F5 Networks 301b Exam - Topic 2 Question 73 Discussion

Actual exam question for F5 Networks's 301b exam

Question #: 73
Topic #: 2

An LTM Specialist has a single HTTPS virtual server doing SSL termination. No server SSL profile is defined. The pool members are on the internal VLAN answering on HTTP port 80. Users with certain browsers are experiencing issues.

Which two locations are most appropriate to gather packets needed to determine the SSL issue? (Choose two.)

Aserver interface

Buser's computer

CLTM device's external VLAN

DLTM device's internal VLAN

ELTM device's management interface

Show Suggested Answer

Suggested Answer: B

by Selma at Aug 07, 2023, 05:34 AM

Limited Time Offer

25%

Off

Get Premium 301b Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jenelle

10 months ago

Management interface won't help with SSL issues, right?

upvoted 0 times

...

Cathrine

10 months ago

Not sure if the internal VLAN will show the whole picture.

upvoted 0 times

...

Laurene

10 months ago

Wait, why not the external VLAN? Seems important too.

upvoted 0 times

...

Slyvia

10 months ago

I agree, those are the best spots to check!

upvoted 0 times

...

Marylou

10 months ago

Definitely the user's computer and the LTM device's internal VLAN.

upvoted 0 times

...

Judy

11 months ago

I'm a bit confused about the management interface; I don't recall it being relevant for SSL issues, but maybe it could provide some insights?

upvoted 0 times

...

Eura

11 months ago

I feel like we did a practice question similar to this, and I think the external VLAN could be useful to see if the SSL termination is working correctly.

upvoted 0 times

...

Luann

11 months ago

I'm not entirely sure, but I think capturing on the LTM device's internal VLAN might help too, since that's where the pool members are.

upvoted 0 times

...

Sina

11 months ago

I remember we discussed packet captures in class, and I think the user's computer could be a good place to start since it might show the browser's behavior.

upvoted 0 times

...

Mozell

11 months ago

This looks straightforward - IPSec, CHAP, and L2TP are the secure protocols that can help prevent replay attacks. I'm feeling confident about this one.

upvoted 0 times

...

Lili

11 months ago

This looks like a straightforward PivotTable slicer question. I think I can handle this one.

upvoted 0 times

...

Asha

11 months ago

I'm a little confused by the options here. VSANS, FCIP, and connecting each data mover to each subnet don't seem like the right fit for the requirements described. I'll need to carefully review VLAN technology to make sure I understand how it can solve this problem.

upvoted 0 times

...

Eulah

11 months ago

I just want to remember that punishment specifically involves a negative consequence, and I think that fits here.

upvoted 0 times

...

Catherin

11 months ago

This seems like a pretty straightforward question. I'd start by checking if the Cisco Extension Mobility service is actually configured on the phone.

upvoted 0 times

...

Leslie

1 year ago

Wait, so we're supposed to gather packets from the user's computer and the internal VLAN? Sounds like a job for the network ninja with a sniffer and a sense of adventure. *strikes a pose* Let's do this!

upvoted 0 times

...

Marta

1 year ago

Ah, the joys of SSL troubleshooting. I bet the users are just frustrated because they can't access their cat videos. *chuckles* But hey, at least they're not trying to hack the mainframe, right?

upvoted 0 times

Kris

1 year ago

B) user's computer

upvoted 0 times

...

Rosendo

1 year ago

A) server interface

upvoted 0 times

...

Annice

1 year ago

B) and D) all the way! Gotta get those packets from the user's computer and the internal VLAN to figure out what's going on. I bet the issue has something to do with the lack of a server SSL profile. *shakes head* Rookie mistake!

upvoted 0 times

Lonna

1 year ago

C) LTM device's external VLAN

upvoted 0 times

...

Tammara

1 year ago

B) user's computer

upvoted 0 times

...

Cristy

1 year ago

A) server interface

upvoted 0 times

...

Shonda

1 year ago

Hmm, I'm not sure. I was thinking A) and C) might be the way to go, but after reading the question again, I think B) and D) make more sense. Maybe I need to brush up on my SSL troubleshooting skills. *sigh*

upvoted 0 times

Georgene

1 year ago

Don't worry, SSL troubleshooting can be tricky. It's always good to review and learn more about it.

upvoted 0 times

...

Reita

1 year ago

Yeah, I agree. The user's computer and the LTM device's internal VLAN seem like the most appropriate locations.

upvoted 0 times

...

Lanie

1 year ago

I think B) and D) are the best options to gather packets for SSL troubleshooting.

upvoted 0 times

...

Darrel

1 year ago

Clearly, the answer is B) and D). The user's computer is where the problem is being observed, and the internal VLAN is where the SSL termination is happening. Capturing packets from those two locations should give us the information we need to solve this problem.

upvoted 0 times

Fabiola

1 year ago

Agreed. It's important to gather packets from those specific locations to troubleshoot effectively.

upvoted 0 times

...

Margret

1 year ago

That makes sense. By capturing packets from the user's computer and the internal VLAN, we should be able to pinpoint where the SSL issue is occurring.

upvoted 0 times

...

Cecily

1 year ago

D) LTM device's internal VLAN

upvoted 0 times

...

Kerry

1 year ago

B) user's computer

upvoted 0 times

...

Leonardo

1 year ago

Agreed. It's important to gather packets from both locations to get a complete picture of what's going wrong.

upvoted 0 times

...

Salena

1 year ago

That makes sense. By capturing packets from the user's computer and the internal VLAN, we should be able to pinpoint the SSL issue.

upvoted 0 times

...

Jacklyn

1 year ago

D) LTM device's internal VLAN

upvoted 0 times

...

Bulah

1 year ago

B) user's computer

upvoted 0 times

...

Brunilda

1 year ago

D) LTM device's internal VLAN

upvoted 0 times

...

Ivette

1 year ago

B) user's computer

upvoted 0 times

...

Viola

1 year ago

I think B) and D) are the best options to gather the packets needed to determine the SSL issue. The user's computer is where the issue is being experienced, and the internal VLAN is where the pool members are located and answering on HTTP port 80.

upvoted 0 times

...