F5 303 Online Practice Questions and Exam Preparation

F5 303 Online Questions & Answers

• Question 111:

  Refer to the exhibit.

  

  A user notifies the BIG-IP Administrator that http://remote company.com is NOT accessible.

  Remote access to company resources must be encrypted.

  What should the BIG-IP Administrator do to fix the issue?

  A. Change the Listening Port on remote.company.com_vs to Port 80
  B. Add a Pool to the Virtual Server remote.company.com_VS
  C. Add an iRule to remote.company.com_vs to redirect Traffic to HTTPS
  D. Change the Type of the Virtual Server remote.company.com_vs to Forwarding
  C. Add an iRule to remote.company.com_vs to redirect Traffic to HTTPS

• Question 112:

  A customer wants to select the pool for an application based on information found in the path ofthe URL.For example:

  http://www.example.com/app 1 should be sent to the app 1 pool

  http.//www.exampie.com/app 2 should be sent to the app2 pool

  Which two profiles need to be assigned to the virtual server? (Choose two.)

  A. Client SSL
  B. Persistence
  C. TTPCompression
  D. HTTP
  E. TCP
  D. HTTP
  E. TCP

• Question 113:

  An application is configured so that the same pool member must be used for an entire session, as well as for HTTP and FTP traffic.

  A user reports that a session has terminated, and the user must restart the session. The BIG-IP Administrator determines that the active BIG-IP device failed over to the standby BIG-IP device. Which configuration settings should the BIG-IP Administrator verify to ensure proper behaviour when BIG-IP failover occurs?

  A. cookie persistence and session timeout
  B. Stateful failover and Network Failover detection
  C. Persistence mirroring and Match Across Services
  D. syn-cookie insertion threshold and connection low-water mark
  C. Persistence mirroring and Match Across Services

• Question 114:

  An LTM Specialist needs to deploy a virtual server that will load balance traffic targeting https://register.example.com to a set of three webservers. Persistence needs to be ensured. No persistence mirroring is allowed SSL offloading is

  required.

  A fourth web server with fewer resources will be used to handle requests from engine bots to https://register.example.comvrobots.txt by an iRule. The(Rule will use the HTTP_REQUEST event. .

  What are the required profile and persistence settings to implement this

  A. tcp. dientssl, hup, source address persistence
  B. tcp, clientssl, http. cookie persistence
  C. tcp, clientssl, serverssl, ssl persistence
  D. tcp, clientssl, http, serverssl cookie persistence
  B. tcp, clientssl, http. cookie persistence

• Question 115:

  An LTM Specialist has just captured trace /var/tmp/trace.cap for site www.example.com while listening on virtual address 10.0.0.1:443 configured on partition ApplicationA. The data payload being captured is SSL encrypted. Which command should the LTM Specialist execute to decrypt the data payload?

  A. ssldump -Aed -nr /var/tmp/trace.cap -k /config/filestore/files_d/Common_d/certificate_d/:Common:www.example.com.crt_1
  B. ssldump -Aed -nr /var/tmp/trace.cap -k /config/filestore/files_d/Common_d/certificate_key_d/:Common:www.example.com.key_1
  C. ssldump -Aed -nr /var/tmp/trace.cap -k /config/filestore/files_d/ApplicationA_d/certificate_d/:ApplicationA:www.example.com.crt_1
  D. ssldump -Aed -nr /var/tmp/trace.cap -k /config/filestore/files_d/ApplicationA_d/certificate_key_d/:ApplicationA:www.example.com.k ey_1
  B. ssldump -Aed -nr /var/tmp/trace.cap -k /config/filestore/files_d/Common_d/certificate_key_d/:Common:www.example.com.key_1

• Question 116:

  A virtual server with SNAT automap enabled selects pool member 10.20.0.10.443 for the server-side flow. The client side flow source IP is 192.168.0.10 .

  

  Which source IP should be expected inthe server-side connection?

  A. 10.20.0.1
  B. 10.50.0.2
  C. 10.20.0.2
  D. 192.168.0.10
  C. 10.20.0.2

• Question 117:

  AN LTM Specialist is using an external monitor evaluate the hard drive usage of a node. The monitor has marked the node down because it exceeded the specific threshold. The disk usage on the server has been corrected below the threshold, however, the node remains offline.

  Which feature is causing this problem?

  A. The parameter Time Until UP has a value greater than 0
  B. The value of Manual Resume is set to No
  C. The value for UP interval is enable with a value greater than 0
  D. The value for Manual Resume is set to Yes
  D. The value for Manual Resume is set to Yes

• Question 118:

  A client is attempting to log in to a web application that requires authentication. The following HTTP headers are sent by the client:

  GET /owa/ HTTP/1.1

  Authorization: Basic dXNlcm5hbWU6cGFzc3dvcmQ=

  User-Agent: curl/7.26.0

  Host: 10.0.0.14

  Accept: */*

  Accept-EncodinG. gzip,deflate

  The web server is responding with the following HTTP headers:

  HTTP/1.1 401 Unauthorized

  Content-TypE. text/html

  Server: Microsoft-IIS/7.5

  WWW-AuthenticatE. NTLM

  DatE. Wed, 16 Aug 1977 19:12:31 GMT

  Content-LengtH. 1293

  The client has checked the login credentials and believes the correct details are being entered.

  What is the reason the destination web server is sending an HTTP 401 response?

  A. The username and password are incorrect.
  B. The server has an incorrect date configured.
  C. The client is using the wrong type of browser.
  D. The wrong authentication mechanism is being used.
  D. The wrong authentication mechanism is being used.

• Question 119:

  Refer to the exhibit.

  

  A client attempts to connect from a Google Chrome browser to a virtual server on a BIG-IP LTM. The virtual server is SSL Offloaded. When the client connects, the client receives an SSL error. The client receives the same errors when trying

  Mozilla Firefox and Internet Explorer browsers.

  The LTM Specialist does an ssldump on the virtual server and receives the results as per the exhibit.

  How should this be resolved?

  A. Set the virtual server to listen on port 443 (HTTPS).
  B. Upgrade the client to support the appropriate SSL cipher suite.
  C. Select the appropriate "SSL Profile (Client)" in the virtual server settings.
  D. Adjust the SSL key length in the SSL profile to match the minimum required by the client.
  C. Select the appropriate "SSL Profile (Client)" in the virtual server settings.

• Question 120:

  Which procedure should an LTM Specialist follow to move a configuration from a 1500 to a 1600 hardware platform during an upgrade?

  A. tmsh save sys config file filename.scf copy the file from the /var/local/scf directory from one device to the other tmsh load sys config file filename.scf
  B. tmsh save sys backup file filename.scf copy the file from the /var/local/scf directory from one device to the other tmsh load sys backup file filename.scf
  C. tmsh save sys backup file filename.scf copy the file from the /var/local/ucs directory from one device to the other tmsh load sys backup file filename.scf
  D. tmsh save sys config file filename.scf copy the file from the /var/local/ucs directory from one device to the other tmsh load sys config file filename.scf
  A. tmsh save sys config file filename.scf copy the file from the /var/local/scf directory from one device to the other tmsh load sys config file filename.scf