Big Halloween Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: simple70

Pass the F5 BIG-IP ASM 303 Questions and answers with ValidTests

Exam 303 All Questions
Exam 303 Premium Access

View all detail and faqs for the 303 exam

Viewing page 1 out of 11 pages
Viewing questions 1-15 out of questions
Questions # 1:

-- Exhibit –

Question # 1

Question # 1

Question # 1

-- Exhibit --

Refer to the exhibits.

Users are able to access the application when connecting to the virtual server but are unsuccessful when connecting directly to the application servers. The LTM Specialist wants to allow direct access to the application servers.

Why are users unable to connect directly to the application servers?

Options:

A.

The router does NOT have a route to the server subnet.

B.

The web server does NOT have a correct default gateway.

C.

The LTM device does NOT have a SNAT on the External VLAN.

D.

The LTM device does NOT have an IP Forwarding virtual server on the Internal VLAN.

E.

The LTM device does NOT have an IP Forwarding virtual server on the External VLAN.

Expert Solution
Questions # 2:

An LTM Specialist has installed a hotfix that updated the SCCP firmware package.

Which command will ensure that the host subsystem and SCCP reboot?

Options:

A.

reboot

B.

full_box_reboot

C.

shutdown -r now

D.

The reboot should be initiated via the HTTPS administration GUI.

Expert Solution
Questions # 3:

During a maintenance window, an EUD test was executed and the output displayed on the screen. The BIG-IP Administrator did NOT save the screen output. The BIG-IP device is currently handling business critical traffic. The BIG-IP Administrator needs to minimize impact. What should the BIG-IP Administrator do to provide the EUD results to F5 Support?

Options:

A.

Boot the device into EUD then collect output from console

B.

Execute EUD from tmsh and collect output from console

C.

Collect file /var/log/messages

D.

Collect file /shared/log/eud.log

Expert Solution
Questions # 4:

An LTM device pair is configured for failover and connection mirroring. The LTM devices are configured with virtual servers for HTTP, HTTPS with SSL offload, and SSH. An event occurs that causes a failover. HTTP and SSH sessions active at the time of failover remain active, but HTTPS sessions are dropped.

What is the root cause of this problem?

Options:

A.

The SSL certificates on the LTM devices do NOT match.

B.

Connection mirroring is incompatible with clientssl profiles.

C.

SNAT automap was NOT enabled for the HTTPS virtual servers.

D.

Connection mirroring was NOT enabled for the HTTPS virtual servers.

Expert Solution
Questions # 5:

-- Exhibit –

Question # 5

-- Exhibit --

Refer to the exhibit.

An LTM Specialist creates a virtual server to load balance traffic to a pool of HTTPS servers. The servers use client certificates for user authentication. The virtual server has clientssl, serverssl, and http profiles enabled. Clients are unable to connect to the application through the virtual server, but they are able to connect to the application servers directly.

Which change to the LTM device configuration will resolve the problem?

Options:

A.

Install the server certificate/key and enable Proxy SSL.

B.

Use the serverssl-insecure-compatible serverssl profile.

C.

Configure the clientssl profile to require a client certificate.

D.

Install the client's issuing Certificate Authority certificate on the LTM device.

Expert Solution
Questions # 6:

-- Exhibit –

Question # 6

-- Exhibit --

Refer to the exhibit.

A pair of LTM devices is configured for HA.

What happens if the pool member server with IP address 10.0.0.4 becomes totally unresponsive to the active LTM device, but is still responsive to the standby LTM device?

Options:

A.

The HA-group will disable the trunk my_trunk.

B.

The HTTP application will be unavailable via the LTM device.

C.

The HA-group will initiate a fail-over because the threshold is set to 2.

D.

The HA-group will initiate a fail-over because the HA-Group score will be zero.

Expert Solution
Questions # 7:

Refer to the Exhibit.

Question # 7

An LTM Specialist notices that two members in a pool are overloaded. To relive the existing members a fourth member (10.128.20.14) is brought up.

How many member will receive and process new connections?

Options:

A.

4

B.

3

C.

2

D.

1

Expert Solution
Questions # 8:

AN LTM Specialist is setting up a new HTTPS virtual server to decrypt client traffic. SNAT the traffic and send the encrypted traffic to the poor member, the client's IP address must be included in the traffic

sent to the pool member.

What is a complete set of profiles that must be configured for the virtual server to meet these requirements?

Options:

A.

TCP, Client SSL, Server SSL

B.

TCP , Server SSL, HTTP

C.

TCP, Client SSL, HTTP

D.

TCP, Client SSL, Server SSL, HTTP

Expert Solution
Questions # 9:

A 816-IP Administrator recently deployed an application Users are experiencing slow performance with

the application on some remote networks.

Which two modifications can the BIG-IP Administrator make to address this issue? (Choose two)

Options:

A.

Apply dest addr profile to the Virtual Server

B.

Apply f5-tcp-wan profile to the Virtual Server

C.

Apply f5-tcp-lan profile to the Virtual Server

D.

Apply source_addr profile to the Virtual Server

E.

Apply fasti_4 profile to the Virtual Server

Expert Solution
Questions # 10:

An LTM Specialist needs to provide statistics regarding the round-trip time betweenthe clients and the servers.

Which metric should be part of the analytics profile to provide that information?

Options:

A.

Page Load Time

B.

User Sessions

C.

Max TPS and Throughout

D.

Response Codes

Expert Solution
Questions # 11:

An LTM Specialist is troubleshooting a problem on an eCommerce website. The user browses the online store using port 80, adding items to the shopping cart. The user then clicks the "Checkout" button on the site, which redirects the user to port 443 for the checkout process. Suddenly, the user's shopping cart is shown as empty. The shopping cart data is stored in memory on the server, and the default source address persistence profile is used on both virtual servers.

What is the issue?

Options:

A.

The port 80 pool member is deleting the user's session cookie.

B.

The port 443 pool member is deleting the user's session cookie.

C.

The port 80 and port 443 connections are balanced to the same node.

D.

The port 80 and port 443 connections are balanced to different nodes.

Expert Solution
Questions # 12:

All pool members are online. All other virtual server settings are at default What might after the load balancing behavior?

Options:

A.

enabing SNAT automap

B.

enabing a falback host in the http profile

C.

adding a oneconnect profile

D.

adding a persistence profile

Expert Solution
Questions # 13:

An LTM Specialist must reconfigure a BIG-IP system that load balances traffic to a web application. The security department has informed the LTM Specialist that the following cipher string must be used for TLS connections from BIG-IP to the web application.

NATIVE:IMDS:EXPORT:IDHE:EDH@SPEED

In which virtual server profile should the cipher string be configured?

Options:

A.

Server SSL

CB. Client SSL

B.

SPDY profile

C.

Rewrite profile

Expert Solution
Questions # 14:

-- Exhibit –

Question # 14

Question # 14

-- Exhibit --

Refer to the exhibits.

An LTM Specialist has configured a virtual server to distribute connections to a pool of application servers and to offload SSL processing. The application fails to work as expected when connecting to the virtual server. It does work when clients connect directly to the application. Two packet captures were taken at the application server.

What is the root cause of the problem?

Options:

A.

The application servers are NOT listening on port 80.

B.

The LTM device is sending non-SSL traffic to an SSL port.

C.

The virtual server does NOT have a clientSSL profile assigned.

D.

The SSL handshake between the LTM device and the server is failing.

Expert Solution
Questions # 15:

An LTM device needs an additional traffic group.

Which configuration item is required?

Options:

A.

Default device

B.

Group name

C.

MAC Masquerade Address

D.

Auto Fallback Timeout

Expert Solution
Viewing page 1 out of 11 pages
Viewing questions 1-15 out of questions