EMT Practice Test

1. Question Content...

---

Question1: To improve application security, an LTM Specialist must configure a BIG application access. The BIG IP system to authenticate the client certificate before permitting application access. The BIG-IP system must also support the ability to red to redirect users to a certificate enrolment system without generating a browser error.
Within the Client SSL profile, which value should the LTM Specialist select for the Client Certificate option?

Question2: An LTM Specialist is removing some of the load off an existing cluster by adding a adding a third BIG-IP device to the device group. The new device can deliver twice the performance of the other two devices.
The LTM Specialist needs to make sure that the BIG-IP device with the highest available capacity is always selected to take over a traffic group in the event of a failover.
Which failover method is most appropriate?

Question3: AN LTM Specialist is setting up a new HTTPS virtual server to decrypt client traffic. SNAT the traffic and send the encrypted traffic to the poor member, the client's IP address must be included in the traffic sent to the pool member.
What is a complete set of profiles that must be configured for the virtual server to meet these requirements?

Question4: An LTM Specialist is experiencing issues in a failover event. Certain long-lasting FTP event. Certain long-lasting FTP connections using a single node pool are forced to reconnect. The bigip.conf extract is shown:

What does the LTM Specialist need to change in the configuration to avoid this issue?

Question5: A new web application is being deployed Mutual SSL authentication must be used to authenticate clients.
Which of the following two tasks must be completed to meet the requirements? (Choose two)

Question6: in which Application Visibility and Reporting (AYR) profile must the SMTP profile be defined to configure notifications via email?

Question7: TWO BIG-IP appliances need to be configured to load balance multiple firewall in a firewall sandwich, Which health monitor setting should be used to verify that the firewalls are able to forward traffic?

Question8: A virtual server is configured to handle https traffic. The clientssl profile is configured to use a2048-bit RSA key. Due to security requirements, is the LTM Specialist needs to use a 4096-bit RSA key in the future.
What two effects will this change have on the BIG-IP device? (Choose two)

Question9: A customer wants to select the pool for an application based on information found in the path of the URL.
For example:
http://www.example.com/app 1 should be sent to the app 1 pool
http.//www.exampie.com/app 2 should be sent to the app2 pool
Which two profiles need to be assigned to the virtual server? (Choose two.)

Question10: An LTM Specialist needs to load balance an application using an LTM device to meet the requirements:
The application servers do NOT Support SSL, but client access to the application should be secured.
Multiple requests from the same client should be sent to the same pool member.
All pool members will have roughly the same processing power, and traffic should be distributed evenly.
The LTM device is NOT the pool members' default gateway.
which configuration should the LTM Specialist.

Question11: Two LTM devices must be manually configured to restrict in the same Device Group.
What is the correct order of steps to meet this requirement?

Question12: A virtual server configuration for traffic destined to a server is as shown:

FTP traffic is destined to the 192.168.1.101 server from the source of 192.168.2.129.
Based on precedence, which virtual server accepts this traffic?

Question13: An LTM Specialist must reconfigure a BIG-IP system that load balances traffic to a web application. The security department has informed the LTM Specialist that the following cipher string must be used for TLS connections from BIG-IP to the web application.
NATIVE:IMDS:EXPORT:IDHE:EDH@SPEED
In which virtual server profile should the cipher string be configured?

Question14: An SSL application is being migrated to the LTM device. Both encrypted and unencrypted traffic are accepted by the server. The virtual server configuration is as follows:

Which LTM device profile should be used on the LTM device to reduce the CPU load on the current.

Question15: An LTM Specialist needs to configure a virtual server with the requirements displayed below.
Application is currently an internal HTTP application
Encrypted external user access
Links are hard for siteA example.com and need to rewritten to siteB.Example.com Which profiles must the LTM Specialist use to provide the proper functionality?

Question16: A BIG IP system load balances connections to a web application. A TCP-based Denial of Service attack against the web application is occurring, which has caused very high memory utilization on the LTM device due to stale TCP connections.
Which TCP profile option should be used to reduce memory utilization?

Question17: A VCMP guest has the following characteristics:
* Resources allocated for CPU memory, network interfaces, and disk space
* Virtual disk created
* The guest is NOT running
The guest is NOT running in which state is the VCMP guest

Question18: An LTM Specialist needs to configures virtual server that uses PVA or OPVA Which virtual server type should be used?

Question19: Refer to the exhibit.

An LTM Specialist has multiple SNAT and virtual server objects configured as in the bigip.conf shown.
The LTM Specialist tests a connection from a client with. IP 172.163.31.11 to 192.168.0.100:80.
Which two objects will show an increase in Local Traffic statistics connections?

Question20: An LTM Specialist observes decreased performance and intermittent connection reap LTM system.

Based on the configuration, which action will address these issues?

Question21: The network team has recently added a new syslog server with IP address 10.1.1.1.
Which command adds the new syslog entry on the F5 LTM device?
A)

B)

C)

D)

Question22: An LTM Specialist is configuring a virtual server with an IP address.
Which configuration is unsupported?

Question23: Exhibit.

The LTM devices LTM1 and LTM2 are configured in a Device Group (Sync Failover) with Network Failover configured on both the management and HA and Internal VLANS. and ConfigSync is confined in a Device Group (Sync Failover) with Network Failover and internal are tagged on a single trunk with subnets Connection Mirroring is configured on both the HA interlace directly connected between LTM1 and LTM2, and the management interlace is connected to a management switch. The LTM devices have four Traffic Groups defined, and both LTM devices are healthy and capable of passing traffic for any of the Traffic Groups.
An LTM Specialist disconnects the cable for the HA network in an effort to test failover.
Which HA functionality works in this case?

Question24: An LTM Specialist configures a new virtual server with a single pool member. The LTM Specialist has NOT defined a health monitor for the pool, pool member or node.
What is the status of the virtual server?

Question25: An ITM Specialist has the configuration shown:

The LTM Specialist needs to create a new virtual server in part B.
Which virtual address(es) should be used for the new virtual server?

Question26: An LTM Administrator receives an email from the NOC stating that the switch connected to the backend server was shut down for maintenance. The BIG-IP device handles only UDP traffic. The BIG IP device did not fail over to a DR location when no pool members were available.
When the LTM Administrator checks the pool, it confirms that the monitor is still marking UP the pool member.
A tcpdump of the traffic shows the following output:

A list of the monitor configuration shows the following:

Which two modifications to the LTM configuration will mark this pool member down, when the switch is down? (Choose two.)

Question27: A web server is being overloaded with HTTPS traffic. To decrease the load on the server, the LTM Specialist and the Server. Administrator decide to perform SSL offloading on the LTM device. The configuration of the virtual server is as follows:

Which change must be made to the configuration to perform SSL offloading?

Question28: An LTM specialist needs to upgrade a VCMP quest in an HA Setup with minimum interruption for all VCMP guest instances.
In which should the LTM Specialist perform this upgrade?

Question29: One LTM device in an HA pair of LTM devices is unable to reach its default gateway. An HA Failover event needs to happen.
Which configuration item enables this behavior?

Question30: set payload {CACHE :: payload}
}
Which two profiles should be used on the virtual server? (Choose two.)

Question31: A node is assigned two monitors as seen in this configuration.

What is the status of a member that runs on that node and listens on port 443?

Question32: An LTM Specialist regularly provides analytics reports that show that traffic generated by different subnets within the organization. The LTM Specialist needs show the associate department names next the IP addresses in the reports.
Which step should the LTM Specialist take to meet this requirement?

Question33: AN LTM Specialist receives reports that an external company application is having reliability issues. The F5 Administrator finds the following in /vat/log/ltm file.

The LTM Specialist determines that the F5 LTM device is entering into Aggressive Mode Adaptive Reaping, which is causing the site reliability issues.
What is the most likely reason that the LTM device has entered into Aggressive Mode Adaptive Reaping?

Question34: Which Standard Virtual Server settings should an LTM Specialist use to load balance across routed path of two different ISPs?

Question35: Refer to the exhibit.

The http monitor is applied to a pool. All members are enabled. One server responds as follows.

What is the resulting status of this poo! member?

Question36: An LTM Specialist must reconfigure a BIG-IP LTM system that load balances traffic to web application servers. The application developer inform the LTM Specialist that TLS must be used to communicate with the application servers.
Which additional profile is required as part of virtual server configuration?

Question37: An LTM device needs to be configured a virtual server. The application requires SSL encryption from the client to the server and an X-Forwarded-For added by the LTM device.
Which virtual server type should the LTM Specialist use?

Question38: Refer to the exhibit.

The pool shown is configured with four pool members in a variety of states. The application is receiving a large number of request. The LTM Specialist needs to make changes to make sure that all members receive the same levels of traffic.
Which changes need to be made?

Question39: A BIG IP system load balances connections to a web application. A TCP-based Denial of Service attack against the web application is occurring, which has caused very high memory utilization on the LTM device due to stale TCP connections.
Which TCP profile option should be used to reduce memory utilization?

Question40: A virtual server is experiencing intermittent port exhaustion. What should be done to fix this issue?

Question41: What should the LT'M Specialist add to the virtual server?

Question42: An unwanted IP address tries to connect to the configuration utility via Self IP An LTM Specialist needs to block the attempts based on the IP address.
How should the ITM Specialist block the attempts without affecting other users?

Question43: A new iRule needs to be tested. The LTM Specialist needs to measure page load times and monitor potential changes in memory usage A load test is scheduled.
Which two features should the LTM Specialist use to monitor these requirements? (Choose two.)

Question44: An LTM Specialist has recently taken over administration or an LTM device that has experienced resource availability issues. The LTM device will need to be solely used for load balancing and SSL offload. Previously, the LTM device was also used to provide statistical analysis of application traffic. However, that functionality has been moved to a third party solution.
Based on the output below, which configuration change should be made to ensure the LTM module receives the most amount of resources?

Question45: An LTM specialist needs to create a new account with the admin role called "newadmin' and access to all partitions.
Which tmsh command should be executed?

Question46: A design requires the LTM device to become HA standby when the one of the two physical interface on the External trunk is down the External trunk is an interface on the External VLAN Which TMOS command enables this behavior?

Question47: An LTM Specialist needs to apply SNAT using currently used SNAT pool to a new virtual server.
What needs to be completed before applying that configuration change?

Question48: Exhibit.

An LTM Specialist needs to configure VS^HTTP and VS_DB for an online shopping site. The VS HTTP passes the client requests to the webservers. The webservers query the database servers through the VS_DB. Initially, the LTM Specialist finds the database servers directly return the packets to the webservers.
which setting must be enabled for the configuration to function correctly?

Question49: An LTM Specialist needs to add a pool that will load balance MYSOL services. It has four members, each with differing hardware platforms. All pool members are already assigned to another pool for load balancing FTP traffic.
Which load balancing method is most effective when the LTM Specialist sets up the pool?

Question50: Remote users who access the LTM device are authenticated via Radius. The default remote user role is Guest Some users need LTM device with the Administrator role. The F5 Radius attributes are configure on the Radius server.
Which configuration item needs to be created?