[2023年更新]合格できるF5 301a試験最新150問題
ゲット2023年最新の無料F5 301a試験問題 アンサー
F5 301a 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
| トピック 6 |
|
| トピック 7 |
|
| トピック 8 |
|
| トピック 9 |
|
| トピック 10 |
|
質問 # 15
Refer to the following iRule:
What is a complete list of profiles that must be applied to the virtual server for this iRule?
- A. TCP, HTTP
- B. Fast L4, HTTP
- C. TCP, HTTP, Client SSL
- D. Fast L4 , HTTP, Stream
正解：A
質問 # 16
An LTM Specialist creates an Analytics wide to show the type of browsers used to access a certain application. However, the generated statistics only sum up all transaction for that application under one item called ' Aggregated.'' What should the LTM Specialist do to resolve this problem?
- A. Make sure ''User Agent'' is selected in the Analytics profile.
- B. Drill down into the stats to show the User Agents correlated in the Aggregated group.
- C. Verify that the Analytics profile is assigned to the applications virtual server.
- D. Make sure ''User Sessions'' is selected in the Analytics profile
正解：A
質問 # 17
An LTM device an application that requires all connections to be secured via SSL The device must verify that request contain a specific cookie before allowing the request to be sent to the pool member.
Which virtual server type should an LTM Specialist configure on the LTM device?
- A. Standard
- B. Forwarding (IP)
- C. Performance (HTTP)
- D. Performance (Layer 4)
- E. Stateless
正解：A
質問 # 18
AN LTM Specialist is deploying an iRule designed to determine the country of origin of an incoming client connection. The iRule needs to be used with an SSL-enabled web application.
Which profile required for the iRule to function properly?
- A. UDP
- B. DNS
- C. HTTP
- D. TCP
正解：D
解説：
Question stem requires the client IP to match the source region, so TCP ?UDP at the transport layer can meet the requirements. The title stem mentions that it is a Web application based on SSL, and it does not mention F5 undertakes SSL offload, So TCP is enough.
質問 # 19
An ITM Specialist has the configuration shown:
The LTM Specialist needs to create a new virtual server in part B.
Which virtual address(es) should be used for the new virtual server?
- A. 10.90.0.1 and 10.100.0.1
- B. 10.90.0.1 and 10.12.0.1
- C. 10.120.0.1 only
- D. 10.100.0.1 and.10.120.0.1
正解：D
質問 # 20
An LTM Specialist plans to enable connection mirroring for a virtual server in an HA environment.
What must the LTM Specialist consider before implementing the configuration change?
- A. Creating the required separate interface for connection mirroring
- B. Impact on system performance that might be noticeable
- C. Decreased number of possible concurrent connections to that virtual server
- D. The add-on license that is required for this feature to be available
正解：B
解説：
Connection mirroring will bring performance consumption
質問 # 21
An LTM Specialist needs to enable TCP connection re-use for a non-HTTP application. The application uses a simple request response protocol where each request and response is contained within a single packet.
Which configuration option should the LTM Specialist adjust?
- A. increase the connection limit for pool members
- B. use a Performance (Layer 4) Virtual Server
- C. increase the idle Timeout in a custom TCP profile
- D. assign a OneConnect profile
正解：D
質問 # 22
An LTM Specialist is configuring a client profile to offload processing a new application Company policy requires that clients can resume session for up to 30 minutes, but must renegotiate a new session after that.
Which setting should the LTM Specialist change to satisfy this requirement?
- A. Cache size
- B. Cache timeout
- C. Renegotiate Max Record Delay
- D. Renegotiation period
正解：B
解説：
Question stem requires that you can resume SSL session within 30 minutes, then you need to define the ssl cache time in 30 minutes
質問 # 23
An LTM Specialist is removing some of the load off an existing cluster by adding a adding a third BIG-IP device to the device group. The new device can deliver twice the performance of the other two devices.
The LTM Specialist needs to make sure that the BIG-IP device with the highest available capacity is always selected to take over a traffic group in the event of a failover.
Which failover method is most appropriate?
- A. HA Group
- B. Load Aware
- C. Ordered List
- D. HA Capacity
正解：C
質問 # 24
AN LIM Specialist must upgrade the VCMP Guest active/standby LTM pair from version 11.3 to 11.5.3 on two VCMP Hosts.
where should the LTM Specialist import the latest 11.5.3 ISO images?
- A. to both VCMP Hosts
- B. to the secondary vCMP Host and the standby Guest instance
- C. to the VCMP Guest instances
- D. to the primary VCMP Host and the active Guest instance
正解：C
質問 # 25
An LTM Specialist must reconfigure a BIG-IP system that load balances traffic to a web application. The security department has informed the LTM Specialist that the following cipher string must be used for TLS connections from BIG-IP to the web application.
NATIVE:IMDS:EXPORT:IDHE:EDH@SPEED
In which virtual server profile should the cipher string be configured?
- A. Rewrite profile
- B. Server SSL
CB. Client SSL - C. SPDY profile
正解：B
解説：
Require SSL and flow F5 to server, server ssl
質問 # 26
A new web application is being deployed Mutual SSL authentication must be used to authenticate clients.
Which of the following two tasks must be completed to meet the requirements? (Choose two)
- A. configure the client SSL profile with the Trusted .Certificate Authorities
- B. configure the client SSL profile with "Client Certificate" set to require
- C. instruct the desktop team to update the web browser to the most recent release
- D. configure the server SSL profile with "Client Certificate" Set to require
- E. generate a CSR to register a certificate with the CA
正解：A、B
質問 # 27
An LTM is configure an application that is separated into several subdomains across multiple virtual servers. Many of these subdomains require encryption and could be accessed by anyone on the internet. The configuration must NOT result in SSL warnings to end users.
How should the LTM Specialist configure the SSL profiles for these virtual servers?
- A. Create a self-singed SSL certificate for each subdomain make a ClientSSL profile for each subdomain, and apply to the related SSL Virtual server
- B. Obtain an SSL certificate for each subdomain, make a ServerSSL profile for each subdomain, and apply to the related SSL Virtual Server.
- C. Obtain a wildcard certificate, create one ClientSSL profile and apply to all SSL Virtual Servers
- D. Create a self-singed SSL certificate for each subdomain make a Client profile for each SSL Virtual Server
正解：C
解説：
The topic is that there are multiple domain names in the business, and HTTPS services are provided to the internet, and users cannot be allowed to generate SSL alarms. The require client ssl and use CA certificate instead of self-singed certificate. And multiple domain names, you can use wildcard certificates.
質問 # 28
Exhibit.
- The ITM devices LTM 1 and LTM2 are configured in Device Group X (Sync-Failover)
- LTM3 and LTM4 are configured in Device Group Y (Sync-Only)
- An LTM specialist configures Device Group Z (Sync-Only) to keep several profiles in (sync-Only) to keep several profiles in sync across all devices.
- Device GROUP X has four Traffic Groups A, B, C and D configured.
- Device Group Y has four Traffic Groups E, F, G, and H configured
- Auto Fallback IS NOT Enabled.
- Each Device group is healthy and able to pass traffic for any traffic group assigned to that Device Group.
The data center that contains LTM2 and LTM4 loses power. After 10 minutes; power is restored and all devices are up and healthy.
What is the state of each Traffic Group on each ITM device after power is restored?
A)
B)
C)
D)
- A. Option C
- B. Option B
- C. Option A
- D. Option D
正解：C
質問 # 29
A new iRule needs to be tested. The LTM Specialist needs to measure page load times and monitor potential changes in memory usage A load test is scheduled.
Which two features should the LTM Specialist use to monitor these requirements? (Choose two.)
- A. Tmsh show sys proc-info
- B. Analytics
- C. Tmsh show memory
- D. Tmsh show sys provision
Explanation
Need to detect memory changes in real time, use to Page load times with Analytics profile
正解：A、B
質問 # 30
An HA pair of LTM devices that load balance multiple HTTPS applications utilizes highly customized RAM Cache and compression profiles on each virtual server. The LTM Specialist who is administering the HA pair regularly observes entines in the log similar to the following:
tmm tmm I708S1 011e0002.4. sweeper_update: aggressive mode activated (117504/138240 pages) No DoS attacks arc occurring. No user problems have been reported. Which step should the LTM Specialist take to help mitigate the issue?
- A. use a OneConnect profile
- B. change the Adaptive Reaping Low watermark
- C. allocate less memory to the RAM cache feature
- D. change the Adaptive Reaping High watermark
正解：B
質問 # 31
Refer to the exhibit
Given the bigip conf extract shown where the servers only talk http on port 80, which node will receive the next user request?
- A. 10.1.1.3
- B. 72.10.1.1
- C. 10.1.1.2 0
- D. 10.1.1.1
正解：A
質問 # 32
An LTM specialist needs to upgrade a VCMP quest in an HA Setup with minimum interruption for all VCMP guest instances.
In which should the LTM Specialist perform this upgrade?
- A. Failover all guests' active traffic-group to the other host, copy image to guest, create guest UCS install and set boot location to new volume, reboot, Relicense the host
- B. Failover all guests' active traffic-group to the other Host, Relicense the host, copy image to guest, create guest UCS, install and set boot location to new volume , reboot
- C. Failover this specific guest's active traffic-group to the other Host, Relicense the guest, copy image to guest , create guest UCS, install and set boot location to new volume, reboot
- D. Relicense the host. Failover all guest's active traffic-groups to the other host, copy image to gest, create guest UCS install and set boot location to new volume, reboot
正解：B
解説：
Switch guest, reactive, license first and then upgrade.
質問 # 33
An LTM Specialist regularly provides analytics reports that show that traffic generated by different subnets within the organization. The LTM Specialist needs show the associate department names next the IP addresses in the reports.
Which step should the LTM Specialist take to meet this requirement?
- A. use an iRule to change the output of the report
- B. create VLANs for each subnet and set the name accordingly
- C. define active subnets and assign a name to certain subnets
- D. export the report and add the department names manually
正解：B
質問 # 34
To improve application security, an LTM Specialist must configure a BIG application access. The BIG IP system to authenticate the client certificate before permitting application access. The BIG-IP system must also support the ability to red to redirect users to a certificate enrolment system without generating a browser error.
Within the Client SSL profile, which value should the LTM Specialist select for the Client Certificate option?
- A. Require
- B. Request
- C. ignore
- D. Demand
正解：A
質問 # 35
An LTM Specialist needs to provide statistics regarding the round-trip time between the clients and the servers.
Which metric should be part of the analytics profile to provide that information?
- A. Max TPS and Throughout
- B. Response Codes
- C. Page Load Time
- D. User Sessions
正解：C
質問 # 36
......
F5 301a試験は、認定F5 BIG-IP LTMスペシャリストになりたいITプロフェッショナルを対象としています。この試験は、BIG-IP Local Traffic Manager（LTM）ソリューションのアーキテクチャ、セットアップ、展開に焦点を当てています。試験は難しく、合格するためには徹底的な準備が必要です。
F5 301A試験では、BIG-IP LTMシステムアーキテクチャ、高度な交通管理の概念、およびさまざまなタイプの仮想サーバー、プール、プロファイルを構成する機能についての候補者の理解をテストします。この試験では、高可用性と冗長性のオプション、セキュリティ機能、トラブルシューティング技術に関する候補者の知識も評価します。この試験に合格すると、候補者は、エンタープライズ環境のニーズを満たすためにF5 BIG-IP LTMシステムを構成および展開するために必要なスキルと知識を持っていることを示しています。
高合格率301aテスト問題集解答と正解150問題と回答：https://jp.fast2test.com/301a-premium-file.html
301a問題集PDFとテストエンジン試験問題：https://drive.google.com/open?id=1W6dJyhOJeTVnk7gmX5gGfjvxFS0s3HuM