F5 Networks 301b Exam - Topic 3 Question 50 Discussion

Actual exam question for F5 Networks's 301b exam

Question #: 50
Topic #: 3

[All 301b Questions]

An LTM device pair is configured for failover and connection mirroring. The LTM devices are configured with virtual servers for HTTP, HTTPS with SSL offload, and SSH. An event occurs that causes a failover. HTTP and SSH sessions active at the time of failover remain active, but HTTPS sessions are dropped.

What is the root cause of this problem?

AThe SSL certificates on the LTM devices do NOT match.

BConnection mirroring is incompatible with clientssl profiles.

CSNAT automap was NOT enabled for the HTTPS virtual servers.

DConnection mirroring was NOT enabled for the HTTPS virtual servers.

Show Suggested Answer

Suggested Answer: B

by Cecil at May 04, 2022, 10:16 PM

Limited Time Offer

25%

Off

Get Premium 301b Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jesus

3 months ago

C seems unlikely. SNAT automap usually isn't the issue here.

upvoted 0 times

...

Louisa

3 months ago

Wait, are you serious? I thought HTTPS sessions would stay active during failover!

upvoted 0 times

...

Quentin

4 months ago

Definitely A. If the SSL certs don't match, that could cause issues.

upvoted 0 times

...

Devon

4 months ago

I disagree, it could be D. They might not have enabled mirroring for HTTPS.

upvoted 0 times

...

Emilio

4 months ago

I think it's B. Connection mirroring and clientssl profiles don't mix.

upvoted 0 times

...

Anika

4 months ago

I’m leaning towards option D because I think connection mirroring needs to be enabled for HTTPS, but I’m not completely confident.

upvoted 0 times

...

Merilyn

4 months ago

I feel like SNAT automap could be a factor, but I don't remember if it directly affects HTTPS sessions during failover.

upvoted 0 times

...

Samira

4 months ago

I think I saw a similar question where the SSL certificates were the issue, but I can't recall if that applies here since the sessions are dropping.

upvoted 0 times

...

Melda

5 months ago

I remember studying that connection mirroring can sometimes have issues with SSL, but I'm not sure if it's specifically about clientssl profiles.

upvoted 0 times

...

Trinidad

5 months ago

I've got a strategy for this. I'll focus on the specific server types mentioned in the question and think about which ones would not be discovered.

upvoted 0 times

...

Carla

5 months ago

I'm pretty confident that the "isolated" option is the correct answer here. Keeping each tenant's jobs isolated from the others should prevent any blocking issues. I'll go with that.

upvoted 0 times

...

Adell

5 months ago

Right, but I feel like I'm getting confused with how many child elements are allowed. I need to make sure "PostalCodeResponse" doesn't contain any children, just the postal code itself.

upvoted 0 times

...