F5 303 Online Practice Questions and Exam Preparation

F5 303 Online Questions & Answers

• Question 141:

  An LTM Specialist is troubleshooting an issue with a new virtual server. When connecting through the virtual server, clients receive the message "The connection was reset" in the browser, although connections directly to the pool member

  show the application is functioning correctly.

  ltm pool srv1_https_pool {

  members {

  192.168.2.1:https{

  address 192.168.2.1

  }

  }

  }

  ltm virtual https_example_vs {

  destination 192.168.1.155:https

  ip-protocol tcp mask 255.255.255.255 pool srv1_https_pool

  profiles {

  http { }

  tcp { }

  }

  snat automap

  vlans-disabled

  }

  How should the LTM Specialist resolve this issue?

  A. Enable HTTP monitoring on the pool.
  B. Add a ClientSSL profile to the virtual server.
  C. Disable SNAT Automap on the virtual server.
  D. Remove the HTTP profile from the virtual server.
  D. Remove the HTTP profile from the virtual server.

• Question 142:

  Which command should an LTM Specialist use on the command line interface to show the health of RAID array hard drives?

  A. tmsh show /sys raid disk
  B. tmsh show /ltm raid disk
  C. tmsh show /sys raid status
  D. tmsh show /ltm disk status
  A. tmsh show /sys raid disk

• Question 143:

  An LTM Specialist creates an Analytics wide to show the type of browsers used to access a certain application. However, the generated statistics only sum up all transaction for that application under one item called ` Aggregated.'' What should the LTM Specialist do to resolve this problem?

  A. Verify that the Analytics profile is assigned to the applications virtual server.
  B. Make sure `'User Agent'' is selected in the Analytics profile.
  C. Drill down into the stats to show the User Agents correlated in the Aggregated group.
  D. Make sure `'User Sessions'' is selected in the Analytics profile
  B. Make sure `'User Agent'' is selected in the Analytics profile.

• Question 144:

  Refer to the exhibits.

  

  An LTM device has been configured for load balancing a number of different application servers. Configuration changes need to be made to the LTM device to allow administrative management of the servers in 172.16.10/24, 172.16.20/24, and 172.16.30/24 networks. The servers require outbound access to numerous destinations for operations.

  Which solution has the simplest configuration changes while maintaining functionality and basic security?

  A. Remove 172.16.10.0:0/24, 172.16.20.0:0/24, and 172.16.30.0:0/24, and keep 0.0.0.0:0/0.0.0.0 enabled on all VLANs.
  B. Replace 172.16.10.0:0/24, 172.16.20.0:0/24, and 172.16.30.0:0/24, with 172.16.0.0:0/16, and keep 0.0.0.0:0/0.0.0.0.
  C. Enable 172.16.10.0:0/24, 172.16.20.0:0/24, and 172.16.30.0:0/24 on ingress VLAN(s), and enable 0.0.0.0:0/0.0.0.0 on egress VLAN(s).
  D. Enable 172.16.10.0:0/24, 172.16.20.0:0/24, and 172.16.30.0:0/24 on egress VLAN(s), and enable 0.0.0.0:0/0.0.0.0 on ingress VLAN(s).
  C. Enable 172.16.10.0:0/24, 172.16.20.0:0/24, and 172.16.30.0:0/24 on ingress VLAN(s), and enable 0.0.0.0:0/0.0.0.0 on egress VLAN(s).

• Question 145:

  Remote office users are having performance issues with a virtual hosted on the F5 LTM. The LTM Specialist reviews the configuration for the virtual server and determine that some settings are set with default profiles. Which profile should the LTM Specialist enable to improve virtual server performance?

  A. A WAN optimized client side profile
  B. A FastL4 profile on the virtual server
  C. An HTTP profile for the virtual server
  D. A Stream profile for the remote user networks
  A. A WAN optimized client side profile

• Question 146:

  Refer to the exhibit.

  

  The BIG-IP Administrator has modified an iRule on one device of an HA pair. The BIG-IP Administrator notices there is NO traffic on the BIG-IP device in which they are logged into. What should the BIG-IP Administrator do to verify if the iRule works correctly?

  A. Push configuration from this device to the group and start to monitor traffic on this device
  B. Pull configuration to this device to the cluster and start to monitor traffic on this device
  C. Log in to the other device in the cluster, push configuration from it, and start to monitor traffic on that device
  D. Log in to the other device in the cluster, pull configuration to it, and start to monitor traffic on that device
  D. Log in to the other device in the cluster, pull configuration to it, and start to monitor traffic on that device

• Question 147:

  The network team introduces a new subnet 10.10.22.0/24 to the network. The route needs to be configured on the F5 device to access this network via the 30.30.30.158 gateway. How should the LTM Specialist configure thisroute?

  A. Tmsh modify net route 10.10.22/24 gw 30.30.30.158
  B. Tmsh create net route 10.10.22/24 gw 30.30.30.158
  C. Tmsh changey net route 10.10.22/24 gw 30.30.30.158
  D. Tmsh add net route 10.10.22/24 gw 30.30.30.158
  B. Tmsh create net route 10.10.22/24 gw 30.30.30.158

• Question 148:

  An LTM device pool has suddenly been marked down by a monitor. The pool consists of members 10.0.1.1:443 and 10.0.1.2:443 and are verified to be listening. The affected virtual server is 10.0.0.1:80. Which two tools should the LTM Specialist use to troubleshoot the associated HTTPS pool monitor via the command line interface? (Choose two.)

  A. curl
  B. telnet
  C. ssldump
  D. tcpdump
  A. curl
  C. ssldump

• Question 149:

  A BIG-IP Administrator wants to add the ASM Module to an HA pair of BIG-IP devices. The BIG-IP Administrator has already installed a new Add-On License on both devices in the HA pair. What should the BIG-IP Administrator do next to use the module?

  A. Provision the new module on both BIG-IP device's
  B. Synchronize both BIG-IP devices
  C. Reboot both BIG-IP devices
  D. Reactivate the Licenses on both BIG IP devices
  A. Provision the new module on both BIG-IP device's

• Question 150:

  An LTM Specialist has detected that a brute force login attack is occurring against the SSH service via a BIG-IP management interface. Login attempts are occurring from many IPs within the internal company network. BIG-IP SSH access restrictions are in place as follows:

  

  The LTM Specialist has determined that SSH access should only occur from the 192.168.1.0/24 and 172.16.254.0/23 networks. Whichtmsh command should the LTM Specialist use to permit access from the desired networks only?

  A. modify.sys sshd allow add {''192.168. 10/24 , '' ''172. 16 2540/23'')
  B. modify /sys sshd login disable (''10.0.00/8'', ''172 16.0 0/12'', ''192. 168.0.0/16'')
  C. modify/sys allow replace-all-with {''192.168.1.00/24'', ''192.16.254.0/23''}
  D. modify/sys sshd login enable {''192.166.10/24'''' ''172.16 254 0/23
  C. modify/sys allow replace-all-with {''192.168.1.00/24'', ''192.16.254.0/23''}