nerdexam
F5

201 · Question #259

A BIG-IP Administrator remotely connects to the appliance via out-of-band management using https://mybigip mycompany net. The management portal has been working all week. When the administrator…

The correct answer is A. DNS is property resolving the FQDN of the device. E. The administrator has TCP connectivity to the device. When a remote HTTPS management connection times out, the administrator should verify DNS resolution and TCP connectivity to the BIG-IP device.

Section 5: Troubleshoot a BIG-IP System

Question

A BIG-IP Administrator remotely connects to the appliance via out-of-band management using https://mybigip mycompany net. The management portal has been working all week. When the administrator attempts to login today, the connection times out. Which two aspects should the administrator verify? (Choose two)

Options

  • ADNS is property resolving the FQDN of the device.
  • BThe device is NOT redirecting them to http.
  • CThe administrator has the latest version of the web browser.
  • DPacket Filters on the device are blocking port 80.
  • EThe administrator has TCP connectivity to the device.

How the community answered

(40 responses)
  • A
    70% (28)
  • B
    8% (3)
  • C
    5% (2)
  • D
    18% (7)

Why each option

When a remote HTTPS management connection times out, the administrator should verify DNS resolution and TCP connectivity to the BIG-IP device.

ADNS is property resolving the FQDN of the device.Correct

If DNS is not properly resolving the Fully Qualified Domain Name (FQDN) of the device, the client's web browser will not know the correct IP address to connect to, leading to a connection attempt failure and eventually a timeout.

BThe device is NOT redirecting them to http.

If the device were redirecting to HTTP, the client would typically receive an HTTP 30x redirect response, not experience a connection timeout on the initial HTTPS connection attempt.

CThe administrator has the latest version of the web browser.

While an outdated web browser can cause rendering or security certificate issues, it typically would not cause a direct TCP connection timeout if the network path and server are available.

DPacket Filters on the device are blocking port 80.

Packet filters blocking port 80 would not directly cause a timeout for an HTTPS connection attempt, which uses port 443.

EThe administrator has TCP connectivity to the device.Correct

A connection timeout indicates that the TCP handshake is not completing, suggesting that either the network path to the device is broken, the device is unreachable, or the management service on the device is not listening on the expected port (HTTPS, 443).

Concept tested: Troubleshooting BIG-IP remote management connectivity

Source: https://techdocs.f5.com/en-us/bigip-15-0-0/big-ip-system-troubleshooting-basics/troubleshooting-management-access.html

Topics

#Troubleshooting#Management access#DNS#TCP connectivity#Network issues

Community Discussion

No community discussion yet for this question.

Full 201 Practice