F5 Networks 301b Exam - Topic 7 Question 37 Discussion

Actual exam question for F5 Networks's 301b exam

Question #: 37
Topic #: 7

[All 301b Questions]

-- Exhibit --

Refer to the exhibit.

A client attempts to connect from a Google Chrome browser to a virtual server on a BIG-IP LTM. The virtual server is SSL Offloaded. When the client connects, the client receives an SSL error. After trying Mozilla Firefox and Internet Explorer browsers, the client still receives the same errors.

The LTM Specialist does an ssldump on the virtual server and receives the results as per the exhibit.

What is the problem?

AThe SSL key length is incorrect.

BThe BIG-IP LTM is NOT serving a certificate.

CThe BIG-IP LTM is NOT listening on port 443.

DThe client needs to be upgraded to the appropriate cipher-suite.

Show Suggested Answer

Suggested Answer: B

by Merlyn at May 09, 2022, 05:44 PM

Limited Time Offer

25%

Off

Get Premium 301b Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lynna

3 months ago

This seems off, why would all browsers fail the same way?

upvoted 0 times

...

Tarra

3 months ago

Wait, are we sure it’s not a port issue?

upvoted 0 times

...

Ernestine

4 months ago

I think it could also be the SSL key length.

upvoted 0 times

...

Celia

4 months ago

Totally agree, that’s probably the issue here.

upvoted 0 times

...

Twanna

4 months ago

Looks like the BIG-IP LTM isn't serving a certificate.

upvoted 0 times

...

Yong

4 months ago

I’m leaning towards the BIG-IP not listening on port 443. It seems like a common oversight in these scenarios.

upvoted 0 times

...

Rosenda

4 months ago

I feel like it could also be related to the cipher-suite. I vaguely recall that some clients need specific versions to connect properly.

upvoted 0 times

...

Socorro

4 months ago

This question seems familiar; I think we practiced something similar where the BIG-IP wasn't serving a certificate. That could be the problem here.

upvoted 0 times

...

Ellsworth

5 months ago

I remember studying SSL configurations, but I’m not entirely sure if the issue is with the certificate or the key length.

upvoted 0 times

...

Jonell

5 months ago

Okay, I remember learning about EDI and eCommerce in class. I think I can use that knowledge to identify the correct answer.

upvoted 0 times

...

Mirta

5 months ago

Alright, let me walk through this step-by-step. Static routing is out since it's not a dynamic protocol. IS-IS and OSPF are both link-state protocols, so they could potentially be used. iBGP and eBGP are both BGP protocols, but eBGP is used between different autonomous systems. I think the answer is iBGP.

upvoted 0 times

...