F5 303 Online Practice Questions and Exam Preparation

F5 303 Online Questions & Answers

• Question 231:

  Refer to the exhibit.

  

  A customer requests to offload SSL for an internal website. The front page of the website loads correctly; however, selecting links on the page fails.

  How should the LTM Specialist fix the issue?

  A. Create a new SNAT pool. Add internal network IPs to the SNAT pool. Add the SNAT pool to the VS.
  B. Create a new HTTP profile. Enable Insert X-Forwarded-For. Add the new HTTP profile to the VS.
  C. Create a new HTTP profile. Enable redirect rewrite. Add the new HTTP profile to the VS.
  D. Create a new Server SSL profile. Enable Proxy SSL. Add the Server SSL profile to the VS.
  C. Create a new HTTP profile. Enable redirect rewrite. Add the new HTTP profile to the VS.

• Question 232:

  An LTM Specialist has been asked to configure a virtual server to distribute connections between a pool of two application servers with addresses 172.16.20.1 and 172.16.20.2. The application servers are listening on TCP ports 80 and 443. The application administrators have asked that clients be directed to the same node for both HTTP and HTTPS requests within the same session.

  Virtual servers vs_http and vs_https have been created, listening on 1.2.3.100:80 and 1.2.3.100:443, respectively.

  Which configuration option will result in the desired behavior?

  A. Create pool app_pool with members 172.16.20.1:any and 172.16.20.2:any Assign app_pool as the default pool for both vs_http and vs_https Disable port translation for vs_http and vs_https
  B. Create pool http_pool with members 172.16.20.1:80 and 172.16.20.2:80 Assign pool http_pool as the default pool for both vs_https and vs_https Disable port translation for vs_https Create an SSL persistence profile with "match across virtual servers" enabled Assign the persistence profile to vs_http.
  C. Create pool http_pool with members 172.16.20.1:80 and 172.16.20.2:80 Create pool https_pool with members 172.16.20.1:443 and 172.16.20.2:443 Assign http_pool as the default pool for vs_http Assign https_pool as the default pool for vs_https Create a source address persistence profile with "match across services" enabled Assign the persistence profile to vs_http and vs_https
  D. Create pool http_pool with members 172.16.20.1:80 and 172.16.20.2:80 Create pool https_pool with members 172.16.20.1:443 and 172.16.20.2:443 Assign http_pool as the default pool for vs_http Assign https_pool as the default pool for vs_https Create an SSL persistence profile with "match across virtual servers" enabled Assign the persistence profile to vs_http
  C. Create pool http_pool with members 172.16.20.1:80 and 172.16.20.2:80 Create pool https_pool with members 172.16.20.1:443 and 172.16.20.2:443 Assign http_pool as the default pool for vs_http Assign https_pool as the default pool for vs_https Create a source address persistence profile with "match across services" enabled Assign the persistence profile to vs_http and vs_https

• Question 233:

  An application is configured on an LTM device:

  Virtual server: 10.0.0.1:80 (VLAN vlan301)

  SNAT IP: 10.0.0.1

  Pool members: 10.0.1.1:8080, 10.0.1.2:8080, 10.0.1.3:8080 (VLAN vlan302)

  Which packet capture should the LTM Specialist perform on the LTM device command line interface to capture only server traffic specifically for this application?

  A. tcpdump -ni 0.0:nnn -s 0 'host 10.0.0.1' -w /var/tmp/trace.cap
  B. tcpdump -ni vlan301 -s 0 'port 80 and host 10.0.0.1' -w /var/tmp/trace.cap
  C. tcpdump -ni vlan302 -s 0 'port 8080 and (host 10.0.1.1 or host 10.0.1.2 or host 10.0.1.3)' -w /var/tmp/trace.cap
  D. tcpdump -ni 0.0:nnn -s 0 '(port 80 and host 10.0.0.1) or (port 8080 and host 10.0.1.1 or host 10.0.1.2 or host 10.0.1.3)' -w /var/tmp/trace.cap
  C. tcpdump -ni vlan302 -s 0 'port 8080 and (host 10.0.1.1 or host 10.0.1.2 or host 10.0.1.3)' -w /var/tmp/trace.cap

• Question 234:

  The web application team requests help from the LTM Specialist to Improve the performance of their web sites that are load balanced by the F5 LTM device with a Standard Virtual Server. Which virtual server type will improve the performance of the web application servers?

  A. Performance (HTTP)
  B. Performance (Layer 4)
  C. Stateless
  D. Forwarding (IP)
  A. Performance (HTTP)

• Question 235:

  For a given Virtual Server, the BIG-IP must perform SSL Offload and negotiate secure communication overTLSvl.2only. What should the BIG-IP Administrator do to meet this requirement?

  A. Configure a custom SSL Profile (Client) and select no TLSvl in the options list
  B. Configure a custom SSL Profile (Client) with a custom TLSV1.2 cipher string
  C. Configure a custom SSL Profile (Server) and select no TLSvl in the options list
  D. Configure a custom SSL Profile (Server) with a custom TLSV1.2 cipher string
  B. Configure a custom SSL Profile (Client) with a custom TLSV1.2 cipher string

• Question 236:

  An LTM specialist needs to upgrade a VCMP quest in an HA Setup with minimum interruption for all VCMP guestinstances.

  In which should the LTM Specialist perform this upgrade?

  A. Relicense the host. Failover all guest's active traffic-groups to the other host, copy image to gest, create guest UCS install and set boot location to new volume, reboot
  B. Failover this specific guest's active traffic-group to the other Host, Relicense the guest, copy image to guest , create guest UCS, install and set boot location to new volume, reboot
  C. Failover all guests' active traffic-group to the other Host, Relicense the host, copy image to guest, create guest UCS, install and set boot location to new volume , reboot
  D. Failover all guests' active traffic-group to the other host, copy image to guest, create guest UCS install and set boot location to new volume, reboot, Relicense the host
  C. Failover all guests' active traffic-group to the other Host, Relicense the host, copy image to guest, create guest UCS, install and set boot location to new volume , reboot

• Question 237:

  Which method is recommended for creating a new user from the CLI?

  A. Run f5adduser username' then 'f5passwd username' from bash or tmsh
  B. Run tmsh create auth user username prompt for password' from bash
  C. edit bigip.conf to add the new user and the user's clear-text password
  D. Run useradd username' then 'passwd username' from bash tmsh
  B. Run tmsh create auth user username prompt for password' from bash

• Question 238:

  Refer to the exhibit.

  

  The BIG-IP Administrator is investigating disk utilization on the BIG-IP device. What should the BIG-IP Administrator check next?

  A. Large files on the / file system
  B. Results from the EUD test
  C. Results from the platform diagnostics test
  D. Large files on /usr file system
  A. Large files on the / file system

• Question 239:

  Refer to the exhibit.

  

  Due to a change in application requirements, a BIG-IP Administrator needs to modify the configuration of a Virtual Server to include a Fallback Persistence Profile. Which persistence profile type should the BIG-IP Administrator use for this purpose?

  A. SSL
  B. Hash
  C. Universal
  D. Source Address Affinity
  D. Source Address Affinity

• Question 240:

  An LTM Specialist uploaded new releases .iso and .md5 files titled "BIGIP-FILENAME" via the GUI.

  Which commands are run via the command line from the root directory to verify the integrity of the new .iso file?

  A. cd /var/shared/images md5sum --check BIGIP-FILENAME.iso
  B. cd /shared/images md5sum --check BIGIP-FILENAME.iso
  C. cd /var/shared/images md5sum --check BIGIP-FILENAME.iso.md5
  D. cd /shared/images md5sum --check BIGIP-FILENAME.iso.md5
  D. cd /shared/images md5sum --check BIGIP-FILENAME.iso.md5