Pre-Summer Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: validbest

Pass the F5 BIG-IP ASM 303 Questions and answers with ValidTests

Exam 303 All Questions
Exam 303 Premium Access

View all detail and faqs for the 303 exam

Viewing page 2 out of 11 pages
Viewing questions 16-30 out of questions
Questions # 16:

A client is attempting to log in to a web application that requires authentication. The following HTTP headers are sent by the client:

GET /owa/ HTTP/1.1

Authorization: Basic dXNlcm5hbWU6cGFzc3dvcmQ=

User-Agent: curl/7.26.0

Host: 10.0.0.14

Accept: */*

Accept-EncodinG. gzip,deflate

The web server is responding with the following HTTP headers:

HTTP/1.1 401 Unauthorized

Content-TypE. text/html

Server: Microsoft-IIS/7.5

WWW-AuthenticatE. NTLM

DatE. Wed, 16 Aug 1977 19:12:31 GMT

Content-LengtH. 1293

The client has checked the login credentials and believes the correct details are being entered.

What is the reason the destination web server is sending an HTTP 401 response?

Options:

A.

The username and password are incorrect.

B.

The server has an incorrect date configured.

C.

The client is using the wrong type of browser.

D.

The wrong authentication mechanism is being used.

Expert Solution
Questions # 17:

An LTM Specialist decides to offload SSL traffic on the LTM device instead of just passing it through. The LTM Specialist needs to change the configure from a Performance (Layer 40 virtual server to a Standard virtual server with SSL offload.

Which two element the LTM Specialist consider when performance this task? (Choose two.)

Options:

A.

CPU load

B.

Sensitive connections

C.

Port exhaustion

D.

Memory load

E.

Connection mirroring

Expert Solution
Questions # 18:

A web application sends information about message integrity and content life time to the client.

Which two HTTP headers should be used in sending the client information? (Choose two.)

Options:

A.

ETag

B.

Expect

C.

Expires

D.

Content-MD5

E.

Content-Range

F.

Content-Length

Expert Solution
Questions # 19:

What is the status of a pool member when manual resume is enabled and a health check first fails and then passes?

Options:

A.

Offline (Disabled)

B.

Offline (Enabled)

C.

Available (Disabled)

D.

Available (Enabled)

Expert Solution
Questions # 20:

An LTM Specialist must create a new virtual server for HTTP access. The LTM Specialist creates a forwarding virtual server to reach the resource.

What is a potential result of this action?

Options:

A.

IP conflict result

B.

HTTP traffic is NOT allowed

C.

Other service ports could be allowed

D.

Packet filter allowances are also required

Expert Solution
Questions # 21:

A BIG-IP Administrator suspects that one of the BIG-IP device power supplies is experiencing power

outages.

Which log file should the BIG-IP Administrator check to verify the suspicion?

Options:

A.

/war /log/daemon.log

B.

/var/log/kern.log

C.

/var/log/ltm

D.

/var/log/audit

Expert Solution
Questions # 22:

Refer to the following iRule:

Question # 22

What is a complete list of profiles that must be applied to the virtual server for this iRule?

Options:

A.

Fast L4, HTTP

B.

TCP, HTTP

C.

TCP, HTTP, Client SSL

D.

Fast L4 , HTTP, Stream

Expert Solution
Questions # 23:

What is the correct command to reset an LTM device to its default settings?

Options:

A.

tmsh reset-all default

B.

tmsh set /sys config defaults

C.

tmsh load /sys config default

D.

tmsh /util bigpipe reset-factory-defaults

Expert Solution
Questions # 24:

An LTM Specialist needs to configures virtual server that uses PVA or OPVA Which virtual server type should be used?

Options:

A.

Stateless

B.

Performance (HTTP)

C.

Standard

D.

Performance (Layer 4)

Expert Solution
Questions # 25:

An LTM Specialist needs to terminate client SSL traffic and based on the cookie presented by client.

Which set of profiles should the LTM Specialist use?

Options:

A.

HTTPS, Client SSL, Cookie Persistence Profile

B.

HTTP, Server SSL, SSL Cookie Profile

C.

HTTPS, Server SSL, SSL Cookie Profile

D.

HTTP, Client SSL, Cookie Persistence Profile,

Expert Solution
Questions # 26:

A BIG-IP Administrator creates an HTTP Virtual Server using an iApp template. After the Virtual Server is

created, the user requests to change the destination IP addresses. The BIG-IP Administrator tries to

change the destination IP address from 10.1.1.1 to 10.2.1.1 in Virtual Server settings, but receives the

following error:

The application service must be updated using an application management interface

What is causing this error?

Options:

A.

The Application Service was NOT deleted before making the IP address change.

B.

The IP addresses are already in use.

C.

The Application Services have Strict Updates enabled.

D.

The IP addresses used are NOT from the same subnet as the Self IP.

Expert Solution
Questions # 27:

-- Exhibit –

Question # 27

Question # 27

Question # 27

Question # 27Question # 27

Question # 27

-- Exhibit --

Refer to the exhibits.

An LTM Specialist is troubleshooting an application configured on an LTM device on a one-armed configuration. The application is NOT working through the LTM device but does work when accessed directly via the application servers. The virtual server 192.168.1.211:443 is configured to SNAT using the address 192.168.1.144 and references a pool with the member 192.168.10.80:443. No Client or Server SSL profiles are associated. The LTM Specialist has collected two traffic captures to help determine the issue.

What is the problem with the configuration on the LTM device?

Options:

A.

Pool member is configured to use wrong port.

B.

Pool member is configured for SSL off-loading.

C.

Virtual server is configured to use wrong port.

D.

Virtual server is configured without SSL Profiles.

Expert Solution
Questions # 28:

An application is configured on an LTM device:

Virtual server: 10.0.0.1:80 (VLAN vlan301)

SNAT IP: 10.0.0.1

Pool members: 10.0.1.1:8080, 10.0.1.2:8080, 10.0.1.3:8080 (VLAN vlan302)

Which packet capture should the LTM Specialist perform on the LTM device command line interface to capture only server traffic specifically for this application?

Options:

A.

tcpdump -ni 0.0:nnn -s 0 'host 10.0.0.1' -w /var/tmp/trace.cap

B.

tcpdump -ni vlan301 -s 0 'port 80 and host 10.0.0.1' -w /var/tmp/trace.cap

C.

tcpdump -ni vlan302 -s 0 'port 8080 and (host 10.0.1.1 or host 10.0.1.2 or host 10.0.1.3)' -w /var/tmp/trace.cap

D.

tcpdump -ni 0.0:nnn -s 0 '(port 80 and host 10.0.0.1) or (port 8080 and host 10.0.1.1 or host 10.0.1.2 or host 10.0.1.3)' -w /var/tmp/trace.cap

Expert Solution
Questions # 29:

A BIG-IP Administrator needs to apply a health monitor for a pool of database servers named DB_Pool

that uses TCP port 1521.

Where should the BIG-IP Administrator apply this monitor?

Options:

A.

Local Traffic > Profiles » Protocol > TCP

B.

Local Traffic > Nodes > Default Monitor

C.

Local Traffic > Pools > De Pool > Members

D.

Local Traffic > Pools > DB Pool > Properties

Expert Solution
Questions # 30:

A custom TCP application using a single server is being migrated to the LTM device. A server is being added to the pool. The application is known to violate the TCP protocol RFC. Theapplication currently works without error from a user perspective.

Which virtual server type is appropriate in this situation?

Options:

A.

Stateless TCP protocol is not applicable

B.

Performance (Layer 4)-pure layer A forwarding

C.

forwarding (Layer 2) pure routingforwarding, pool cannot be specified

D.

Standard-tcp profile exists, RFC verification will be performed

Expert Solution
Viewing page 2 out of 11 pages
Viewing questions 16-30 out of questions