F5-CTS-LTM Quick Quiz — 10 Questions

Question 1

Which CLI command is used to view the real-time status of pool members and their current connection counts?

Accepted Answer

tmsh show ltm pool. The 'tmsh show ltm pool' command is the primary tool for administrators to inspect the current state of load-balanced resources. It provides immediate visibility into member health, active connections, and traffic statistics. Being proficient with this command is essential for daily monitoring and rapid incident response, as it allows operators to quickly identify overloaded nodes or servers that have unexpectedly failed their health checks during production operations.

Answer

tmsh list ltm pool

Answer

tmsh monitor ltm pool

Answer

tmsh status ltm pool

Question 2

Refer to the exhibit. If a client connects to the BIG-IP and the persistence profile is applied, what happens when the session expires?

Accepted Answer

The cookie is removed when the browser session ends.. The 'expiration 0' setting in the cookie persistence profile indicates that the persistence cookie is a session cookie, which persists as long as the browser remains open. Once the browser is closed, the cookie is deleted. Understanding how session versus persistent cookies function is vital for LTM administrators to manage user experience and ensure that session stickiness is maintained correctly across different browser behaviors and application requirements.

Answer

The cookie remains on the client machine until manually deleted.

Answer

The BIG-IP forces the client to re-authenticate immediately.

Answer

The cookie remains valid for 3600 seconds as the default.

Question 3

Which load balancing method is most appropriate for a pool where servers have significantly different hardware specifications and processing capabilities?

Accepted Answer

Ratio. When pool members have varying hardware specs, simple algorithms like Round Robin perform poorly because they send equal traffic to all servers regardless of their ability to handle it. 'Ratio' load balancing allows the administrator to assign a weight to each server, ensuring more powerful servers receive a higher proportion of traffic, which optimizes overall application performance and prevents the saturation of weaker servers.

Answer

Round Robin

Answer

Least Connections

Answer

Observed

Question 4

Which profile is essential to enable when you need to inspect or manipulate HTTP traffic, such as inserting X-Forwarded-For headers?

Accepted Answer

HTTP Profile. The HTTP profile is required for any Layer 7 processing. Without an HTTP profile, the BIG-IP treats traffic as raw TCP streams. By enabling the HTTP profile, the LTM gains the ability to parse HTTP requests and responses, allowing for features like header manipulation, cookie persistence, and content switching, which are standard requirements for modern web application delivery controllers.

Answer

TCP Profile

Answer

Client SSL Profile

Answer

FastL4 Profile

Question 5

What is the primary function of the 'OneConnect' profile in a BIG-IP LTM configuration?

Accepted Answer

To enable TCP connection reuse to backend servers.. The OneConnect profile enables connection pooling between the BIG-IP and the backend servers. By keeping backend connections open even after a client request is fulfilled, the BIG-IP can reuse these existing connections for subsequent requests. This reduces the overhead associated with the TCP three-way handshake for every new request, significantly lowering the CPU utilization on backend servers and improving overall latency.

Answer

To perform SSL decryption for client-side traffic.

Answer

To allow for HTTP header insertion.

Answer

To enforce persistence based on client IP.

Question 6

Refer to the exhibit. The BIG-IP LTM is configured with a simple TCP monitor. Users report that while the BIG-IP shows the pool members as 'Up', they receive a '503 Service Unavailable' error when accessing the application. What is the most likely reason for this?

Accepted Answer

The application-level health check is missing or insufficient.. A TCP monitor only confirms that the port is open and the operating system is accepting connections, not that the application service is operational. In this case, the web server process might have crashed or be misconfigured, leading to an HTTP 503 response. The LTM treats the server as 'Up' because the TCP handshake succeeds, failing to detect the application-level failure requiring an HTTP monitor.

Answer

The TCP monitor is configured with an incorrect port.

Answer

The pool members are not responding to the TCP SYN packets.

Answer

The load balancing algorithm is set to Round Robin.

Question 7

A company requires that traffic be load balanced based on server response time. The LTM must dynamically select the server that is currently responding the fastest. Which load balancing algorithm should be used?

Accepted Answer

Fastest. The 'Fastest' load balancing algorithm tracks the time it takes for a server to respond to a request. The BIG-IP uses this metric to dynamically direct new connections to the pool member that currently provides the lowest latency. This is highly effective in environments where server performance varies due to heterogeneous hardware or fluctuating application loads.

Answer

Round Robin

Answer

Least Connections

Answer

Observed

Question 8

Refer to the exhibit. Clients are reporting 'SSL Handshake Failure' errors. What is the most likely cause?

Accepted Answer

The cipher string excludes TLS 1.0, which some clients require.. The cipher string 'DEFAULT:!SSLv3:!TLSv1' explicitly disables TLS 1.0. Many legacy clients still require TLS 1.0 to establish a handshake. By excluding it, the BIG-IP is rejecting any connection attempt from clients that do not support TLS 1.1 or higher. This is a common configuration error when trying to harden security without auditing the client base's compatibility first.

Answer

The certificate has expired.

Answer

The virtual server is missing an HTTP profile.

Answer

The key and certificate do not match.

Question 9

An administrator wants to optimize the performance of an HTTPS-based application. Which THREE configurations should they consider to reduce load on the backend servers?

Accepted Answer

Enable SSL termination on the BIG-IP.. Offloading resource-intensive tasks from the backend servers is a core function of the LTM. SSL offloading, HTTP compression, and connection pooling are key techniques. By performing decryption and compression on the BIG-IP, the backend servers are freed to focus on application logic, significantly improving response times and overall system scalability, while reducing the computational burden on the web server infrastructure.

Answer

Configure the default 'Round Robin' load balancing method.

Answer

Increase the maximum number of pool members.

Question 10

Refer to the exhibit. The pool members are marked down. A manual test shows that 'curl -v -H "Host: www.example.com" http://<member_ip>/health.php' returns 'OK'. What is the most likely issue?

Accepted Answer

The 'receive' string does not account for the entire HTTP response body.. The health monitor configuration requires exact string matching for the 'receive' field. If the server returns extra whitespace, headers, or different formatting than expected by the BIG-IP, the match will fail. The monitor configuration in the exhibit is correct in syntax, but the 'receive' string must match exactly the data found in the raw response body, which often differs from how a terminal-based curl output displays information.

Answer

The monitor is missing the 'interval' and 'timeout' parameters.

Answer

The HTTP version in the send string is causing a protocol mismatch.

Answer

The connection should be set to 'Keep-Alive' instead of 'Close'.