F5 F5301 Practice Test

F5301 practice test: what's covered

• Local Traffic Manager Specialist

Free F5301 sample questions

1. A client packet arrives at a standard virtual server with SNAT Automap enabled. Which address pair does the pool member observe as the source and destination of the connection?

   • A. The BIG-IP self-IP on the server VLAN as source, and the selected pool member IP as destination
   • B. The original client IP as source, and the virtual server address as destination
   • C. The virtual server address as source, and the original client IP as destination
   • D. The floating self-IP as source, and the virtual server address as destination
   Show answer

   Correct: A. With SNAT Automap the BIG-IP translates the client source to its egress self-IP (typically the floating self-IP on the server VLAN), so the member sees that self-IP as source and its own address as destination. The original client IP is not preserved because SNAT replaces it, which is why the X-Forwarded-For header is often needed. The other options are incorrect because the member never sees the virtual server address as the connection source or destination once load balancing selects a member.

2. An nPath (Direct Server Return) deployment is being designed so that return server traffic bypasses the BIG-IP. Which configuration requirements must be satisfied? (Choose TWO)

   • A. The virtual server must use a FastL4 profile with Loose Close and Loose Initiation enabled
   • B. Each pool member must have a loopback interface configured with the virtual server IP address
   • C. Source address translation (SNAT) must be enabled to rewrite the return path
   • D. A standard HTTP profile must be attached so the BIG-IP can rewrite Layer 7 headers
   • E. OneConnect must be applied so the member reuses the inbound TCP connection
   Show answer

   Correct: A and B. nPath/DSR relies on the server replying directly to the client, so the BIG-IP only sees the inbound half of the flow; this requires a FastL4 profile with loose initiation and loose close to handle the asymmetric connection, and each server must answer ARP-silently for the VS IP via a loopback. SNAT is incorrect because translating the source would force return traffic back through the BIG-IP, defeating DSR. An HTTP profile and OneConnect are wrong because DSR is a pure Layer 4 technique and the BIG-IP never sees the response to perform L7 processing or connection reuse.

3. A high-RPS web tier shows the backend servers exhausting their connection limits even though each client uses HTTP keep-alive. Which profile should be applied to the virtual server to reduce server-side connections?

   • A. A OneConnect profile so multiple client requests are multiplexed onto fewer pooled server connections
   • B. A FastL4 profile so the BIG-IP forwards packets without tracking HTTP requests
   • C. A Request Logging profile so connection counts can be measured per pool member
   • D. A TCP profile with Nagle disabled so small packets are coalesced before sending
   Show answer

   Correct: A. OneConnect pools and reuses idle server-side TCP connections, allowing requests from many clients to share a small set of backend connections, which directly relieves member connection exhaustion. FastL4 is incorrect because it disables the L7 awareness OneConnect needs and does not pool server connections. Request Logging only records data and does not change connection behavior, whereas disabling Nagle affects packet coalescing, not the number of server-side connections.

4. An administrator must support a legacy application that uses non-standard TCP behavior and needs hardware-accelerated Layer 4 forwarding with minimal state tracking. Which profile best meets this requirement?

   • A. FastL4, which offloads flows to the ePVA hardware and performs minimal Layer 4 inspection
   • B. Standard TCP, which provides full per-side TCP optimization and window scaling
   • C. HTTP, which parses requests so iRules can inspect application headers
   • D. Client SSL, which terminates TLS so the BIG-IP can apply L7 policies
   Show answer

   Correct: A. FastL4 leverages the ePVA (embedded Packet Velocity ASIC) for accelerated packet forwarding with minimal connection state, ideal for high-throughput Layer 4 traffic. A Standard TCP profile is incorrect because it builds a full proxy with separate client and server stacks, adding overhead this use case does not want. HTTP and Client SSL are wrong because they introduce Layer 7 or TLS processing that the legacy L4-only application does not require.

5. Two virtual servers share the same custom HTTP profile. A change is needed on only one of them to insert an X-Forwarded-For header. What is the most maintainable approach in the profile hierarchy?

   • A. Create a child HTTP profile that inherits the shared parent and overrides only the XFF setting
   • B. Edit the shared parent profile directly so both virtual servers receive the change
   • C. Detach the HTTP profile entirely and use an iRule to add the header on every request
   • D. Clone the configuration into a new partition and migrate one virtual server to it
   Show answer

   Correct: A. BIG-IP profiles support inheritance, so a child profile derived from the shared parent can override just the Insert X-Forwarded-For setting while leaving everything else linked to the parent, which keeps maintenance centralized. Editing the parent is incorrect because it would change both virtual servers. Using an iRule is unnecessary overhead when a native setting exists, whereas cloning into a new partition is a heavy-handed change that does not address the inheritance requirement and complicates management.

Last updated: 2026-10-19

F5301 practice test FAQ

Related practice tests

• F5 F5101 practice test
• F5 F5201 practice test
• F5 F5-302 practice test
• F5 F5-303 practice test
• F5 F5-304 practice test