Pre-Summer Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: validbest

Pass the F5 BIG-IP ASM 303 Questions and answers with ValidTests

Exam 303 All Questions
Exam 303 Premium Access

View all detail and faqs for the 303 exam

Viewing page 5 out of 11 pages
Viewing questions 61-75 out of questions
Questions # 61:

On the VCMP system, a BIG-IP host administrator imports a new ISO image into the host's /shared/images folder. The new ISO images that reside on the vCMP host are available for installation on the guest. How should the BIG-IP Administrator install one image from within the guest?

Options:

A.

Install the new software on the host and wait for it to automatically be installed on all guests.

B.

Run the following command on guest

tmsh install sys software block-device-image image_name volume < volume_name>

C.

Run the following command on guest

tmsh install sys software image image_name volume < volume_name>

D.

Run the following command on host

tmsh install sys software block-device-image image_name volume < volume_name>

Expert Solution
Questions # 62:

An LTM Specialist is removing some of the load off an existing cluster by adding a adding a third BIG-IP

device to the device group. The new device candeliver twice the performance of the other two devices.

The LTM Specialist needs to make sure that the BIG-IP device with the highest available capacity is

always selected to take over a traffic group in the event of a failover.

Which failover method is most appropriate?

Options:

A.

Ordered List

B.

Load Aware

C.

HA Group

D.

HA Capacity

Expert Solution
Questions # 63:

Refer to the exhibit.

Question # 63

A user attempts to connect to 10.10.10.1.80 using FTP over SSL with an FTPS client. Which virtual server will match and attempt to process the request?

Options:

A.

vsjutps

B.

vs_ftp

C.

vs_http

D.

nvfs

Expert Solution
Questions # 64:

The BIG-IP Administrator needs to ensure the correct health monitor is being used lor a new HTTP pool

named P_example.

Where should the BIG-IP Administrator validate these settings in the Configuration Utility?

Options:

A.

Local Traffic > Nodes > Default Monitor

B.

Local Traffic > Profiles > Services > HTTP > http

C.

Local Traffic > Monitors > http

D.

Local Traffic > Pools > P_ example

Expert Solution
Questions # 65:

A node is assigned two monitors as seen in this configuration.

Question # 65

What is the status of a member that runs on that node and listens on port 443?

Options:

A.

UNKNOWN

B.

UNAVAILABLE

C.

DOWN

D.

UP

Expert Solution
Questions # 66:

-- Exhibit –

Question # 66

-- Exhibit --

Refer to the exhibit.

A layer 2 nPath routing configuration has been deployed. A packet capture contains a client connection packet with the following properties:

Source IP:

Destination IP:

At which two locations could the packet capture have been taken? (Choose two.)

Options:

A.

the network interface of web server

B.

the DMZ interface of the Internet firewall

C.

the internal interface of the Internet firewall

D.

the external VLAN interface of the LTM device

Expert Solution
Questions # 67:

Refer to the exhibit

The BIG-IP Administrator is unable to access the management console via Self-IP 10.10 1.33 and port 443.

What is the reason for this problem?

Options:

A.

Packet Filter needs to be configured to allow a source

B.

Self IP is configured to allow TCP All

C.

Self IP is configured to allow UDP 443

D.

Packet Filter is configured to allow port 443

Expert Solution
Questions # 68:

In preparation for a maintenance task, an LTM Specialist performs a "Force to Standby" on LTM device Unit 1. LTM device Unit 2 becomes active as expected. The maintenance task requires the reboot of Unit 1. Shortly after the reboot is complete, the LTM Specialist discovers that Unit 1 has become active and Unit 2 has returned to standby.

What would cause this behavior?

Options:

A.

Unit 1 is set with the redundancy state preference of active in devices groups.

B.

Unit 1 is set with the redundancy state preference of active in high availability.

C.

A traffic group is configured with Auto Failback, and Unit 1 is the default device.

D.

A device group is configured with Auto Failback, and Unit 1 is the default device.

Expert Solution
Questions # 69:

An LTM Specialist needs to rewrite text within an HTML response from a web server. A client is sending the HTTP request below:

GET / HTTP/1.1

Host: www.f5.com

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:16.0) Gecko/20100101 Firefox/16.0

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-LanguagE. en-US,en;q=0.5

Accept-EncodinG. gzip, deflate

Cache-Control: no-cache

Connection: keep-alive

CookiE. somecookie=1

Although a stream profile has been added to the virtual server, the content within the HTTP response is NOT being matched, and therefore NOT modified.

Which HTTP header should the LTM Specialist remove from the request to ensure the content can be matched and modified?

Options:

A.

Connection

B.

Accept

C.

Cache-Control

D.

Accept-Encoding

Expert Solution
Questions # 70:

An LTM Specialist has been asked to configure a virtual server to distribute connections between a pool of two application servers with addresses 172.16.20.1 and 172.16.20.2. The application servers are listening on TCP ports 80 and 443. The application administrators have asked that clients be directed to the same node for both HTTP and HTTPS requests within the same session.

Virtual servers vs_http and vs_https have been created, listening on 1.2.3.100:80 and 1.2.3.100:443, respectively.

Which configuration option will result in the desired behavior?

Options:

A.

Create pool app_pool with members 172.16.20.1:any and 172.16.20.2:any

Assign app_pool as the default pool for both vs_http and vs_https

Disable port translation for vs_http and vs_https

B.

Create pool http_pool with members 172.16.20.1:80 and 172.16.20.2:80

Assign pool http_pool as the default pool for both vs_https and vs_https

Disable port translation for vs_https

Create an SSL persistence profile with "match across virtual servers" enabled

Assign the persistence profile to vs_http.

C.

Create pool http_pool with members 172.16.20.1:80 and 172.16.20.2:80

Create pool https_pool with members 172.16.20.1:443 and 172.16.20.2:443

Assign http_pool as the default pool for vs_http

Assign https_pool as the default pool for vs_https

Create a source address persistence profile with "match across services" enabled

Assign the persistence profile to vs_http and vs_https

D.

Create pool http_pool with members 172.16.20.1:80 and 172.16.20.2:80

Create pool https_pool with members 172.16.20.1:443 and 172.16.20.2:443

Assign http_pool as the default pool for vs_http

Assign https_pool as the default pool for vs_https

Create an SSL persistence profile with "match across virtual servers" enabled

Assign the persistence profile to vs_http

Expert Solution
Questions # 71:

An LTM Specialist is configuring a client profile to offload processing a new application Company policy requires that clients can resume session for up to 30 minutes, but must renegotiate a new session after that.

Which setting should the LTM Specialist change to satisfy this requirement?

Options:

A.

Renegotiate Max Record Delay

B.

Renegotiation period

C.

Cachesize

D.

Cache timeout

Expert Solution
Questions # 72:

While investigating the cause of a device failover, an LTM Specialist discovers the following events in /var/log/ltm:

01010029:5: Clock advanced by 518 ticks

01010029:5: Clock advanced by 505 ticks

01010029:5: Clock advanced by 590 ticks

01010029:5: Clock advanced by 568 ticks

01010029:5: Clock advanced by 1681 ticks

01010029:5: Clock advanced by 6584 ticks

01140029:5: HA daemon_heartbeat tmm fails action is failover and restart.

010c0026:5: Failover condition, active attempting to go standby.

Which issue caused the failover?

Options:

A.

NTP being out of sync

B.

TMM being descheduled

C.

VLAN Fail-safe heartbeats

D.

HA missing heartbeat packets

Expert Solution
Questions # 73:

An LTM device provides load balancing to a web application? The LTM device has two dual-core processors and a licensed SSL Transactions Per Second (TPS) limit of 500 CMP is enabled.

TLS connections are used between client systems and virtual servers on the LTM device, as well as from the LTM device to servers used as part of LTM pool.

TLS enabled virtual servers utilize certificates based on 2048-bit keys

During a peak period. 2560 new TLStransactions per second are attempted to the web application via the LTM device.

What will happen in this scenario?

Options:

A.

560 new TLS transactions will be silently discarded due to the SSL TPS license limit

B.

Nothing: TLS transactions per second are NOT affected by an SSL TPS license limit

C.

2060 new TLS transactions will be silently discarded due to the SSL TPS license limit

D.

Nothing: 2560 TLS transactions per second is within the SSI TPS license limit.

Expert Solution
Questions # 74:

An LTM device has a virtual server mapped to www5f.com with a pool assigned. The objects are defined

as follows:

Virtual server. Destination 192.168.245.100.443 netmask 255.255.255.0

Persistence: Source address persistence netmask 255.0.0.0

SNAT:AutoMap

Profiles: HnP/TCP

How should the BIG-IP Administrator modify the persistence profile so that each unique IP address

creates a persistence record?

Options:

A.

netmask 0.0.0.0

B.

netmask 255.255.255.255

C.

netmask 255.255.0.0

D.

netmask 255.256.255.0

Expert Solution
Questions # 75:

A user wants to use the iHealth Upgrade Advisor to determine any issues with upgrading TMOS from 13.0 to 13.1.

Where can the user generate the QKView to upload to iHealth?

Options:

A.

System > Software Management

B.

System > Archives

C.

System > Configuration

D.

System > Support

Expert Solution
Viewing page 5 out of 11 pages
Viewing questions 61-75 out of questions