F5-CTS-LTM BIG-IP Local Traffic Manager Practice Question
An LTM Specialist needs to configure a virtual server to handle both HTTP and HTTPS traffic on the same IP address. Which THREE steps are required to implement this? (Select THREE)
⚠ Common exam trap
Candidates often attempt to use a single virtual server for both HTTP and HTTPS, forgetting that SSL profiles cannot be applied to cleartext traffic and separate ports are required.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create two virtual servers using the same virtual IP address.
To support both protocols, the BIG-IP needs a virtual server for each port (80 and 443). To handle them identically, they must share a pool. Additionally, the HTTPS virtual server requires an SSL profile to decrypt the traffic before it is load-balanced to the backend. This architecture allows the BIG-IP to manage both cleartext and encrypted sessions efficiently while centralizing management of the backend pool.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Create two virtual servers using the same virtual IP address.
Why this is correct
The BIG-IP allows multiple virtual servers to share the same IP address provided they listen on different ports. One for port 80 and one for port 443 is the standard configuration for hosting dual-protocol services on a single VIP address, simplifying client-side DNS management.
- ✓
Assign a Client SSL profile to the HTTPS virtual server.
Why this is correct
An HTTPS virtual server must have a Client SSL profile to terminate the TLS connection from the client. Without this profile, the BIG-IP cannot decrypt the inbound HTTPS traffic, and therefore cannot perform content inspection or load balancing based on HTTP headers.
- ✓
Assign the same pool to both virtual servers.
Why this is correct
Using the same pool for both virtual servers ensures that the backend servers receive the same traffic flow regardless of whether the client connected via HTTP or HTTPS. This creates a unified application backend and simplifies the management of server availability and health status.
- ✗
Configure a single virtual server with a wildcard port.
Why it's wrong here
While wildcard ports exist, using them for HTTP/HTTPS is poor practice. It creates security risks and makes it difficult to apply specific profiles like SSL or HTTP. Explicitly defining virtual servers for port 80 and 443 provides better control and adheres to security best practices.
- ✗
Disable the HTTP profile on the HTTPS virtual server.
Why it's wrong here
The HTTP profile is essential for layer 7 traffic management. Disabling it on the HTTPS virtual server would prevent the BIG-IP from using features like cookie persistence, iRules, or header manipulation. The HTTP profile should be enabled on both virtual servers for consistent application behavior.
About these practice questions
This F5-CTS-LTM question is part of Courseiva's 119-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official F5 exam blueprint
This F5-CTS-LTM practice question is part of Courseiva's free F5 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the F5-CTS-LTM exam.