An administrator is using tmsh to upload a certificate and key. The files are located on a remote server accessible via SCP. Which tmsh command sequence correctly imports the certificate and key?

tmsh import sys crypto cert from-local-file /path/cert.pem

tmsh create sys crypto cert from-local-file /path/cert.pem

tmsh install sys crypto cert from-local-file scp://user@host/path/cert.pem

tmsh load sys crypto cert from-local-file scp://user@host/path/cert.pem

An administrator is configuring a virtual server for a legacy application that only supports HTTP. The clients will connect via HTTPS. The administrator has created a Client SSL profile. What else must be configured for the virtual server to successfully serve HTTPS traffic?

Assign the Client SSL profile to the virtual server

Change the virtual server's protocol to HTTPS

Configure the pool members to use port 443

Create a Server SSL profile and assign it

A company is setting up a reverse proxy for an internal application. Clients connect via HTTPS, and the backend servers also require HTTPS. The administrator wants the BIG-IP to decrypt client traffic, inspect it, and then re-encrypt it to the backend. Which SSL profile configuration is required?

Use a single SSL profile that handles both sides

Assign only a Server SSL profile

Assign only a Client SSL profile

Assign both a Client SSL and a Server SSL profile to the virtual server

What is the impact of assigning a client SSL profile to a virtual server?

It decrypts inbound HTTPS traffic from clients

It forces all client traffic to use HTTP

It encrypts traffic from the BIG-IP to the backend servers

It has no effect on client connections

An administrator is troubleshooting a virtual server that is not decrypting HTTPS traffic. The Client SSL profile is assigned, and the certificate is valid. What is the most likely cause of the issue?

The Client SSL profile is not the default profile

The virtual server is listening on port 80

The virtual server's protocol is set to HTTP instead of TCP

The certificate and key are not associated with the Client SSL profile

F5Certified Technology Specialist, BIG-IP APM

Domain 2Objective 3

Objective 2.03 Explain How to Create and Assign an SSL Profile 304 Practice Questions (Page 1)

Part of the Section 2: Configure and deploy an access profile domain, which makes up ~56% of our current practice bank. F5 does not publish an official question count, but from its 90-minute exam (~35–60 total, ~20–34 in this domain), expect 1–1 from this objective — we provide 11 practice questions to prepare you well beyond it. (estimate)

11questions here

3free pages

3concepts

Questions 1–5

1application · medium
An administrator is using tmsh to upload a certificate and key. The files are located on a remote server accessible via SCP. Which tmsh command sequence correctly imports the certificate and key?
Select an answer first
2application · medium
An administrator is configuring a virtual server for a legacy application that only supports HTTP. The clients will connect via HTTPS. The administrator has created a Client SSL profile. What else must be configured for the virtual server to successfully serve HTTPS traffic?
Select an answer first
3application · medium
A company is setting up a reverse proxy for an internal application. Clients connect via HTTPS, and the backend servers also require HTTPS. The administrator wants the BIG-IP to decrypt client traffic, inspect it, and then re-encrypt it to the backend. Which SSL profile configuration is required?
Select an answer first
4foundation · easy
What is the impact of assigning a client SSL profile to a virtual server?
Select an answer first
5expert · hard
An administrator is troubleshooting a virtual server that is not decrypting HTTPS traffic. The Client SSL profile is assigned, and the certificate is valid. What is the most likely cause of the issue?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 304

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “304” is a trademark of its owner, used for identification only.