Exam 301b topic 1 question 133 discussion

Actual exam question from F5's 301b

Question #: 133
Topic #: 1

An LTM device pair is configured for failover and connection mirroring. The LTM devices are configured with virtual servers for HTTP, HTTPS with SSL offload, and SSH. An event occurs that causes a failover. HTTP and SSH sessions active at the time of failover remain active, but HTTPS sessions are dropped.
What is the root cause of this problem?

A. The SSL certificates on the LTM devices do NOT match.
B. Connection mirroring is incompatible with clientssl profiles.
C. SNAT automap was NOT enabled for the HTTPS virtual servers.
D. Connection mirroring was NOT enabled for the HTTPS virtual servers.

Show Suggested Answer

Suggested Answer: B 🗳️

by liaotx at July 12, 2021, 3:44 a.m.

Comments

Submit Cancel

GVKD

4 months, 4 weeks ago

D - Correct In BIG-IP 12.0.0 and later, you can configure the system to mirror SSL connections that are terminated by the BIG-IP system to peer device group members. When you enable connection mirroring on a virtual server that references an SSL profile, the BIG-IP system mirrors SSL-specific data to the appropriate device group member. This preserves SSL connections when failover occurs. https://my.f5.com/manage/s/article/K17391

upvoted 1 times

...

liaotx

2 years, 12 months ago

why not D ?

upvoted 1 times

estampie

2 years, 11 months ago

Should be D - K17391: Configuring SSL connection mirroring for Client SSL virtual servers

upvoted 2 times

Itren

2 years, 10 months ago

This case, like everything in the dump, is considered in the 11.4 version of Big-IP. In the article above, SSL connection mirroring is possible starting from version 12.

upvoted 1 times

...

Exam 301b All Questions

View all questions & answers for the 301b exam

Exam 301b topic 1 question 133 discussion

Comments

GVKD

liaotx

estampie

Itren

SY0-701