Winter Special Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: bigdisc65

303 Exam Dumps - F5 BIG-IP ASM Questions and Answers

Question # 44

Refer to the exhibit

Given the bigip conf extract shown where the servers only talk http on port 80, which node will receive thenext user request?

Options:

A.

72.10.1.1

B.

10.1.1.1

C.

10.1.1.2 0

D.

10.1.1.3

Buy Now
Question # 45

What is the recommended procedure for upgrading a major TMOS release on a BIG-IP platform?

Options:

A.

1. Renew the device license.

2.Take a configuration backup.

3.Reboot the device to the non-active volume.

4.Upload the device code.

5.Install device code to the current volume.

B.

1. Take a configuration backup.

2.Upload the device code.

3.Install device code to the non-active volume.

4.Reboot the device to the non-active volume.

5.Renew the device license.

C.

1. Renew the device license.

2.Take a configuration backup.

3.Upload the device code.

4.Install device code to the non-active volume.

5.Reboot the device to the non-active volume.

D.

1. Take a configuration backup.

2.Reboot the device to the non-active volume.

3.Renew the device license.

4.Upload the device code.

5. Install device code to the current volume.

Buy Now
Question # 46

An LTM Specialist is tasked with ensuring that the syslogs for the LTM device are sent to a remote syslog server.

The following is an extract from the config file detailing the node and monitor that the LTM device is using for the

remote syslog server:

monitor

Syslog_15002 {

defaults from udp

dest *:15002

}

node 91.223.45.231 {

monitor Syslog_15002

screen RemoteSYSLOG

}

There seem to be problems communicating with the remote syslog server. However, the pool monitor shows that the remote server is up.

The network department has confirmed that there are no firewall rules or networking issues preventing the LTM device from

communicating with the syslog server. The department responsible for the remote syslog server indicates that there may

be problems with the syslog server. The LTM Specialist checks the BIG-IP LTM logs for errors relating to the remote syslog

server. None are found. The LTM Specialist does a tcpdump:

tcpdump -nn port 15002, with the following results:

21:28:36.395543 IP 192.168.100.100.44772 > 91.223.45.231.15002: UDP, length 19

21:28:36.429073 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 169

21:28:36.430714 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 181

21:28:36.840524 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 169

21:28:36.846547 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 181

21:28:39.886343 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 144

NotE. 192.168.100.100 is the self IP of the LTM device.

Why are there no errors for the remote syslog server in the log files?

Options:

A.

The -log option for tcpdump needs to be used.

B.

The monitor type used is inappropriate.

C.

The "verbose" logging option needs to be enabled for the pool.

D.

When the remote syslog sever fails, it returns to service before the timeout for the monitor has expired.

Buy Now
Question # 47

A new HITP server has been deployed on an LTM device. The application running on the server must be monitored by the LIM device. The following is required:

A new HITP server has been deployed on an LTM device. The application running on theserver must be monitored by the LIM device. The following is required:

When the server is unavailable, it will send an HTTP status code of 200 in response to a request for the status html page.

When the server is available. I will send and HTTP status code of 201 in response to a request for the status html page.

When the 200 status code is received, the pool member should receive No new connections.

Which configuration change should be made to meet these requirements?

Options:

A.

set the Send String to GET/status html and the Receive String to 200 and Receive Disable String to 201.

B.

set the Send String to GET Arian and the Receive String to 200 and Receive Disable String to 201.

C.

set the Send String to GET Arian and the Receive Disable String to 200 andReceive String to 201.

D.

set the Send String to Get /status html and the Receive Disable String to 200 and Receive String to 201.

Buy Now
Question # 48

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

An LTM Specialist configures a virtual server to perform client-side encryption while allowing the server-side traffic to be unencrypted. Application owners report that images are failing to load through the virtual server; however, images load when going directly to the server.

What is the problem with the images loading through the virtual server?

Options:

A.

Image references are for HTTP objects, not HTTPS.

B.

Image references are for HTTPS objects, not HTTP.

C.

The virtual server does not have "SSL Offloading" enabled.

D.

The virtual server does not have an HTTP profile associated.

Buy Now
Question # 49

Which iRule will reject any connection originating from a 10.0.0.0/8 network?

Options:

A.

when CLIENT_ACCEPTED {

set remote_ip [IP::addr [IP::remote_addr] mask 8]

switch $remote_ip {

"10.0.0.0" { reject }

"11.0.0.0" { pool pool_http1}

default { pool http_pool }

}

}

B.

when CLIENT_ACCEPTED {

set remote_ip [IP::addr [IP::local_addr] mask 8]

switch $remote_ip {

"10.0.0.0" { reject }

"11.0.0.0" { pool pool_http1}

default { pool http_pool }

}

}

C.

when CLIENT_ACCEPTED {

set remote_ip [IP::addr [IP::client_addr] mask 255.0.0.0]

switch $remote_ip {

"10.0.0.0" { reject }

"11.0.0.0" { pool pool_http1}

default { pool http_pool }

}

}

D.

when CLIENT_ACCEPTED {

set remote_ip [IP::addr [IP::local_addr] mask 255.0.0.0]

switch $remote_ip {

"10.0.0.0" { reject }

"11.0.0.0" { pool pool_http1}

default { pool http_pool }

}

}

Buy Now
Question # 50

An SSL application is being migrated to the LTM device. Both encrypted and unencrypted traffic are accepted by the server. The virtual server configuration is as follows:

Which LTM device profile should be used on the LTM device to reduce the CPU load on the current.

Options:

A.

Protocol

B.

serverssl

C.

clientsssl

D.

stream

Buy Now
Question # 51

An LTM Specialist configures the following iRule on an LTM device:

when HTTP_REQUEST {

if {[string tolower [HTTP::uri]] contains "/URI1/" } {

pool Pool1

}

elseif {[string tolower [HTTP::uri]] contains "/URI2/" } {

pool Pool2

}

elseif {[string tolower [HTTP::uri]] contains "/URI3/" } {

pool Pool3

}

else { pool Pool4}

}

Given the following request: http://www.example.comURI1/index.html?fu=bar &pass=1234

Which pool will be selected by the iRule?

Options:

A.

Pool1

B.

Pool2

C.

Pool3

D.

Pool4

Buy Now
Question # 52

Which iRule statement demotes a virtual server from CMP?

Options:

A.

set ::foo 123

B.

set static::foo 123

C.

persist source_addr 1800

D.

[ class match $HTTP_CONTENT contains my_data_class ]

Buy Now
Question # 53

A web server's default gateway is the network router. The LTM Specialist needs to introduce an LTM device to load balance to the web servers without changing the server's default gateway.

Which deployment method and settings should the LTM Specialist use to ensure correct traffic flow and that the web servers can obtain the actual con IP addresses?

Options:

A.

route deployment with Automap configured and X-Forwarded-For inserted in HTTP headers

B.

route deployment without SNAT configuration

C.

SNAT deployment with automap configured and X-Forwarded-For inserted in HTTP headers

D.

SNAT deployment with automap configured

Buy Now
Exam Code: 303
Exam Name: BIG-IP ASM Specialist
Last Update: Feb 5, 2025
Questions: 0
303 pdf

303 PDF

$29.75  $84.99
303 Engine

303 Testing Engine

$33.25  $94.99
303 PDF + Engine

303 PDF + Testing Engine

$157.5  $450