Discuss F5 Networks 301a Exam Topic 5 Question 56

A virtual server is configured to handle https traffic. The clientssl profile is configured to use a2048-bit RSA key. Due to security requirements, is the LTM Specialist needs to use a 4096-bit RSA key in the future.

What two effects will this change have on the BIG-IP device? (Choose two)

AIncrease of CPU usage on the BIG-IP device

BDecrease to 20% of licensed TPS

CDecrease to 90% of licensed TPS

DIncreased of concurrent connection on client-side

EIncrease of TLS Renegotiation

Suggested Answer: A, B

Get Premium 301a Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Rima 12 months ago

C seems extreme, not sure about that one.

Antonette 12 months ago

Totally agree, higher key size means more CPU load.

Tien 12 months ago

Wait, does a 4096-bit key really decrease TPS that much?

Shad 1 year ago

I think B is more likely than C.

Scot 1 year ago

A definitely increases CPU usage.

An 1 year ago

I recall something about TLS renegotiation, but I don't think it directly relates to the key size change. I feel like options A and C might be the right choices here.

Ettie 1 year ago

I practiced a similar question about key sizes and performance, and I think the increase in CPU usage is definitely a factor, but I'm not sure about the TPS decrease.

Vicente 1 year ago

I'm not entirely sure, but I feel like increasing the key size might impact the transactions per second. Maybe options B or C could be correct?

Odelia 1 year ago

I remember studying how key sizes affect CPU usage, so I think option A makes sense since a 4096-bit key would require more processing power.

Alida 1 year ago

I feel pretty confident about this one. The COBIT 2019 governance system design workflow is all about considering various design factors to develop a customized governance system. Option A seems to capture that best, so I'll go with that.

Nickolas 1 year ago

I have a vague memory that the Service Perimeter Guard actually adds another layer of security, which makes me question if it might be "False."

Rashad 1 year ago

I think the GatewayDiagnosticLog would be the best place to start. It should give me insights into any issues with the VPN gateway itself.

F5 Networks 301a Exam - Topic 5 Question 56 Discussion