F5 303 Online Practice Questions and Exam Preparation

F5 303 Online Questions & Answers

• Question 161:

  Refer to the exhibit.

  

  Users receive an error when attempting to connect to the website https://website.com. The website has a DNS record of 195.56.67.90. The upstream ISP has confirmed that there is nothing wrong with the routing between the user and the

  LTM device.

  The following tcpdump outputs have been captured:

  External Vlan, filtered on IP 168.210.232.5

  00:25:07.598519 IP 168.210.232.5.33159 > 195.56.67.90.https: S 1920647964:1920647964(0) win 8192

  00:25:07.598537 IP 195.56.67.90.https > 168.210.232.5.33159: S 2690691360:2690691360(0) ack 1920647965 win 4350

  00:25:07.598851 IP 168.210.232.5.33160 > 195.56.67.90.https: S 2763858764:2763858764(0) win 8192

  00:25:07.598858 IP 195.56.67.90.https > 168.210.232.5.33160: S 1905576176:1905576176(0) ack 2763858765 win 4350

  Internal Vlan, filtered on IP 168.210.232.5

  00:31:46.171124 IP 168.210.232.5.33202 > 192.168.100.20.http: S 2389057240:2389057240(0) win 4380

  What is the problem?

  A. The filters on the tcpdumps are incorrect.
  B. The DNS entry for website.com is incorrect.
  C. The virtual server 'WEBSERVICES1' is listening on the incorrect port.
  D. The firewall is dropping the connection coming from the pool members returned to the client.
  E. The subnet masks of the pool members of pool WebServices1 and the f5 'Internal' Vlan are incorrect.
  D. The firewall is dropping the connection coming from the pool members returned to the client.

• Question 162:

  Given a tcpdump on an LTM device from both sides of a connection on the External and Internal VLANs, how should an LTM Specialist determine if SNAT is enabled for a particular pool?

  A. by checking to see if the Source IP is carried through from the External Vlan to the Internal Vlan
  B. by checking to see if the Destination port is carried through from the External Vlan to the Internal Vlan
  C. by checking to see if the Source port is carried through from the External Vlan to the Internal Vlan
  D. by checking to see if the Destination IP is carried through from the External Vlan to the Internal Vlan
  A. by checking to see if the Source IP is carried through from the External Vlan to the Internal Vlan

• Question 163:

  An LTM Specialist must reconfigure a BIG-IP system that load balances traffic to a web application. The security department has informed the LTM Specialist that the following cipher string must be used for TLS connections from BIG-IP to the web application.

  NATIVE:IMDS:EXPORT:IDHE:EDH@SPEED

  In which virtual server profile should the cipher string be configured?

  A. Server SSL CB. Client SSL
  B. SPDY profile
  C. Rewrite profile
  A. Server SSL CB. Client SSL

• Question 164:

  Refer to the exhibit.

  

  How long will the persistence record remain in the table?

  A. 180 seconds after the last packet
  B. 180 seconds after the initial table entry
  C. 300 seconds after the initial table entry
  D. 300 seconds after the last packet
  D. 300 seconds after the last packet

• Question 165:

  An LTM Specialist needs to use a set of addresses to access an Internet website in an outbound configuration. Whichfeature should the LTM Specialist configure?

  A. NAT pool
  B. NAT address
  C. SNAT pool
  D. SNAT address
  C. SNAT pool

• Question 166:

  Remote users who access the LTM device are authenticated via Radius. The default remote user role is Guest Some users need LTM device with the Administrator role. The F5 Radius attributes are configure on the Radius server. Which configuration item needs to be created?

  A. Remote User role
  B. Admin account
  C. User role
  D. Useraccount
  A. Remote User role

• Question 167:

  Refer to the exhibit.

  

  A BIG-IP Administrator configures the Virtual Server to pass HTTP traffic. Users report that they are unable to access the application What should the administrator do to resolve this issue?

  A. Change the Virtual Server name
  B. Disable .he State
  C. Reconfigure the Source Address
  D. Reconfigure the Pool Members
  D. Reconfigure the Pool Members

• Question 168:

  A web application requires the client to provide the destination server and service identification. Which HTTP header will supply this information?

  A. Host
  B. From
  C. Expect
  D. Connection
  A. Host

• Question 169:

  Refer to the exhibit.

  

  A BIG-IP Administrator configures a Virtual Server to handle HTTPS traffic. Users report that the application is NOT working. Which actional configuration is regard to resolve this issue?

  A. Configure SSL Profile (Client)
  B. Configure Protocol Profile (Server)
  C. Configure Service Profile HTTP
  D. Configure SSL Profile (Server)
  A. Configure SSL Profile (Client)

• Question 170:

  A BIG-IP Administrator is receiving intermittent reports from users that SSL connections to the BIG-IP device are failing. Upon checking the log files, the BIG-IP Administrator notices the following error message:

  ere tmm[]: 01260008:3: SSL transaction (TPS) rate limit reached

  After reviewing statistics, the BIG-IP Administrator notices there are a maximum of 1200 client-side SSL

  TPS and a maximum of 800 server-side SSL TPS.

  What is the minimum SSL license limit capacity the BIG-IP Administrator should upgrade to handle this peak?

  A. 2000
  B. 400
  C. 800
  D. 1200
  D. 1200