nerdexam
(ISC)2

301B · Question #21

An LTM Specialist sees these entries in /var/log/ltm: Oct 25 03:34:31 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborted, 172.16.20.1:443 Oct 25 03:34:3

The correct answer is B. ssldump -i internal host 172.16.20.1. See the full explanation below for the reasoning.

Question

An LTM Specialist sees these entries in /var/log/ltm: Oct 25 03:34:31 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborted, 172.16.20.1:443 Oct 25 03:34:32 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborted, 172.16.20.1:443 Oct 25 03:34:32 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborted, 172.16.20.1:443 Oct 25 03:34:32 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborted, 172.16.20.1:443 Oct 25 03:34:33 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborted, 172.16.20.1:443 Oct 25 03:34:33 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborted, 172.16.20.1:443 Assume 172.16.20.0/24 is attached to the VLAN "internal." What should the LTM Specialist use to troubleshoot this issue?

Options

  • Acurl -d -k https://172.16.20.1
  • Bssldump -i internal host 172.16.20.1
  • Ctcpdump -i internal host 172.16.20.1 > /shared/ssl.pcap ssldump -r /shared/ssl.pcap
  • Dtcpdump -ni 0.4 -i internal -w /shared/ssl.pcap host 172.16.20.1 ssldump -r /shared/ssl.pcap

How the community answered

(23 responses)
  • A
    17% (4)
  • B
    74% (17)
  • C
    4% (1)
  • D
    4% (1)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 301B Practice