An APM administrator is troubleshooting an access policy failure where users report that the BIG-IP login page loads but authentication never completes. The administrator suspects the issue may be either a network-level connectivity problem between the client and the virtual server, or an SSL/TLS handshake failure. Which capture utility should the administrator use FIRST to quickly determine which layer is failing?

TCPDump on the external VLAN interface

SSLDump on the external VLAN interface

TCPDump on the management interface

SSLDump on the management interface

While troubleshooting an APM access policy issue, an administrator runs TCPDump on the external interface and sees the following output: 'SYN', 'SYN,ACK', 'ACK', then repeated 'PSH,ACK' packets from the client with no 'ACK' responses from the server. What does this pattern most likely indicate?

The TCP handshake never completed because the server is unreachable

The connection is being reset by the server due to an SSL/TLS handshake failure

The client is sending malformed packets that the server is rejecting at the network layer

The TCP connection is established, but the server is not acknowledging application-layer data from the client

An APM administrator is troubleshooting an access policy issue where users intermittently lose connectivity. The administrator runs TCPDump and sees the following sequence: 'SYN', 'SYN,ACK', 'ACK', then a period of no traffic, followed by 'FIN,ACK' from the client and 'ACK' from the server. What does this pattern indicate?

The connection was established, remained idle for a period, and then was gracefully closed by the client

The connection was reset by the server due to a timeout

The client lost connectivity and the connection timed out

The server closed the connection due to an access policy violation

F5Certified Technology Specialist, BIG-IP APM

Domain 4Objective 4

Objective 4.04 Explain How to Use Capture Utilities (e.g., SSLDump and TCPDump) 304 Practice Questions (Page 2)

Part of the Section 4: Identify and resolve APM issues domain, which makes up ~18% of our current practice bank. F5 does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–11 in this domain), expect 1–1 from this objective — we provide 20 practice questions to prepare you well beyond it. (estimate)

20questions here

4free pages

8concepts

Questions 6–10

6foundation · easy
An APM administrator needs to see the decrypted contents of an SSL/TLS session to troubleshoot an authentication failure. Which utility is specifically designed for this purpose?
Select an answer first
7application · medium
An APM administrator is troubleshooting an access policy failure where users report that the BIG-IP login page loads but authentication never completes. The administrator suspects the issue may be either a network-level connectivity problem between the client and the virtual server, or an SSL/TLS handshake failure. Which capture utility should the administrator use FIRST to quickly determine which layer is failing?
Select an answer first
8application · medium
While troubleshooting an APM access policy issue, an administrator runs TCPDump on the external interface and sees the following output: 'SYN', 'SYN,ACK', 'ACK', then repeated 'PSH,ACK' packets from the client with no 'ACK' responses from the server. What does this pattern most likely indicate?
Select an answer first
9expert · medium
An APM administrator is troubleshooting an access policy issue where users intermittently lose connectivity. The administrator runs TCPDump and sees the following sequence: 'SYN', 'SYN,ACK', 'ACK', then a period of no traffic, followed by 'FIN,ACK' from the client and 'ACK' from the server. What does this pattern indicate?
Select an answer first
10foundation · easy
An APM administrator needs to verify whether a client is actually sending TCP packets to the BIG-IP virtual server during an access policy evaluation. Which utility is designed for capturing and displaying raw network traffic at the packet level?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 304

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “304” is a trademark of its owner, used for identification only.

Objective 4.04 Explain How to Use Capture Utilities (e.g., SSLDump and TCPDump) 304 Practice Questions (Page 2)

Questions 6–10

An APM administrator needs to see the decrypted contents of an SSL/TLS session to troubleshoot an authentication failure. Which utility is specifically designed for this purpose?

While troubleshooting an APM access policy issue, an administrator runs TCPDump on the external interface and sees the following output: 'SYN', 'SYN,ACK', 'ACK', then repeated 'PSH,ACK' packets from the client with no 'ACK' responses from the server. What does this pattern most likely indicate?

An APM administrator needs to verify whether a client is actually sending TCP packets to the BIG-IP virtual server during an access policy evaluation. Which utility is designed for capturing and displaying raw network traffic at the packet level?

Keep studying — Section 4: Identify and resolve APM issues