An LTM Specialist has detected that a brute force login attack is occurring against the SSH service via a BIG-IP management interface. Login attempts are occurring from many IPs within the internal company network. BIG-IP SSH access restrictions are in place as follows:

The LTM Specialist has determined that SSH access should only occur from the 192.168.1.0/24 and
172.16.254.0/23 networks.
Whichtmsh command should the LTM Specialist use to permit access from the desired networks only?

• A.modify.sys sshd allow add {''192.168. 10/24 , '' ''172. 16 2540/23'')
• B.modify /sys sshd login disable (''10.0.00/8'', ''172 16.0 0/12'', ''192. 168.0.0/16'')
• C.modify/sys allow replace-all-with {''192.168.1.00/24'', ''192.16.254.0/23''}
• D.modify/sys sshd login enable {''192.166.10/24'''' ''172.16 254 0/23

Comment: *

Name: *

Email: *

Verification: *

AN LTM Specialist is deploying an iRule designed to determine the country of origin of an incoming client connection. TheiRule needs to be used with an SSL-enabled web application.
Which profile required for the iRule to function properly?

• A.HTTP
• B.DNS
• C.TCP
• D.UDP

Comment: *

Name: *

Email: *

Verification: *

A failover event is recorded in the log messages:
Jan 01 00:00:50 BIG-IP notice sod[5855]: 01140029:5: HA proc_running tmm fails action is go offline and down links.
Jan 01 00:00:50 BIG-IP notice sod[5855]: 010c0050:5: Sod requests links down.
Jan 01 00:00:50 BIG-IP notice sod[5855]: 010c0054:5: Offline for traffic group /Common/traffic-group-1.
Jan 01 00:00:50 BIG-IP notice sod[5855]: 010c003e:5: Offline
Jan 01 00:00:50 BIG-IP notice logger: /usr/bin/tmipsecd --tmmcount 4 ==> /usr/bin/bigstart stop racoon Jan 01 00:00:50 BIG-IP info lacpd[5502]: 01160016:6: Failover event detected. (Switchboard failsafe disabled while offline) Jan 01 00:00:51 BIG-IP err bcm56xxd[5296]: 012c0010:3: Failover event detected. Marking external interfaces down. bsx.c(3633) Jan 01 00:00:51 BIG-IP info bcm56xxd[5296]: 012c0015:6: Link: 1.1 is DOWN Jan 01 00:00:56 BIG-IP notice mcpd[5318]: 0107143c:5: Connection to CMI peer 10.0.0.3 has been removed Jan 01 00:00:56 BIG-IP notice mcpd[5318]: 0107143a:5: CMI reconnect timer: enabled Jan 01 00:00:56 BIG-IP notice mcpd[5318]: 01071431:5: Attempting to connect to CMI peer 10.0.0.3 port
6699
What is the cause of the failover?

• A.Loss of connection to CMI peer 10.0.0.3 initiated the failover.
• B.TMM failed, and VLAN fail-safe initiated the failover.
• C.TMM failed, and system fail-safe initiated the failover.
• D.A switchboard failure caused system fail-safe to initiate the failover.

Comment: *

Name: *

Email: *

Verification: *

-- Exhibit -


-- Exhibit --
Refer to the exhibits.
A customer requests to offload SSL for an internal website. The front page of the website loads correctly; however, selecting links on the page fails.
How should the LTM Specialist fix the issue?

• A.Create a new Server SSL profile.
  Enable Proxy SSL.
  Add the Server SSL profile to the VS.
• B.Create a new HTTP profile.
  Enable Insert X-Forwarded-For.
  Add the new HTTP profile to the VS.
• C.Create a new HTTP profile.
  Enable redirect rewrite.
  Add the new HTTP profile to the VS.
• D.Create a new SNAT pool.
  Add internal network IPs to the SNAT pool.
  Add the SNAT pool to the VS.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

How are new connections load balanced?

• A.To the first two members listed with the same priority group
• B.To the pool member with a low priority group value defined
• C.To the pool member with a high priority group value defined
• D.To the pool member with the least number of connections

Comment: *

Name: *

Email: *

Verification: *