Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Pass the F5 BIG-IP ASM 303 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam 303 Premium Access

View all detail and faqs for the 303 exam

Go to Exam

760 Students Passed

97% Average Score

90% Same Questions

Viewing page 5 out of 11 pages

Viewing questions 61-75 out of questions

Questions # 61:

A BIG-IP Administrator adds new Pool Members into an existing, highly utilized pool. Soon after, there are reports that the application is failing to load for some users. What pool level setting should the BIG-IP Administrator check?

Options:

Availability Requirement

Allow SNAT

Action On Service Down

Slow Ramp Time

Questions # 62:

Refer to the exhibit.

Question # 62

The http monitor is applied to a pool. All members are enabled. One server responds as follows.

Question # 62

What is the resulting status of this poo! member?

Options:

Offline (Disabled)

Offline (Enabled)

Unavailable (Disabled)

Available (Enabled)

Questions # 63:

AN LTM Specialist needs to determine the delay between anLTM device and the internal web server for a specific client.

Which two AVR reporting options should the LTM Specialist enable to measure the delay? (Choose two.)

Options:

User agents

Methods

Response codes

Server latency

Client IP

Questions # 64:

-- Exhibit –

Question # 64

-- Exhibit --

Refer to the exhibit.

An LTM Specialist is investigating intermittent page load issues being reported by users.

What should the LTM Specialist do to resolve the issue?

Options:

Remove HTTP monitor on the pool.

Assign an HTTP monitor to the pool.

Select least connections load balancing method on virtual server.

Remove least connections load balancing method on virtual server.

Questions # 65:

The interface 1.1 of the BIG-IP device has been connected to a link dedicated to traffic on VLAN 120. What should the BIG-IP Administrator do to receive traffic from the VLAN?

Options:

Create a new VLAN object and set Customer Tag to 120

Create a new VLAN object and assign the interface 1.1 untagged

Create a new trunk object with interface 1.1 assigned

Create a new trunk object and assign it to the VLAN

Questions # 66:

A BIG-IP device is configured with both an internal external and two Corporate VLANs. The virtual server

has SNAT enabled and is set to listen on all VLANs Auto Last Hop is disabled. The Corporate users are on

10.0.0.0./24 and 172.16.0.0/12. The BIG-IP has a Self-IP on the 1.0.0.0.0./24 subnet.

Internet users are able to access the virtual server. Only some of the Corporate users are able to connect

to the virtual server A BIG-IP Administrator performs a tcpdump on the BIG-IP and verifies that traffic is

arriving from users in 10.0.0.0/24.

What should the BIG-IP Administrator do to correct this behaviour?

Options:

Disable the server on the internal VLAN

Add a static route for the 172.16.0.0/12 subnet

Change the default route to point to the extra firewall

Modify the default route of the servers to point to the BIG-IP device

Questions # 67:

set payload {CACHE :: payload}

}

Which two profiles should be used on the virtual server? (Choose two.)

Options:

http-transparent

http compression

http

webacceleration

stream

Questions # 68:

An LTM device has been configured to log the reasons for generating TCP RST packets.

The following log entry occurs:

"01230140:3: RST sent from 192.168.1.100:80 to 192.168.1.124:39272, [0x112d82a:1721] {peer} TCP RST from remote system."

Which condition will trigger this log entry?

Options:

A virtual server connection limit has been reached.

The host at the other end terminated the TCP connection.

The LTM device reset the connection because no pool members are available.

The LTM device has reached the maximum number of allowed attempts to send the data segment to the affected TCP connection.

Questions # 69:

Refer to the exhibit.

Question # 69

An LTMSpecialist configures the two syslog destination Syslog destination #1 can receive messages but the syslog destination #2 can NOT receive messages.

Which command sill correct the issue?

Options:

{/Common)(tmos) # modify /syssyslog remote-servers modify (syslog_dest2 {local-ip

{/Common)(tmos) # modify Ays syslog remote servers modify {syslog_dest2 {local- ip 10.208.102 254)}

{/Common) (tmos) # modify /sys syslog remote-servers modify {syslog_dest2 {host 10 208.102.254 }}

{Common(tmos) # modify/syslog remote-servers modify {syslog_dest2 {lost.10.10.10.28 }}

Questions # 70:

A node is a member of various pools and hosts different web applications. If a web application is unavailable, the BIG-IP appliance needs to mark the pool member down for that application pool. What should a BIG-IP Administrator deploy at the pool level to accomplish this?

Options:

A UDP monitor with a custom interval/timeout

A combination of ICMP + TCP monitor

An HTTP monitor with custom send/receive strings

A TCP monitor with a custom interval/timeout

Questions # 71:

The LTM device is configured to provide load balancing to a set of web servers that implement access control lists (ACL) based on the source IP address of the client. The ACL is at the network level and the web server is configured to send a TCP reset back to the client if it is NOT permitted to connect.

The virtual server is configured with the default OneConnect profile.

The ACL is defined on the web server as:

Permit: 192.168.136.0/24

Deny: 192.168.116.0/24

The packet capture is taken of two individual client flows to a virtual server with IP address 192.168.136.100.

Client A - Src IP 192.168.136.1 - Virtual Server 192.168.136.100:

Clientside:

09:35:11.073623 IP 192.168.136.1.55684 > 192.168.136.100.80: S 869998901:869998901(0) win 8192

09:35:11.073931 IP 192.168.136.100.80 > 192.168.136.1.55684: S 2273668949:2273668949(0) ack 869998902 win 4380

09:35:11.074928 IP 192.168.136.1.55684 > 192.168.136.100.80: . ack 1 win 16425

09:35:11.080936 IP 192.168.136.1.55684 > 192.168.136.100.80: P 1:299(298) ack 1 win 16425

09:35:11.081029 IP 192.168.136.100.80 > 192.168.136.1.55684: . ack 299 win 4678

Serverside:

09:35:11.081022 IP 192.168.136.1.55684 > 192.168.116.128.80: S 685865802:685865802(0) win 4380

09:35:11.081928 IP 192.168.116.128.80 > 192.168.136.1.55684: S 4193259095:4193259095(0) ack 685865803 win 5840

09:35:11.081943 IP 192.168.136.1.55684 > 192.168.116.128.80: . ack 1 win 4380

09:35:11.081955 IP 192.168.136.1.55684 > 192.168.116.128.80: P 1:299(298) ack 1 win 4380

09:35:11.083765 IP 192.168.116.128.80 > 192.168.136.1.55684: . ack 299 win 108

Client B - Src IP 192.168.116.1 - Virtual Server 192.168.136.100:

Clientside:

09:36:11.244040 IP 192.168.116.1.55769 > 192.168.136.100.80: S 3320618938:3320618938(0) win 8192

09:36:11.244152 IP 192.168.136.100.80 > 192.168.116.1.55769: S 3878120666:3878120666(0) ack 3320618939 win 4380

09:36:11.244839 IP 192.168.116.1.55769 > 192.168.136.100.80: . ack 1 win 16425

09:36:11.245830 IP 192.168.116.1.55769 > 192.168.136.100.80: P 1:299(298) ack 1 win 16425

09:36:11.245922 IP 192.168.136.100.80 > 192.168.116.1.55769: . ack 299 win 4678

Serverside:

09:36:11.245940 IP 192.168.136.1.55684 > 192.168.116.128.80: P 599:897(298) ack 4525 win 8904

09:36:11.247847 IP 192.168.116.128.80 > 192.168.136.1.55684: P 4525:5001(476) ack 897 win 142

Why was the second client flow permitted by the web server?

Options:

A global SNAT is defined.

SNAT automap was enabled on the virtual server.

The idle TCP session from the first client was re-used.

A source address persistence profile is assigned to the virtual server.

Questions # 72:

An LTM device supports two power supplies. The value of the BigDB key "platform.powersupplymonitor" is equal to enable.

Where would the error message be visible if one of the power supplies fails or is NOT plugged in?

Options:

visible only via the console

in the /var/log/ltm log file

in the /var/log/kern.log file

in the /var/log/tmm log file

Questions # 73:

An LTM Specialist must perform a hot fix installation from the command line.

What is the correct procedure to ensure that the installation is successful?

Options:

import the hot fix to the /var/shared/images directory

check the integrity of the file with an md5 checksum

tmsh apply sys software hotfix volume .iso

import the hot fix to the /var/shared/images directory

check the integrity of the file with an md5 checksum

tmsh install sys software hotfix .iso volume

import the hot fix to the /shared/images directory

check the integrity of the file with an md5 checksum

tmsh apply sys software hotfix volume .iso

import the hot fix to the /shared/images directory

check the integrity of the file with an md5 checksum

tmsh install sys software hotfix .iso volume

Questions # 74:

An application is being load balanced through the LTM device using the configuration displayed below.

The network has been re-engineered to NAT all client connection. As a result, allclient connections are hitting the same pool member.

Question # 74

Which changes should the LTM Specialist make in order to restore load balancing functionality wile maintaining session persistence?

Options:

Change the virtual server type to Standard, add an httpprofile, and change the persistence profile to Destination Address

Leave the virtual server type set Performance (Layer 4) and change the persistence type to hash

Change the virtual serer type to Forwarding (Layer 4) and leave the persistence type tohash source Address

Change the virtual server to Standard add an http profile, and change the persistence profile to Cookie persistence

Questions # 75:

Question # 75

A BIG-IP Administrator notices that one of the servers that runs an application is NOT receiving any traffic. The BIG-IP Administrator examines the configuration status of the application and observes the displayed monitor configuration and affected Pool Member status. What is the possible cause of this issue?