F5 303 Online Practice Questions and Exam Preparation

F5 303 Online Questions & Answers

• Question 51:

  Refer to the exhibit.

  

  A BIG-IP Administrator needs to fall over the active device. The administrator logs into the Configuration. Unity and navigates to Device Management > Traffic Group. However, Force to Standby is greyed out. What is causing this issue?

  A. The BIG-IP Administrator is NOT logged into command line to tail over
  B. The BIG-IP Administrator is on the Standby Device
  C. The BIG-IP Administrator is logged in as root
  D. The BIG-IP Administrator is logged in as administrator
  B. The BIG-IP Administrator is on the Standby Device

• Question 52:

  An SSL application is being migrated to the LTM device. Both encrypted and unencrypted traffic are accepted by the server. The virtual server configuration is as follows:

  

  Which LTM device profile should be used on the LTM device to reduce the CPU load on the current.

  A. Protocol
  B. serverssl
  C. clientsssl
  D. stream
  C. clientsssl

• Question 53:

  Refer to the exhibit.

  

  A pair of LTM devices are deployed in a high-availability (HA) pair as the diagram shows. After inserting a new rule on the firewalls, the LTM devices become Standby. The rule drops all outbound sessions to the Internet. Only inbound

  connections are allowed from the Internet. There are no other changes to the environment.

  What triggered the LTM device failover?

  A. HA Group
  B. Auto Failback
  C. VLAN Failsafe
  D. Gateway Failsafe
  D. Gateway Failsafe

• Question 54:

  The BIG-IP Administrator generates QKView using tmsh command "qkview -SO". In which directory does the BIG-IP appliance save the QKView?

  A. /etc/tmp
  B. /var/tmp
  C. /shared/qkview
  D. /var /tmp/qkview
  B. /var/tmp

• Question 55:

  Refer to the exhibit.

  

  An LTM Specialist creates a virtual server to load balance traffic to a pool of HTTPS servers. The servers use client certificates for user authentication. The virtual server has clientssl, serverssl, and http profiles enabled. Clients are unable to connect to the application through the virtual server, but they are able to connect to the application servers directly.

  Which change to the LTM device configuration will resolve the problem?

  A. Install the server certificate/key and enable Proxy SSL.
  B. Use the serverssl-insecure-compatible serverssl profile.
  C. Configure the clientssl profile to require a client certificate.
  D. Install the client's issuing Certificate Authority certificate on the LTM device.
  A. Install the server certificate/key and enable Proxy SSL.

• Question 56:

  A user needs to determine known security vulnerabilities on an existing BIG-IP appliance and how to remediate these vulnerabilities. Which action should the BIG-IP Administrator recommend?

  A. Verify the TMOS version and review the release notes
  B. Create a UCS archive and upload to Health
  C. Create a UCS archive and open an F5 Support request
  D. Generate a view and upload to Heath
  D. Generate a view and upload to Heath

• Question 57:

  Consider the monitor configuration displayed below.

  

  What is the status of a pool member that responds with ''200 OK''?

  A. available
  B. down
  C. disabled
  D. unknown
  B. down

• Question 58:

  An LTM Specialistconfigures a new HTTPS virtual server that contains a valid example.com ssl certificate. The LTM Special receives an error in the browser when connecting. What must be added to the SSL Client profile to fix this issue?

  A. A sell-sign certificate
  B. A new example com certificate
  C. An intermediate certificate
  D. A public root certificate
  C. An intermediate certificate

• Question 59:

  AN LTM Specialist is setting up a new HTTPS virtual server to decrypt client traffic. SNAT the traffic and send the encrypted traffic to the poor member, the client's IP address must be included in the traffic sent to the pool member.

  What is a complete set of profiles that must be configured for the virtual server to meet these requirements?

  A. TCP, Client SSL, Server SSL
  B. TCP , Server SSL, HTTP
  C. TCP, Client SSL, HTTP
  D. TCP, Client SSL, Server SSL, HTTP
  D. TCP, Client SSL, Server SSL, HTTP

• Question 60:

  A BIG-IP Administrator needs to check the memory utilization on a BIG-IP system. Which two methods can the UIG IP Administrator use? (Choose two.)

  A. Run the tmsh show/sys memory command
  B. Run the tmsh show/sys traffic command
  C. Go to Statistics > Module Statistics > Traffic Summary in the configuration utility
  D. Go to Statistics > Module Statistics > Memory in the configuration utility
  E. Go to System > Disk Management in the configuration utility
  A. Run the tmsh show/sys memory command
  D. Go to Statistics > Module Statistics > Memory in the configuration utility