F5-CTS-LTM BIG-IP Local Traffic Manager Practice Test 8 — 15 Questions

Question 1

An LTM is configured with a 'OneConnect' profile. What is the primary purpose of this feature?

Accepted Answer

To reuse backend TCP connections for multiple client requests.. OneConnect enables TCP connection pooling between the BIG-IP and the backend servers. By keeping backend connections open even after a client request finishes, the LTM avoids the overhead of repeated TCP handshakes. This is essential for high-performance web applications, as it significantly reduces latency and server CPU consumption, allowing the backend servers to handle a higher volume of concurrent user requests more efficiently than they could with per-request connection establishment.

Answer

To encrypt traffic between the BIG-IP and the backend servers.

Answer

To enable persistence for HTTP traffic.

Answer

To limit the number of concurrent connections per client.

Question 2

Refer to the exhibit. If a client connects to the BIG-IP and the persistence profile is applied, what happens when the session expires?

Accepted Answer

The cookie is removed when the browser session ends.. The 'expiration 0' setting in the cookie persistence profile indicates that the persistence cookie is a session cookie, which persists as long as the browser remains open. Once the browser is closed, the cookie is deleted. Understanding how session versus persistent cookies function is vital for LTM administrators to manage user experience and ensure that session stickiness is maintained correctly across different browser behaviors and application requirements.

Answer

The cookie remains on the client machine until manually deleted.

Answer

The BIG-IP forces the client to re-authenticate immediately.

Answer

The cookie remains valid for 3600 seconds as the default.

Question 3

Which component of the BIG-IP LTM architecture is responsible for performing the actual load balancing decisions based on the configured algorithm?

Accepted Answer

Traffic Management Microkernel (TMM). The Traffic Management Microkernel (TMM) is the core engine of the BIG-IP. It handles all packet processing, protocol parsing, and load balancing decisions. Mastering TMM's role is essential for LTM certification, as it allows administrators to understand why the BIG-IP can perform high-speed Layer 7 inspection and why it is so much more efficient than software-based load balancers that rely on general-purpose operating system networking stacks.

Answer

Configuration Utility (GUI)

Answer

Local Traffic Manager (LTM) daemon

Answer

iControl API

Question 4

An LTM administrator needs to ensure that only encrypted traffic is accepted by a Virtual Server. Which profile should be configured?

Accepted Answer

Client SSL profile. The Client SSL profile is required to handle incoming encrypted traffic. By assigning this profile, the BIG-IP acts as the SSL endpoint. This is a foundational concept in secure application delivery. Properly configuring SSL termination ensures that the BIG-IP can inspect the traffic for security threats and load-balance it effectively while offloading the computationally expensive decryption process from the backend application servers.

Answer

Server SSL profile

Answer

TCP profile

Answer

HTTP profile

Question 5

Which profile type is used to optimize the delivery of HTTP traffic, such as enabling GZIP compression or caching?

Accepted Answer

HTTP profile. The HTTP profile is the engine for Layer 7 application optimization. It allows administrators to manipulate headers, compress content for faster delivery, and cache static assets. Because LTM is a full-proxy architecture, it can perform these optimizations on the fly, reducing the load on backend servers and decreasing the time to first byte, which is crucial for modern web performance metrics.

Answer

TCP profile

Answer

Client SSL profile

Answer

OneConnect profile

Question 6

Refer to the exhibit. Why is the 'http' profile required in this virtual server configuration?

Accepted Answer

To allow the LTM to inspect and modify HTTP headers.. The 'http' profile is required because the BIG-IP LTM needs to parse the HTTP headers to perform application-level functions like persistence, compression, or header manipulation. Even if the Virtual Server simply forwards traffic, the presence of an HTTP profile enables the TMM to understand the protocol structure. This is critical for any LTM configuration that requires visibility into the payload for security or load-balancing logic.

Answer

To enable hardware acceleration for SSL processing.

Answer

To define the backend server pool members.

Answer

To enable port translation for the virtual server.

Question 7

When troubleshooting a persistent connection issue, which LTM feature allows you to view active persistence entries?

Accepted Answer

Traffic Management Shell (tmsh) persistence table. The persistence table contains a real-time mapping of client sessions to specific pool members. Viewing this table is the most effective way to determine if persistence is working correctly. It is a fundamental troubleshooting step for LTM specialists, as it confirms whether client traffic is being directed to the intended server or if a conflict in the persistence configuration is causing sessions to be misrouted.

Answer

Configuration Utility Dashboard

Answer

Virtual Server Statistics

Answer

Log files in /var/log/ltm

Question 8

An administrator needs to ensure that a pool member remains part of the load balancing rotation only if it responds to specific HTTP GET requests on port 80, rather than just TCP SYN. Which action should the administrator perform?

Accepted Answer

Create and assign an HTTP monitor with a specific 'Send' and 'Receive' string.. To validate application-level health rather than just network reachability, a custom monitor is required. By creating an HTTP or HTTPS monitor, the BIG-IP sends specific requests and verifies the content of the response. This ensures that the web service itself is functional, not just the underlying operating system or network stack, preventing the delivery of requests to unresponsive or malfunctioning application services.

Answer

Configure an ICMP monitor on the pool member.

Answer

Enable the 'Priority Group Activation' feature on the pool.

Answer

Change the pool's Load Balancing method to 'Least Connections'.

Question 9

Refer to the exhibit. The BIG-IP LTM is configured with a simple TCP monitor. Users report that while the BIG-IP shows the pool members as 'Up', they receive a '503 Service Unavailable' error when accessing the application. What is the most likely reason for this?

Accepted Answer

The application-level health check is missing or insufficient.. A TCP monitor only confirms that the port is open and the operating system is accepting connections, not that the application service is operational. In this case, the web server process might have crashed or be misconfigured, leading to an HTTP 503 response. The LTM treats the server as 'Up' because the TCP handshake succeeds, failing to detect the application-level failure requiring an HTTP monitor.

Answer

The TCP monitor is configured with an incorrect port.

Answer

The pool members are not responding to the TCP SYN packets.

Answer

The load balancing algorithm is set to Round Robin.

Question 10

Which component of the BIG-IP LTM architecture is primarily responsible for the initial processing and decision-making regarding whether a packet should be forwarded to a pool member?

Accepted Answer

The Virtual Server. The Local Traffic Manager (LTM) module utilizes virtual servers to intercept incoming traffic. The virtual server acts as the central point of control, evaluating incoming packets against configured rules, policies, and profiles. This architecture allows the LTM to make intelligent load balancing decisions, ensuring traffic is directed to the most appropriate pool member based on system state, performance, and specific business logic requirements.

Answer

The Pool Member

Answer

The Health Monitor

Answer

The iControl API

Question 11

What is the primary benefit of using SNAT (Source Network Address Translation) on a BIG-IP LTM system when communicating with backend pool members?

Accepted Answer

It ensures return traffic from pool members passes back through the BIG-IP.. SNAT simplifies network topology by ensuring that traffic returned from pool members to the BIG-IP always traverses the same device, even if the pool members are on different subnets or lack a default gateway pointing to the BIG-IP. This prevents asymmetric routing and ensures that the BIG-IP can correctly correlate return traffic with the original client request for session persistence and tracking.

Answer

It improves the security of the backend servers by encrypting data.

Answer

It increases the maximum number of concurrent client connections.

Answer

It eliminates the need for health monitoring of pool members.

Question 12

An administrator wants to optimize the performance of an HTTPS-based application. Which THREE configurations should they consider to reduce load on the backend servers?

Accepted Answer

Enable SSL termination on the BIG-IP.. Offloading resource-intensive tasks from the backend servers is a core function of the LTM. SSL offloading, HTTP compression, and connection pooling are key techniques. By performing decryption and compression on the BIG-IP, the backend servers are freed to focus on application logic, significantly improving response times and overall system scalability, while reducing the computational burden on the web server infrastructure.

Answer

Configure the default 'Round Robin' load balancing method.

Answer

Increase the maximum number of pool members.

Question 13

A client is experiencing intermittent connection resets when accessing an application via an LTM Virtual Server. The administrator notices that 'OneConnect' is enabled on the virtual server. What is the most likely cause for these resets?

Accepted Answer

The server-side application does not properly handle persistent connections.. OneConnect enables connection pooling, which allows the BIG-IP to keep server-side connections open for reuse. However, if the server-side application or web server doesn't support persistent HTTP connections or lacks proper keep-alive handling, it may prematurely close the connection. This mismatch results in the BIG-IP attempting to use a stale connection, leading to resets when the server rejects the subsequent HTTP requests.

Answer

The client browser is incompatible with HTTP/2.

Answer

The Virtual Server's timeout value is too high.

Answer

The load balancing method is set to 'Least Connections'.

Question 14

Refer to the exhibit. What is the primary purpose of enabling 'insert-xforwarded-for' in the HTTP profile?

Accepted Answer

To allow the server to identify the original client's IP address.. When the BIG-IP acts as a proxy, the backend servers see the BIG-IP's IP address as the source of all traffic. By inserting the X-Forwarded-For header, the BIG-IP includes the original client's IP address in the HTTP request. This allows backend applications to log the true client IP for auditing, security analysis, and personalization, which would otherwise be lost due to the LTM's source IP translation.

Answer

To hide the backend server's IP address from the client.

Answer

To increase the throughput of HTTP requests.

Answer

To bypass the need for an SSL profile.

Question 15

When configuring a BIG-IP LTM, what is the significance of the 'Service Down Action' setting on a virtual server?

Accepted Answer

It defines how the BIG-IP handles traffic when no pool members are available.. The 'Service Down Action' determines the behavior of the BIG-IP when all pool members are marked as 'Down' by the health monitor. Options include rejecting the connection, dropping it, or sending it to a fallback host. This setting is crucial for user experience, as it allows the administrator to provide a clean error response instead of letting the connection hang or time out during a total service outage.

Answer

It sets the timeout for health monitor probes.

Answer

It determines the number of concurrent connections allowed.

Answer

It enables compression for the virtual server.