2021 303 Premium Files Test pdf - Free Dumps Collection
Get ready to pass the 303 Exam right now using our BIG-IP ASM Exam Package
NEW QUESTION 251
The active LTM device in a high-availability (HA) pair performs a failover at the same time the network team reports an outage of a switch on the network.
Which two items could have caused the failover event? (Choose two.)
- A. an Auditor role that has access to the GUI
- B. the standby LTM that lost connectivity on the failover VLAN
- C. the standby LTM that was rebooted
- D. a monitor on a pool in an HA group
- E. a VLAN fail-safe setting
Answer: D,E
NEW QUESTION 252
-- Exhibit -
-- Exhibit --
Refer to the exhibit.
An LTM Specialist is troubleshooting a new HTTP monitor on a pool. The pool member is functioning correctly when accessed directly through a browser. However, the monitor is marking the member as down.
The LTM Specialist captures the monitor traffic via tcpdump.
What is the issue?
- A. The pool member is rejecting the monitor request.
- B. The 'time-until-up' setting on the monitor is incorrect.
- C. The monitor request is NOT returning the page body.
- D. The server is marking the connection as closed.
Answer: C
NEW QUESTION 253
-- Exhibit -
-- Exhibit --
Refer to the exhibit.
An LTM Specialist is troubleshooting an HTTP monitor that is marking a pool member as down. Connecting to the pool member directly through a browser shows the application is up and functioning correctly.
ltm monitor http http_mon {
defaults-from http
destination *:*
interval 5
recv "200 OK"
send "GET /\\r\\n"
time-until-up 0
timeout 16
}
What is the issue?
- A. The request is NOT being received by the pool member.
- B. The pool member is responding with a 404.
- C. The pool member is responding without HTTP headers.
- D. The HTTP headers are compressed.
Answer: C
NEW QUESTION 254
When importing a PEM formatted SSL certificate, which text needs to appear first in the file?
- A. ...SECURITY CERTIFICATE....
- B. --START CERTIFICATE....
- C. ...SSL CERTIFICATE....
- D. ...BEGIN CERTIFICATE....
Answer: D
NEW QUESTION 255
A BIG-IP Administrator is working with a BIG-IP device and discovers that one of the Interfaces on a Trunk is DOWN.
What is the reason for this Interface status?
- A. There is NO transceiver installed on the Interface
- B. There is NO default route configured for this trunk
- C. The switch is NOT connected to the Interface
- D. The media speed of the interface has NOT been set
Answer: C
NEW QUESTION 256
An LTM Specialist has noticed in the audit log that there are numerous attempts to loginto the Admin account.
Theses attempts are sourced from a suspicious IP address range to the Configuration Utility of the LTM device.
How should the LTM Specialist block these attempts?
- A. add the suspicious source IP addresses to the httpd deny list via tmsh
- B. add the suspicious source IP addresses to the httpd deny list via Configuration Utility
- C. add the permitted source IP addresses to the allow list viaConfiguration Utility
- D. add the permitted source IP addresses to the httpd allow list viatmsh
Answer: D
NEW QUESTION 257
A VLAN has the following objects configured:
Self-IP 10.10.10.100 with port lockdown set to Allow default
Virtual server 10.10.10.100:443 with UDP profile enabled
Virtual server 10.10.10.0/24 port forwarding virtual server
Global destination NAT forwarding 10.10.10.100 to internal server 172.168.10.100 Which object will process this request when https://10.10.10.100 is entered into a browser?
- A. global destination NAT forwarding 10.10.10.100 to internal server 172.168.10.100
- B. self-IP 10.10.10.100 with port lockdown set to Allow default
- C. virtual server 10.10.10.100.443 with UDP profile enabled
- D. virtual server 10.10.100/24 port o forwarding virtual server
Answer: B
NEW QUESTION 258
A company plans to launch a huge marketing campaign and expects increase demand of their secure website.
With the current virtual server setup, the LTM Specialist expects that the LTM device will reach its capacity limits. For the wen application to function properly. Cookies persistence is required. The LTM Specialist needsto reduce LTM device load without breaking the application.
Which two settings should the LTM Specialist modify to meet the requirement? (Choose two.)
- A. Remove ClientSSL profile
- B. Remove HTTP profile
- C. Modify virtual Server type to performance (Layer 4)
- D. Remove HTTP compression profile
- E. Remove web acceleration profile.
Answer: D,E
Explanation:
Explanation
It is required that cookie persist must be used and http profile must be used, and SSL offloading must also be required. It must be in standard mode,excluding BD E.
NEW QUESTION 259
An LTM device is monitoring three pool members. One pool member is being marked down.
What should the LTM Specialist enable to prevent the server from being flooded with connections once its monitor determines it is up?
- A. slow ramp timer
- B. fastest load balance algorithm
- C. hold down timer
- D. packet shaping
- E. manual resume
Answer: A
NEW QUESTION 260
An LTM Specialist needs to create a virtual server to pass TCP traffic to three pool members.
Which two virtual server types should be used to meet the requirements? (Choose two)
- A. Forwarding (IP)
- B. Forwarding (Layer 2)
- C. Performance (Layer A)
- D. Standard
- E. Stateless
Answer: C,D
NEW QUESTION 261
Refer to the exhibit.
A BIG-IP Administrator creates a new Virtual Server to load balance SSH traffic. Users are unable to log on to the servers.
What should the BIG-IP Administrator do to resolve the issue?
- A. Set Destination Addresses/Mask to 0.0.0.0/0
- B. Set Source Address to 10.1.1.2
- C. Set Protocol to UDP
- D. Set HTTP Profile to None
Answer: D
NEW QUESTION 262
An LTM Specialist needs to provide access to a 8BG-IP to device for a company's support person access to the BIG IP device, but are NOT allowed to change any settings All support the support remote access to the BIG-IP device, but are NOTallowed to change ant settings. All support have accounts in the company's Active Directory Which method is appropriate to provide access for the support personnel to the BIG-JP device?
- A. configure remote authentication and map support personnel users to the Operator user role
- B. configure remote authentication and map support personnel users to the Guest user role
- C. configure remote authentication for all users with a default userrole of Guest
- D. configure remote authentication for all users with adefault user role of Operator
Answer: B
NEW QUESTION 263
Users are experiencing low throughput when downloading large files over a high-speed WAN connection.
Extensive packet loss was found to be an issue but CANNOT be eliminated.
Which two TCP profile settings should be modified to compensate for the packet loss in the network? (Choose two.)
- A. proxy options
- B. proxy buffer low
- C. Nagle's algorithm
- D. proxy buffer high
- E. slow start
Answer: B,D
NEW QUESTION 264
A virtual server configuration for traffic destined to a server is as shown:
FTP traffic is destined to the 192.168.1.101 server from the source of192.168.2.129.
Based on precedence, which virtual server accepts this traffic?
- A. MyV53
- B. MyVS1
- C. MyVS2
- D. MyVS4
Answer: C
NEW QUESTION 265
-- Exhibit -
-- Exhibit --
Refer to the exhibit.
A server administrator notices that one server is intermittently NOT being sent any HTTP requests. The server logs display no issues. The LTM Specialist notices log entries stating the node (172.16.20.1) status cycling between down and up. The pool associated with the virtual server (10.10.1.100) has a custom HTTP monitor applied.
Which tcpdump filter will help trace the monitor?
- A. tcpdump -i external port 80 and host 10.10.1.100
- B. tcpdump -i internal port 80 and host 172.16.1.31
- C. tcpdump -i internal port 80 and host 172.16.1.33
- D. tcpdump -i external port 80 and host 172.16.20.1
Answer: B
NEW QUESTION 266
An ITM Specialist has the configuration shown:
The LTM Specialist needs to create a new virtual server in part B.
Which virtual address(es) should be used for the new virtual server?
- A. 10.120.0.1 only
- B. 10.90.0.1 and 10.12.0.1
- C. 10.100.0.1 and.10.120.0.1
- D. 10.90.0.1 and 10.100.0.1
Answer: C
NEW QUESTION 267
A BIGJP Administrator needs to load a UCS file but must exclude the license file. How should the administrator perform this task?
- A. From the CLI with command U tmsh load /$ys ucs <ucs filename> no-license
- B. From the GUI, select the UCS file and click restore
- C. From the CLI with command(tmos) tmsh load /sys ucs <ucs filename> no-license
- D. From the GUI, select the UCS file, unchcck the license box, and click restore
Answer: A
NEW QUESTION 268
-- Exhibit -
-- Exhibit --
Refer to the exhibit.
A client attempts to connect from a Google Chrome browser to a virtual server on a BIG-IP LTM. The virtual server is SSL Offloaded. When the client connects, the client receives an SSL error. The client receives the same errors when trying Mozilla Firefox and Internet Explorer browsers.
The LTM Specialist does an ssldump on the virtual server and receives the results as per the exhibit.
How should this be resolved?
- A. Upgrade the client to support the appropriate SSL cipher suite.
- B. Select the appropriate "SSL Profile (Client)" in the virtual server settings.
- C. Set the virtual server to listen on port 443 (HTTPS).
- D. Adjust the SSL key length in the SSL profile to match the minimum required by the client.
Answer: B
NEW QUESTION 269
An LTM Specialist connects to an LTM device via the serial console cable and receives unreadable output.
The LTM Specialist is using the appropriate cable and connecting it to the correct serial port.
Which command should the LTM Specialist run through ssh to verify that the baud rate settings for the serial port are correct on the LTM device?
- A. tmsh show /ltm console
- B. tmsh list /sys console
- C. tmsh show /sys console
- D. tmsh edit /sys console
Answer: C
NEW QUESTION 270
A customer needs to intercept all of the redirects its application is sending to clients. When a redirect is matched, the customer needs to log a message including the client IP address.
Which iRule should be used?
- A. when HTTP_REQUEST {
if { [HTTP::is_redirect] } {
log local0. "redirecting client ip address [IP::addr [IP::remote_addr]]"
}
} - B. when HTTP_RESPONSE {
if { [HTTP::is_redirect] } {
log local0. "redirecting client ip address [IP::addr [IP::remote_addr]]"
}
} - C. when HTTP_RESPONSE {
if { [HTTP::is_3xx] } {
log local0. "redirecting client ip address [IP::addr [IP::remote_addr]]"
}
} - D. when HTTP_REQUEST {
if { [HTTP::is_301] } {
log local0. "redirecting client ip address [IP::addr [IP::remote_addr]]"
}
}
Answer: B
NEW QUESTION 271
An LTM specialist needs to upgrade a VCMP quest in an HA Setup with minimum interruption for all VCMP guestinstances.
In which should the LTM Specialist perform this upgrade?
- A. Failover all guests' active traffic-group to the other Host, Relicense the host, copy image to guest, create guest UCS, install and set boot location to new volume , reboot
- B. Failover all guests' active traffic-group to the other host, copy image to guest, create guest UCS install and set boot location to new volume, reboot, Relicense the host
- C. Failover this specific guest's active traffic-group to the other Host, Relicense the guest, copy image to guest , create guest UCS, install and set boot location to new volume, reboot
- D. Relicense the host. Failover all guest's active traffic-groups to the other host, copy image to gest, create guest UCS install and set boot location to new volume, reboot
Answer: A
Explanation:
Explanation
Switch guest, reactive, license first and then upgrade.
NEW QUESTION 272
-- Exhibit -
-- Exhibit --
Refer to the exhibit.
An LTM Specialist is upgrading the LTM devices.
Which device should be upgraded first?
- A. Device A
- B. Device C
- C. Device D
- D. Device B
Answer: B
NEW QUESTION 273
......
Master 2021 Latest The Questions BIG-IP ASM and Pass 303 Real Exam!: https://www.testpassed.com/303-still-valid-exam.html
A fully updated 2021 303 Exam Dumps exam guide from training expert TestPassed: https://drive.google.com/open?id=1iADwsS6gu_XVq7-RUQGb4NiZe7nLN5PN