F5 301b Practice Exam Questions

F5 301b Sample Question Answers

Question # 1

An LTM device pair is configured for failover and connection mirroring. The LTM devicesare configured with virtual servers for HTTP, HTTPS with SSL offload, and SSH. An eventoccurs that causes a failover. HTTP and SSH sessions active at the time of failover remainactive, but HTTPS sessions are dropped.What is the root cause of this problem?

A. The SSL certificates on the LTM devices do NOT match.
B. Connection mirroring is incompatible with clientssl profiles.
C. SNAT automap was NOT enabled for the HTTPS virtual servers.
D. Connection mirroring was NOT enabled for the HTTPS virtual servers.

Show Answer

Question # 2

A failover event is recorded in the following log messages:Jan 01 00:56:56 BIG-IP notice mcpd[5318]: 01070727:5: Pool /Common/my-pool member/Common/10.0.0.10:80 monitor status down.Jan 01 00:56:56 BIG-IP notice sod[5855]: 010c0045:5: Leaving active, group score 10 peergroup score 20.Jan 01 00:56:56 BIG-IP notice sod[5855]: 010c0052:5: Standby for traffic group /Common/traffic-group-1.Jan 01 00:56:56 BIG-IP notice sod[5855]: 010c0018:5: StandbyJan 01 00:57:06 BIG-IP notice logger: /usr/bin/tmipsecd --tmmcount 4 ==> /usr/bin/bigstartstop racoonWhat is the cause of the failover?

A. The HA group score changed.
B. No traffic is seen on traffic-group-1.
C. The peer device left the traffic group.
D. The racoon service stopped responding.

Show Answer

Question # 3

A device group is made up of four members: LTM-A, LTM-B, LTM-C, and LTM-D. An LTMSpecialist makes a configuration change on LTM-B. Later, a different LTM Specialistnotices a "changes pending" message on all devices. When logged into LTM-D, the LTMSpecialist attempts to config-sync to the device group. The sync operation fails.Why is the LTM Specialist on LTM-D unable to synchronize the configuration to the group?

A. The changes made on LTM-B are invalid.
B. LTM-D has the lowest commit-id of the group.
C. NTP is NOT configured on the devices in the group.
D. LTM-B is the device eligible to initiate a config-sync.

Show Answer

Question # 4

An HA pair of LTM devices configured in Active-Standby mode stops responding to traffic and causes an outage. The Active device becomes Standby, but the partner device stays in Standby mode instead of taking over as Active. A reboot and restart of the services brings the LTM device to Active mode for a short time, but then it goes into Standby mode  again.  Which two configuration components caused this condition? (Choose two.) 

A. VLAN Fail-safe
B. System Fail-safe
C. Gateway Fail-safe
D. Switch Board Failure
E. Link down on Failover

Show Answer

Question # 5

An LTM Specialist configures two LTM devices in a high-availability pair with trustsestablished and device groups configured properly using network failover. After severalmonths, the LTM Specialist notices that changes made to one LTM device do NOT causethe synchronization status to update to "changes pending," and this device does NOTsynchronize with the device group.Which two steps should the LTM Specialist take to identify the issue? (Choose two.)

A. Verify that NTP is synchronized.
B. Verify the network connectivity between the devices.
C. Verify that the devices are not using self-signed certificates.
D. Verify that ConfigSync is using the management IP address.
E. Verify that port lockdown on the ConfigSync interface is set to allow port 1026.

Show Answer

Question # 6

An LTM Specialist is troubleshooting an issue where one LTM device in a three LTMdevice group is failing to synchronize after a synchronize to group command is issued. TheLTM Specialist verifies there are no packet filters, port lock down, or network issues preventing the connection.What are two reasons the synchronization group is having issues? (Choose two.)

A. Certificates expired on all of the peer LTM devices.
B. Certificates stored for the device trusts on all of the peer LTM devices are corrupted.
C. Admin passwords changed on one of the peer LTM devices that are able tosynchronize.
D. Admin password changed on the LTM device NOT receiving the synchronizedconfigurations.
E. Certificates stored for the device trusts on the LTM device NOT receiving theconfiguration are corrupted.

Show Answer

Question # 7

An LTM Specialist has just manually failed the active LTM device over to the standby LTMdevice. The LTM Specialist notices the newly active LTM device is NOT currently receivingtraffic. The LTM Specialist verifies the newly active device is responding to ARP but still notraffic is hitting the virtual servers. The LTM Specialist also notices that the virtual serverseventually start responding.What should be added to the configuration to resolve the problem?

A. vlan failsafe
B. floating self IP
C. network failover
D. MAC masquerading
E. connection mirroring

Show Answer

Question # 8

A failover event is recorded in the log messages:Jan 01 00:00:50 BIG-IP notice sod[5855]: 01140029:5: HA proc_running tmm fails action isgo offline and down links.Jan 01 00:00:50 BIG-IP notice sod[5855]: 010c0050:5: Sod requests links down.Jan 01 00:00:50 BIG-IP notice sod[5855]: 010c0054:5: Offline for traffic group/Common/traffic-group-1.Jan 01 00:00:50 BIG-IP notice sod[5855]: 010c003e:5: OfflineJan 01 00:00:50 BIG-IP notice logger: /usr/bin/tmipsecd --tmmcount 4 ==> /usr/bin/bigstartstop racoonJan 01 00:00:50 BIG-IP info lacpd[5502]: 01160016:6: Failover event detected.(Switchboard failsafe disabled while offline)Jan 01 00:00:51 BIG-IP err bcm56xxd[5296]: 012c0010:3: Failover event detected. Markingexternal interfaces down. bsx.c(3633)Jan 01 00:00:51 BIG-IP info bcm56xxd[5296]: 012c0015:6: Link: 1.1 is DOWNJan 01 00:00:56 BIG-IP notice mcpd[5318]: 0107143c:5: Connection to CMI peer 10.0.0.3has been removedJan 01 00:00:56 BIG-IP notice mcpd[5318]: 0107143a:5: CMI reconnect timer: enabledJan 01 00:00:56 BIG-IP notice mcpd[5318]: 01071431:5: Attempting to connect to CMIpeer 10.0.0.3 port 6699What is the cause of the failover?

A. TMM failed, and VLAN fail-safe initiated the failover.
B. TMM failed, and system fail-safe initiated the failover.
C. Loss of connection to CMI peer 10.0.0.3 initiated the failover.
D. A switchboard failure caused system fail-safe to initiate the failover.

Show Answer

Question # 9

While investigating the cause of a device failover, an LTM Specialist discovers the followingevents in /var/log/ltm:01010029:5: Clock advanced by 518 ticks01010029:5: Clock advanced by 505 ticks01010029:5: Clock advanced by 590 ticks01010029:5: Clock advanced by 568 ticks01010029:5: Clock advanced by 1681 ticks01010029:5: Clock advanced by 6584 ticks01140029:5: HA daemon_heartbeat tmm fails action is failover and restart.010c0026:5: Failover condition, active attempting to go standby.Which issue caused the failover?

A. NTP being out of sync
B. TMM being descheduled
C. VLAN Fail-safe heartbeats
D. HA missing heartbeat packets

Show Answer

Question # 10

A high-availability (HA) pair configuration uses only the hardwire serial cable connection todetermine device state. A power outage occurs to the PDU powering the active unit. Thestandby unit takes over the active role as expected.How is the peer unit able to determine the active unit is unavailable?

A. voltage loss on serial cable
B. no data stream received on serial port
C. no response on management interface
D. no heartbeat packets received on self IPs

Show Answer