and placed into a reuse pool after an HTTP response completes.. OneConnect enables connection reuse by maintaining an idle pool of server-side connections. When a client request arrives, it can be assigned to an existing backend connection rather than opening a new TCP handshake, reducing server overhead, conserving resources, and significantly improving overall application response times across multiple client sessions.

Answer

Client-side TCP connections are automatically multiplexed over a single persistent server-side connection simultaneously.

Answer

HTTP pipelining is automatically disabled globally across all virtual servers sharing the same traffic group.

Answer

The HTTP compression profile is automatically bypassed to prevent buffering delays on pooled connections.

Question 14

A BIG-IP administrator configures a pool with three members and assigns the Least Connections (node) load balancing method. Pool member A has 2 active connections, member B has 5 active connections, and member C has 2 active connections. A new client connection arrives. Which pool member receives the connection and why?

Accepted Answer

Pool member A or C, because both share the minimum active connection count of two.. Least Connections (node) evaluates the total number of active connections across all virtual servers destined for the target node. When a tie occurs between multiple nodes like A and C, the BIG-IP system uses a deterministic tie-breaking mechanism, typically selecting the member that was least recently used or based on index order.

Answer

Pool member B, because it has the highest connection count and requires load balancing redistribution.

Answer

Pool member A only, because node indices are strictly evaluated from top to bottom.

Answer

All three pool members receive a portion of the connection via round-robin tie-breaking.

Question 15

Refer to the exhibit. An administrator implements the ratio-member load balancing method for a pool. If 120 total requests are sent to the pool, approximately how many requests will be directed to pool member 10.10.20.10:80 over time?

Accepted Answer

90 requests. Ratio load balancing distributes traffic proportionally based on the configured ratio value assigned to each pool member. Member 10.10.20.10 has a ratio of 3, and member 10.10.20.11 has a ratio of 1, resulting in a total ratio weight of 4. Therefore, member 10.10.20.10 receives 3/4 or 75 percent of the total requests.

Answer

30 requests

Answer

60 requests

Answer

120 requests