F5-CTS-LTM BIG-IP Local Traffic Manager Practice Test 9 — 15 Questions

Question 1

Refer to the exhibit. What is the effect of the 'mask' setting in this source address persistence profile?

Accepted Answer

It groups clients from the same class C network for persistence.. The mask setting in a source address persistence profile allows the BIG-IP to group clients by subnet rather than individual IP address. By setting the mask to 255.255.255.0, the LTM treats all clients originating from the same /24 network as a single entity for persistence purposes. This is particularly useful in environments where many users share a gateway or proxy, preventing persistence table exhaustion.

Answer

It hides the individual client's IP from the backend server.

Answer

It limits the number of connections allowed from each subnet.

Answer

It causes the LTM to ignore the source IP entirely.

Question 2

An administrator wants to use an iRule to change the pool for an incoming request based on the URI. Which event should be used in the iRule?

Accepted Answer

HTTP_REQUEST. The HTTP_REQUEST event is the correct choice for inspecting HTTP traffic. It triggers as soon as the BIG-IP has parsed the HTTP request headers, allowing the iRule to evaluate the URI, cookies, or other headers. This is the optimal point to perform content-based switching, as it happens before the request is forwarded to a pool member, ensuring the load balancing decision is based on application-layer information.

Answer

CLIENT_ACCEPTED

Answer

HTTP_RESPONSE

Answer

LB_SELECTED

Question 3

What is the primary function of the 'FastL4' profile in a BIG-IP LTM configuration?

Accepted Answer

To provide high-throughput, hardware-accelerated packet switching.. The FastL4 profile is designed for high-performance, layer 4 load balancing. It optimizes the processing of TCP or UDP traffic by bypassing the full proxy architecture for the majority of the connection's lifecycle. This allows the BIG-IP to handle a significantly higher volume of throughput and connections per second, making it ideal for large-scale deployments where deep application-layer inspection (layer 7) is not required for the specific traffic type.

Answer

To enable advanced HTTP header inspection.

Answer

To perform SSL offloading for encrypted traffic.

Answer

To manage persistence based on HTTP cookies.

Question 4

Which object in the BIG-IP LTM configuration is responsible for mapping a virtual server's incoming traffic to a specific group of backend servers?

Accepted Answer

Pool. A pool is the fundamental LTM object used to group backend servers together to handle traffic. The virtual server references a pool, and the load balancing algorithm determines which member within that pool receives the request. Understanding this relationship is critical for basic traffic management, as it is the primary mechanism for abstracting backend infrastructure and providing high availability services to clients.

Answer

Profile

Answer

Node

Answer

SNAT

Question 5

Which THREE actions are required to successfully implement SSL offloading on a BIG-IP virtual server?

Accepted Answer

Import the server certificate and private key into the BIG-IP's certificate store.. SSL offloading requires the BIG-IP to decrypt traffic before it reaches the backend. This involves importing the server's certificate and key, creating a Client SSL profile, and ensuring the virtual server is listening on the correct port (typically 443). By offloading SSL, the LTM can inspect traffic, perform security checks, and manage persistence, which is not possible if the traffic remains encrypted from the client to the backend server.

Answer

Create a Server SSL profile and assign it to the virtual server.

Answer

Enable the 'Allow All' cipher suite in the SSL profile.

Question 6

An administrator observes that the 'Least Connections' load balancing algorithm is not distributing traffic as evenly as expected. What is the most probable reason?

Accepted Answer

Persistence profiles are overriding the load balancing algorithm.. Least Connections distributes traffic based on the number of active connections to each pool member. If persistence is enabled, the BIG-IP will send subsequent requests from the same client to the same server, regardless of the load balancing algorithm. Consequently, persistence overrides the load balancing decision, leading to uneven distribution if certain sessions are longer or more active than others.

Answer

The pool members have different weight values configured.

Answer

The TCP profile is set to 'OneConnect' mode.

Answer

The health monitor is failing intermittently.

Question 7

Refer to the exhibit. The web server logs show the source IP is the BIG-IP Self IP. Why is this happening despite the X-Forwarded-For configuration?

Accepted Answer

SNAT is enabled on the virtual server, causing source translation.. The 'Insert X-Forwarded-For' setting only adds an HTTP header; it does not change the source IP address of the TCP packet. If the backend server sees the BIG-IP Self IP, it is because SNAT (Secure Network Address Translation) is active and is translating the client's source IP to the BIG-IP's address. The X-Forwarded-For header is present, but the server must be configured to read it.

Answer

The HTTP profile is misconfigured and needs an iRule to function.

Answer

The virtual server is missing a Client SSL profile.

Answer

The pool members are in a different subnet than the virtual server.

Question 8

What is the primary function of a BIG-IP LTM monitor?

Accepted Answer

To determine the availability of a pool member.. Monitors are used to verify the operational status and health of backend pool members. By periodically checking specific services, the BIG-IP ensures that traffic is only sent to functional servers. This prevents black-holing traffic and maintains high availability, as the BIG-IP will automatically stop sending requests to any member that fails its configured health check, providing seamless failover for users.

Answer

To encrypt traffic between the client and the BIG-IP.

Answer

To balance traffic load across multiple pool members.

Answer

To translate source IP addresses for outgoing traffic.

Question 9

Which load balancing method is most appropriate for a pool where servers have significantly different hardware specifications and processing capabilities?

Accepted Answer

Ratio. When pool members have varying hardware specs, simple algorithms like Round Robin perform poorly because they send equal traffic to all servers regardless of their ability to handle it. 'Ratio' load balancing allows the administrator to assign a weight to each server, ensuring more powerful servers receive a higher proportion of traffic, which optimizes overall application performance and prevents the saturation of weaker servers.

Answer

Round Robin

Answer

Least Connections

Answer

Observed

Question 10

Refer to the exhibit. The administrator wants to use cookie persistence, but it is not working. What is missing from the configuration?

Accepted Answer

The virtual server is missing a default persistence profile.. The cookie persistence profile is defined but not actually attached to the virtual server. In BIG-IP LTM, simply creating a profile is not enough; it must be explicitly assigned to the virtual server under the 'persistence' section of the virtual server configuration. Without this assignment, the LTM does not know to inject the cookie into the response headers.

Answer

The cookie profile mode must be set to 'rewrite'.

Answer

The HTTP profile needs to be set to 'oneconnect'.

Answer

The virtual server requires an iRule to parse the cookie.

Question 11

Which statement best describes the difference between a 'Node' and a 'Pool Member' in the BIG-IP LTM configuration?

Accepted Answer

Nodes represent the physical IP, whereas pool members represent the service port.. A Node is a device defined by its IP address, which exists independently of any pool. A Pool Member is an instance of a node assigned to a specific pool, often including port and monitor settings. This distinction is crucial because multiple pools can reference the same node, allowing administrators to manage health and load balancing for different services independently on the same physical backend server.

Answer

Nodes are defined at the virtual server level, while pool members are defined globally.

Answer

Nodes are only used for health monitoring, while pool members handle traffic.

Answer

Pool members are not required for load balancing traffic.

Question 12

What is the primary risk of using a wildcard (0.0.0.0/0) virtual server on a BIG-IP system?

Accepted Answer

It significantly increases the attack surface by exposing all ports.. A wildcard virtual server intercepts all traffic directed to the BIG-IP on any port for any destination IP address. If not carefully configured with specific iRules or policies, this can lead to security vulnerabilities, such as exposing management or internal interfaces to public traffic. It significantly increases the attack surface of the network and is generally discouraged unless strictly required for specific gateway or firewall-like functionalities.

Answer

It prevents the use of SSL profiles on the virtual server.

Answer

It causes high CPU utilization due to packet inspection overhead.

Answer

It disables the BIG-IP's ability to use persistence.

Question 13

What is the result of applying a 'FastL4' profile to a virtual server?

Accepted Answer

It provides high-performance L4 load balancing.. The FastL4 profile is designed for high-performance, transport-layer load balancing. It bypasses the full proxy capabilities of the BIG-IP, meaning it cannot perform L7 inspection, HTTP header manipulation, or SSL offloading. This is ideal for scenarios like UDP traffic, streaming, or simple TCP load balancing where maximizing throughput and minimizing latency are more important than application-level traffic modification or security features.

Answer

It allows the BIG-IP to perform HTTP header insertion.

Answer

It enables SSL termination on the virtual server.

Answer

It creates a stateful firewall for all traffic.

Question 14

An LTM administrator needs to ensure that a pool member remains in the pool but stops receiving new connections while existing connections are allowed to finish. Which action should the administrator perform?

Accepted Answer

Set the pool member state to 'Disabled'.. Setting a pool member to 'Disabled' state is the standard operational procedure for graceful maintenance. It prevents new connections from being established via the load balancing algorithm while allowing established persistence records or active sessions to complete their lifecycle. This is critical for preventing service disruption during application updates or server-side patching cycles, ensuring a seamless user experience while managing backend resources effectively.

Answer

Set the pool member state to 'Offline'.

Answer

Force the pool member to 'Offline'.

Answer

Delete the pool member from the pool.

Question 15

Refer to the exhibit. A user connects to Virtual Server A, which uses the 'my_source_persistence' profile. The user is then redirected to Virtual Server B. Given the configuration, will the persistence record be honored?

Accepted Answer

No, because match-across-virtuals is disabled.. The persistence profile has 'match-across-virtuals' set to 'disabled'. Because this attribute is disabled, the BIG-IP will not share persistence information between Virtual Server A and Virtual Server B. When the user lands on Virtual Server B, the system will initiate a new load balancing decision instead of respecting the persistence session established on the first virtual server, which is crucial for managing multi-virtual server architectures.

Answer

Yes, because the timeout is set to 180 seconds.

Answer

Yes, because source-addr persistence is global.

Answer

No, because the timeout must be set to indefinite.