2023年最新の認定サンプル問題301a問題集と練習試験合格させます
301a豪華セット学習ガイドにはオンライン試験エンジン
F5 301A(Big-IP LTMスペシャリスト:Architect Setup&Deploy)認定試験は、ネットワークアーキテクチャと展開を専門としたいITプロフェッショナルにとって人気のある認定です。この認定試験は、F5 BIG-IPローカルトラフィックマネージャー(LTM)の経験があり、複雑なF5 LTM環境の設計、展開、および管理に関するスキルと知識を実証したい専門家向けに設計されています。
質問 # 15
An LTM Administrator receives an email from the NOC stating that the switch connected to the backend server was shut down for maintenance. The BIG-IP device handles only UDP traffic. The BIG IP device did not fail over to a DR location when no pool members were available.
When the LTM Administrator checks the pool, it confirms that the monitor is still marking UP the pool member.
A tcpdump of the traffic shows the following output:
A list of the monitor configuration shows the following:
Which two modifications to the LTM configuration will mark this pool member down, when the switch is down? (Choose two.)
- A. also assign a gatewayjcmp monitor to the pool
- B. enable manuai-resume on the same monitor
- C. add a reverse string to the game monitor
- D. enable reverse and wait for the next connection
- E. increase the timeout to three times the interval
正解:A、C
質問 # 16
An LTM Specialist has detected that a brute force login attack is occurring against the SSH service via a BIG-IP management interface. Login attempts are occurring from many IPs within the internal company network. BIG-IP SSH access restrictions are in place as follows:
The LTM Specialist has determined that SSH access should only occur from the 192.168.1.0/24 and 172.16.254.0/23 networks.
Which tmsh command should the LTM Specialist use to permit access from the desired networks only?
- A. modify/sys sshd login enable {''192.166.10/24'''' ''172.16 254 0/23
- B. modify /sys sshd login disable (''10.0.00/8'', ''172 16.0 0/12'', ''192. 168.0.0/16'')
- C. modify.sys sshd allow add {''192.168. 10/24 , '' ''172. 16 2540/23'')
- D. modify/sys allow replace-all-with {''192.168.1.00/24'', ''192.16.254.0/23''}
正解:D
解説:
Select C to overwrite the existing network's allow configuration over the specified network segment.
質問 # 17
A customer wants to select the pool for an application based on information found in the path of the URL.
For example:
http://www.example.com/app 1 should be sent to the app 1 pool
http.//www.exampie.com/app 2 should be sent to the app2 pool
Which two profiles need to be assigned to the virtual server? (Choose two.)
- A. TTP Compression
- B. Client SSL
- C. HTTP
- D. TCP
- E. Persistence
正解:C、D
質問 # 18
An LTM Specialist needs to deploy a virtual server that will load balance traffic targeting https://register.example.com to a set of three web servers. Persistence needs to be ensured. No persistence mirroring is allowed SSL offloading is required.
A fourth web server with fewer resources will be used to handle requests from engine bots to https://register.example.comvrobots.txt by an iRule. The (Rule will use the HTTP_REQUEST event. .
What are the required profile and persistence settings to implement this
- A. tcp, clientssl, serverssl, ssl persistence
- B. tcp, clientssl, http. cookie persistence
- C. tcp, clientssl, http, serverssl cookie persistence
- D. tcp. dientssl, hup, source address persistence
正解:B
解説:
The option is wrong, it should be clientssl and serverssl. If the title requires ssl offload instead of encryption, you need clientssl instead of serverssl. irule needs HTTP profile to enable HTTP_REQUEST. If the session cannot be mirrored, the cookie session remains to meet the demand.
質問 # 19
A web server is being overloaded with HTTPS traffic. To decrease the load on the server, the LTM Specialist and the Server. Administrator decide to perform SSL offloading on the LTM device. The configuration of the virtual server is as follows:
Which change must be made to the configuration to perform SSL offloading?
- A. Remove the clients profile
- B. Remove the clientssl and serverssl profiles
- C. Remove the clientssl and http profiles
- D. Remove the severssl profile
正解:D
質問 # 20
An LTM Specialist needs to terminate client SSL traffic and based on the cookie presented by client.
Which set of profiles should the LTM Specialist use?
- A. HTTP, Server SSL, SSL Cookie Profile
- B. HTTPS, Server SSL, SSL Cookie Profile
- C. HTTPS, Client SSL, Cookie Persistence Profile
- D. HTTP, Client SSL, Cookie Persistence Profile,
正解:D
質問 # 21
Refer to the exhibit.
An LTM Specialist configures the two syslog destination Syslog destination #1 can receive messages but the syslog destination #2 can NOT receive messages.
Which command sill correct the issue?
- A. {Common(tmos) # modify/syslog remote-servers modify {syslog_dest2 {lost.10.10.10.28 }}
- B. {/Common) (tmos) # modify /sys syslog remote-servers modify {syslog_dest2 {host 10 208.102.254 }}
- C. {/Common)(tmos) # modify Ays syslog remote servers modify {syslog_dest2 {local- ip 10.208.102 254)}
- D. {/Common)(tmos) # modify /syssyslog remote-servers modify (syslog_dest2 {local-ip
正解:D
質問 # 22
Exhibit.
The three VLANS shown provide connectivity to backend servers. The backend servers are being moved to unmanaged switches and require separate interfaces.
How should the F5 device interfaces be configured?
- A. Create a Trunk interface and select VLAN_A, VLAN_B. and VLAN_C.
- B. Create a Trunk interface and combined interface 1.1.1.2 and 1.3.
- C. Create VLAN_A move interface 1.1 to untagged. Create VLAN_B move interface 1.2 to untagged. Create VLAN_C move interface 1.3 to untagged.
- D. Create VLAN named VLAN_A enter 100 under Tag and move interface 1.1 to tagged Create VLAN_B enter 200 and move interface 1.2 to tagged Create VLAN_C Center 300 and move interface 1.3 to tagged.
正解:C
質問 # 23
An LTM Specialist needs to apply SNAT using currently used SNAT pool to a new virtual server.
What needs to be completed before applying that configuration change?
- A. Make sure that the BIG-IP device is NOT operating under heavy load during peak times
- B. Review connection for the selected SNAT pool and enlarge it if appropriate
- C. Verify that the IP address of the SNAT pool are in the same subnet as the pool members
- D. Verify that the IP address of the SNAT pool are in the same VLAN as the pool members.
SNAT does not need to in the same vlan or same network segment as the pool member, as long as the route is reachable , excluding C and D he connection information of the SNAT pool to avoid port exhaustion under high concurrency
正解:B
質問 # 24
An LTM Specialist needs to gather website statistics such as latency and throughput on the existing virtual server. This virtual server load Balances the backend web servers.
Which F5 feature will provide this?
- A. the Performance panel
- B. the Dashboard
- C. the AVR module
- D. the Statistics panel
正解:C
質問 # 25
An application requires load balancing functionality. The application must be encrypted to the client.
Certain content must be manipulated by the following IRule:
Which set of profiles must be applied to the virtual server?
- A. TCP, HTTP, OnceConnect, Stream
- B. TCP, HTTP, Client SSL, Stream
- C. TCP, HTTP server SSL Stream
- D. Fast L4, HTTP server SSL Stream
正解:B
解説:
Client encryption is required , clientssl, irule contains HTTP events and stream execution, http profile stream profile.
質問 # 26
A new HITP server has been deployed on an LTM device. The application running on the server must be monitored by the LIM device. The following is required:
A new HITP server has been deployed on an LTM device. The application running on the server must be monitored by the LIM device. The following is required:
When the server is unavailable, it will send an HTTP status code of 200 in response to a request for the status html page.
When the server is available. I will send and HTTP status code of 201 in response to a request for the status html page.
When the 200 status code is received, the pool member should receive No new connections.
Which configuration change should be made to meet these requirements?
- A. set the Send String to GET Arian and the Receive String to 200 and Receive Disable String to 201.
- B. set the Send String to GET/ status html and the Receive String to 200 and Receive Disable String to 201.
- C. set the Send String to GET Arian and the Receive Disable String to 200 and Receive String to 201.
- D. set the Send String to Get /status html and the Receive Disable String to 200 and Receive String to 201.
正解:D
質問 # 27
An LTM Specialist plans to enable connection mirroring for a virtual server in an HA environment.
What must the LTM Specialist consider before implementing the configuration change?
- A. Creating the required separate interface for connection mirroring
- B. Impact on system performance that might be noticeable
- C. Decreased number of possible concurrent connections to that virtual server
- D. The add-on license that is required for this feature to be available
正解:B
解説:
Connection mirroring will bring performance consumption
質問 # 28
A VCMP guest has the following characteristics:
* Resources allocated for CPU memory, network interfaces, and disk space
* Virtual disk created
* The guest is NOT running
The guest is NOT running in which state is the VCMP guest
- A. Provisioned
- B. Configured
- C. Deployed
- D. Offline
正解:A
質問 # 29
An LTM Specialist needs to provide statistics regarding the round-trip time between the clients and the servers.
Which metric should be part of the analytics profile to provide that information?
- A. Max TPS and Throughout
- B. Response Codes
- C. Page Load Time
- D. User Sessions
正解:C
質問 # 30
A Client makes the request displayed below to the application server.
Which virtual server type should an LTM Specialist use to load balance based on the URI?
.
- A. Standard
- B. Forwarding (Layer 2)
- C. Performance (Layer 4)
- D. Stateless
正解:A
質問 # 31
A web server's default gateway is the network router. The LTM Specialist needs to introduce an LTM device to load balance to the web servers without changing the server's default gateway.
Which deployment method and settings should the LTM Specialist use to ensure correct traffic flow and that the web servers can obtain the actual con IP addresses?
- A. route deployment without SNAT configuration
- B. SNAT deployment with automap configured
- C. route deployment with Automap configured and X-Forwarded-For inserted in HTTP headers
- D. SNAT deployment with automap configured and X-Forwarded-For inserted in HTTP headers
正解:D
質問 # 32
An HA pair of LTM devices that load balance multiple HTTPS applications utilizes highly customized RAM Cache and compression profiles on each virtual server. The LTM Specialist who is administering the HA pair regularly observes entines in the log similar to the following:
tmm tmm I708S1 011e0002.4. sweeper_update: aggressive mode activated (117504/138240 pages) No DoS attacks arc occurring. No user problems have been reported. Which step should the LTM Specialist take to help mitigate the issue?
- A. use a OneConnect profile
- B. change the Adaptive Reaping Low watermark
- C. allocate less memory to the RAM cache feature
- D. change the Adaptive Reaping High watermark
正解:B
質問 # 33
An LTM Specialist needs to configure a virtual server with the requirements displayed below.
Application is currently an internal HTTP application
Encrypted external user access
Links are hard for siteA example.com and need to rewritten to siteB.Example.com Which profiles must the LTM Specialist use to provide the proper functionality?
- A. Clientssll, Stream
- B. Clientssl, fastL4, Stream
- C. Serverless, Stream
- D. Serverless, fastL4, Stream
正解:A
解説:
For http application and external encryption, clientssl is required, and if the message content needs to be modified, the steam profile is required. FastL4 profile cannot coexist with clientssl and stream.
質問 # 34
An LTM Specialist needs to configures virtual server that uses PVA or OPVA Which virtual server type should be used?
- A. Performance (HTTP)
- B. Standard
- C. Stateless
- D. Performance (Layer 4)
正解:D
質問 # 35
A node is assigned two monitors as seen in this configuration.
What is the status of a member that runs on that node and listens on port 443?
- A. DOWN
- B. UP
- C. UNKNOWN
- D. UNAVAILABLE
正解:D
質問 # 36
Remote users who access the LTM device are authenticated via Radius. The default remote user role is Guest Some users need LTM device with the Administrator role. The F5 Radius attributes are configure on the Radius server.
Which configuration item needs to be created?
- A. User account
- B. Remote User role
- C. User role
- D. Admin account
正解:B
質問 # 37
An LTM Specialist is the administrator of an HA pair that contains two BIG IP units and one floating traffic group (TG1). A new project requires the creation of 30 virtual servers. The Specialist decides to create a new floating traffic group (TG2) to handle this requirement. Objects for this project created by the BIG-IP Managers must appears in the correct traffic group.
Which configuration should the LTM Specialist use to meet the requirement?
- A. Move the BIG-IP Managers from TG1 to TG2
- B. Restrict the Traffic Group Access of BIG-I Managers to TG2
- C. Create a new partition and set the default traffic group to TG2
- D. Modify the default traffic group of the Common partition to TG2
正解:C
質問 # 38
......
301a問題集レビュー専門クイズで学習材料:https://jp.fast2test.com/301a-premium-file.html
301aテスト準備トレーニング練習試験問題練習テスト:https://drive.google.com/open?id=1GWgcY1QNmX33PF7Hm6wRrFyD5MeTFIII