F5 303 Online Practice Questions and Exam Preparation

F5 303 Online Questions & Answers

• Question 1:

  An LTM device load-balances traffic for an internal API using /api/v1/*.

  A new requirement demands that /api/v2/* requests go to a different pool.

  Which modification is most appropriate?

  A. Add a new virtual server on the same IP with different destination port.
  B. Create an iRule that switches pools based on [HTTP::uri] starts_with "/api/v2".
  C. Duplicate the pool and enable Match Across Services.
  D. Modify persistence type to Cookie Insert.
  B. Create an iRule that switches pools based on [HTTP::uri] starts_with "/api/v2".

• Question 2:

  After replacing a failed BIG-IP device, configuration sync fails with error “Master key mismatch.” What is the correct resolution?

  A. Run tmsh save sys ucs on the standby device and restore it on the active device.
  B. Regenerate a new self-device certificate on both units.
  C. Copy the master key from the surviving peer using f5mku -K / f5mku -r.
  D. Reset the Device Trust and re-establish the ConfigSync group.
  C. Copy the master key from the surviving peer using f5mku -K / f5mku -r.

• Question 3:

  An LTM Specialist must log all HTTP requests that contain the string "cmd=" in the URI to an external syslog server.

  Which iRule achieves this goal most efficiently?

  when HTTP_REQUEST {

  if {[string tolower [HTTP::uri]] contains "cmd="} {

  HSL::send $hsl "[HTTP::uri] from [IP::client_addr]"

  }

  }

  Where should $hsl be defined?

  A. In the system variable by default
  B. In the RULE_INIT event using HSL::open -proto UDP -pool syslog_pool
  C. In the CLIENT_ACCEPTED event using HSL::open -proto TCP -pool syslog_pool
  D. In the HTTP_REQUEST event before first HSL::send
  B. In the RULE_INIT event using HSL::open -proto UDP -pool syslog_pool

• Question 4:

  A virtual server offloads SSL from backend servers using a clientssl profile and a custom serverssl profile.

  Users report that large file uploads (>50 MB) fail intermittently.

  Which setting should the Administrator review first?

  A. Proxy Buffer High and Proxy Buffer Low in the TCP profile
  B. Renegotiation Period in the clientssl profile
  C. Unclean Shutdown in the serverssl profile
  D. OneConnect Source Mask configuration
  A. Proxy Buffer High and Proxy Buffer Low in the TCP profile

• Question 5:

  A BIG-IP Administrator observes that health monitors are showing several pool members as up, but application users report that responses are intermittently slow or missing. Which troubleshooting step should the Administrator perform first?

  A. Check the monitor’s receive string for accuracy.
  B. Increase the idle timeout on the TCP profile.
  C. Enable Monitor Logging and inspect /var/log/monitors.
  D. Run tmsh show sys connection cs-server-addr to verify active connections.
  D. Run tmsh show sys connection cs-server-addr to verify active connections.

• Question 6:

  An LTM device has a virtual server mapped to www5f.com with a pool assigned. The objects are defined as follows: Virtual server. Destination 192.168.245.100.443 netmask 255.255.255.0 Persistence: Source address persistence netmask 255.0.0.0 SNAT:AutoMap Profiles: HnP/TCP How should the BIG-IP Administrator modify the persistence profile so that each unique IP address creates a persistence record?

  A. netmask 0.0.0.0
  B. netmask 255.255.255.255
  C. netmask 255.255.0.0
  D. netmask 255.256.255.0
  B. netmask 255.255.255.255

• Question 7:

  An LTM device pair is configured for failover and connection mirroring. The LTM devices are configured with virtual servers for HTTP, HTTPS with SSL offload, and SSH. An event occurs that causes a failover. HTTP and SSH sessions active at the time of failover remain active, but HTTPS sessions are dropped.

  What is the root cause of this problem?

  A. The SSL certificates on the LTM devices do NOT match.
  B. Connection mirroring is incompatible with clientssl profiles.
  C. SNAT automap was NOT enabled for the HTTPS virtual servers.
  D. Connection mirroring was NOT enabled for the HTTPS virtual servers.
  B. Connection mirroring is incompatible with clientssl profiles.

• Question 8:

  AN LTM Specialist receives reports that an external company application is having reliability issues. The F5 Administrator finds the following in /vat/log/ltm file.

  

  The LTM Specialist determines that the F5 LTMdevice is entering into Aggressive Mode Adaptive Reaping, which is causing the site reliability issues. What is the most likely reason that the LTM device has entered into Aggressive Mode Adaptive Reaping?

  A. The LTM device exceeds licensed traffic limits.
  B. The site has too many licensed modules.
  C. The LTM device has not provisioned AVR.
  D. The site is under DDOS attack
  D. The site is under DDOS attack

• Question 9:

  An LTM device is monitoring three pool members. One pool member is being marked down.

  What should the LTM Specialist enable to prevent the server from being flooded with connections once its monitor determines it is up?

  A. manual resume
  B. packet shaping
  C. hold down timer
  D. slow ramp timer
  E. fastest load balance algorithm
  D. slow ramp timer

• Question 10:

  To increase available bandwidth of an existing Trunk, the BIG-IP Administrator is adding additional interfaces. Which command should the BIG-IP Administrator run from within bosh shell?

  A. tmsh create /net trunk trunk_A interfaces add {1.3.1.4}
  B. tmsh create/sys trunk trunk_A interfaces add {1.3.1.4}
  C. tmsh modify/sys trunk trunk^A interfaces add {1.3.1.4}
  D. tmsh modify /net trunk trunk_A interfaces add {1.3.1.4}
  D. tmsh modify /net trunk trunk_A interfaces add {1.3.1.4}