F5 303 Online Practice Questions and Exam Preparation

F5 303 Online Questions & Answers

• Question 511:

  A virtual server is configured to handle https traffic. The clientssl profile is configured to use a2048-bit RSA key. Due to security requirements, is the LTM Specialist needs to use a 4096-bit RSA key in the future. What two effects will this change have on the BIG-IP device? (Choose two)

  A. Increase of CPU usage on the BIG-IP device
  B. Decrease to 20% oflicensed TPS
  C. Decrease to 90% of licensed TPS
  D. Increased of concurrent connection on client-side
  E. Increase of TLS Renegotiation
  A. Increase of CPU usage on the BIG-IP device
  B. Decrease to 20% oflicensed TPS

• Question 512:

  Refer to the exhibit.

  

  An LTM Specialist needs to configure VS^HTTP and VS_DB for an online shopping site. The VS HTTP passes the client requests to the webservers. The webservers query the database serversthrough the VS_DB. Initially, the LTM Specialist finds the database servers directly return the packets to the webservers.

  Which setting must be enabled for the configuration to function correctly?

  A. VS_HTTP snat auto map
  B. VS.HTTP auto last hop
  C. VS DB auto last hop
  D. VS_DB snat auto map
  C. VS DB auto last hop

• Question 513:

  An LTM Specialist must perform a hot fix installation from the command line. What is the correct procedure to ensure that the installation is successful?

  A. import the hot fix to the /var/shared/images directory check the integrity of the file with an md5 checksum tmsh apply sys software hotfix volume .iso
  B. import the hot fix to the /var/shared/images directory check the integrity of the file with an md5 checksum tmsh install sys software hotfix .iso volume
  C. import the hot fix to the /shared/images directory check the integrity of the file with an md5 checksum tmsh apply sys software hotfix volume .iso
  D. import the hot fix to the /shared/images directory check the integrity of the file with an md5 checksum tmsh install sys software hotfix .iso volume
  D. import the hot fix to the /shared/images directory check the integrity of the file with an md5 checksum tmsh install sys software hotfix .iso volume

• Question 514:

  Refer to the exhibit.

  

  An organization is reporting slow performance accessing their Intranet website, hosted in a public cloud. All employees use a single Proxy Server with the public IP of 104.219.110.168 to connect to the Internet. What should the BIG-IP Administrator of the Intranet website do to fix this issue?

  A. Change Source Address to 104.219.110.168/32
  B. Change Load Balancing Method to Least Connection
  C. Change Fallback Persistence Profile to source_addr
  D. Change Default Persistence Profile to cookie
  D. Change Default Persistence Profile to cookie

• Question 515:

  A BIG-IP Administrator discovers malicious brute-force attempts to access the BIG-IP device on the management interface via SSH. The BIG-IP Administrator needs to restrict SSH access to the management interface. Where should this be accomplished?

  A. System > Configuration
  B. Network > Interfaces
  C. Network > Self IPs
  D. System > Platform
  D. System > Platform

• Question 516:

  An LTM Specialist configured a virtual server to load balance a custom application. The application works when it is tested from within the firewall but it fails when tested externally. The pool member address is 192.168.200.10:80. A capture from an external client shows: GET /index.jsp HTTP/1.1 Host: 207.206.201.100 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:15.0) Gecko/20100101 Firefox/15.0.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Connection: keep-alive HTTP/1.1 302 Found

  DatE. Wed, 17 Oct 2012 23:09:55 GMT Server: Apache/2.2.15 (CentOS) Location: http://192.168.200.10/user/home.jsp Content-LengtH. 304 Connection: close What is the solution to this issue?

  A. Assign a SNAT pool to the virtual server.
  B. Add a Web Acceleration Profile to the virtual server.
  C. Configure redirect rewrite option in the HTTP profile.
  D. Configure a content filter on the backend web server.
  C. Configure redirect rewrite option in the HTTP profile.

• Question 517:

  The owner of a web application asks the 8IG-IP Administrator to change the port that the BIG-IP device sends traffic to. This change must be made for each member in the server pool named app_pool for their Virtual Server named app_vs. In which area of the BIG-IP Configuration Utility should the BIG-P Administrator make this change?

  A. Local Traffic > Pools
  B. Local Traffic > Nodes
  C. Network > Interfaces
  D. Local Traffic > Virtual Servers
  A. Local Traffic > Pools

• Question 518:

  Some users who connect to a busy Virtual Server have connections reset by the BIG-IP system. Pool member resources are NOT a factor in this behavior. What is a possible cause for this behavior?

  A. The Connection Rate Limit is set too high
  B. The server SSL Profile has NOT been reconfigured.
  C. The Connection Limit is set too low.
  D. The Rewrite Profile has NOT been configured.
  C. The Connection Limit is set too low.

• Question 519:

  A BIG-IP Administrator needs to purchase new licenses for a BIG-IP appliance.

  The administrator needs to know if a module is licensed and the memory requirement for that module. Where should the administrator view this information in the System menu?

  A. Resource Provisioning
  B. Configuration > Device
  C. Software Management
  D. Configuration >OVSDB
  A. Resource Provisioning

• Question 520:

  Refer to the exhibit.

  

  A server administrator notices that one server is intermittently NOT being sent any HTTP requests. The server logs display no issues. The LTM Specialist notices log entries stating the node (172.16.20.1) status cycling between down and up. The pool associated with the virtual server (10.10.1.100) has a custom HTTP monitor applied.

  Which tcpdump filter will help trace the monitor?

  A. tcpdump -i internal port 80 and host 172.16.1.31
  B. tcpdump -i external port 80 and host 10.10.1.100
  C. tcpdump -i internal port 80 and host 172.16.1.33
  D. tcpdump -i external port 80 and host 172.16.20.1
  A. tcpdump -i internal port 80 and host 172.16.1.31