Pre-Summer Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: validbest

Pass the F5 BIG-IP ASM 303 Questions and answers with ValidTests

Exam 303 All Questions
Exam 303 Premium Access

View all detail and faqs for the 303 exam

Viewing page 4 out of 11 pages
Viewing questions 46-60 out of questions
Questions # 46:

-- Exhibit –

Question # 46

Question # 46

-- Exhibit --

Refer to the exhibits.

How should the LTM Specialist minimize the configuration?

Options:

A.

Remove the pool member level monitors.

B.

The configuration is as minimized as possible.

C.

Create a single monitor and apply it to each pool member.

D.

Create a single monitor, apply it to the pool, and remove the pool member level monitors.

Expert Solution
Questions # 47:

OneLTM device in an HA pair of LTM devices is unable to reach its default gateway. An HA Failover event needs to happen.

Which configuration item enables this behavior?

Options:

A.

iRule

B.

Gateway Fail Safe

C.

Gateway pool monitor

D.

Gateway pool

Expert Solution
Questions # 48:

An LTM device an application that requires all connections to be secured via SSL The device must verify that request contain a specific cookie before allowing the request to be sent to the pool member.

Which virtual server type should an LTM Specialist configure on the LTM device?

Options:

A.

Stateless

B.

Performance (HTTP)

C.

Standard

D.

Performance (Layer 4)

E.

Forwarding (IP)

Expert Solution
Questions # 49:

Which file should be modified to create custom SNMP alerts?

Options:

A.

/config/alert.conf

B.

/etc/alertd/alert.conf

C.

/config/user_alert.conf

D.

/etc/alertd/user_alert.conf

Expert Solution
Questions # 50:

-- Exhibit –

Question # 50

-- Exhibit --

Refer to the exhibit.

Users receive an error when attempting to connect to the website https://website.com. The website has a DNS record of 195.56.67.90. The upstream ISP has confirmed that there is nothing wrong with the routing between the user and the LTM device.

The following tcpdump outputs have been captured:

External Vlan, filtered on IP 168.210.232.5

00:25:07.598519 IP 168.210.232.5.33159 > 195.56.67.90.https: S 1920647964:1920647964(0) win 8192

00:25:07.598537 IP 195.56.67.90.https > 168.210.232.5.33159: S 2690691360:2690691360(0) ack 1920647965 win 4350

00:25:07.598851 IP 168.210.232.5.33160 > 195.56.67.90.https: S 2763858764:2763858764(0) win 8192

00:25:07.598858 IP 195.56.67.90.https > 168.210.232.5.33160: S 1905576176:1905576176(0) ack 2763858765 win 4350

Internal Vlan, filtered on IP 168.210.232.5

00:31:46.171124 IP 168.210.232.5.33202 > 192.168.100.20.http: S 2389057240:2389057240(0) win 4380

What is the problem?

Options:

A.

The filters on the tcpdumps are incorrect.

B.

The DNS entry for website.com is incorrect.

C.

The virtual server 'WEBSERVICES1' is listening on the incorrect port.

D.

The firewall is dropping the connection coming from the pool members returned to the client.

E.

The subnet masks of the pool members of pool WebServices1 and the f5 'Internal' Vlan are incorrect.

Expert Solution
Questions # 51:

Refer to the exhibit.

Question # 51

A BIG-IP Administrator needs to deploy an application on the BIG-IP system to perform SSL offload and

re-encrypt the traffic to pool members.

During testing, users are unable to connect to the application.

What must the BIG-IP Administrator do to resolve the issue?

Options:

A.

Remove the configured SSL Profile (Client)

B.

Configure Protocol Profile (Server) as splitsession-default-tcp

C.

Enable Forward Proxy in the SSL Profile (Client)

D.

Configure an SSL Profile (Server)

Expert Solution
Questions # 52:

A webserver is being overloaded with HTTPS traffic. To decrease the load on the server, the LTM Specialist and the Server. Administrator decide to perform SSL offloading on the LTM device. The configuration of the virtual server is as follows:

Question # 52

Which change must be made to the configuration to perform SSL offloading?

Options:

A.

Remove the clientssl and http profiles

B.

Remove the clients profile

C.

Remove the clientssl and serverssl profiles

D.

Remove the severssl profile

Expert Solution
Questions # 53:

What should the 816-IP Administrator provide when opening a new ticket with F5 Support?

Options:

A.

bigip.license file

B.

QKViewfile

C.

Device root password

D.

SSL private keys

Expert Solution
Questions # 54:

An LTM device has a virtual server mapped to www.f5.com with a pool assigned. Users report that when browsing, they are periodically required to re-login to /resources/201.1.7.b.2_l.com. The objects are defined as follows:

Virtual server. Destination 192.168.245.100:443 netmask 255.255.255.0

Persistence: SSL session persistence

Profiles: HTTP/TCP

Which persistence method should the BIG-IP Administrator apply to resolve this issue?

Options:

A.

Source address affinity

B.

hexadecimal

C.

SIP

D.

Destination address affinity

Expert Solution
Questions # 55:

Refer to the exhibit.

Question # 55

The http monitor is applied to a pool All members are enabled One pool member stops responding TCP port 80. The server still responds to ping.

What is the resulting status ofthis pool member?

Options:

A.

Available (Enabled)

B.

Offline (Disabled)

C.

Unavailable (Disabled)

D.

Unknown (Enabled)

Expert Solution
Questions # 56:

The active LTM device in a high-availability (HA) pair performs a failover at the same time the network team reports an outage of a switch on the network.

Which two items could have caused the failover event? (Choose two.)

Options:

A.

a VLAN fail-safe setting

B.

a monitor on a pool in an HA group

C.

the standby LTM that was rebooted

D.

an Auditor role that has access to the GUI

E.

the standby LTM that lost connectivity on the failover VLAN

Expert Solution
Questions # 57:

-- Exhibit –

Question # 57

-- Exhibit --

Refer to the exhibit.

An LTM Specialist has a virtual server set up on the LTM device as per the exhibit. The LTM Specialist receives reports of intermittent issues. Some clients are connecting fine while others are failing to connect.

The LTM Specialist does a tcpdump on the relevant interfaces, with the following results extracted:

What is causing the intermittent issues?

Options:

A.

The firewall is dropping the packets from WS1.

B.

The default gateway is inaccessible from WS1.

C.

The load balancing (LB) method is inappropriate.

D.

The pool members have been set up as an active/standby pair, with WS1 as the standby.

Expert Solution
Questions # 58:

An LTM Specialist has just captured trace /var/tmp/trace.cap for site www.example.com while listening on virtual address 10.0.0.1:443 configured on partition ApplicationA. The data payload being captured is SSL encrypted.

Which command should the LTM Specialist execute to decrypt the data payload?

Options:

A.

ssldump -Aed -nr /var/tmp/trace.cap -k /config/filestore/files_d/Common_d/certificate_d/:Common:www.example.com.crt_1

B.

ssldump -Aed -nr /var/tmp/trace.cap -k /config/filestore/files_d/Common_d/certificate_key_d/:Common:www.example.com.key_1

C.

ssldump -Aed -nr /var/tmp/trace.cap -k /config/filestore/files_d/ApplicationA_d/certificate_d/:ApplicationA:www.example.com.crt_1

D.

ssldump -Aed -nr /var/tmp/trace.cap -k /config/filestore/files_d/ApplicationA_d/certificate_key_d/:ApplicationA:www.example.com.key_1

Expert Solution
Questions # 59:

A BIG-IP Administrator needs to make sure that the automatic update check feature works properly.

What must the administrator configure on the BIG-IP system?

Options:

A.

Update Check Schedule

B.

NTP servers

C.

DNS name servers

D.

SMTP servers

Expert Solution
Questions # 60:

A new HITP server has been deployed on an LTM device. The application running on the server must be monitored by the LIM device. The following is required:

A new HITP server has been deployed on an LTM device. The application running on theserver must be monitored by the LIM device. The following is required:

When the server is unavailable, it will send an HTTP status code of 200 in response to a request for the status html page.

When the server is available. I will send and HTTP status code of 201 in response to a request for the status html page.

When the 200 status code is received, the pool member should receive No new connections.

Which configuration change should be made to meet these requirements?

Options:

A.

set the Send String to GET/status html and the Receive String to 200 and Receive Disable String to 201.

B.

set the Send String to GET Arian and the Receive String to 200 and Receive Disable String to 201.

C.

set the Send String to GET Arian and the Receive Disable String to 200 andReceive String to 201.

D.

set the Send String to Get /status html and the Receive Disable String to 200 and Receive String to 201.

Expert Solution
Viewing page 4 out of 11 pages
Viewing questions 46-60 out of questions