F5 Networks 301b Exam - Topic 4 Question 40 Discussion

Actual exam question for F5 Networks's 301b exam

Question #: 40
Topic #: 4

[All 301b Questions]

-- Exhibit --

Refer to the exhibit.

An LTM Specialist is performing an HTTP trace on the client side of the LTM device and notices there are many undesired headers being sent by the server in the response. The LTM Specialist wants to remove all response headers except "Set-Cookie" and "Location."

How should the LTM Specialist modify the HTTP profile to remove undesired headers from the HTTP response?

AEnter the desired header names in the 'Request Header Insert' field.

BEnter the undesired header names in the 'Request Header Erase' field.

CEnter the undesired header names in the 'Response Header Erase' field.

DEnter the desired header names in the 'Response Headers Allowed' field.

Show Suggested Answer

Suggested Answer: D

by Detra at May 07, 2022, 09:33 PM

Limited Time Offer

25%

Off

Get Premium 301b Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tenesha

3 months ago

Just to clarify, "Set-Cookie" and "Location" will still be sent, right?

upvoted 0 times

...

Gregoria

3 months ago

I thought you had to specify what to keep, not what to remove.

upvoted 0 times

...

Jesusa

4 months ago

Wait, can you really erase headers like that? Seems risky.

upvoted 0 times

...

Adria

4 months ago

Totally agree, option C is the way to go!

upvoted 0 times

...

Jame

4 months ago

You need to use the 'Response Header Erase' field for this.

upvoted 0 times

...

Arthur

4 months ago

I definitely recall that we want to keep "Set-Cookie" and "Location," so I think we should be looking at how to remove the others. Option C sounds like it could be right, but I need to double-check my notes.

upvoted 0 times

...

Henriette

4 months ago

I’m a bit confused about the difference between "Request Header Erase" and "Response Header Erase." I thought they both served similar purposes, but I guess we need to be specific here.

upvoted 0 times

...

Cherry

4 months ago

I remember practicing a similar question where we had to allow certain headers. I feel like option D could be the answer, but I might be mixing it up with something else.

upvoted 0 times

...

Lon

5 months ago

I think we need to focus on the response headers, so maybe it's option C? But I'm not entirely sure if that's the right field.

upvoted 0 times

...

Melinda

5 months ago

Alright, I've got a strategy. I'll focus on the key security requirements and try to eliminate the incorrect statements. That should lead me to the right answer.

upvoted 0 times

...