F5-CTS-LTM Practice Questions

Question 1

Which CLI command is used to view the real-time status of pool members and their current connection counts?

Accepted Answer

tmsh show ltm pool. The 'tmsh show ltm pool' command is the primary tool for administrators to inspect the current state of load-balanced resources. It provides immediate visibility into member health, active connections, and traffic statistics. Being proficient with this command is essential for daily monitoring and rapid incident response, as it allows operators to quickly identify overloaded nodes or servers that have unexpectedly failed their health checks during production operations.

Answer

tmsh list ltm pool

Answer

tmsh monitor ltm pool

Answer

tmsh status ltm pool

Question 2

Refer to the exhibit. If a client connects to the BIG-IP and the persistence profile is applied, what happens when the session expires?

Accepted Answer

The cookie is removed when the browser session ends.. The 'expiration 0' setting in the cookie persistence profile indicates that the persistence cookie is a session cookie, which persists as long as the browser remains open. Once the browser is closed, the cookie is deleted. Understanding how session versus persistent cookies function is vital for LTM administrators to manage user experience and ensure that session stickiness is maintained correctly across different browser behaviors and application requirements.

Answer

The cookie remains on the client machine until manually deleted.

Answer

The BIG-IP forces the client to re-authenticate immediately.

Answer

The cookie remains valid for 3600 seconds as the default.

Question 3

Which load balancing method is most appropriate for a pool where servers have significantly different hardware specifications and processing capabilities?

Accepted Answer

Ratio. When pool members have varying hardware specs, simple algorithms like Round Robin perform poorly because they send equal traffic to all servers regardless of their ability to handle it. 'Ratio' load balancing allows the administrator to assign a weight to each server, ensuring more powerful servers receive a higher proportion of traffic, which optimizes overall application performance and prevents the saturation of weaker servers.

Answer

Round Robin

Answer

Least Connections

Answer

Observed

Question 4

Which profile is essential to enable when you need to inspect or manipulate HTTP traffic, such as inserting X-Forwarded-For headers?

Accepted Answer

HTTP Profile. The HTTP profile is required for any Layer 7 processing. Without an HTTP profile, the BIG-IP treats traffic as raw TCP streams. By enabling the HTTP profile, the LTM gains the ability to parse HTTP requests and responses, allowing for features like header manipulation, cookie persistence, and content switching, which are standard requirements for modern web application delivery controllers.

Answer

TCP Profile

Answer

Client SSL Profile

Answer

FastL4 Profile

Question 5

What is the primary function of the 'OneConnect' profile in a BIG-IP LTM configuration?

Accepted Answer

To enable TCP connection reuse to backend servers.. The OneConnect profile enables connection pooling between the BIG-IP and the backend servers. By keeping backend connections open even after a client request is fulfilled, the BIG-IP can reuse these existing connections for subsequent requests. This reduces the overhead associated with the TCP three-way handshake for every new request, significantly lowering the CPU utilization on backend servers and improving overall latency.

Answer

To perform SSL decryption for client-side traffic.

Answer

To allow for HTTP header insertion.

Answer

To enforce persistence based on client IP.

Question 6

Refer to the exhibit. The BIG-IP LTM is configured with a simple TCP monitor. Users report that while the BIG-IP shows the pool members as 'Up', they receive a '503 Service Unavailable' error when accessing the application. What is the most likely reason for this?

Accepted Answer

The application-level health check is missing or insufficient.. A TCP monitor only confirms that the port is open and the operating system is accepting connections, not that the application service is operational. In this case, the web server process might have crashed or be misconfigured, leading to an HTTP 503 response. The LTM treats the server as 'Up' because the TCP handshake succeeds, failing to detect the application-level failure requiring an HTTP monitor.

Answer

The TCP monitor is configured with an incorrect port.

Answer

The pool members are not responding to the TCP SYN packets.

Answer

The load balancing algorithm is set to Round Robin.

Question 7

A company requires that traffic be load balanced based on server response time. The LTM must dynamically select the server that is currently responding the fastest. Which load balancing algorithm should be used?

Accepted Answer

Fastest. The 'Fastest' load balancing algorithm tracks the time it takes for a server to respond to a request. The BIG-IP uses this metric to dynamically direct new connections to the pool member that currently provides the lowest latency. This is highly effective in environments where server performance varies due to heterogeneous hardware or fluctuating application loads.

Answer

Round Robin

Answer

Least Connections

Answer

Observed

Question 8

Refer to the exhibit. Clients are reporting 'SSL Handshake Failure' errors. What is the most likely cause?

Accepted Answer

The cipher string excludes TLS 1.0, which some clients require.. The cipher string 'DEFAULT:!SSLv3:!TLSv1' explicitly disables TLS 1.0. Many legacy clients still require TLS 1.0 to establish a handshake. By excluding it, the BIG-IP is rejecting any connection attempt from clients that do not support TLS 1.1 or higher. This is a common configuration error when trying to harden security without auditing the client base's compatibility first.

Answer

The certificate has expired.

Answer

The virtual server is missing an HTTP profile.

Answer

The key and certificate do not match.

Question 9

An administrator wants to optimize the performance of an HTTPS-based application. Which THREE configurations should they consider to reduce load on the backend servers?

Accepted Answer

Enable SSL termination on the BIG-IP.. Offloading resource-intensive tasks from the backend servers is a core function of the LTM. SSL offloading, HTTP compression, and connection pooling are key techniques. By performing decryption and compression on the BIG-IP, the backend servers are freed to focus on application logic, significantly improving response times and overall system scalability, while reducing the computational burden on the web server infrastructure.

Answer

Configure the default 'Round Robin' load balancing method.

Answer

Increase the maximum number of pool members.

Question 10

Refer to the exhibit. The pool members are marked down. A manual test shows that 'curl -v -H "Host: www.example.com" http://<member_ip>/health.php' returns 'OK'. What is the most likely issue?

Accepted Answer

The 'receive' string does not account for the entire HTTP response body.. The health monitor configuration requires exact string matching for the 'receive' field. If the server returns extra whitespace, headers, or different formatting than expected by the BIG-IP, the match will fail. The monitor configuration in the exhibit is correct in syntax, but the 'receive' string must match exactly the data found in the raw response body, which often differs from how a terminal-based curl output displays information.

Answer

The monitor is missing the 'interval' and 'timeout' parameters.

Answer

The HTTP version in the send string is causing a protocol mismatch.

Answer

The connection should be set to 'Keep-Alive' instead of 'Close'.

Question 11

Refer to the exhibit. A user connects to Virtual Server A, which uses the 'my_source_persistence' profile. The user is then redirected to Virtual Server B. Given the configuration, will the persistence record be honored?

Accepted Answer

No, because match-across-virtuals is disabled.. The persistence profile has 'match-across-virtuals' set to 'disabled'. Because this attribute is disabled, the BIG-IP will not share persistence information between Virtual Server A and Virtual Server B. When the user lands on Virtual Server B, the system will initiate a new load balancing decision instead of respecting the persistence session established on the first virtual server, which is crucial for managing multi-virtual server architectures.

Answer

Yes, because the timeout is set to 180 seconds.

Answer

Yes, because source-addr persistence is global.

Answer

No, because the timeout must be set to indefinite.

Question 12

Which TWO of the following are primary benefits of using an iApp Template for BIG-IP deployment?

Accepted Answer

Simplified management by grouping related LTM objects into a single logical entity.. iApp templates provide a structured, simplified interface for deploying complex applications. By abstracting the creation of multiple objects (virtual servers, pools, profiles, iRules) into a single deployment unit, they reduce the risk of human error and configuration drift. These templates are essential for maintaining consistency across large environments and ensuring that best practices are followed during every configuration step.

Answer

Automatic translation of proprietary application logic into F5 proprietary TCL scripts.

Answer

Direct execution of remote SQL queries to backend database servers for load balancing.

Answer

Automatic hardware upgrades of the BIG-IP platform when capacity is reached.

Question 13

You have a requirement to distribute traffic to pool members based on the total number of active connections each server is currently handling. Which load balancing method should be selected?

Accepted Answer

Least Connections (member). The 'Least Connections' method is the correct choice for load balancing based on active session counts. This algorithm dynamically tracks the current load on each server and directs new requests to the member with the fewest active connections. It is essential for application environments where individual requests vary significantly in duration or resource consumption, preventing any single server from becoming overwhelmed.

Answer

Round Robin

Answer

Ratio (member)

Answer

Observed (member)

Question 14

Refer to the exhibit. The web_pool is currently offline with zero active members. An LTM Specialist checks the backend servers and finds they are both responding to pings. What is the most likely reason for the pool being offline?

Accepted Answer

The health monitor is misconfigured or the service is down.. The pool status is 'offline' and 'children are down' despite servers being reachable via ping. This indicates the health monitor configured on the pool is failing, likely because the specific service (e.g., HTTP on port 80) is not responding or the monitor is misconfigured. Ping only tests network layer connectivity, whereas LTM monitors test application-layer availability, which is the standard for determining if a server can actually process traffic.

Answer

The virtual server is disabled.

Answer

The default route on the BIG-IP is missing.

Answer

The SNAT pool is exhausted.

Question 15

Why would an LTM Specialist choose to implement a SNAT Automap instead of a SNAT pool?

Accepted Answer

To reduce administrative overhead for simple configurations.. SNAT Automap is the simplest way to manage source translation because it automatically uses the BIG-IP's floating self-IP address. It is ideal for environments where a dedicated pool of IP addresses is not required. This reduces administrative complexity and configuration overhead, which is beneficial for smaller deployments or scenarios where the backend servers only need to see the BIG-IP as the source of traffic.

Answer

To increase security by using multiple source IP addresses.

Answer

To prevent port exhaustion on the BIG-IP.

Answer

To allow backend servers to track unique client IP addresses.

F5 Certified Technology Specialist: BIG-IP LTM F5-CTS-LTM practice test

Three ways to study

Study F5-CTS-LTM by domain

Study F5-CTS-LTM by topic

BIG-IP Local Traffic Manager practice questions

F5-CTS-LTM fundamentals practice questions

F5-CTS-LTM scenario practice questions

F5-CTS-LTM troubleshooting practice questions

F5 Certified Technology Specialist: BIG-IP LTM practice questions