303 Braindumps Real Exam Updated on Oct 29, 2021 with 525 Questions
Latest 303 PDF Dumps & Real Tests Free Updated Today
NEW QUESTION 110
An LTM Specialist sees these entries in /var/log/ltm:
Oct 25 03:34:31 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborteD. 172.16.20.1:443 Oct 25 03:34:32 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborteD. 172.16.20.1:443 Oct 25 03:34:32 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborteD. 172.16.20.1:443 Oct 25 03:34:32 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborteD. 172.16.20.1:443 Oct 25 03:34:32 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborteD. 172.16.20.1:443 Oct 25 03:34:33 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborteD. 172.16.20.1:443 Assume 172.16.20.0/24 is attached to the VLAN "internal." What should the LTM Specialist use to troubleshoot this issue?
- A. tcpdump -i internal host 172.16.20.1 > /shared/ssl.pcap
ssldump < /shared/ssl.pcap - B. ssldump -i internal host 172.16.20.1
- C. curl -d - -k https://172.16.20.1
- D. tcpdump -s 64 -i internal -w /shared/ssl.pcap host 172.16.20.1
ssldump -r /shared/ssl.pcap
Answer: B
NEW QUESTION 111
An LTM device is serving an FTP virtual server that has three pool members. The FTP pool members are monitored via TCP port 21. Customers are reporting that they are able to log in, but are sometimes unable to upload files to the server.
Which monitor should the LTM Specialist configure to verify that the servers can handle file uploads?
- A. Real Server
- B. Inband
- C. Scripted
- D. External
- E. FTP
Answer: D
NEW QUESTION 112
Refer to the exhibit.
A BIG-IP Administrator needs to deploy an application on the BIG-IP system to perform SSL offload and re-encrypt the traffic to pool members.
During testing, users are unable to connect to the application.
What must the BIG-IP Administrator do to resolve the issue?
- A. Configure Protocol Profile (Server) as splitsession-default-tcp
- B. Remove the configured SSL Profile (Client)
- C. Configure an SSL Profile (Server)
- D. Enable Forward Proxy in the SSL Profile (Client)
Answer: C
Explanation:
Explanation
According to the requirements of the subject, the client and server must be configured with ssl profile.
NEW QUESTION 113
An ITM Specialist has the configuration shown:
The LTM Specialist needs to create a new virtual server in part B.
Which virtual address(es) should be used for the new virtual server?
- A. 10.90.0.1 and 10.100.0.1
- B. 10.120.0.1 only
- C. 10.90.0.1 and 10.12.0.1
- D. 10.100.0.1 and.10.120.0.1
Answer: D
NEW QUESTION 114
A BIG-IP device is configured with both an internal external and two Corporate VLANs. The virtual server has SNAT enabled and is set to listen on all VLANs Auto Last Hop is disabled. The Corporate users are on
10.0.0.0./24 and 172.16.0.0/12. The BIG-IP has a Self-IP on the 1.0.0.0.0./24 subnet.
Internet users are able to access the virtual server. Only some of the Corporate users are able to connect to the virtual server A BIG-IP Administrator performs a tcpdump on the BIG-IP and verifies that traffic is arriving from users in 10.0.0.0/24.
What should the BIG-IP Administrator do to correct this behaviour?
- A. Add a static route for the 172.16.0.0/12 subnet
- B. Change the default route to point to the extra firewall
- C. Modify the default route of the servers to point to the BIG-IP device
- D. Disable the server on the internal VLAN
Answer: A
NEW QUESTION 115
Refer to the exhibit.
A BIG-IP Administrator needs to configure health monitors for a newly configured server pool named Pool_B.
Which health monitor settings will ensure that all pool members will be accurately marked as available or unavailable?
- A. HTTPS, HTTP, FTP, and SSH with the Availability Requirement of all health monitors
- B. HTTPS and HTTP with the Availability Requirement of at least one health monitor
- C. HTTPS, HTTP, FTP, and SSH, with the Availability Requirement of at least one monitor
- D. HTTPS, HTTP, FTP, and ICMP, with the Availability Requirement of all health monitors
Answer: C
Explanation:
Explanation
From the port, the four members are HTTP, FTP, HTTPS, and SSH applications. If you want to monitor at the same time, you must configure at least one.
NEW QUESTION 116
The 8IG-IP Administrator generates a qkview using "qkview -SO" and needs to transfer the output file via SCP.
Which directory contains the output file?
- A. /var/config
- B. /var/local
- C. /var/tmp
- D. /var/log
Answer: C
NEW QUESTION 117
An HTTP 1.1 application utilizes chunking.
Which header should be used to notify the client's browser that there are additional HTTP headers at the end of the message?
- A. From
- B. ETag
- C. Trailer
- D. Expect
Answer: C
NEW QUESTION 118
All pool members are online. All other virtual server settings are at default What might after the load balancing behavior?
- A. enabing a falback host in the http profile
- B. adding a persistence profile
- C. adding a oneconnect profile
- D. enabing SNAT automap
Answer: B
NEW QUESTION 119
An organization's development team creates an application to put behind the F5LTM device. The application can be quite load intensive at first, and then evens out over time. The team's load balancing method needs to select a pool after taking into account the pool member's response over the time to avoid landing on a busy pool member.
Which of the following load balancing methods meets this requirement?
- A. Fastest (application)
- B. Dynamic (node)
- C. Observed (member)
- D. Predictive (member)
Answer: D
NEW QUESTION 120
A custom HTTP monitor is failing to a pool member 10.10.3.75:8080 that serves up www.example.com.
A ping works to the pool member address.
The SEND string that the monitor is using is: GET/HTTP/l.l/r/n/Host.www.example.com/r/n/Connection Close/r/n/r/n Which CLI tool syntax will show that the web server returns the correct HTTP response?
- A. curl-header
'Host:www.example.com' http://10.10.3.75:8080/ - B. tracepath
'http://www.example.com:80 - C. tracepath 10.10.3.75:8080 GET /index
- D. curlhttp://10.10.10.3.75:8080/www.example.com/index.html
Answer: A
NEW QUESTION 121
AN LTM Specialist receives reports that an external company application is having reliability issues. The F5 Administrator finds the following in /vat/log/ltm file.
The LTM Specialist determines that the F5 LTMdevice is entering into Aggressive Mode Adaptive Reaping, which is causing the site reliability issues.
What is the most likely reason that the LTM device has entered into Aggressive Mode Adaptive Reaping?
- A. The LTM device exceeds licensed traffic limits.
- B. The site is under DDOS attack
- C. The site has too many licensed modules.
- D. The LTM device has not provisioned AVR.
Answer: B
NEW QUESTION 122
A client (10.10.1.30) connecting to an HTTPS virtual server (10.10.1.100) with a clientssl profile is getting an SSL error.
Which options will trace this issue?
- A. tcpdump -i external -X -e -nn -vvv -w /shared/ssl_problem.cap port 443 and host 10.10.1.30 ssldump -r /shared/ssl_problem.cap -n -x
- B. tcpdump -i external -X -e -nn -vv port 443 and host 10.10.1.100 and host 10.10.1.30 >
/shared/ssl_problem.cap
ssldump -n -x < /shared/ssl_problem.cap - C. tcpdump -i external -s 0 -w /shared/ssl_problem.cap port 443 and host 10.10.10.30 and host 10.10.1.100 ssldump -r /shared/ssl_problem.cap -n -x
- D. tcpdump -i external -X -s 0 -vvv src host 10.10.10.30 and dst host 10.10.1.100 and port 443 >
/shared/ssl_problem.cap
ssldump -r /shared/ssl_problem.cap -n -x
Answer: C
NEW QUESTION 123
An TLM Specialist needs to configure a virtual server to terminate SSL connection on the LTM device.
Cryptographic information must be re-authorized for SSL sessions that remain open for longer than 30 seconds.
Which settings should the LTM Specialist configure in the client SSL profile?
- A. set the Handshake Timeout to 30 seconds
- B. set the Renegotiate Max Record Delay to 30
- C. set the Renegotiate Period to 30 seconds
- D. enable Require Peer SN1 Support
Answer: C
NEW QUESTION 124
The network team has recently added a new syslog server with IP address 10.1.1.1.
Which command adds the new syslog entry on the F5 LTM device?
A)
B)
C)
D)
- A. Option A
- B. Option B
- C. Option C
- D. Option D
Answer: C
NEW QUESTION 125
An LTM device an application that requires all connections to be secured via SSL The device must verify that request contain a specific cookie before allowing the request to be sent to the pool member.
Which virtual server type should an LTM Specialist configure on the LTM device?
- A. Standard
- B. Performance (HTTP)
- C. Performance (Layer 4)
- D. Stateless
- E. Forwarding (IP)
Answer: A
NEW QUESTION 126
Given the log entry:
011f0005:3: HTTP header (32800) exceeded maximum allowed size of 32768 (Client sidE.
vip=/Common/VS_web profile=http pool=/Common/POOL_web client_ip=10.0.0.1) Which HTTP profile setting can be modified temporarily to resolve the issue?
- A. Increase Maximum Header size
- B. Increase Maximum Requests
- C. Increase Maximum Header Count
- D. Decrease Maximum Requests
- E. Decrease Maximum Header size
- F. Decrease Maximum Header Count
Answer: A
NEW QUESTION 127
An LTM Specialist needs to configure asetup for antivirus scanning of HTTP traffic with an internet Contact adaption Protocol (ICAP) server.
Which two server type should be used? (Choose two.)
- A. Internal
- B. Standard
- C. Forwarding IP
- D. Performance HTTP
- E. Stateless
Answer: A,B
NEW QUESTION 128
Refer to the exhibit.
How many nodes are represented on the network map shown?
- A. Four
- B. One
- C. Three
- D. Two
Answer: C
NEW QUESTION 129
Which procedure should an LTM Specialist follow to move a configuration from a 1500 to a 1600 hardware platform during an upgrade?
- A. tmsh save sys config file filename.scf
copy the file from the /var/local/scf directory from one device to the other tmsh load sys config file filename.scf - B. tmsh save sys config file filename.scf
copy the file from the /var/local/ucs directory from one device to the other tmsh load sys config file filename.scf - C. tmsh save sys backup file filename.scf
copy the file from the /var/local/ucs directory from one device to the other tmsh load sys backup file filename.scf - D. tmsh save sys backup file filename.scf
copy the file from the /var/local/scf directory from one device to the other tmsh load sys backup file filename.scf
Answer: A
NEW QUESTION 130
A BIG-IP Administrator applied the latest hotfix to an inactive boot location by mistake, and needs to downgrade back to the previous hotfix.
What should the BIG-IP Administrator do to change the boot location to the previous hotfix?
- A. Uninstall the base version and restore the UCS
- B. Reinstall the base version and install the previous hotfix
- C. Uninstall the newest hotfix and reinstall the previous hotfix
- D. Reinstall the previous hotfix and re-activate the license
Answer: B
NEW QUESTION 131
What should the LT'M Specialist add to the virtual server?
- A. two
Stream profiles and an iRule with the command of STREAM expression (@http:// @https://
@@internalapp@publicapp@) - B. one
Stream profile and an iRule with the command of STREAM expression (@http:// @https://
@@internalapp@publicapp@) - C. one
Stream profile with the expression of @http:// @https:// @ - D. Two Stream profiles, one profile for each rewrite requirement
Answer: B
NEW QUESTION 132
A new VLAN vlan301 has been configured on a highly available LTM device in partition ApplicationA. A new directly connected backend server has been placed on vlan301. However, there are connectivity issues pinging the default gateway. The VLAN self IPs configured on the LTM devices are 192.168.0.251 and
192.168.0.252 with floating IP 192.168.0.253. The LTM Specialist needs to perform a packet capture to assist with troubleshooting the connectivity.
Which command should the LTM Specialist execute on the LTM device command line interface to capture the attempted pings to the LTM device default gateway on VLAN vlan301?
- A. tcpdump -ni /ApplicationA/vlan301 'host 192.168.0.253'
- B. tcpdump -ni vlan301 'host 192.168.0.251 or host 192.168.0.252'
- C. tcpdump -ni /ApplicationA/vlan301 'host 192.168.0.251 or host 192.168.0.252'
- D. tcpdump -ni vlan301 'host 192.168.0.253'
Answer: A
NEW QUESTION 133
Some users who connect to a busy Virtual Server have connections reset by the BIG-IP system. Pool member resources are NOT a factor in this behavior. What is a possible cause for this behavior?
- A. The Connection Limit is set too low.
- B. The Connection Rate Limit is set too high
- C. The Rewrite Profile has NOT been configured.
- D. The server SSL Profile has NOT been reconfigured.
Answer: A
Explanation:
Explanation
The topic explains that the connection reset behavior is caused by the vs configuration rather than the server resource problem. The answers B C are all configuration at the service forwarding level. If there is a problem with the configuration, it is all a problem rather than some users. Answer C's Connection Limit will cause a reset behavior when the connection reaches the threshold.
NEW QUESTION 134
Exhibit.
An LTM Specialist needs to configure VS^HTTP and VS_DB for an online shopping site. The VS HTTP passes the client requests to the webservers. The webservers query the database serversthrough the VS_DB.
Initially, the LTM Specialist finds the database servers directly return the packets to the webservers.
which setting must be enabled for the configuration to function correctly?
- A. VS_HTTP snat auto map
- B. VS_DB snat auto map
- C. VS DB auto last hop
- D. VS.HTTP auto last hop
Answer: C
NEW QUESTION 135
......
303 Dumps With 100% Verified Q&As - Pass Guarantee or Full Refund: https://www.preppdf.com/F5/303-prepaway-exam-dumps.html
Pass F5 303 Exam With Practice Test Questions Dumps Bundle: https://drive.google.com/open?id=1nEazYNGWs47c4vPwdC36sJYBFr1DiJMw