F5 BIG-IP LTM Specialist: Maintain and Troubleshoot (301b) Exam Materials - Question #45 Discussion

What does the output shown indicate about the client connection? New TCP connection #681: 10.10.10.25:49716 -> 10.10.10.1:443 Source Destination Protocol Length Info 10.10.10.25 10.10.10.1 TCP 74 49716 > 443 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 10.10.10.1 10.10.10.25 TCP 74 443 > 49716 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 10.10.10.25 10.10.10.1 TCP 66 49716 > 443 [ACK] Seq=1 Ack=1 Win=65535 Len=0 Secure Sockets Layer TLSv1.2 Record Layer: Handshake Protocol: Client Hello Version: TLS 1.2 (0x0303) Random Session ID Length: 0 Cipher Suites Length: 52 Cipher Suites (26 suites) TLS_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_256_CBC_SHA TLS_RSA_WITH_AES_128_CBC_SHA256 TLS_RSA_WITH_AES_256_CBC_SHA256 TLS_RSA_WITH_3DES_EDE_CBC_SHA Compression Methods Compression Method: null Extensions Length: 81 Extension: server_name Extension: supported_groups Extension: ec_point_formats Extension: signature_algorithms Extension: renegotiation_info TLSv1.2 Record Layer: Handshake Protocol: Server Hello Version: TLS 1.2 (0x0303) Random Session ID Length: 32 Cipher Suite: TLS_RSA_WITH_AES_256_CBC_SHA Compression Method: null Extensions Length: 0 TLSv1.2 Record Layer: Handshake Protocol: Certificate Certificates Length: 1408 Certificate Length: 1405 Certificate Data: Version: 3 (0x2) Serial Number Signature Algorithm: sha256WithRSAEncryption Issuer: CN=example-CA Validity Not Before: Jun 10 00:00:00 2015 GMT Not After : Jun 10 00:00:00 2016 GMT Subject: CN=www.brave-dumps.com Subject Public Key Info X509v3 extensions TLSv1.2 Record Layer: Handshake Protocol: Certificate Request Certificate Types RSA Sign DSS Sign Supported Signature Algorithms rsa_pkcs1_sha256 rsa_pkcs1_sha1 dsa_sha1 Distinguished Names TLSv1.2 Record Layer: Handshake Protocol: Server Hello Done TLSv1.2 Record Layer: Handshake Protocol: Client Key Exchange Encrypted PreMaster Secret 48 bytes 15 4b 8f 4d a5 54 33 14 98 15 3f af 3a 9f 23 7c 0b 3e 78 bd aa e8 cb a0 0a cc 35 00 10 3a 9f 8b 19 40 4e ab 7f f4 46 9c e4 c0 0a 89 5f 57 TLSv1.2 Record Layer: Handshake Protocol: Change Cipher Spec TLSv1.2 Record Layer: Handshake Protocol: Encrypted Handshake Message TLSv1.2 Record Layer: Alert (Level: Fatal, Description: Handshake Failure) TCP 443 > 49716 [FIN, ACK] TCP 49716 > 443 [FIN, ACK] (Choose one answer)

• A. The client certificate was NOT exchanged
• B. The client cipher negotiation failed
• C. The client certificate was expired
• D. The client connected successfully

Brave-Dump Community Votes