F5-CTS-LTM BIG-IP Local Traffic Manager Practice Question
A virtual server is configured with a OneConnect profile. What is the primary benefit of enabling OneConnect in this scenario?
⚠ Common exam trap
Candidates mistakenly believe OneConnect is for client-side performance, whereas its main benefit is actually reducing the number of TCP connections the backend servers must maintain and process.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It reduces the number of TCP connections opened on backend servers.
OneConnect allows the BIG-IP to reuse existing TCP connections between the BIG-IP and the backend pool members. By multiplexing many client-side requests over a smaller number of established server-side connections, it significantly reduces the overhead of TCP handshake (SYN/ACK) processes on the backend servers. This is particularly effective for high-traffic applications that use short-lived HTTP connections, leading to improved server resource utilization and overall application latency.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
It enables hardware-based SSL offloading.
Why it's wrong here
SSL offloading is handled by the Client SSL profile and the BIG-IP's hardware acceleration chips. OneConnect has no role in the SSL handshake or decryption process; its purpose is strictly limited to TCP connection reuse and management between the BIG-IP and backend servers.
- ✓
It reduces the number of TCP connections opened on backend servers.
Why this is correct
OneConnect enables TCP connection pooling. By multiplexing multiple incoming requests onto a single persistent backend connection, the BIG-IP avoids the need for the backend servers to constantly open and close new TCP sockets, which saves significant CPU and memory resources on the servers.
- ✗
It forces all traffic to be encrypted using the strongest ciphers.
Why it's wrong here
Encryption strength is controlled by the SSL profiles (Client and Server SSL). OneConnect does not interact with the encryption layer or cipher negotiation; it strictly manages the connection lifecycle at the transport layer to optimize the connection pool between the BIG-IP and the backend servers.
- ✗
It eliminates the need for Source Address persistence.
Why it's wrong here
OneConnect does not replace persistence; it is a connection management feature. While it might sometimes interact with persistence if not configured correctly (causing requests to get 'stuck' on a connection), it is not a replacement for the functional requirement of maintaining session affinity for application users.
Visual reference
About these practice questions
One of 119 original F5-CTS-LTM practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official F5 exam blueprint
This F5-CTS-LTM practice question is part of Courseiva's free F5 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the F5-CTS-LTM exam.