F5 303 Online Questions & Answers

• Question 41:

  What should the BIG-IP Administrator do to apply and activate a hotfix to a BIG-IP device that is currently running version 11.0.0 on active partition HD1.1?

  A. 1. confirm that 11.0.0 is installed on inactive partition HD1.2 2.apply a hotfix to partition HD 1.2 3.activate partition HD1.2
  B. 1. reactivate the license on partition HD1.1 2. apply a hotfix to partition HD1.1
  C. 1. activate partition HD1.2 2 confirm version 11.0.0 on partition HD1.2 3. install a hotfix on partition HD1.2
  D. 1. set partition HD1.2 active 2. apply a hotfix to partition HD1.2
  A. 1. confirm that 11.0.0 is installed on inactive partition HD1.2 2.apply a hotfix to partition HD 1.2 3.activate partition HD1.2

• Question 42:

  Refer to the exhibit.

  

  A pair of LTM devices are configured for HA. The LTM Specialist observes from a capture that there is a successful connection from a client directly to a web server and an unsuccessful connection from a client via the LTM device to the same web server.

  Which two solutions will solve the configuration problem? (Choose two.)

  A. Configure SNAT on the pool.
  B. Configure SNAT on the virtual server.
  C. Change server default gateway to point at LTM internal self IP.
  D. Change server default gateway to point at LTM internal floating IP.
  B. Configure SNAT on the virtual server.
  D. Change server default gateway to point at LTM internal floating IP.

• Question 43:

  A BIG-IP Administrator need to ensure that a pool member and down by the monitor the BIG-IP system sends existing connections to another be pool member. Which should the BIG-IP Administrator perform to meet this goal?

  A. Set Action on Service Down sing under the server configuration to reselect.
  B. Reconfigure the pool motor members as UP.
  C. Enable mirroring within the persistence profile.
  D. Set Action Service Down setting under the pool configuration to reselect.
  D. Set Action Service Down setting under the pool configuration to reselect.

• Question 44:

  An LTM Specialist sees these entries in /var/log/ltm: Oct 25 03:34:31 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborteD. 172.16.20.1:443 Oct 25 03:34:32 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborteD. 172.16.20.1:443 Oct 25 03:34:32 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborteD. 172.16.20.1:443 Oct 25 03:34:32 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborteD. 172.16.20.1:443 Oct 25 03:34:32 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborteD. 172.16.20.1:443 Oct 25 03:34:33 tmm warning tmm[7150]: 01260017:4: Connection attempt to insecure SSL server (see RFC5746) aborteD. 172.16.20.1:443 Assume 172.16.20.0/24 is attached to the VLAN "internal." What should the LTM Specialist use to troubleshoot this issue?

  A. curl -d - -k https://172.16.20.1
  B. ssldump -i internal host 172.16.20.1
  C. tcpdump -i internal host 172.16.20.1 > /shared/ssl.pcap ssldump < /shared/ssl.pcap
  D. tcpdump -s 64 -i internal -w /shared/ssl.pcap host 172.16.20.1 ssldump -r /shared/ssl.pcap
  B. ssldump -i internal host 172.16.20.1

• Question 45:

  An LI M device is experiencing a high volume of traffic. The virtual server is struggling under the load. The problem appears to be on the server side connections. The virtual server isaccepting connections . The virtual server is accepting connections on https and is configured with an SSL profile and http pool.

  What should be added to increase the performance of the device?

  A. an HTTP Compression profile
  B. a One Connect profile
  C. smaller key to the SSL profile
  D. a SPDY profile
  B. a One Connect profile

• Question 46:

  Which type of Virtual Server requires the use of a FastL4 profile?

  A. Performance (Layer 4)
  B. Stateless
  C. Performance (HTTP)
  D. Standard
  A. Performance (Layer 4)

• Question 47:

  Refer to the exhibit.

  

  An LTM Specialist is working on an LTM 11.0.0 installation and has identified a security vulnerability as shown in the exhibit. The LTM Specialist is tasked with applying the latest available hotfix to resolve the problem. Which procedure resolves the problem?

  A. Browse to System > Software Management > Hotfix List. Import TMOS 11.2.0 to the available hotfix images. Select the imported hotfix image and installation location and click Install.
  B. Browse to System > Software Management > Hotfix List. Import 11.1.0.HF3 to the available hotfix images. Select the imported hotfix image and installation location and click Install.
  C. Browse to System > Software Management > Image List. Import TMOS 11.2.0 to the available hotfix images. Select the imported hotfix image and installation location and click Install.
  D. Browse to System > Software Management > Image List. Import 11.1.0.HF3 to the available hotfix images. Select the imported hotfix image and installation location and click Install.
  B. Browse to System > Software Management > Hotfix List. Import 11.1.0.HF3 to the available hotfix images. Select the imported hotfix image and installation location and click Install.

• Question 48:

  These log entries can have different root causes:

  Jun 28 05:01:21 LTM_A notice mcpd[27545]: 0107143a:5: CMI reconnect timer: enabled

  Jun 28 05:01:21 LTM_A notice mcpd[27545]: 01071431:5: Attempting to connect to CMI peer 1.1.1.2 port 6699

  Jun 28 05:01:21 LTM_A notice mcpd[27545]: 01071432:5: CMI peer connection established to 1.1.1.2 port 6699 Jun 28 05:01:26 LTM_A notice mcpd[27545]: 0107143a:5: CMI reconnect timer: disabled, all peers are connected Which two commands should be used to obtain additional information on these entries? (Choose two.)

  A. tmsh show /sys mcpd
  B. bigstart status mcpd
  C. tmsh modify /sys db log.mcpd.level value debug
  D. tmsh modify /sys db log.cmi.level value debug
  B. bigstart status mcpd
  C. tmsh modify /sys db log.mcpd.level value debug

• Question 49:

  All pool members are online. All other virtual server settings are at default What might after the load balancing behavior?

  A. enabing SNAT automap
  B. enabing a falback host in the http profile
  C. adding a oneconnect profile
  D. adding a persistence profile
  D. adding a persistence profile

• Question 50:

  The following decoded TCPDump capture shows the trace of a failing health monitor.

  00:00:13.245104 IP 10.29.29.60.51947 > 10.0.0.12.http: P 1:59(58) ack 1 win 46 out slot1/tmm3 lis=

  0x0000: 4500 006e 3b19 4000 4006 ce0c 0a1d 1d3c E..n;.@.@......<

  0x0010: 0a00 000c caeb 0050 8be5 aca3 dd65 e3e1 .......P.....e..

  0x0020: 8018 002e 1b41 0000 0101 080a 94b3 5b5c .....A........[\

  0x0030: 0e30 90ad 4745 5420 2f74 6573 745f 7061 .0..GET./test_pa

  0x0040: 6765 2e68 746d 6c20 4854 5450 312e 310d ge.html.HTTP1.1. 0x0050: 0a48 6f73 743a 200d 0a43 6f6e 6e65 6374 .Host:...Connect 0x0060: 696f 6e3a 2043 6c6f 7365 0d0a 0d0a 0105 ion:.Close......

  0x0070: 0100 0003 00 .....

  00:00:13.245284 IP 10.0.0.12.http > 10.29.29.60.51947: . ack 59 win 362 in slot1/tmm3 lis=

  0x0000 0ffd 0800 4500 00c9 6f68 4000 8006 755d [email protected]]

  0x0010 0a29 0015 0a29 0103 0050 e0d6 4929 90eb .)...)...P..I)..

  0x0020 6f12 d83c 8019 fab3 9b31 0000 0101 080a o..<.....1......

  0x0030 0068 4e10 5240 6150 4854 5450 2f31 2e31 .hN.R@aPHTTP/1.1

  0x0040 2034 3030 2042 6164 2052 6571 7565 7374 .400.Bad.Request

  0x0050 0d0a 436f 6e74 656e 742d 5479 7065 3a20 ..Content-Type:.

  0x0060 7465 7874 2f68 746d 6c0d 0a44 6174 653a text/html..Date:

  0x0070 2054 6875 2c20 3231 204a 616e 2032 3031 .Mon,.01.Jan.201

  0x0080 3020 3138 3a35 383a 3537 2047 4d54 0d0a 2.00:00:01.GMT..

  0x0090 436f 6e6e 6563 7469 6f6e 3a20 636c 6f73 Connection:.clos

  0x00a0 650d 0a43 6f6e 7465 6e74 2d4c 656e 6774 e..Content-Lengt

  0x00b0 683a 2032 300d 0a0d 0a3c 6831 3e42 6164 h:.20....

  Bad

  0x00c0 2052 6571 7565 7374 3c2f 6831 3e .Request

  The health monitor is sending the string shown in the capture; however, the server response is NOT as expected. The correct response should be an HTML page including the string 'SERVER IS UP'.

  What is the issue?

  A. The /test_page.html does NOT exist on the web server.
  B. Incorrect syntax in send string. 'HTTP1.1' should be 'HTTP/1.1'.
  C. Incorrect syntax in send string. 'Connection: Close' should be 'Connection: Open'.
  D. The wrong HTTP version is specified in the send string. Version 1.2 should be used instead of version 1.1.
  B. Incorrect syntax in send string. 'HTTP1.1' should be 'HTTP/1.1'.