Winter Special Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: bigdisc65

303 Exam Dumps - F5 BIG-IP ASM Questions and Answers

Question # 64

A BIG-IP Administrator needs to find which modules have been licensed for use on the BIG-IP system. In which section of the Configuration Utility can the BIG-IP Administrator find this information?

Options:

A.

System > Services

B.

System > Resource Provisioning

C.

System > Platform

D.

System > Support

Buy Now
Question # 65

-- Exhibit –

-- Exhibit --

Refer to the exhibits.

After upgrading LTM from v10 to v11, users are unable to connect to an application. The virtual server is using a client SSL profile for re-terminating SSL for payload inspection, but a server SSL profile is being used to re-encrypt the request.

A client side ssldump did NOT show any differences between the traffic going directly to the server and the traffic being processed by the LTM device. However, packet capture was done on the server, and differences were noted.

Which modification will allow the LTM device to process the traffic correctly?

Options:

A.

Enable Strict Resume.

B.

Change Secure Renegotiation to "Request."

C.

Enable ProxySSL option in the server SSL profile.

D.

Change to different ciphers on the server SSL profile.

Buy Now
Question # 66

A BIG-IP Administrator needs to apply a health monitor for a pool of database servers named DB_Pool

that uses TCP port 1521.

Where should the BIG-IP Administrator apply this monitor?

Options:

A.

Local Traffic > Profiles » Protocol > TCP

B.

Local Traffic > Nodes > Default Monitor

C.

Local Traffic > Pools > De Pool > Members

D.

Local Traffic > Pools > DB Pool > Properties

Buy Now
Question # 67

-- Exhibit --

-- Exhibit --

Refer to the exhibit.

A company uses a complex piece of client software that connects to one or more virtual servers (VS) hosted on an LTM device. The client software is experiencing issues. An LTM Specialist must determine the cause of the problem.

The LTM Specialist is seeing a client source IP of 168.210.232.5 in the tcpdump. However, the client source IP is actually 10.123.17.12.

Why does the IP address of 10.123.17.12 fail to appear in the tcpdump?

Options:

A.

The LTM device performed NAT on the individual's IP address.

B.

The Secure Network Address Translation (SNAT) pool on the virtual server is activated.

C.

Network Address Translation (NAT) has occurred in the path between the client and the LTM device.

D.

The individual's data stream is being routed to the LTM device by a means other than the default route.

Buy Now
Question # 68

An LTM specialist needs to upgrade a VCMP quest in an HA Setup with minimum interruption for all VCMP guestinstances.

In which should the LTM Specialist perform this upgrade?

Options:

A.

Relicense the host. Failover all guest’s active traffic-groups to the other host, copy image to gest, create guest UCS install and set boot location to new volume, reboot

B.

Failover this specific guest’s active traffic-group to the other Host, Relicense the guest, copy image to guest , create guest UCS, install and set boot location to new volume, reboot

C.

Failover all guests’ active traffic-group to the other Host, Relicense the host, copy image to guest, create guest UCS, install and set boot location to new volume , reboot

D.

Failover all guests’ active traffic-group to the other host, copy image to guest, create guest UCS install and set boot location to new volume, reboot, Relicense the host

Buy Now
Question # 69

A web application requires the client to provide the destination server and service identification.

Which HTTP header will supply this information?

Options:

A.

Host

B.

From

C.

Expect

D.

Connection

Buy Now
Question # 70

An LTM Specialist is troubleshooting an issue where one LTM device in a three LTM device group is failing to synchronize after a synchronize to group command is issued. The LTM Specialist verifies there are no packet filters, port lock down, or network issues preventing the connection.

What are two reasons the synchronization group is having issues? (Choose two.)

Options:

A.

Certificates expired on all of the peer LTM devices.

B.

Certificates stored for the device trusts on all of the peer LTM devices are corrupted.

C.

Admin passwords changed on one of the peer LTM devices that are able to synchronize.

D.

Admin password changed on the LTM device NOT receiving the synchronized configurations.

E.

Certificates stored for the device trusts on the LTM device NOT receiving the configuration are corrupted.

Buy Now
Question # 71

Refer to the exhibit

The network team creates a new VLAN on the switches. The BIG-IP Administrator needs to create a

configuration on the BIG-IP device. The BIG-IP Administrator creates a new VLAN and Self IP, but the

servers on the new VLAN are NOT reachable from the BIG-IP device.

Which action should the BIG-IP Administrators to resolve this issue?

Options:

A.

Set Port Lockdown of Set IP to Allow All

B.

Change Auto Last Hop to enabled

C.

Assign a physical interface to the new VLAN

D.

Create a Floating Set IP Address

Buy Now
Question # 72

On the VCMP system, a BIG-IP host administrator imports a new ISO image into the host's /shared/images folder. The new ISO images that reside on the vCMP host are available for installation on the guest. How should the BIG-IP Administrator install one image from within the guest?

Options:

A.

Install the new software on the host and wait for it to automatically be installed on all guests.

B.

Run the following command on guest

tmsh install sys software block-device-image image_name volume < volume_name>

C.

Run the following command on guest

tmsh install sys software image image_name volume < volume_name>

D.

Run the following command on host

tmsh install sys software block-device-image image_name volume < volume_name>

Buy Now
Question # 73

What do the following iRule commands do when they are used in the same iRule?

set hsl [HSL::open -proto UDP -pool syslog_server_pool]

HSL::send $hsl "<190> [HTTP::host] from [whereis [IP::client_addr] country continent state city zip] , IP: [IP::client_addr]"

Options:

A.

The commands set up a high-speed logging connection and then send the geographical database to the server.

B.

The commands set up a high-speed logging connection and then send the host header and client geographical detail to the connection.

C.

The commands set up a high-speed logging connection and then send the host header, HTTP payload, and client geographical detail to the connection.

D.

The commands set up a high-speed logging connection to the LTM device and then send the host header and client geographical detail to the connection.

Buy Now
Exam Code: 303
Exam Name: BIG-IP ASM Specialist
Last Update: Feb 5, 2025
Questions: 0
303 pdf

303 PDF

$29.75  $84.99
303 Engine

303 Testing Engine

$33.25  $94.99
303 PDF + Engine

303 PDF + Testing Engine

$157.5  $450