F5 303 Online Practice Questions and Exam Preparation

F5 303 Online Questions & Answers

• Question 341:

  A BIG-IP Administrator assigns the default http health monitor to a pool that has three members listening on port 80 When the administrator connects to each pool member via the CURL utility, two of the members respond with a status of 404 Not Found while the third responds with 200 OK. What will the pool show for member availability?

  A. All members offline.
  B. Two members offline and one member online.
  C. Two members online and one member offline.
  D. All members online.
  D. All members online.

• Question 342:

  Refer to the exhibit.

  

  An LTM Specialist is investigating reports that users are unable to perform some commands through an FTP virtual server. The users are receiving the FTP error "500 Illegal PORT command." The virtual server is configured to SNAT using automap. The LTM Specialist performs a capture on the server side of the LTM device.

  Why is the server returning this error?

  A. LIST command disallowed
  B. PORT command disallowed
  C. Active IP address in PORT command
  D. Active IP address in LOGIN command
  C. Active IP address in PORT command

• Question 343:

  A web application is meant to log the URI of the resource that responded to the client's initial Request-URI. Which HTTP header will supply this information?

  A. Via
  B. Server
  C. Trailer
  D. Referer
  D. Referer

• Question 344:

  A client (10.10.1.30) connecting to an HTTPS virtual server (10.10.1.100) with a clientssl profile is getting an SSL error. Which options will trace this issue?

  A. tcpdump -i external -X -e -nn -vvv -w /shared/ssl_problem.cap port 443 and host 10.10.1.30 ssldump -r /shared/ssl_problem.cap -n -x
  B. tcpdump -i external -s 0 -w /shared/ssl_problem.cap port 443 and host 10.10.10.30 and host 10.10.1.100 ssldump -r /shared/ssl_problem.cap -n -x
  C. tcpdump -i external -X -s 0 -vvv src host 10.10.10.30 and dst host 10.10.1.100 and port 443 > /shared/ssl_problem.cap ssldump -r /shared/ssl_problem.cap -n -x
  D. tcpdump -i external -X -e -nn -vv port 443 and host 10.10.1.100 and host 10.10.1.30 > /shared/ssl_problem.cap ssldump -n -x < /shared/ssl_problem.cap
  B. tcpdump -i external -s 0 -w /shared/ssl_problem.cap port 443 and host 10.10.10.30 and host 10.10.1.100 ssldump -r /shared/ssl_problem.cap -n -x

• Question 345:

  A BIG-IP Administrator upgrades the BIG-IP LTM to a newer software version. After the administrator reboots into the new volume, the Configuration fails to load. Why is the Configuration failing to load?

  A. The license needs to be reactivated before the upgrade.
  B. The upgrade was performed on the standby unit.
  C. A minimum of at least two reboots is required.
  D. Connectivity to the DNS server failed to be established.
  A. The license needs to be reactivated before the upgrade.

• Question 346:

  Refer to the exhibit.

  

  An LTM Specialist is troubleshooting an issue with an application configured on an LTM device. The application works properly when accessed directly via the servers; however, it does not work when accessed via the LTM device. The virtual server, 192.168.1.211:443, is configured to SNAT using the address 192.168.1.144 and references a pool with the member 192.168.10.80:443. The virtual server has no Client or Server SSL profiles associated.

  Which configuration change will allow the application to function through the virtual server?

  A. Change pool member port to 8443.
  B. Change virtual server port to 8443.
  C. Add SSL off-loading to the pool member.
  D. Add Client and Server SSL profiles to the virtual server.
  A. Change pool member port to 8443.

• Question 347:

  Refer to the exhibit.

  

  An LTM Specialist configures a virtual server to perform client-side encryption while allowing the server-side traffic to be unencrypted. Application owners report that images are failing to load through the virtual server; however, images load when going directly to the server.

  What is the problem with the images loading through the virtual server?

  A. Image references are for HTTP objects, not HTTPS.
  B. Image references are for HTTPS objects, not HTTP.
  C. The virtual server does not have "SSL Offloading" enabled.
  D. The virtual server does not have an HTTP profile associated.
  A. Image references are for HTTP objects, not HTTPS.

• Question 348:

  A web application requires knowledge of the client's true IP address for logging and analysis purposes. Instances of the application that can decode X-Forwarded-For HTTP headers reside in pool_a, while pool_b instances assume the source IP is the true address of the client.

  Which iRule provides the proper functionality?

  A. when HTTP_DATA { if {[HTTP::header exists X-Forwarded-For]}{ pool pool_a } else { pool pool_b } }
  B. when HTTP_RESPONSE { if {[HTTP::header exists X-Forwarded-For]}{ pool pool_a } else { pool pool_b } }
  C. when HTTP_REQUEST { if {[HTTP::header exists X-Forwarded-For]}{ pool pool_a } else { pool pool_b } }
  D. when HTTP_OPEN { if {[HTTP::header exists X-Forwarded-For]}{ pool pool_a } else { pool pool_b } }
  C. when HTTP_REQUEST { if {[HTTP::header exists X-Forwarded-For]}{ pool pool_a } else { pool pool_b } }

• Question 349:

  Refer to the exhibit.

  

  A BIG-IP Administrator creates a new Virtual Server to load balance SSH traffic. Users are unable to log on to the servers. What should the BIG-IP Administrator do to resolve the issue?

  A. Set Protocol to UDP
  B. Set HTTP Profile to None
  C. Set Source Address to 10.1.1.2
  D. Set Destination Addresses/Mask to 0.0.0.0/0
  B. Set HTTP Profile to None

• Question 350:

  Refer to the exhibit.

  

  A BIG-IP Administrator needs to deploy an application on the BIG-IP system to perform SSL offload and re-encrypt the traffic to pool members. During testing, users are unable to connect to the application. What must the BIG-IP Administrator do to resolve the issue?

  A. Remove the configured SSL Profile (Client)
  B. Configure Protocol Profile (Server) as splitsession-default-tcp
  C. Enable Forward Proxy in the SSL Profile (Client)
  D. Configure an SSL Profile (Server)
  D. Configure an SSL Profile (Server)