Exit demo 303 BIG-IP ASM Specialist PDF format · free preview

F5 303 - Questions & Answers

Free preview · every answer includes a full explanation

Product page: https://prepkeys.com/303.html

Question 1
Single choice

A BIG-IP Administrator creates a new VLAN on BIG-IP Cluster Member A and attaches an Interface to it.
Although the Auto Config Sync is in place, the new VLAN does NOT show up on Cluster Member B.

What should the BIG-IP Administrator do to ensure the new VLAN is configured on each Cluster Member?

A.

Configure the new VLAN manually on Cluster Member

B.

Reset the Device Trust of the BIG-IP Cluster on either Cluster Member.

C.

Configure a Default Route for the new VLAN on Cluster Member A.

D.

Enable the Interface that is attached to the new VLAN on Cluster Member A.

Question 2
Single choice

A VLAN has the following objects configured:

Self-IP 10.10.10.100 with port lockdown set to Allow default

Virtual server 10.10.10.100:443 with UDP profile enabled

Virtual server 10.10.10.0/24 port forwarding virtual server

Global destination NAT forwarding 10.10.10.100 to internal server 172.168.10.100

Which object will process this request when https://10.10.10.100 is entered into a browser?

A.

self-IP 10.10.10.100 with port lockdown set to Allow default

B.

virtual server 10.10.100/24 port o forwarding virtual server

C.

global destination NAT forwarding 10.10.10.100 to internal server 172.168.10.100

D.

virtual server 10.10.10.100.443 with UDP profile enabled

Question 3
Single choice

An LTM Specialist has installed a hotfix that updated the SCCP firmware package.

Which command will ensure that the host subsystem and SCCP reboot?

A.

reboot

B.

full_box_reboot

C.

shutdown -r now

D.

The reboot should be initiated via the HTTPS administration GUI.

Question 4
Single choice

Refer to the exhibit.

A pool is contoured with four members. A user has a currentconnection established with 10.18.1.40. The virtual server has a persistence Profile configured.

A.

10.18.1.10

B.

10.18.1.20

C.

10.18.1.40

D.

10.18.1.30

Question 5
Single choice

Refer to the exhibits.

An LTM Specialist configures a virtual server for an internal application to perform client-side encryption while allowing the server-side traffic to be unencrypted. Application users report that images are NOT
loading through the virtual server; however, images load when going directly to the server.

What should the LTM Specialist configure to allow the images to load through the virtual server?

A.

HTTP profile with "SSL Offload" enabled

B.

HTTP profile with "SSL Offload" disabled

C.

Stream profile with source "http:" and target "https:"

D.

Stream profile with target "http:" and source "https:"

Question 6
Single choice

An LTM Specialist has been asked to configure a virtual server to distribute connections between a pool of

two application servers with addresses 172.16.20.1 and 172.16.20.2. The application servers are listening on TCP ports 80 and 443. The application administrators have asked that clients be directed to the same node for both HTTP and HTTPS requests within the same session.

Virtual servers vs_http and vs_https have been created, listening on 1.2.3.100:80 and 1.2.3.100:443, respectively.

Which configuration option will result in the desired behavior?

A.

Create pool app_pool with members 172.16.20.1:any and 172.16.20.2:any Assign app_pool as the default pool for both vs_http and vs_https Disable port translation for vs_http and vs_https

B.

Create pool http_pool with members 172.16.20.1:80 and 172.16.20.2:80 Assign pool http_pool as the default pool for both vs_https and vs_https Disable port translation for vs_https Create an SSL persistence profile with "match across virtual servers" enabled Assign the persistence profile to vs_http.

C.

Create pool http_pool with members 172.16.20.1:80 and 172.16.20.2:80 Create pool https_pool with members 172.16.20.1:443 and 172.16.20.2:443 Assign http_pool as the default pool for vs_http Assign https_pool as the default pool for vs_https
Create a source address persistence profile with "match across services" enabled Assign the persistence profile to vs_http and vs_https

D.

Create pool http_pool with members 172.16.20.1:80 and 172.16.20.2:80 Create pool https_pool with members 172.16.20.1:443 and 172.16.20.2:443 Assign http_pool as the default pool for vs_http Assign https_pool as the default pool for vs_https
Create an SSL persistence profile with "match across virtual servers" enabled Assign the persistence profile to vs_http

Question 7
Single choice

New Syslog servers have been deployed in an organization. The BIG-IP Administrator must reconfigure the BIG-IP system to send log messages to these servers.

In which location in the Configuration Utility can the BIG-IP Administrator make the needed configuration changes to accomplish this?

A.

System > Logs > Configuration

B.

System > Configuration > Local Traffic

C.

System > Logs > Audit

D.

System > Configuration > Device

Question 8
Single choice

Which command should the LTM Specialist use to determine the current system time?

A.

date

B.

time

C.

uname -a

D.

ntpq -p

Question 9
Single choice

A virtual server is configured to offload SSL from a pool of backend servers. When users connect to the virtual server, they successfully establish an SSL connection but no content is displayed. A packet trace performed on the server shows that the server receives and responds to the request.

What should a BIG-IP Administrator do to resolve the problem?

A.

enable Server SSL profile

B.

disable Server SSL profile

C.

disable SNAT

D.

enable SNAT

Question 10
Single choice

Refer to the exhibit.

Which Pool Members are receiving traffic?

A.

Serv1, serv2,serv3, serv4

B.

serv1, serv3

C.

serv1, serv3, serv4

D.

serv1

Showing 10 of 524 questions · Unlock the full set