301B practice questions 31–40

1. Question 31 · 197 in bank

   A web application requires knowledge of the client's true IP address for logging and analysis purposes. Instances of the application that can decode X- Forwarded-For HTTP headers reside in pool_a, while pool_b instances assume the source IP is the true address of the client. Which iRule provides the proper functionality?

   • Awhen HTTP_DATA { if {[HTTP::header exists X-Forwarded-For]}{ pool pool_a } else { pool pool_b } }
   • Bwhen HTTP_RESPONSE { if {[HTTP::header exists X-Forwarded-For]}{ pool pool_a } else { pool pool_b } }
   • Cwhen HTTP_REQUEST { if {[HTTP::header exists X-Forwarded-For]}{ pool pool_a } else { pool pool_b } }
   • Dwhen HTTP_OPEN { if {[HTTP::header exists X-Forwarded-For]}{ pool pool_a } else { pool pool_b }

   Show answer

   Answer: C

   Next question

2. Question 32 · 197 in bank

   There is a fault with an LTM device load balanced trading application that resides on directly connected VLAN vlan-301. The application virtual server is 10.0.0.1:80 with trading application backend servers on subnet 192.168.0.0/25. The LTM Specialist wants to save a packet capture with complete payload for external analysis. Which command should the LTM Specialist execute on the LTM device command line interface?

   • Atcpdump -vvv -w /var/tmp/trace.cap 'net 192.168.0.0/25'
   • Btcpdump -vvv -s 0 -w /var/tmp/trace.cap 'net 192.168.0.0/25'
   • Ctcpdump -vvv -nni vlan-301 -w /var/tmp/trace.cap 'net 192.168.0.0/25'
   • Dtcpdump -vvv -s 0 -nni vlan-301 -w /var/tmp/trace.cap 'net 192.168.0.0/25'

   Show answer

   Answer: D

   Next question

3. Question 33 · 197 in bank

   An LTM Specialist has just captured trace /var/tmp/trace.cap for site www.example.com while listening on virtual address 10.0.0.1:443 configured on partition ApplicationA. The data payload being captured is SSL encrypted. Which command should the LTM Specialist execute to decrypt the data payload?

   • Assldump -Aed -nr /var/tmp/trace.cap -k /config/filestore/files_d/Common_d/certificate_d/:Common:www.example.com.crt_1
   • Bssldump -Aed -nr /var/tmp/trace.cap -k /config/filestore/files_d/Common_d/certificate_key_d/:Common:www.example.com.key_1
   • Cssldump -Aed -nr /var/tmp/trace.cap -k /config/filestore/files_d/ApplicationA_d/certificate_d/:ApplicationA:www.example.com.crt_1
   • Dssldump -Aed -nr /var/tmp/trace.cap -k /config/filestore/files_d/ApplicationA_d/certificate_key_d/:ApplicationA:www.example.com.key_1

   Show answer

   Answer: B

   Next question

4. Question 34 · 197 in bank

   An LTM Specialist must perform a packet capture on a virtual server with an applied standard FastL4 profile. The virtual server 10.0.0.1:443 resides on vlan301. Which steps should the LTM Specialist take to capture the data payload successfully while ensuring no other virtual servers are affected?

   • AThe standard FastL4 profile should have PVA acceleration disabled. Then the packet capture tcpdump -ni vlan301 should be executed on the command line interface.
   • BThe packet capture tcpdump -ni vlan301 should be executed on the command line interface. There is no need to change profiles or PVA acceleration.
   • CA new FastL4 profile should be created and applied to the virtual server with PVA acceleration disabled. Then the packet capture tcpdump -ni vlan301 should be executed on the command line interface.
   • DThe LTM device is under light load. The traffic should be mirrored to a dedicated sniffing device. On the sniffing device, the packet capture tcpdump -ni

   Show answer

   Answer: C

   Next question

5. Question 35 · 197 in bank

   A new VLAN vlan301 has been configured on a highly available LTM device in partition ApplicationA. A new directly connected backend server has been placed on vlan301. However, there are connectivity issues pinging the default gateway. The VLAN self IPs configured on the LTM devices are 192.168.0.251 and 192.168.0.252 with floating IP 192.168.0.253. The LTM Specialist needs to perform a packet capture to assist with troubleshooting the connectivity. Which command should the LTM Specialist execute on the LTM device command line interface to capture the attempted pings to the LTM device default gateway on VLAN vlan301?

   • Atcpdump -ni /ApplicationA/vlan301 'host 192.168.0.253'
   • Btcpdump -ni vlan301 'host 192.168.0.253'
   • Ctcpdump -ni /ApplicationA/vlan301 'host 192.168.0.251 or host 192.168.0.252'
   • Dtcpdump -ni vlan301 'host 192.168.0.251 or host 192.168.0.252'

   Show answer

   Answer: A

   Next question

6. Question 36 · 197 in bank

   Select 2

   An LTM device pool has suddenly been marked down by a monitor. The pool consists of members 10.0.1.1:443 and 10.0.1.2:443 and are verified to be listening. The affected virtual server is 10.0.0.1:80. Which two tools should the LTM Specialist use to troubleshoot the associated HTTPS pool monitor via the command line interface? (Choose two.)

   • Acurl
   • Btelnet
   • Cssldump
   • Dtcpdump

   Show answer

   Answer: AC

   Next question

7. Question 37 · 197 in bank

   An LTM Specialist needs to modify the logging level for tcpdump execution events. Checking the BigDB Key, the following is currently configured: sys db log.tcpdump.level { value "Notice" } Which command should the LTM Specialist execute on the LTM device to change the logging level to informational?

   • Atmsh set /sys db log.tcpdump.level value informational
   • Btmsh set /sys db log.tcpdump.level status informational
   • Ctmsh modify /sys db log.tcpdump.level value informational
   • Dtmsh modify /sys db log.tcpdump.level status informational

   Show answer

   Answer: C

   Next question

8. Question 38 · 197 in bank

   An application is configured on an LTM device: Virtual server: 10.0.0.1:80 (VLAN vlan301) SNAT IP: 10.0.0.1 - Pool members: 10.0.1.1:8080, 10.0.1.2:8080, 10.0.1.3:8080 (VLAN vlan302) Which packet capture should the LTM Specialist perform on the LTM device command line interface to capture only client traffic specifically for this virtual server?

   • Atcpdump -ni 0.0:nnn -s 0 'host 10.0.0.1' -w /var/tmp/trace.cap
   • Btcpdump -ni vlan301 -s 0 'port 80 and host 10.0.0.1' -w /var/tmp/trace.cap
   • Ctcpdump -ni vlan301 -s 0 'port 8080 and host 10.0.1.1 or host 10.0.1.2 or host 10.0.1.3' -w /var/tmp/trace.cap
   • Dtcpdump -ni vlan302 -s 0 'port 8080 and host 10.0.1.1 or host 10.0.1.2 or host 10.0.1.3' -w /var/tmp/trace.cap
   • Etcpdump -ni 0.0:nnn -s 0 '(port 80 and host 10.0.0.1) or (port 8080 and host 10.0.1.1 or host 10.0.1.2 or host 10.0.1.3)' -w /var/tmp/trace.cap

   Show answer

   Answer: B

   Next question

9. Question 39 · 197 in bank

   Select 2

   An LTM Specialist is running the following packet capture on an LTM device: ssldump -Aed -ni vlan301 'port 443' Which two SSL record message details will the ssldump utility display by default? (Choose two.)

   • AHTTP Version
   • BUser-Agent
   • CClientHello
   • DServerHello
   • EIssuer

   Show answer

   Answer: CD

   Next question

10. Question 40 · 197 in bank

    Given this as the first packet displayed of an ssldump: 2 2 1296947622.6313 (0.0001) S>CV3.1(74) Handshake ServerHello - Version 3.1 - random[32]= 19 21 d7 55 c1 14 65 63 54 23 62 b7 c4 30 a2 f0 b8 c4 20 06 86 ed 9c 1f 9e 46 0f 42 79 45 8a 29 session_id[32]= c4 44 ea 86 e2 ba f5 40 4b 44 b4 c2 3a d8 b4 ad 4c dc 13 0d 6c 48 f2 70 19 c3 05 f4 06 e5 ab a9 cipherSuite TLS_RSA_WITH_RC4_128_SHA compressionMethod NULL In reviewing the rest of the ssldump, the application data is NOT being decrypted. Why is ssldump failing to decrypt the application data?

    • AThe application data is encrypted with SSLv3.
    • BThe application data is encrypted with TLSv1.
    • CThe data is contained within a resumed TLS session.
    • DThe BigDB Key Log.Tcpdump.Level needs to be adjusted.

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

301B practice, question 31. 197 questions available.