F5 303 Online Practice Questions and Exam Preparation

F5 303 Online Questions & Answers

• Question 471:

  Refer to the exhibit.

  

  

  An LTM Specialist is reconfiguring a virtual server to redirect all clients to HTTPS. Testing reveals that the redirect is functioning incorrectly. As part of the troubleshooting process, the LTM Specialist performs a packet capture. What is the issue?

  A. The redirect is causing an infinite loop.
  B. The virtual server is missing a clientssl profile.
  C. The redirect is sending the client to the incorrect location.
  D. The virtual server is incorrectly processing the HTTP request.
  C. The redirect is sending the client to the incorrect location.

• Question 472:

  An LTM Specialist loads a UCS file generated on a different LTM device and receives the following error message: "mcpd[2395]: 01070608:0: License is not operational (expired or digital signature does not match contents)" Which command should the LTM Specialist use to prevent the error?

  A. tmsh show /sys license
  B. tmsh show /sys hardware
  C. bigpipe config save /config.ucs
  D. tmsh load /sys /ucs rma
  E. tmsh load /sys ucs no-license
  E. tmsh load /sys ucs no-license

• Question 473:

  A BIG-IP Administrator configures a Virtual Server. Users report that they always receive a TCP RST packet to the BIG-IP system when attempting to connect to it. What is the possible reason for this issue?

  A. The virtual server Type is set to Internal
  B. The virtual server Type is set to Reject
  C. The virtual server Type is set to Drop
  D. The virtual server Type is set to Stateless
  B. The virtual server Type is set to Reject

• Question 474:

  A BIG-IP Administrator wants to add a new Self IP to the BIG-IP device. Which item should be assigned to the new Self IP being configured?

  A. Interface
  B. Route
  C. VLAN
  D. Trunk
  C. VLAN

• Question 475:

  Refer to the exhibit.

  

  A pair of LTM devices is configured for HA.

  What happens if the pool member server with IP address 10.0.0.4 becomes totally unresponsive to the active LTM device, but is still responsive to the standby LTM device?

  A. The HA-group will disable the trunk my_trunk.
  B. The HTTP application will be unavailable via the LTM device.
  C. The HA-group will initiate a fail-over because the threshold is set to 2.
  D. The HA-group will initiate a fail-over because the HA-Group score will be zero.
  C. The HA-group will initiate a fail-over because the threshold is set to 2.

• Question 476:

  Refer to the exhibit.

  

  A client attempts to connect from a Google Chrome browser to a virtual server on a BIG-IP LTM. The virtual server is SSL Offloaded. When the client connects, the client receives an SSL error. After trying Mozilla Firefox and Internet Explorer

  browsers, the client still receives the same errors.

  The LTM Specialist does an ssldump on the virtual server and receives the results as per the exhibit.

  What is the problem?

  A. The SSL key length is incorrect.
  B. The BIG-IP LTM is NOT serving a certificate.
  C. The BIG-IP LTM is NOT listening on port 443.
  D. The client needs to be upgraded to the appropriate cipher-suite.
  B. The BIG-IP LTM is NOT serving a certificate.

• Question 477:

  Refer to the exhibit.

  

  A virtual server has been configured for SSL offload on a single-arm network. On average, the virtual server will be handling 100,000 connections, with a peak of 130,000 connections. Between the virtual server and the web servers there is a single reverse proxy to provide site caching. The proxy is configured to perform source IP persistence before contacting the web servers. The site is logging users out immediately after logging them in.

  What should the LTM Specialist do to resolve this issue?

  A. Add a source address persistence profile to the virtual server.
  B. Create an iRule to add client IP persistence to a SNAT pool member.
  C. Change the virtual server server-side TCP profile to tcp-lan-optimized.
  D. Configure the virtual server HTTP profile to insert an X-Forwarded-For header.
  B. Create an iRule to add client IP persistence to a SNAT pool member.

• Question 478:

  A virtual server is using a TCP profile based on thetop-wan-optimized profile for a streaming application Users report videos are loading slowly. Which setting should be modified in the TCP profile to optimize the application?

  A. Disable Slow Start
  B. Disable Selective ACKs
  C. Disable Nagle's Algorithm
  D. Disable Reset on Timeout
  A. Disable Slow Start

• Question 479:

  An LTM is configure an application that isseparated into several subdomains across multiple virtual servers. Many of these subdomains require encryption and could be accessed by anyone on the internet. The configuration must NOT result in SSL warnings to end users.

  How should the LTM Specialist configure the SSL profiles for these virtual servers?

  A. Obtain an SSL certificate for each subdomain, make a ServerSSL profile for each subdomain, and apply to the related SSL Virtual Server.
  B. Obtain a wildcard certificate, create one ClientSSL profile and apply to all SSL Virtual Servers
  C. Create a self-singed SSL certificate for each subdomain make a ClientSSL profile for each subdomain, and apply to the related SSL Virtual server
  D. Create a self-singed SSL certificate for each subdomain make a Clientprofile for each SSL Virtual Server
  B. Obtain a wildcard certificate, create one ClientSSL profile and apply to all SSL Virtual Servers

• Question 480:

  An LTM device is load balancing telnet and ssh applications in a client/server environment experiencing significant packet delay. Which setting in the TCP profile should reduce the amount of packet delay?

  A. disable Bandwidth Delay
  B. disable Nagle's Algorithm
  C. enable Proxy Maximum Segment
  D. increase Maximum Segment Retransmissions
  B. disable Nagle's Algorithm