Updated F5 303 Dumps – Check Free 303 Exam Dumps (2022)
Updated 303 exam with F5 Real Exam Questions
NEW QUESTION 294
An LTM Specialist configures a new HTTP virtual server on an LTM device external VLAN. The web servers are connected to the LTM device internal VLAN. Clients trying to connect to the virtual server are unable to establish a connection. A packet capture shows an HTTP response from a web server to the client and then a reset from the client to the web server.
From which two locations could the packet capture have been collected? (Choose two.)
- A. network interface of web server
- B. external VLAN interface of the LTM device
- C. network interface of client machine
- D. internal VLAN interface of the LTM device
- E. management VLAN interface of the LTM device
Answer: A,C
NEW QUESTION 295
Which method is recommended for creating a new user from the CLI?
- A. Run f5adduser username' then 'f5passwd username' from bash or tmsh
- B. Run useradd username' then 'passwd username' from bash tmsh
- C. edit bigip.conf to add the new user and the user's clear-text password
- D. Run tmsh create auth user username prompt for password' from bash
Answer: D
NEW QUESTION 296
Refer to the exhibit.
An LTMSpecialist configures the two syslog destination Syslog destination #1 can receive messages but the syslog destination #2 can NOT receive messages.
Which command sill correct the issue?
- A. {/Common) (tmos) # modify /sys syslog remote-servers modify {syslog_dest2 {host 10 208.102.254 }}
- B. {Common(tmos) # modify/syslog remote-servers modify {syslog_dest2 {lost.10.10.10.28 }}
- C. {/Common)(tmos) # modify /syssyslog remote-servers modify (syslog_dest2 {local-ip
- D. {/Common)(tmos) # modify Ays syslog remote servers modify {syslog_dest2 {local- ip 10.208.102
254)}
Answer: C
NEW QUESTION 297
An LTM Specialist defines a receive string in the HTTP monitor and then assigns it to the HTTP pool. The monitor has an interval of 5 seconds and a timeout of 16 seconds.
If the receive string is NOT seen in the the HTTP payload after 20 seconds, how does the LTM device mark the monitor status?
- A. offline
- B. unknown
- C. available
- D. forced offline
- E. unavailable
Answer: A
NEW QUESTION 298
An LTM Specialist discovers an issue with the custom http monitor that returns in a false positive status.
The end users cannot get the right website, but thehttp monitor marks the pool member UP.
What is causing the false positive result?
- A. The response is chunked.
- B. The Content-Type has value "iso-8859-200".
- C. The end user should use another type of browser.
- D. The response is compressed.
Answer: B
NEW QUESTION 299
Which three HTTP headers allow an application server to determine the client's language compatibility, browser, operating system type, and compression compatibility? (Choose three.)
- A. User-Agent
- B. Accept-Language
- C. Host
- D. Accept-Encoding
- E. Accept
Answer: A,B,D
NEW QUESTION 300
Which iRule statement demotes a virtual server from CMP?
- A. set static::foo 123
- B. set ::foo 123
- C. [ class match $HTTP_CONTENT contains my_data_class ]
- D. persist source_addr 1800
Answer: B
NEW QUESTION 301
An LTM device provides load balancing to a web application? The LTM device has two dual-core processors and a licensed SSL Transactions Per Second (TPS) limit of 500 CMP is enabled.
TLS connections are used between client systems and virtual servers on the LTM device, as well as from the LTM device to servers used as part of LTM pool.
TLS enabled virtual servers utilize certificates based on 2048-bit keys During a peak period. 2560 new TLStransactions per second are attempted to the web application via the LTM device.
What will happen in this scenario?
- A. Nothing: TLS transactions per second are NOT affected by an SSL TPS license limit
- B. 2060 new TLS transactions will be silently discarded due to the SSL TPS license limit
- C. Nothing: 2560 TLS transactions per second is within the SSI TPS license limit.
- D. 560 new TLS transactions will be silently discarded due to the SSL TPS license limit
Answer: D
NEW QUESTION 302
There are three servers in the pool: 172.16.20.1, 172.16.20.2, and 172.16.20.3, with the virtual IP address
10.0.20.88.
A user CANNOT connect to an HTTP application. To understand the problem and find a solution, the LTM Specialist runs two concurrent traces on the LTM device, with the following results:
Trace on client side:
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on 0.0, link-type EN10MB (Ethernet), capture size 96 bytes
22:22:07.423759 IP 172.16.20.100.53875 > 10.0.20.88.80: S 998346084:998346084(0) win 5840 <mss
1460,sackOK,timestamp 67942058 0,nop,wscale 4>
22:22:07.424056 IP 10.0.20.88.80 > 172.16.20.100.53875: S 4671780:4671780(0) ack 998346085 win 4380
<mss 1460,nop,wscale 0,nop,nop,timestamp 2392362490 67942058,sackOK,eol>
22:22:07.424776 IP 172.16.20.100.53875 > 10.0.20.88.80: . ack 1 win 365 <nop,nop,timestamp 67942058
2392362490>
22:22:07.424790 IP 172.16.20.100.53875 > 10.0.20.88.80: P 1:149(148) ack 1 win 365 <nop,nop,timestamp
67942058 2392362490>
22:22:07.424891 IP 10.0.20.88.80 > 172.16.20.100.53875: . ack 149 win 4528 <nop,nop,timestamp
2392362491 67942058>
22:22:12.024850 IP 10.0.20.88.80 > 172.16.20.100.53875: R 1:1(0) ack 149 win 4528
6 packets captured
6 packets received by filter
0 packets dropped by kernel
Trace on server side:
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on internal, link-type EN10MB (Ethernet), capture size 96 bytes
22:22:07.424881 IP 172.16.20.100.53875 > 172.16.20.2.80: S 51116678:51116678(0) win 4380 <mss
1460,nop,wscale 0,nop,nop,timestamp 2392362491 0,sackOK,eol>
22:22:08.424893 IP 172.16.20.100.53875 > 172.16.20.2.80: S 51116678:51116678(0) win 4380 <mss
1460,nop,wscale 0,nop,nop,timestamp 2392363491 0,sackOK,eol>
22:22:09.625082 IP 172.16.20.100.53875 > 172.16.20.2.80: S 51116678:51116678(0) win 4380 <mss
1460,nop,wscale 0,nop,nop,timestamp 2392364691 0,sackOK,eol>
22:22:10.825194 IP 172.16.20.100.53875 > 172.16.20.2.80: S 51116678:51116678(0) win 4380 <mss
1460,sackOK,eol>
4 packets captured
4 packets received by filter
0 packets dropped by kernel
What should the LTM Specialist do to solve the problem?
- A. Enable the virtual server.
- B. Edit the packet filter rules.
- C. Modify the monitor of the pool.
- D. Configure the virtual server to use SNAT.
Answer: D
NEW QUESTION 303
-- Exhibit -
-- Exhibit --
Refer to the exhibit.
Users report that a web application works incorrectly. Sometimes contextual data displayed on the web pages is accurate; other times it is inaccurate.
The LTM administrator looks at the connection table with a filter on one of the client IP addresses currently connected using the command "tmsh show sys connection cs-client-addr 10.0.20.1" with the following results:
10.0.20.1:60048 10.0.20.88:80 10.0.20.1:60048 172.16.20.1:80 tcp 3 (tmm: 0)
10.0.20.1:60050 10.0.20.88:80 10.0.20.1:60050 172.16.20.3:80 tcp 3 (tmm: 0)
10.0.20.1:60047 10.0.20.88:80 10.0.20.1:60047 172.16.20.2:80 tcp 3 (tmm: 0)
10.0.20.1:60049 10.0.20.88:80 10.0.20.1:60049 172.16.20.1:80 tcp 3 (tmm: 0) What is the solution to the problem?
- A. Synchronize the clock of the LTM device with NTP.
- B. Modify the load balancing method attached to the pool.
- C. Set up an HTTP cookie insert profile in the virtual server.
- D. Modify the setup of the monitor bound to the pool used by the application.
Answer: C
NEW QUESTION 304
An LTM Specialist needs to apply SNAT using currently used SNAT pool to a new virtual server.
What needs to be completed before applying that configuration change?
- A. Review connection for the selected SNAT pool and enlarge it if appropriate
- B. Make sure that the BIG-IP device is NOT operating under heavy load during peak times
- C. Verify that the IP address of the SNAT pool are in the same subnetas the pool members
- D. Verify that the IP address of the SNAT pool are in the same VLAN as the pool members.
Answer: A
Explanation:
Explanation
SNAT does not need to in the same vlan or same network segment as the pool member, as long as the route is reachable ,excluding C and D he connection information of the SNAT pool to avoid port exhaustion under high concurrency
NEW QUESTION 305
A BIG-IP Administrator is checking the BIG-IP device for known vulnerabilities. What should the 8IG-IP Administrator upload to BIG-IP iHealth for further analysis?
- A. QKView
- B. UCS
- C. EUD
- D. tcpdump
Answer: A
NEW QUESTION 306
An LTM device is configure with the wildcard virtual servers displayed below.
A client connection is made to 172.24.31.14:443.
- A. VS_172_24_1_WILDCARD
- B. VS_HTTP_WILDCARD
- C. VS_172_24_WILDCARD
- D. VS_HTTPS_WILDCARD
Answer: C
Explanation:
Explanation
Match the network segment first and then port.
NEW QUESTION 307
An LTM Specialist troubleshooting an issue looks at the following /var/log/ltm entries:
Oct 2 04:52:42 slot1/tmm7 crit tmm7[21734]: 01010201:2: Inet port exhaustion on 10.143.109.5 to
10.143.147.150:53 (proto 17)
Oct 2 05:37:16 slot1/tmm7 crit tmm7[21734]: 01010201:2: Inet port exhaustion on 10.143.109.5 to
10.143.147.150:53 (proto 17)
Oct 2 05:57:32 slot1/tmm2 crit tmm2[21729]: 01010201:2: Inet port exhaustion on 10.143.109.5 to
10.143.147.150:53 (proto 17)
Oct 2 06:30:03 slot1/tmm7 crit tmm7[21734]: 01010201:2: Inet port exhaustion on 10.143.109.5 to
10.143.147.150:53 (proto 17)
Oct 2 06:37:44 slot1/tmm2 crit tmm2[21729]: 01010201:2: Inet port exhaustion on 10.143.109.5 to
10.143.147.150:53 (proto 17)
Oct 2 06:47:05 slot1/tmm5 crit tmm5[21732]: 01010201:2: Inet port exhaustion on 10.143.109.5 to
10.143.147.150:53 (proto 17)
Which configuration item should the LTM Specialist review to fix the issue?
- A. SNAT Pool
- B. Pool Member
- C. Port Lockdown
- D. Virtual Server Port Translation
Answer: A
NEW QUESTION 308
An organization's development team creates an application to put behind the F5LTM device. The application can be quite load intensive at first, and then evens out over time. The team's load balancing method needs to select a pool after taking into account the pool member's response over the time to avoid landing on a busy pool member.
Which of the following load balancing methods meets this requirement?
- A. Predictive (member)
- B. Fastest (application)
- C. Observed (member)
- D. Dynamic (node)
Answer: A
NEW QUESTION 309
AN LTM Specialist is setting up a new HTTPS virtual server to decrypt client traffic. SNAT the traffic and send the encrypted traffic to the poor member, the client's IP address must be included in the traffic sent to the pool member.
What is a complete set of profiles that must be configured for the virtual server to meet these requirements?
- A. TCP, Client SSL, Server SSL, HTTP
- B. TCP , Server SSL, HTTP
- C. TCP, Client SSL, HTTP
- D. TCP, Client SSL, Server SSL
Answer: A
NEW QUESTION 310
An LTM Specialist is receiving reports from customers about multiple applications failing to work properly.
The LTM Specialist looks at the services running and notices that the bigd process has NOT started.
How are monitored LTM device objects marked when the bigd process is stopped?
- A. green or available
- B. unchanged until bigd is restarted
- C. blue or unchecked
- D. red or offline
Answer: B
NEW QUESTION 311
Refer to the exhibit.
A
user notifies the BIG-IP Administrator that http://remote company.com is NOT accessible. Remote access to company resources must be encrypted.
What should the BIG-IP Administrator do to fix the issue?
- A. Change the Type of the Virtual Server remote.company.com_vs to Forwarding
- B. Change the Listening Port on remote.company.com_vs to Port 80
- C. Add a Pool to the Virtual Server remote.company.com_VS
- D. Add an iRule to remote.company.com_vs to redirect Traffic to HTTPS
Answer: D
Explanation:
Explanation
Requiring all traffic to be HTTPS access requires HTTP requests to be redirected directly to HTTPS.
NEW QUESTION 312
-- Exhibit --
-- Exhibit --
Refer to the exhibit.
A company uses a complex piece of client software that connects to one or more virtual servers (VS) hosted on an LTM device. The client software is experiencing issues. An LTM Specialist must determine the cause of the problem. The LTM Specialist has the tcpdump extract. The client loses connection with the LTM device.
Where is the reset originating?
- A. the local switch
- B. the destination device of the initial connection
- C. the device initiating the connection
- D. the application server
Answer: C
NEW QUESTION 313
AN LTM Specialist is deploying an iRule designed to determine the country of origin of an incoming client connection. TheiRule needs to be used with an SSL-enabled web application.
Which profile required for the iRule to function properly?
- A. TCP
- B. UDP
- C. DNS
- D. HTTP
Answer: A
Explanation:
Explanation
Question stem requires the client IP to match the source region, so TCP ?UDP at thetransport layer can meet the requirements. The title stem mentions that it is a Web application based on SSL, and it does not mention F5 undertakes SSL offload, So TCP is enough.
NEW QUESTION 314
An LTM Specialist has just manually failed the active LTM device over to the standby LTM device. The LTM Specialist notices the newly active LTM device is NOT currently receiving traffic. The LTM Specialist verifies the newly active device is responding to ARP but still no traffic is hitting the virtual servers. The LTM Specialist also notices that the virtual servers eventually start responding.
What should be added to the configuration to resolve the problem?
- A. floating self IP
- B. vlan failsafe
- C. MAC masquerading
- D. connection mirroring
- E. network failover
Answer: C
NEW QUESTION 315
......
Actual 303 Exam Recently Updated Questions with Free Demo: https://www.dumpsactual.com/303-actualtests-dumps.html
Free F5 303 Exam Questions: https://drive.google.com/open?id=1xhPbrruUSIJWNBCBeqV6KsryERMzxEu2
