Discuss F5 Networks 301b Exam Topic 3 Question 50

An LTM device pair is configured for failover and connection mirroring. The LTM devices are configured with virtual servers for HTTP, HTTPS with SSL offload, and SSH. An event occurs that causes a failover. HTTP and SSH sessions active at the time of failover remain active, but HTTPS sessions are dropped.

What is the root cause of this problem?

AThe SSL certificates on the LTM devices do NOT match.

BConnection mirroring is incompatible with clientssl profiles.

CSNAT automap was NOT enabled for the HTTPS virtual servers.

DConnection mirroring was NOT enabled for the HTTPS virtual servers.

Suggested Answer: B

Get Premium 301b Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Jesus 11 months ago

C seems unlikely. SNAT automap usually isn't the issue here.

Louisa 11 months ago

Wait, are you serious? I thought HTTPS sessions would stay active during failover!

Quentin 11 months ago

Definitely A. If the SSL certs don't match, that could cause issues.

Devon 12 months ago

I disagree, it could be D. They might not have enabled mirroring for HTTPS.

Emilio 12 months ago

I think it's B. Connection mirroring and clientssl profiles don't mix.

Anika 12 months ago

I’m leaning towards option D because I think connection mirroring needs to be enabled for HTTPS, but I’m not completely confident.

Merilyn 1 year ago

I feel like SNAT automap could be a factor, but I don't remember if it directly affects HTTPS sessions during failover.

Samira 1 year ago

I think I saw a similar question where the SSL certificates were the issue, but I can't recall if that applies here since the sessions are dropping.

Melda 1 year ago

I remember studying that connection mirroring can sometimes have issues with SSL, but I'm not sure if it's specifically about clientssl profiles.

Trinidad 1 year ago

I've got a strategy for this. I'll focus on the specific server types mentioned in the question and think about which ones would not be discovered.

Carla 1 year ago

I'm pretty confident that the "isolated" option is the correct answer here. Keeping each tenant's jobs isolated from the others should prevent any blocking issues. I'll go with that.

Adell 1 year ago

Right, but I feel like I'm getting confused with how many child elements are allowed. I need to make sure "PostalCodeResponse" doesn't contain any children, just the postal code itself.

F5 Networks 301b Exam - Topic 3 Question 50 Discussion