BIG-IP ASM Certified Official Practice Test 303 – Dec-2023 [Q283-Q301]

303 F5

admin • December 24, 2023

BIG-IP ASM Certified Official Practice Test 303 – Dec-2023 [Q283-Q301]

Rate this post

BIG-IP ASM Certified Official Practice Test 303 – Dec-2023

Ace F5 303 Certification with Actual Questions Dec 24, 2023 Updated

QUESTION 283
A design requires the LTM device to become HA standby when the one of the two physical interface on the External trunk is down the Externaltrunk is an interface on the External VLAN Which TMOS command enables this behavior?

tmsh modify net van External failsafe enabled

tmsh create sys ha-group External trunks add Externally

tmsh create sys ha-group External trunks add External threshold 2 weight 101)

tmsh create sys ha-group External trunks add ( External( attribute percent up-members 100))

QUESTION 284
The BIG-IP Administrator creates a custom iRule that fails to work as expected. Which F5 online resource should the administrator use to help resolve this issue?

DevCentral

Bug Tracker

University

Health

QUESTION 285
An LTM Specialist is troubleshooting a problem on an eCommerce website. The user browses the online store using port 80, adding items to the shopping cart. The user then clicks the “Checkout” button on the site, which redirects the user to port 443 for the checkout process. Suddenly, the user’s shopping cart is shown as empty.
The shopping cart data is stored in memory on the server, and the default source address persistence profile is used on both virtual servers.
How should the LTM Specialist resolve this issue?

Add an HTTP profile to both virtual servers.

Enable SNAT Automap on both virtual servers.

Create a custom persistence profile and enable “Map Proxies.”

Create a custom persistence profile and enable “Match Across Services.”

QUESTION 286
— Exhibit –

— Exhibit —
Refer to the exhibit.
An LTM Specialist is troubleshooting an issue with a new virtual server. When connecting through the virtual server, clients receive the message “The connection was reset” in the browser. Connections directly to the pool member show the application is functioning correctly.
What is the issue?

The pool member is failing the monitor check.

The pool member default gateway is set incorrectly.

The virtual server is configured with the incorrect SNAT address.

The virtual server is processing encrypted traffic as plain-text HTTP.

QUESTION 287
An LTM device is running BIG-IP v10.2.0 software. The LTM Specialist is tasked with upgrading the LTM device to BIG-IP v11.2.0 HF1. The LTM Specialist starts the upgrade process by selecting the uploaded Hotfix and installing to an unused volume. After 10 minutes, the LTM Specialist checks the status of the upgrade process and notices that the process is stalled at 0%.
What should the LTM Specialist verify?

the selected volume has sufficient space available

the base software version exists on the LTM device

the LTM device has been restarted into maintenance mode

the LTM device has an available Internet connection via the management interface

QUESTION 288
A 8IG-IP device is replaced with an RMA device. The BIG-IP Administrator renews the license and tries to restore the configuration from a previously generated UCS archive on the RMA device. The device configuration is NOT fully loading. What is causing the configuration load to fail?

The Device Group is NOT configured for Full Sync.

The US does NOT contain the full config

The clock is NOT set correctly

The Master Key is NOT restored

QUESTION 289
— Exhibit –

— Exhibit —
Refer to the exhibit.
An LTM Specialist has uploaded a qkview to F5 iHealth.
Within the GUI, what is the correct procedure to comply with the recommendation shown in the exhibit?

Obtain product version image from release.f5.com.
Overwrite existing image with new product version image.
Select product version image and click Install.
Select the available disk and volume set name.

Obtain product version image from images.f5.com.
Overwrite existing image with new product version image.
Select product version image and click Install.
Select the available disk and volume set name.

Obtain product version image from downloads.f5.com.
Import product version image.
Install image onto BIG-IP platform.
Select product version image and click Install.
Select the available disk and volume set name.

Log a call requesting the product version image via websupport.f5.com Import product version image.
Install image onto BIG-IP platform.
Select product version image and click Install.
Select the available disk and volume set name.

QUESTION 290
An LTM Specialist needs to configures virtual server that uses PVA or OPVA Which virtual server type should be used?

Stateless

Performance (HTTP)

Standard

Performance (Layer 4)

QUESTION 291
Remote office users are having performance issues with a virtual hosted on the F5 LTM. The LTM Specialist reviews the configuration for the virtual server and determine that some settings are set with default profiles.
Which profile should the LTM Specialist enable to improve virtual server performance?

A WAN optimized client side profile

A FastL4 profile on the virtual server

An HTTP profile for the virtual server

A Stream profile for the remote user networks

Explanation
They key word is that there are performance problem with Remote office users, no F5. The user experience can be improved through tcp optimization. The expression should be wom-tcp-wan-optimized in Protocol Profile (Client)

QUESTION 292
An LTM Specialist upgrades the switchinginfrastructure and the backend servers on the LAN segments.
The LTM Specialist notices a 20% memory usage increase on the BIG-IP device while handling the same number of concurrent connections.
A comparison of statistics pre-upgrade and post-upgrade showsa significant reduction on the following:
-RTT between the BIG-IP device and the backend servers
-Packet drops in the switch
Time to First Byte (TTFB)
The LTM Specialist is concerned with the scalability of the number of concurrent connections with the newmemory usage.
Which setting should be changed to reduce the memory usage on the BIG-IP device?

Reduce the proxy buffer high setting on the server-side TCP profile

Increase the receive window of the client-side TCP profile

Increase the proxy buffer high setting on the server-side TCP profile

Reduce the idle of the client-side TCP profile

Explanation
After adjusting the architecture, the network quality becomes better. With the connection unchanged the memory usage increase by 20%. Itmeans that the sending speed of the server is higher than the receiving speed of the client. F5 caches more content on the memory and causes the memory usage to….

QUESTION 293
An application is configured on an LTM device:
Virtual server: 10.0.0.1:80 (VLAN vlan301)
SNAT IP: 10.0.0.1
Pool members: 10.0.1.1:8080, 10.0.1.2:8080, 10.0.1.3:8080 (VLAN vlan302) Which packet capture should the LTM Specialist perform on the LTM device command line interface to capture only client traffic specifically for this virtual server?

tcpdump -ni 0.0:nnn -s 0 ‘host 10.0.0.1’ -w /var/tmp/trace.cap

tcpdump -ni vlan301 -s 0 ‘port 80 and host 10.0.0.1’ -w /var/tmp/trace.cap

tcpdump -ni vlan301 -s 0 ‘port 8080 and host 10.0.1.1 or host 10.0.1.2 or host 10.0.1.3’ -w
/var/tmp/trace.cap

tcpdump -ni vlan302 -s 0 ‘port 8080 and host 10.0.1.1 or host 10.0.1.2 or host 10.0.1.3’ -w
/var/tmp/trace.cap

tcpdump -ni 0.0:nnn -s 0 ‘(port 80 and host 10.0.0.1) or (port 8080 and host 10.0.1.1 or host 10.0.1.2 or host 10.0.1.3)’ -w /var/tmp/trace.cap

QUESTION 294
All pool members are online. All other virtual server settings are at default What might after the load balancing behavior?

enabing SNAT automap

enabing a falback host in the http profile

adding a oneconnect profile

adding a persistence profile

QUESTION 295
An LTM Specialist needs to loadbalance an application using an LTM device to meet the requirements:
The application servers do NOT Support SSL, but client access to the application should be secured.
Multiple requests from the same client should be sent to the same pool member.
All pool members will have roughly the same processing power, and traffic should be distributed evenly.
The LTM device is NOT the pool members’ default gateway.
which configuration should the LTM Specialist.

a performance 14 virtual server with a SNAT and cookie persistence

a performance L4 virtual server with a Client SSL profile and Source Address persistence

A performance L4 virtual server with a SNAT, HTTP profile. Server SSL profile, and cookie persistence

A standard virtual server with a SNAT, HTTP profile Server SSL profile, and cookie persistence

A standard virtual server with a SNAT, HTTP profile, Client profile, andd cookie persistance.

QUESTION 296
An LTM Specialist needs to terminate client SSL traffic and based on the cookie presented by client.
Which set of profiles should the LTM Specialist use?

HTTPS, Client SSL, Cookie Persistence Profile

HTTP, Server SSL, SSL Cookie Profile

HTTPS, Server SSL, SSL Cookie Profile

HTTP, Client SSL, Cookie Persistence Profile,

QUESTION 297
Administrative user accounts have been defined on the remote LDAP server and are unable to log in to the BIG-IP device.
Which log file should the BIG-IP Administrator check to find the related messages?

/var/log/secure

/var/log/messages

/Nar/log/ltm

/var/log/user.log

QUESTION 298
— Exhibit –

— Exhibit —
Refer to the exhibit.
Which URL should be reported to the server/application team as getting user-visible errors?

/env.cgi

/page14.cgi

/reflector.php

/browserspecific.html

QUESTION 299
Refer to the exhibit

Given the bigip conf extract shown where the servers only talk http on port 80, which node will receive thenext user request?

72.10.1.1

10.1.1.1

10.1.1.2 0

10.1.1.3

QUESTION 300
An LTM Specialist must perform a packet capture on a virtual server with an applied standard FastL4 profile.
The virtual server 10.0.0.1:443 resides on vlan301.
Which steps should the LTM Specialist take to capture the data payload successfully while ensuring no other virtual servers are affected?

The standard FastL4 profile should have PVA acceleration disabled. Then the packet capture tcpdump
-ni vlan301 should be executed on the command line interface.

The packet capture tcpdump -ni vlan301 should be executed on the command line interface. There is no need to change profiles or PVA acceleration.

A new FastL4 profile should be created and applied to the virtual server with PVA acceleration disabled.
Then the packet capture tcpdump -ni vlan301 should be executed on the command line interface.

The LTM device is under light load. The traffic should be mirrored to a dedicated sniffing device. On the sniffing device, the packet capture tcpdump -ni vlan301 should be executed.

QUESTION 301
A user wants to use the iHealth Upgrade Advisor to determine any issues with upgrading TMOS from 13.0 to
13.1.
Where can the user generate the QKView to upload to iHealth?

System > Software Management

System > Archives

System > Configuration

System > Support

Loading …