New 2021 303 exam questions Welcome to download the newest PassSureExam 303 PDF dumps (525 Q&As)
P.S. Free 2021 BIG-IP ASM 303 dumps are available on Google Drive shared by PassSureExam
NEW QUESTION 283
Refer to the exhibit. The BIG-IP Administrator needs to avoid overloading any of the Pool Members with connections, when they become active.
What should the BIG-IP Administrator configure to meet this requirement?
- A. Different Ratio for each member
- B. Slow Ramp Time to the Pool
- C. Action On Service Down to Reselect
- D. Same Priority Group to each member
Answer: B
NEW QUESTION 284
A BIG-IP Administrator makes a configuration change to a Virtual Server on the Standby device of an HA pair. The HA pair is currently configured with Auto-Sync Enabled. What effect will the change have on the HA pair configuration?
- A. The change will be undone when Auto-Sync propagates the config to the HA pair.
- B. The change will be undone next time a configuration change is made on the Active device.
- C. The change will be propagated next time a configuration change is made on the Active device.
- D. The change will take effect when Auto-Sync propagates the config to the HA pair.
Answer: D
NEW QUESTION 285
Which Virtual Server type prevents the use of a default pool?
- A. Forwarding (IP)
- B. Standard
- C. Performance (Layer 4)
- D. Performance HTTP
Answer: A
Explanation:
Explanation
Forwarding (IP) cannot be associated with the pool.
NEW QUESTION 286
-- Exhibit -
-- Exhibit --
Refer to the exhibit.
An LTM Specialist has created a virtual server to load balance traffic to a pool of HTTPS servers. The servers use client certificates for user authentication. The virtual server has clientssl, serverssl, and http profiles enabled. Clients are unable to connect to the application through the virtual server. Clients are able to connect to the application servers directly.
What is the root cause of the problem?
- A. The clientssl profile is NOT set to require a client certificate.
- B. The LTM device does NOT trust the issuing CA of the client certificate.
- C. The application server does NOT support 2048-bit keys.
- D. The application server does NOT see the client certificate due to SSL offload.
Answer: D
NEW QUESTION 287
A virtual server with SNAT automap enabled selects pool member 10.20.0.10.443 for the server-side flow.
The client side flow source IP is 192.168.0.10 .
Which source IP should be expected inthe server-side connection?
- A. 10.50.0.2
- B. 192.168.0.10
- C. 10.20.0.2
- D. 10.20.0.1
Answer: C
NEW QUESTION 288
Which procedure should an LTM Specialist follow to move a configuration from a 1500 to a 1600 hardware platform during an upgrade?
- A. tmsh save sys config file filename.scf
copy the file from the /var/local/scf directory from one device to the other tmsh load sys config file filename.scf - B. tmsh save sys config file filename.scf
copy the file from the /var/local/ucs directory from one device to the other tmsh load sys config file filename.scf - C. tmsh save sys backup file filename.scf
copy the file from the /var/local/ucs directory from one device to the other tmsh load sys backup file filename.scf - D. tmsh save sys backup file filename.scf
copy the file from the /var/local/scf directory from one device to the other tmsh load sys backup file filename.scf
Answer: A
NEW QUESTION 289
An LTM device needs an additional traffic group.
Which configuration item is required?
- A. Default device
- B. Group name
- C. MAC Masquerade Address
- D. Auto Fallback Timeout
Answer: B
NEW QUESTION 290
What is the recommended procedure for upgrading a major TMOS release on a BIG-IP platform?
- A. 1. Take a configuration backup.
2.Reboot the device to the non-active volume.
3.Renew the device license.
4.Upload the device code.
5. Install device code to the current volume. - B. 1. Renew the device license.
2.Take a configuration backup.
3.Reboot the device to the non-active volume.
4.Upload the device code.
5.Install device code to the current volume. - C. 1. Renew the device license.
2.Take a configuration backup.
3.Upload the device code.
4.Install device code to the non-active volume.
5.Reboot the device to the non-active volume. - D. 1. Take a configuration backup.
2.Upload the device code.
3.Install device code to the non-active volume.
4.Reboot the device to the non-active volume.
5.Renew the device license.
Answer: C
NEW QUESTION 291
-- Exhibit -
-- Exhibit --
Refer to the exhibit.
An LTM Specialist is reviewing the virtual server configuration on an LTM device.
Which two actions should the LTM Specialist perform to minimize the virtual server configuration? (Choose two.)
- A. Combine 'marketing_class' and 'default_class' into one class and update associations on the virtual server.
- B. Remove the 'default_class' from the virtual server.
- C. Combine 'acct_class' and 'marketing_class' into one class and update associations on the virtual server.
- D. Remove the 'http' profile from the virtual server.
- E. Remove 'snat automap' from the virtual server.
Answer: B,C
NEW QUESTION 292
A BIG-IP Administrator wants to add a new Self IP to the BIG-IP device. Which item should be assigned to the new Self IP being configured?
- A. Trunk
- B. Interface
- C. Route
- D. VLAN
Answer: D
NEW QUESTION 293
-- Exhibit -
-- Exhibit --
Refer to the exhibit.
A client attempts to connect from a Google Chrome browser to a virtual server on a BIG-IP LTM. The virtual server is SSL Offloaded. When the client connects, the client receives an SSL error. After trying Mozilla Firefox and Internet Explorer browsers, the client still receives the same errors.
The LTM Specialist does an ssldump on the virtual server and receives the results as per the exhibit.
What is the problem?
- A. The SSL key length is incorrect.
- B. The BIG-IP LTM is NOT serving a certificate.
- C. The BIG-IP LTM is NOT listening on port 443.
- D. The client needs to be upgraded to the appropriate cipher-suite.
Answer: B
NEW QUESTION 294
An LTM Specialist needs to assign a health monitor to a pool with two pool members 10.10.10 101 and
10.10.10.102 Both pool members are listening on port 8080 with TCP. The health of the application depends on the health of an another server(10 10 10 100) that runs port 9080 with TCP.
Which two custom TCP monitors should be selected as the pool's health monitors' (Choose two)
- A. a custom TCP monitor that workson port 9080,
- B. a custom TCP monitor that works on port 9080 with 10.10.10.100 as alias address
- C. a custom TCP monitor thatworks on port 8080 with 10.10.10.102 is alias address
- D. a custom TCP monitor that works on port 9080 with 10,10.10.101 as alias address
- E. a custom TCP monitor that works on port 8080 with 10.10.10.101 as alias address
- F. a custom TCP monitor that works on port 8080
Answer: B,F
NEW QUESTION 295
-- Exhibit -
-- Exhibit --
Refer to the exhibits.
After upgrading LTM from v10 to v11, users are unable to connect to an application. The virtual server is using a client SSL profile for re-terminating SSL for payload inspection, but a server SSL profile is being used to re-encrypt the request.
A client side ssldump did NOT show any differences between the traffic going directly to the server and the traffic being processed by the LTM device. However, packet capture was done on the server, and differences were noted.
Which modification will allow the LTM device to process the traffic correctly?
- A. Change Secure Renegotiation to "Request."
- B. Change to different ciphers on the server SSL profile.
- C. Enable ProxySSL option in the server SSL profile.
- D. Enable Strict Resume.
Answer: A
NEW QUESTION 296
An LTM device an application that requires all connections to be secured via SSL The device must verify that request contain a specific cookie before allowing the request to be sent to the pool member.
Which virtual server type should an LTM Specialist configure on the LTM device?
- A. Standard
- B. Performance (HTTP)
- C. Performance (Layer 4)
- D. Stateless
- E. Forwarding (IP)
Answer: A
NEW QUESTION 297
A BIG-IP Administrator is checking the BIG-IP device for known vulnerabilities. What should the 8IG-IP Administrator upload to BIG-IP iHealth for further analysis?
- A. EUD
- B. tcpdump
- C. UCS
- D. QKView
Answer: D
NEW QUESTION 298
An LTM device is load balancing SIP traffic. An LTM Specialist notices that sometimes the SIP request is being load balanced to the same server as the initial connection.
Which setting in the UDP profile will make the LTM device more evenly distribute the SIP traffic?
- A. Disable Datagram LB
- B. Set Timeout to Indefinite
- C. Set Timeout to Immediate
- D. Enable Datagram LB
Answer: D
NEW QUESTION 299
AN LTM Specialist receives reports that an external company application is having reliability issues. The F5 Administrator finds the following in /vat/log/ltm file.
The LTM Specialist determines that the F5 LTMdevice is entering into Aggressive Mode Adaptive Reaping, which is causing the site reliability issues.
What is the most likely reason that the LTM device has entered into Aggressive Mode Adaptive Reaping?
- A. The LTM device exceeds licensed traffic limits.
- B. The site is under DDOS attack
- C. The site has too many licensed modules.
- D. The LTM device has not provisioned AVR.
Answer: B
NEW QUESTION 300
-- Exhibit -
-- Exhibit --
Refer to the exhibit.
Which two items can be consolidated to simplify the LTM configuration? (Choose two.)
- A. /Common/vs2-https-redirect
- B. /Common/vs3-https-redirect
- C. /Common/vs1-https-redirect
- D. /Common/vs5-https-redirect
- E. /Common/vs4-https-redirect
Answer: C,E
NEW QUESTION 301
Refer to the following iRule:
What is a complete list of profiles that must be applied to the virtual server for this iRule?
- A. Fast L4 , HTTP, Stream
- B. TCP, HTTP
- C. TCP, HTTP, Client SSL
- D. Fast L4, HTTP
Answer: B
NEW QUESTION 302
set payload {CACHE :: payload}
}
Which two profiles should be used on the virtual server? (Choose two.)
- A. http compression
- B. http
- C. webacceleration
- D. http-transparent
- E. stream
Answer: B,C
NEW QUESTION 303
......
303 exam questions from PassSureExam dumps: https://www.passsureexam.com/303-pass4sure-exam-dumps.html (525 Q&As)
Free 2021 BIG-IP ASM 303 dumps are available on Google Drive shared by PassSureExam: https://drive.google.com/open?id=1i4K1TUjEQsVmAgEzJWJGkgFxApfAmEas