Weekend Sale - Special Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: dpm65

303 BIG-IP ASM Specialist Questions and Answers

Questions 4

An LTM Specialist needs to rewrite text within an HTML response from a web server. A client is sending the following HTTP request:

GET / HTTP/1.1

Host: www.example.com

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:16.0) Gecko/20100101 Firefox/16.0

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-LanguagE. en-US,en;q=0.5

Accept-EncodinG. gzip, deflate

Cache-Control: no-cache

Connection: keep-alive

CookiE. somecookie=1

HTTP/1.1 200 OK

Server: Apache/2.2.15 (Unix)

Last-ModifieD. Wed, 12 Aug 2009 00:00:30 GMT

Accept-Ranges: bytes

Content-LengtH. 1063

X-Cnection: close

Content-TypE. text/html; charset=UTF-8

Vary: Accept-Encoding

Content-EncodinG. gzip

Connection: Keep-Alive

Although a stream profile has been added to the virtual server, the content within the HTTP response is NOT being matched and therefore NOT modified.

Which header field is contributing to the issue?

Options:

A.

HTTP Method

B.

Cookie content

C.

User-Agent Value

D.

Accept-Encoding header

Buy Now
Questions 5

Refer to the exhibit.

303 Question 5

An organization is reporting slow performance accessing their Intranet website, hosted in a public cloud. All employees use a single Proxy Server with the public IP of 104.219.110.168 to connect to the Internet. What should the BIG-IP Administrator of the Intranet website do to fix this issue?

Options:

A.

Change Source Address to 104.219.110.168/32

B.

Change Load Balancing Method to Least Connection

C.

Change Fallback Persistence Profile to source_addr

D.

Change Default Persistence Profile to cookie

Buy Now
Questions 6

A BIG-IP Administrator contacts F5 Support, which identifies a suspected hardware failure. Which information should the BIG-IP Administrator provide to F5 Support?

Options:

A.

Qkview, EUD output

B.

Qkview, UCS archive, core files

C.

Qkview, part numbers for failed components

D.

Qkview, packet capture, UCS archive

Buy Now
Questions 7

The BIG-IP Administrator needs to perform a BIG-IP device upgrade to the latest version of TMOS. Where can the administrator obtain F5 documentation on upgrade requirements?

Options:

A.

AskF5

B.

DevCentral

C.

Bug Tracker

D.

iHealth

Buy Now
Questions 8

A 8IG-IP device is replaced with an RMA device. The BIG-IP Administrator renews the license and tries to restore the configuration from a previously generated UCS archive on the RMA device. The device configuration is NOT fully loading. What is causing the configuration load to fail?

Options:

A.

The Device Group is NOT configured for Full Sync.

B.

The US does NOT contain the full config

C.

The clock is NOT set correctly

D.

The Master Key is NOT restored

Buy Now
Questions 9

An LTM Specialist is configuring a client profile to offload processing a new application Company policy requires that clients can resume session for up to 30 minutes, but must renegotiate a new session after that.

Which setting should the LTM Specialist change to satisfy this requirement?

Options:

A.

Renegotiate Max Record Delay

B.

Renegotiation period

C.

Cachesize

D.

Cache timeout

Buy Now
Questions 10

A new web application is being deployed Mutual SSL authentication must be used to authenticate clients.

Which of the following two tasks must be completed to meet therequirements? (Choose two)

Options:

A.

configure the server SSL profile with "Client Certificate" Set to require

B.

configure the client SSL profile with "Client Certificate" set to require

C.

instruct the desktop team to update the web browser to the most recent release

D.

generate a CSR to register a certificate with the CA

E.

configure the client SSL profile with the Trusted .Certificate Authorities

Buy Now
Questions 11

A 8IG-IP Administrator configures a Virtual Server to load balance traffic between 50 webservers for an

ecommerce website Traffic is being load balanced using the Least Connections (node) method.

The webserver administrators report that customers are losing the contents from their shopping carts

and are unable to complete their orders.

What should the BIG-IP Administrator do to resolve the issue?

Options:

A.

Change Default Persistence Profile setting to cookie

B.

Change Load Balancing method to Ratio (member)

C.

Change Default Persistence Profile setting to sipjnfo

D.

Change Load Balancing method to Ratio (node)

Buy Now
Questions 12

Which iRule statement demotes a virtual server from CMP?

Options:

A.

set ::foo 123

B.

set static::foo 123

C.

persist source_addr 1800

D.

[ class match $HTTP_CONTENT contains my_data_class ]

Buy Now
Questions 13

An LTM Specialist is working with an LTM device configured with 10 virtual servers on the same domain with a different key/cert pair per virtual. For examplE. www.example.com; ftp.example.com; ssh.example.com; ftps.example.com.

What should the LTM Specialist do to reduce the number of objects on the LTM device?

Options:

A.

create a 0 port virtual server and have it answer for all protocols

B.

create a 0.0.0.0:0 virtual server thus eliminating all virtual servers

C.

create a transparent virtual server thus eliminating all virtual servers

D.

create a wildcard certificate and use it on all *.example.com virtual servers

Buy Now
Questions 14

An LTM Specialist discovers an issue with the custom http monitor that returns in a false positive status.

The end users cannot get the right website, but thehttp monitor marks the pool member UP.

What is causing the false positive result?

303 Question 14

Options:

A.

The end user should use another type of browser.

B.

The response is chunked.

C.

The response is compressed.

D.

The Content-Type has value "iso-8859-200".

Buy Now
Questions 15

What is the correct command to reset an LTM device to its default settings?

Options:

A.

tmsh reset-all default

B.

tmsh set /sys config defaults

C.

tmsh load /sys config default

D.

tmsh /util bigpipe reset-factory-defaults

Buy Now
Questions 16

A BIG-IP Administrator uses backend servers to host multiple services per server. There are multiple virtual servers and pools defined, referencing the same backend servers.

Which load balancing algorithm is most appropriate to have an equal number of connections on each backend server?

Options:

A.

Least Connections (member)

B.

Least Connections (node)

C.

Predictive (member)

D.

Predictive (node)

Buy Now
Questions 17

A BIG-IP Administrator is performing maintenance on the active BIG-IP device of an HA pair. The BIG-IP

Administrator needs to minimize traffic disruptions.

What should the BIG-IP Administrator do to start the maintenance activity?

Options:

A.

Reboot the BIG-IP device.

B.

Move resources to a new Traffic Group.

C.

Force the BIG-IP device to standby.

D.

Disable switch ports of the BIG-IP device.

Buy Now
Questions 18

Refer to the exhibit

The network team creates a new VLAN on the switches. The BIG-IP Administrator needs to create a

configuration on the BIG-IP device. The BIG-IP Administrator creates a new VLAN and Self IP, but the

servers on the new VLAN are NOT reachable from the BIG-IP device.

Which action should the BIG-IP Administrators to resolve this issue?

Options:

A.

Set Port Lockdown of Set IP to Allow All

B.

Change Auto Last Hop to enabled

C.

Assign a physical interface to the new VLAN

D.

Create a Floating Set IP Address

Buy Now
Questions 19

An LTM Specialist configures a new virtual server with a single pool member. The LTM Specialist has NOT defined a health monitor for the pool, pool member or node.

What is the status of the virtual server?

Options:

A.

Available (Enabled)

B.

Offline (Disabled)

C.

Unavailable (Enabled)

D.

Unknown (Enabled)

Buy Now
Questions 20

A BIG-IP Administrator defines a device Self IP . The Self IP is NOT reachable from the network. What should the BIG-IP Administrator verify first?

Options:

A.

The correct interface has been selected.

B.

The correct VLAN has been selected.

C.

Verify if auto last hop is disabled.

D.

The correct Trunk has been selected.

Buy Now
Questions 21

Which command should an LTM Specialist use on the command line interface to show the health of RAID array hard drives?

Options:

A.

tmsh show /sys raid disk

B.

tmsh show /ltm raid disk

C.

tmsh show /sys raid status

D.

tmsh show /ltm disk status

Buy Now
Questions 22

-- Exhibit –

303 Question 22

-- Exhibit --

Refer to the exhibit.

An LTM Specialist configures a virtual server to perform client-side encryption while allowing the server-side traffic to be unencrypted. Application owners report that images are failing to load through the virtual server; however, images load when going directly to the server.

What is the problem with the images loading through the virtual server?

Options:

A.

Image references are for HTTP objects, not HTTPS.

B.

Image references are for HTTPS objects, not HTTP.

C.

The virtual server does not have "SSL Offloading" enabled.

D.

The virtual server does not have an HTTP profile associated.

Buy Now
Questions 23

An LTM Specialist regularly provides analytics reports that show that traffic generated by different subnets within the organization. The LTM Specialist needs show the associate department names next the IP addresses in the reports.

Which step should the LTM Specialist take to meet this requirement?

Options:

A.

use an iRule to change the output of the report

B.

export the report and add the department names manually

C.

create VLANs for each subnet and set the name accordingly

D.

define active subnetsand assign a name to certain subnets

Buy Now
Questions 24

A BIG-IP device is configured with both an internal external and two Corporate VLANs. The virtual server

has SNAT enabled and is set to listen on all VLANs Auto Last Hop is disabled. The Corporate users are on

10.0.0.0./24 and 172.16.0.0/12. The BIG-IP has a Self-IP on the 1.0.0.0.0./24 subnet.

Internet users are able to access the virtual server. Only some of the Corporate users are able to connect

to the virtual server A BIG-IP Administrator performs a tcpdump on the BIG-IP and verifies that traffic is

arriving from users in 10.0.0.0/24.

What should the BIG-IP Administrator do to correct this behaviour?

Options:

A.

Disable the server on the internal VLAN

B.

Add a static route for the 172.16.0.0/12 subnet

C.

Change the default route to point to the extra firewall

D.

Modify the default route of the servers to point to the BIG-IP device

Buy Now
Questions 25

-- Exhibit –

303 Question 25

303 Question 25

-- Exhibit --

Refer to the exhibits.

Every monitor has the same Send String, Recv String, and an Alias of *:*. The LTM Specialist simplifies the configuration to minimize the number of monitors.

How many unique monitors remain?

Options:

A.

1

B.

2

C.

3

D.

4

E.

5

Buy Now
Questions 26

A local user account (Users) on the BIG-IP device is assigned the User Manager role. Userl attempts to

modify the properties of another account (User2), but the action fails. The BIG-IP Administrator can

successfully modify the User2 account.

Assuming the principle of least privilege, what is the correct way to allow User 1 to modify User2

properties?

Options:

A.

Move User2 to the same partition as User1

B.

Grant User1 administrative privileges

C.

Move User to the same partition as User2.

D.

Modify the partition access for User 1

Buy Now
Questions 27

-- Exhibit –

303 Question 27

303 Question 27

-- Exhibit --

Refer to the exhibit.

An LTM Specialist is troubleshooting an HTTP monitor that is marking a pool member as down. Connecting to the pool member directly through a browser shows the application is up and functioning correctly.

ltm monitor http http_mon {

defaults-from http

destination *:*

interval 5

recv "200 OK"

send "GET /\\r\\n"

time-until-up 0

timeout 16

}

What is the issue?

Options:

A.

The HTTP headers are compressed.

B.

The pool member is responding with a 404.

C.

The pool member is responding without HTTP headers.

D.

The request is NOT being received by the pool member.

Buy Now
Questions 28

An LTM device is load balancing SIP traffic. An LTM Specialist notices that sometimes the SIP request is being load balanced to the same server as the initial connection.

Which setting in the UDP profile will make the LTM device more evenly distribute the SIP traffic?

Options:

A.

Enable Datagram LB

B.

Disable Datagram LB

C.

Set Timeout to Indefinite

D.

Set Timeout to Immediate

Buy Now
Questions 29

An LTM device is serving an FTP virtual server that has three pool members. The FTP pool members are monitored via TCP port 21. Customers are reporting that they are able to log in, but are sometimes unable to upload files to the server.

Which monitor should the LTM Specialist configure to verify that the servers can handle file uploads?

Options:

A.

FTP

B.

Inband

C.

External

D.

Scripted

E.

Real Server

Buy Now
Questions 30

The pool members are serving up simple static web content.

The current virtual server configuration is given as follows:

tmsh list ltm virtual simple

ltm virtual simple {

destination 10.10.10.10:80

ip-protocol tcp

mask 255.255.255.255

profiles {

http { }

httpcompression { }

oneconnect { }

tcp { }

}

snat automap

vlans-disabled

}

tmsh list ltm pool simple_pool

ltm pool simple_pool {

members {

10.10.10.11:80 {

address 10.10.10.11 }

10.10.10.12:80 {

address 10.10.10.12 }

10.10.10.12:80 {

address 10.10.10.13 }

}

}

Which three objects in the virtual server configuration can be removed without disrupting functionality of the virtual server? (Choose three.)

Options:

A.

tcp

B.

http

C.

oneconnect

D.

snat automap

E.

httpcompression

Buy Now
Questions 31

An application is making heavy use of a large, high-quality JPEG image file. An LTM Specialist needs to enhance page load times without increasing server load.

Which profile should be applied to the virtual server to perform this task?

Options:

A.

Response Adapt

B.

OneConnect

C.

FastHTTP

D.

Web Acceleration

Buy Now
Questions 32

An LTM Specialist needs to create a pool with a set of monitor that checks both the pool members and corresponding application service ports. The pool members have services on port 80. The application service is on port 8009.

The LTM device should load balance traffic to the pool member when the pool member and corresponding application service pass monitor.

Which monitor and parameter set meets this requirement?

Options:

A.

TCP monitor for port*

Plus a custom TCPmonitor with alias port 8009,

And the pool’s availability requirements set to the ALL

B.

TCP monitor for port

Plus a ustom TCP monitor with alias port 8009,

And the pool’s availability requirement set to All

C.

TCP monitor for port*

Plus a custom TCP monitor with alias port 8009

And the pool ‘s availability requirement set to 1.

D.

TCP monitor for port

Plus a custom TCP monitor with alias port 80

And the pool’s availability requirement set to ALL

Buy Now
Questions 33

Which file should be modified to create custom SNMP alerts?

Options:

A.

/config/alert.conf

B.

/etc/alertd/alert.conf

C.

/config/user_alert.conf

D.

/etc/alertd/user_alert.conf

Buy Now
Questions 34

An LTM Specialist troubleshooting an issue looks at the following /var/log/ltm entries:

Oct 2 04:52:42 slot1/tmm7 crit tmm7[21734]: 01010201:2: Inet port exhaustion on 10.143.109.5 to 10.143.147.150:53 (proto 17)

Oct 2 05:37:16 slot1/tmm7 crit tmm7[21734]: 01010201:2: Inet port exhaustion on 10.143.109.5 to 10.143.147.150:53 (proto 17)

Oct 2 05:57:32 slot1/tmm2 crit tmm2[21729]: 01010201:2: Inet port exhaustion on 10.143.109.5 to 10.143.147.150:53 (proto 17)

Oct 2 06:30:03 slot1/tmm7 crit tmm7[21734]: 01010201:2: Inet port exhaustion on 10.143.109.5 to 10.143.147.150:53 (proto 17)

Oct 2 06:37:44 slot1/tmm2 crit tmm2[21729]: 01010201:2: Inet port exhaustion on 10.143.109.5 to 10.143.147.150:53 (proto 17)

Oct 2 06:47:05 slot1/tmm5 crit tmm5[21732]: 01010201:2: Inet port exhaustion on 10.143.109.5 to 10.143.147.150:53 (proto 17)

Which configuration item should the LTM Specialist review to fix the issue?

Options:

A.

SNAT Pool

B.

Pool Member

C.

Port Lockdown

D.

Virtual Server Port Translation

Buy Now
Questions 35

Some users who connect to a busy Virtual Server have connections reset by the BIG-IP system. Pool member resources are NOT a factor in this behavior. What is a possible cause for this behavior?

Options:

A.

The Connection Rate Limit is set too high

B.

The server SSL Profile has NOT been reconfigured.

C.

The Connection Limit is set too low.

D.

The Rewrite Profile has NOT been configured.

Buy Now
Questions 36

-- Exhibit –

303 Question 36

-- Exhibit --

Refer to the exhibit.

An LTM Specialist has uploaded a qkview to F5 iHealth.

Within the GUI, what is the correct procedure to comply with the recommendation shown in the exhibit?

Options:

A.

Obtain product version image from release.f5.com.

Overwrite existing image with new product version image.

Select product version image and click Install.

Select the available disk and volume set name.

B.

Obtain product version image from images.f5.com.

Overwrite existing image with new product version image.

Select product version image and click Install.

Select the available disk and volume set name.

C.

Obtain product version image from downloads.f5.com.

Import product version image.

Install image onto BIG-IP platform.

Select product version image and click Install.

Select the available disk and volume set name.

D.

Log a call requesting the product version image via websupport.f5.com

Import product version image.

Install image onto BIG-IP platform.

Select product version image and click Install.

Select the available disk and volume set name.

Buy Now
Questions 37

Remote office users are having performance issues with a virtual hosted on the F5 LTM. The LTM Specialist reviews the configuration for the virtual server and determine that some settings are set with default profiles.

Which profile should the LTM Specialist enable to improve virtual server performance?

Options:

A.

A WAN optimized client side profile

B.

A FastL4 profile on the virtual server

C.

An HTTP profile for the virtual server

D.

A Stream profile for the remote user networks

Buy Now
Questions 38

The picture belongs to static content, you can configure static content cache in FS to meet this demand

An LTM Specialist must configure session persistence for a highly available, highly utilized web-based application.

* The following requirements are provided:

* http proxy setup for security

persistence information available to the HA peer in case of failover

The LTM Specialist needs to minimize additional burden on the LTM device to the greatest extent possible.

Which persistence profile should be used?

Options:

A.

Cookie insert

B.

Universal

C.

Source Address Affinity

D.

Destination Address Affinity

Buy Now
Questions 39

-- Exhibit –

303 Question 39

-- Exhibit --

Refer to the exhibit.

A user is unable to access an HTTP application via a virtual server.

What is the cause of the failure?

Options:

A.

The host header requires a host name.

B.

The virtual server is in the disabled state.

C.

The Connection: Keep-Alive header is set.

D.

There is no pool member available to service the request.

Buy Now
Questions 40

The interface 1.1 of the BIG-IP device has been connected to a link dedicated to traffic on VLAN 120. What should the BIG-IP Administrator do to receive traffic from the VLAN?

Options:

A.

Create a new VLAN object and set Customer Tag to 120

B.

Create a new VLAN object and assign the interface 1.1 untagged

C.

Create a new trunk object with interface 1.1 assigned

D.

Create a new trunk object and assign it to the VLAN

Buy Now
Questions 41

Given this as the first packet displayed of an ssldump:

2 2 1296947622.6313 (0.0001) S>CV3.1(74) Handshake

ServerHello

Version 3.1

random[32]=

19 21 d7 55 c1 14 65 63 54 23 62 b7 c4 30 a2 f0

b8 c4 20 06 86 ed 9c 1f 9e 46 0f 42 79 45 8a 29

session_id[32]=

c4 44 ea 86 e2 ba f5 40 4b 44 b4 c2 3a d8 b4 ad

4c dc 13 0d 6c 48 f2 70 19 c3 05 f4 06 e5 ab a9

cipherSuite TLS_RSA_WITH_RC4_128_SHA

compressionMethod NULL

In reviewing the rest of the ssldump, the application data is NOT being decrypted.

Why is ssldump failing to decrypt the application data?

Options:

A.

The application data is encrypted with SSLv3.

B.

The application data is encrypted with TLSv1.

C.

The data is contained within a resumed TLS session.

D.

The BigDB Key Log.Tcpdump.Level needs to be adjusted.

Buy Now
Questions 42

Refer to the exhibit.

303 Question 42

An LTM device has a virtual server mapped to www.f5.com. Users report that when they connect to

/resources/201.1.2h.l_l.com they are unable to receive content.

What is the likely cause of the issue?

Options:

A.

The pool associated with the virtual server does not have priority group activation enabled.

B.

The virtual address does not have ARP enabled.

C.

The virtual address does not have route advertising enabled.

D.

The pool associated with the virtual server is falling its health check.

Buy Now
Questions 43

A BIG-IP Administrator makes a configuration change to the BIG-IP device. Which file logs the message regarding the configuration change?

Options:

A.

/var/log/messages

B.

/var/log/audit

C.

/var/log/user.log

D.

/var/log/secure

Buy Now
Questions 44

In the BIG-IP Configuration Utility, a user requests a single screen view to determine the status of all Virtual Servers and associated pool members, as well as any iRules in use. Where should the BIG-IP Administrator instruct the user to find this view?

Options:

A.

Local Traffic > Monitors

B.

Local Traffic > Virtual Servers

C.

Local Traffic > Network Map

D.

Statistics

Buy Now
Questions 45

Which three HTTP headers allow an application server to determine the client's language compatibility, browser, operating system type, and compression compatibility? (Choose three.)

Options:

A.

Accept

B.

Accept-Encoding

C.

Accept-Language

D.

Host

E.

User-Agent

Buy Now
Questions 46

Which Virtual Server type should be used to load balance HTTP traffic to a pool of servers?

Options:

A.

Standard

B.

Stateless

C.

Forwarding (IP)

D.

Forwarding (Layer 2)

Buy Now
Questions 47

-- Exhibit –

303 Question 47

-- Exhibit --

Refer to the exhibit.

Which step should an LTM Specialist take to utilize AVR?

Options:

A.

provision AVR

B.

reboot the device

C.

install the AVR add-on

D.

license the device for AVR

Buy Now
Questions 48

Refer to the exhibit.

303 Question 48

A user notifies the BIG-IP Administrator that https://remote company.com is NOT accessible. Remote

access to company resources must be encrypted.

What should the BIG-IP Administrator do to fix the issue?

Options:

A.

Change the Listening Port on remote.company.com_vs to Port 80

B.

Add a Pool to the Virtual Server remote.company.com_VS

C.

Add an iRule to remote.company.com_vs to redirect Traffic to HTTPS

D.

Change the Type of the Virtual Server remote.company.com_vs to Forwarding

Buy Now
Questions 49

-- Exhibit –

303 Question 49

-- Exhibit --

Refer to the exhibit.

An LTM Specialist is troubleshooting a new HTTP monitor on a pool. The pool member is functioning correctly when accessed directly through a browser. However, the monitor is marking the member as down. The LTM Specialist captures the monitor traffic via tcpdump.

What is the issue?

Options:

A.

The server is marking the connection as closed.

B.

The pool member is rejecting the monitor request.

C.

The monitor request is NOT returning the page body.

D.

The 'time-until-up' setting on the monitor is incorrect.

Buy Now
Questions 50

An LTM Specialist has a OneConnect profile and HTTP profile configured on a virtual server to load balance an HTTP application.

The following HTTP headers are seen in a network trace when a client connects to the virtual server:

Clientside:

GET / HTTP/1.1

Host: 192.168.136.100

User-Agent: Mozilla/5.0

Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

Accept-EncodinG. gzip, deflate

Connection: keep-alive

Serverside:

HTTP/1.1 200 OK

DatE. 5 Jun 1989 17:06:55 GMT

Server: Apache/2.2.14 (Ubuntu)

Vary: Accept-Encoding

Content-EncodinG. gzip

Content-LengtH. 3729

X-Cnection: close

Content-TypE. text/html

The LTM Specialist notices the OneConnect feature is working incorrectly.

Why is OneConnect functioning incorrectly?

Options:

A.

Client must support HTTP/1.0.

B.

Client must support HTTP keep-alive.

C.

Server must support HTTP/0.9.

D.

Server must support HTTP keep-alive.

Buy Now
Questions 51

A BIG-IP Administrator is checking the BIG-IP device for known vulnerabilities. What should the 8IG-IP Administrator upload to BIG-IP iHealth for further analysis?

Options:

A.

QKView

B.

EUD

C.

UCS

D.

tcpdump

Buy Now
Questions 52

Refer to the exhibit.

303 Question 52

Which two pool members should be chosen for a new connection? (Choose two.)

Options:

A.

172.16.15.9.80

B.

172.16.15.4.80

C.

172.10.15.2.80

D.

172.16.15.1.80

E.

172.16.15.7.80

Buy Now
Questions 53

-- Exhibit –

303 Question 53

303 Question 53

-- Exhibit --

Refer to the exhibits.

When observing the AVR statistics for the HTTPS_VS, an LTM Specialist realizes that HTTP status codes are NOT being recorded.

How should the LTM Specialist modify the configuration to record the HTTP status codes?

Options:

A.

assign a streaming profile to the virtual server

B.

assign client SSL and server SSL profiles to the virtual server

C.

enable Statistics Logging Type, External on the analytics profile

D.

enable Collected Entities, Response Codes on the analytics profile

Buy Now
Questions 54

A device group is made up of four members: LTM-A, LTM-B, LTM-C, and LTM-D. An LTM Specialist makes a configuration change on LTM-B. Later, a different LTM Specialist notices a "changes pending" message on all devices. When logged into LTM-D, the LTM Specialist attempts to config-sync to the device group. The sync operation fails.

Why is the LTM Specialist on LTM-D unable to synchronize the configuration to the group?

Options:

A.

The changes made on LTM-B are invalid.

B.

LTM-D has the lowest commit-id of the group.

C.

NTP is NOT configured on the devices in the group.

D.

LTM-B is the device eligible to initiate a config-sync.

Buy Now
Questions 55

-- Exhibit –

303 Question 55

-- Exhibit --

Refer to the exhibit.

An LTM Specialist is troubleshooting a new HTTP monitor on a pool. The pool member is functioning correctly when accessed directly through a browser, although the monitor is marking the member as down. As part of the troubleshooting, the LTM Specialist has captured the monitor traffic via tcpdump.

How should the LTM Specialist resolve this issue?

Options:

A.

Add the 'http' monitor to the pool.

B.

Add the 'icmp' monitor to the node.

C.

Modify the receive string to valid content.

D.

Correct the firewall rules on the pool member.

Buy Now
Questions 56

Internet clients connecting to a virtual server to download a file are experiencing about 150 ms of latency and no packet loss.

Which built-in client-side TCP profile provides the highest throughput?

Options:

A.

tcp

B.

tcp-legacy

C.

tcp-lan-optimized

D.

tcp-wan-optimized

Buy Now
Questions 57

An LTM Specialist needs to upgrade all guests on a Viprion eight CMP guests.

What is the maximum number of guests that the LTM Specialist should upgrade at once?

Options:

A.

Eight

B.

One

C.

TWO

D.

Four

Buy Now
Questions 58

An LTM Specialist is experiencing issues in a failover event. Certain long-lasting FTP event. Certain long-lasting FTP connections using a single node pool are forced to reconnect. The bigip.conf extract isshown:

303 Question 58

What does the LTM Specialist need to change in the configuration to avoid this issue?

Options:

A.

snatpool

B.

persistence mirroring

C.

connection mirroring

D.

ftp profile

Buy Now
Questions 59

A client is attempting to log in to a web application that requires authentication. The following HTTP headers are sent by the client:

GET /owa/ HTTP/1.1

Authorization: Basic dXNlcm5hbWU6cGFzc3dvcmQ=

User-Agent: curl/7.26.0

Host: 10.0.0.14

Accept: */*

Accept-EncodinG. gzip,deflate

The web server is responding with the following HTTP headers:

HTTP/1.1 401 Unauthorized

Content-TypE. text/html

Server: Microsoft-IIS/7.5

WWW-AuthenticatE. NTLM

DatE. Wed, 16 Aug 1977 19:12:31 GMT

Content-LengtH. 1293

The client has checked the login credentials and believes the correct details are being entered.

What is the reason the destination web server is sending an HTTP 401 response?

Options:

A.

The username and password are incorrect.

B.

The server has an incorrect date configured.

C.

The client is using the wrong type of browser.

D.

The wrong authentication mechanism is being used.

Buy Now
Questions 60

An LTM device configuration is as shown:

An LTM device configuration is as shown

303 Question 60

What should be the two expected outcomes based on this configuration? (Choose two.)

Options:

A.

A client session that has been idle for 16 minutes will be sent to the same pool member

B.

A client session that has been idle for 20 minutes will be balanced to a new pool member

C.

A client session that has been idle for 14 minutes will be balanced to a newpool member

D.

A client session that has been idle for 48 minutes will be sent to the same pool members

E.

A client session that has been idle for 12 minutes will be sent to the same pool member

Buy Now
Questions 61

-- Exhibit –

303 Question 61

303 Question 61

-- Exhibit --

Refer to the exhibits.

A customer requests to offload SSL for an internal website. The front page of the website loads correctly; however, selecting links on the page fails.

How should the LTM Specialist fix the issue?

Options:

A.

Create a new SNAT pool.

Add internal network IPs to the SNAT pool.

Add the SNAT pool to the VS.

B.

Create a new HTTP profile.

Enable Insert X-Forwarded-For.

Add the new HTTP profile to the VS.

C.

Create a new HTTP profile.

Enable redirect rewrite.

Add the new HTTP profile to the VS.

D.

Create a new Server SSL profile.

Enable Proxy SSL.

Add the Server SSL profile to the VS.

Buy Now
Questions 62

Six servers have a varying number of connections that change based on the user load.

Which load balancing method should an LTM Specialist apply to divided the web application traffic to the servers on therelative performance trend?

Options:

A.

Least Sessions

B.

Least Connections

C.

Predictive

D.

Ratio

Buy Now
Questions 63

An application is expected to maintain more than 100,000concurrent TCP connections to a single pool member.

What is an appropriate SNAT configuration in this situation?

Options:

A.

A SNAT pool with 4 IP addresses

B.

SNAT automap enabled

C.

A static SNAT

D.

A SNAT pool with IP address

Buy Now
Questions 64

What is the status of a pool member when manual resume is enabled and a health check first fails and then passes?

Options:

A.

Offline (Disabled)

B.

Offline (Enabled)

C.

Available (Disabled)

D.

Available (Enabled)

Buy Now
Questions 65

Which command line interface command will check if the BIG-IP platform contains a packet velocity ASIC (PVA)?

Options:

A.

bigpipe platform show | grep -i pva

B.

tmsh show /sys hardware pva status

C.

tmsh show /sys hardware | grep -i pva

D.

tmsh show /ltm hardware | grep -i pva

Buy Now
Questions 66

A web application is configured as follows:

303 Question 66

What should be modified to set a maximum request limit?

Options:

A.

Virtual server settings

B.

HTTP profile

C.

Pool settings

D.

ICP Profile

Buy Now
Questions 67

An LTM Specialist needs to add a pool that will load balanceMYSOL services. It has four members, each with differing hardware platforms. All pool members are already assigned to another pool for load balancing FTP traffic.

Which load balancing method is most effective when the LTM Specialist sets up the pool?

Options:

A.

Observed (node)

B.

Predictive member)

C.

Round Robin

D.

Least Connections (node)

Buy Now
Questions 68

RADIUS authentication has been configured on the LTM device. The default remote user access requirements are as shown:

  • Read only access tothe configuration Utility
  • Access to TMOS shell

Which two items need to be configured in this situation? (Choose two)

Options:

A.

Console access is Advanced Shell

B.

Console access is Read Only

C.

Default remote user role is Guest

D.

In Console access is TMSH

E.

Default remote user role is Manager

F.

Default remote user role is Operator

Buy Now
Questions 69

-- Exhibit –

303 Question 69

-- Exhibit --

Refer to the exhibit.

A user is unable to access an application.

What is the root cause of the problem?

Options:

A.

The User-Agent is incorrect.

B.

The 'Content-Length' is zero.

C.

The user failed authentication.

D.

The GET request uses the wrong syntax.

Buy Now
Questions 70

Given LTM device ltm log:

Sep 26 20:51:08 local/lb-d-1 notice promptstatusd[3695]: 01460006:5: semaphore mcpd.running(1) held

Sep 26 20:51:08 local/lb-d-1 notice promptstatusd[3695]: 01460006:5:

Sep 26 20:51:08 local/lb-d-1 warning promptstatusd[3695]: 01460005:4: mcpd.running(1) held, wait for mcpd

Sep 26 20:51:08 local/lb-d-1 info sod[3925]: 010c0009:6: Lost connection to mcpd - reestablishing.

Sep 26 20:51:08 local/lb-d-1 err bcm56xxd[3847]: 012c0004:3: Lost connection with MCP: 16908291 ... Exiting bsx_connect.cpp(174)

Sep 26 20:51:08 local/lb-d-1 info bcm56xxd[3847]: 012c0012:6: MCP Exit Status

Sep 26 20:51:08 local/lb-d-1 info bcm56xxd[3847]: 012c0012:6: Info: LACP stats (time now:1348717868) : no traffic

Sep 26 20:51:08 local/lb-d-1 info bcm56xxd[3847]: 012c0014:6: Exiting...

Sep 26 20:51:08 local/lb-d-1 err lind[3842]: 013c0004:3: IO error on recv from mcpd - connection lost

Sep 26 20:51:08 local/lb-d-1 notice bigd[3837]: 01060110:5: Lost connection to mcpd with error 16908291, will reinit connection.

Sep 26 20:51:08 local/lb-d-1 err statsd[3857]: 011b0004:3: Initial subscription for system configuration failed with error ''

Sep 26 20:51:08 local/lb-d-1 err statsd[3857]: 011b0001:3: Connection to mcpd failed with error '011b0004:3: Initial subscription for system configuration failed with error '''

Sep 26 20:51:08 local/lb-d-1 err csyncd[3851]: 013b0004:3: IO error on recv from mcpd - connection lost

.............skipping more logs.....

Sep 26 20:51:30 local/lb-d-1 notice sod[3925]: 01140030:5: HA proc_running bcm56xxd is now responding.

Sep 26 20:51:34 local/lb-d-1 notice sod[3925]: 01140030:5: HA proc_running mcpd is now responding.

Sep 26 20:51:34 local/lb-d-1 notice sod[3925]: 010c0018:5: Standby

Which daemon failed?

Options:

A.

promptstatusd

B.

mcpd

C.

sod

D.

bcm56xxd

E.

lind

Buy Now
Questions 71

-- Exhibit –

303 Question 71

-- Exhibit --

Refer to the exhibit.

An LTM Specialist is troubleshooting an HTTP monitor that is marking a pool member as down. Connecting to the pool member directly through a browser shows the application is up and functioning correctly.

How should the send string be modified to correct this issue?

Options:

A.

GET /\r\n\r\n

B.

GET / HTTP/1.0\r\n\r\n

C.

GET /\r\nHost: \r\n\r\n

D.

GET /\r\nHTTP/1.0\r\n\r\n

Buy Now
Questions 72

An LTM Specialist has noticed in the audit log that there are numerous attempts to loginto the Admin account. Theses attempts are sourced from a suspicious IP address range to the Configuration Utility of the LTM device.

How should the LTM Specialist block these attempts?

Options:

A.

add the permitted source IP addresses to the httpd allow list viatmsh

B.

add the suspicious source IP addresses to the httpd deny list via tmsh

C.

add the suspicious source IP addresses to the httpd deny list via Configuration Utility

D.

add the permitted source IP addresses to the allow list viaConfiguration Utility

Buy Now
Questions 73

-- Exhibit –

303 Question 73

-- Exhibit --

Refer to the exhibit.

A user is unable to access a secure application via a virtual server.

What is the cause of the issue?

Options:

A.

The client authentication failed.

B.

The virtual server does NOT have a pool configured.

C.

The client and server CANNOT agree on a common cipher.

D.

The virtual server does NOT have a client SSL profile configured.

Buy Now
Questions 74

A BIG-IP Administrator is unable to connect to the management interface via HTTPS. What is a possible reason for this issue?

Options:

A.

The port lockdown setting is configured to Allow None.

B.

An incorrect management route is specified.

C.

The IP address of the device used to access the management interface is NOT included in the "P Allow" list in the Configuration Utility.

D.

The IP address of the device used to access the management interface is NOT included in the "httpd Allow" list in the CLI.

Buy Now
Questions 75

-- Exhibit –

303 Question 75

-- Exhibit --

Refer to the exhibit.

A web application is configured to allow sessions to continue even after a user computer is shut down for the night. A new LTM device is configured to load balance the web application to several servers. The application owner reports that application users are logged out of the web application whenever their browser is restarted or computer is rebooted.

What is the problem?

Options:

A.

The virtual server does NOT have persistence configured.

B.

The virtual server does NOT have persistence mirroring configured.

C.

The cookie set by the LTM device does NOT have an "Expires" value.

D.

The cookie set by the server is NOT being passed to client by the LTM device.

Buy Now
Questions 76

-- Exhibit –

303 Question 76

-- Exhibit --

Refer to the exhibit.

An LTM Specialist configures a virtual server that balances HTTP connections to a pool of three application servers. Approximately one out of every three connections to the virtual server fails.

Which two actions will resolve the problem? (Choose two.)

Options:

A.

Assign a custom HTTP monitor to the pool.

B.

Enable SNAT automap on the virtual server.

C.

Verify that port lockdown is set to allow port 80.

D.

Verify the default gateway on the application servers.

E.

Increase the TCP timeout value in the default TCP profile.

Buy Now
Questions 77

Windows PC clients are connecting to a virtual server over a high-speed, low-latency network with no packet loss.

Which built-in client-side TCP profile provides the highest throughput for HTTP downloads?

Options:

A.

tcp

B.

tcp-legacy

C.

tcp-lan-optimized

D.

tcp-wan-optimized

Buy Now
Questions 78

An LTM device is monitoring three pool members. One pool member is being marked down.

What should the LTM Specialist enable to prevent the server from being flooded with connections once its monitor determines it is up?

Options:

A.

manual resume

B.

packet shaping

C.

hold down timer

D.

slow ramp timer

E.

fastest load balance algorithm

Buy Now
Exam Code: 303
Exam Name: BIG-IP ASM Specialist
Last Update: May 18, 2024
Preorder
dumpsmate guaranteed to pass
24/7 Customer Support

DumpsMate's team of experts is always available to respond your queries on exam preparation. Get professional answers on any topic of the certification syllabus. Our experts will thoroughly satisfy you.

Site Secure

mcafee secure

TESTED 20 May 2024