Identify Conflicting/misconfigured Profiles F5CAB5 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   An administrator is troubleshooting a virtual server that is not passing HTTPS traffic to a pool of web servers. The virtual server has a Client SSL profile and a Server SSL profile assigned. The pool members are healthy, and the virtual server is enabled. Clients receive a '502 Bad Gateway' error. What is the most likely cause of this error?

   • AThe Client SSL profile is configured with an incorrect certificate, causing the TLS handshake to fail.
   • BThe virtual server is missing an HTTP profile, which is required for HTTPS traffic.
   • CThe Server SSL profile is configured with an incorrect certificate, causing the BIG-IP to be unable to establish a secure connection to the pool members.
   • DThe Client SSL profile is not compatible with the Server SSL profile, causing the BIG-IP to be unable to decrypt the traffic.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   A virtual server is configured with an HTTP profile, but the backend pool contains servers that expect raw TCP traffic. What is the most likely outcome?

   • AThe BIG-IP will strip HTTP headers before forwarding traffic to the backend servers.
   • BThe virtual server will fail to load because the HTTP profile is incompatible with the backend pool.
   • CTraffic will be processed as HTTP, which may cause the backend servers to misinterpret the data because they expect raw TCP.
   • DThe HTTP profile will be ignored because the backend servers do not use HTTP.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   A virtual server is configured with a UDP profile, but the backend pool contains servers running a TCP-based application. What is the most likely symptom of this misconfiguration?

   • AThe BIG-IP will automatically convert UDP traffic to TCP before sending it to the pool.
   • BTraffic will be forwarded to the pool, but the backend application will not understand the UDP datagrams, causing connection failures or errors.
   • CThe virtual server will not accept any connections because UDP and TCP are incompatible.
   • DThe virtual server will drop all traffic because the protocol mismatch is detected during configuration.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company's BIG-IP administrator is troubleshooting a virtual server that is not passing traffic to a pool of web servers. The virtual server has an HTTP profile, a Client SSL profile, and a Server SSL profile assigned. The pool members are healthy, and the virtual server is enabled. Clients receive a '400 Bad Request' error. The administrator checks the BIG-IP logs and finds that the HTTP profile is receiving encrypted data. What is the most likely cause of the HTTP profile receiving encrypted data?

   • AThe virtual server is configured with the wrong 'Type' (e.g., 'Performance (Layer 4)' instead of 'Standard'), causing the Client SSL profile to not decrypt the traffic.
   • BThe HTTP profile is not compatible with the Client SSL profile, causing the BIG-IP to not decrypt the traffic.
   • CThe Server SSL profile is configured with an incorrect 'Server Name' setting, causing the BIG-IP to not decrypt the traffic.
   • DThe Client SSL profile is configured with an incorrect 'Cipher' setting, causing the BIG-IP to not decrypt the traffic.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   An administrator is troubleshooting a virtual server that is not passing traffic to a pool of web servers. The virtual server has an HTTP profile, a Client SSL profile, and a Server SSL profile assigned. The pool members are healthy, and the virtual server is enabled. Clients receive a '502 Bad Gateway' error. The administrator checks the BIG-IP logs and finds that the Server SSL profile is failing to establish a connection to the backend server. What is the most likely cause of the Server SSL profile failure?

   • AThe virtual server is missing a TCP profile, which is required for the Server SSL profile to establish a connection.
   • BThe Client SSL profile is configured with an incorrect certificate, causing the Server SSL profile to fail.
   • CThe Server SSL profile is configured with an incorrect 'Server Name' setting, causing the BIG-IP to send the wrong SNI to the backend server.
   • DThe HTTP profile is configured with an incorrect 'Server' setting, causing the BIG-IP to not recognize the backend server.
   Reveal Solution Discussion Select an answer first