Weekend Sale 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: sale65best

Free F5 301a Practice Exam with Questions & Answers | Set: 4

Questions 31

An LTM Specialist decides to offload SSL traffic on the LTM device instead of just passing it through. The LTM Specialist needs to change the configure from a Performance (Layer 40 virtual server to a Standard virtual server with SSL offload.

Which two element the LTM Specialist consider when performance this task? (Choose two.)

Options:
A.

CPU load

B.

Sensitive connections

C.

Port exhaustion

D.

Memory load

E.

Connection mirroring

F5 301a Premium Access
Questions 32

A web application is configured as follows:

301a Question 32

What should be modified to set a maximum request limit?

Options:
A.

Virtual server settings

B.

HTTP profile

C.

Pool settings

D.

ICP Profile

Questions 33

An LTM device provides load balancing to a web application? The LTM device has two dual-core processors and a licensed SSL Transactions Per Second (TPS) limit of 500 CMP is enabled.

TLS connections are used between client systems and virtual servers on the LTM device, as well as from the LTM device to servers used as part of LTM pool.

TLS enabled virtual servers utilize certificates based on 2048-bit keys

During a peak period. 2560 new TLS transactions per second are attempted to the web application via the LTM device.

What will happen in this scenario?

Options:
A.

560 new TLS transactions will be silently discarded due to the SSL TPS license limit

B.

Nothing: TLS transactions per second are NOT affected by an SSL TPS license limit

C.

2060 new TLS transactions will be silently discarded due to the SSL TPS license limit

D.

Nothing: 2560 TLS transactions per second is within the SSI TPS license limit.

Questions 34

A BIG IP system load balances connections to a web application. A TCP-based Denial of Service attack against the web application is occurring, which has caused very high memory utilization on the LTM device due to stale TCP connections.

Which TCP profile option should be used to reduce memory utilization?

Options:
A.

Idle timeout

B.

Reset on timeout

C.

Slow Start

D.

Multipath TCP

Questions 35

Two LTM devices must be manually configured to restrict in the same Device Group.

What is the correct order of steps to meet this requirement?

Options:
A.

Configure VLAN, Configure-Sync IP, Configure Failover type, Establish Device Trust, Sync Device Trust, Create type, Establish Device Sync Device Trust, Create Device Group.

B.

Configure VLAN, Configure Self-IPs, Configure Config-Sync IP. Configure Failover type, Establish Device Trust, Sync Device Trust, Create Device Group.

C.

Configure Self-IPs, Configure VLAN, Configure Config-Sync IP. Configure Failover type, Establish Device Trust, Sync Device Trust, Create Device Group

D.

Configure VLAN, Configure Config-Sync IP. Configure Self-IPs. Configure Failover type. Establish Device Trust, Create Device Group

Questions 36

In an iApp, which configuration protects against accidental changes to an application Services configuration?

Options:
A.

Components

B.

Strict Updates

C.

Name

D.

Template

Questions 37

A web server is being overloaded with HTTPS traffic. To decrease the load on the server, the LTM Specialist and the Server. Administrator decide to perform SSL offloading on the LTM device. The configuration of the virtual server is as follows:

301a Question 37

Which change must be made to the configuration to perform SSL offloading?

Options:
A.

Remove the clientssl and http profiles

B.

Remove the clients profile

C.

Remove the clientssl and serverssl profiles

D.

Remove the severssl profile

Questions 38

A virtual server is configured to handle https traffic. The clientssl profile is configured to use a2048-bit RSA key. Due to security requirements, is the LTM Specialist needs to use a 4096-bit RSA key in the future.

What two effects will this change have on the BIG-IP device? (Choose two)

Options:
A.

Increase of CPU usage on the BIG-IP device

B.

Decrease to 20% of licensed TPS

C.

Decrease to 90% of licensed TPS

D.

Increased of concurrent connection on client-side

E.

Increase of TLS Renegotiation

Questions 39

An LTM specialist needs to upgrade a VCMP quest in an HA Setup with minimum interruption for all VCMP guest instances.

In which should the LTM Specialist perform this upgrade?

Options:
A.

Relicense the host. Failover all guest’s active traffic-groups to the other host, copy image to gest, create guest UCS install and set boot location to new volume, reboot

B.

Failover this specific guest’s active traffic-group to the other Host, Relicense the guest, copy image to guest , create guest UCS, install and set boot location to new volume, reboot

C.

Failover all guests’ active traffic-group to the other Host, Relicense the host, copy image to guest, create guest UCS, install and set boot location to new volume , reboot

D.

Failover all guests’ active traffic-group to the other host, copy image to guest, create guest UCS install and set boot location to new volume, reboot, Relicense the host

Questions 40

A new web application is being deployed Mutual SSL authentication must be used to authenticate clients.

Which of the following two tasks must be completed to meet the requirements? (Choose two)

Options:
A.

configure the server SSL profile with "Client Certificate" Set to require

B.

configure the client SSL profile with "Client Certificate" set to require

C.

instruct the desktop team to update the web browser to the most recent release

D.

generate a CSR to register a certificate with the CA

E.

configure the client SSL profile with the Trusted .Certificate Authorities

Exam Code: 301a
Certification Provider: F5
Exam Name: BIG-IP LTM Specialist: Architect Set-Up & Deploy
Last Update: Jul 13, 2025
Questions: 147