Weekend Sale Special Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: netbudy65

303 BIG-IP ASM Specialist Questions and Answers

Questions 4

A BIG-IP Administrator defines a device Self IP . The Self IP is NOT reachable from the network. What should the BIG-IP Administrator verify first?

Options:

A.

The correct interface has been selected.

B.

The correct VLAN has been selected.

C.

Verify if auto last hop is disabled.

D.

The correct Trunk has been selected.

Buy Now
Questions 5

A virtual server configuration for traffic destined to a server is as shown:

FTP traffic is destined to the 192.168.1.101 server from the source of192.168.2.129.

Based on precedence, which virtual server accepts this traffic?

Options:

A.

MyVS4

B.

MyV53

C.

MyVS1

D.

MyVS2

Buy Now
Questions 6

An LTM Specialist needs to deploy a virtual server that will load balance traffic targeting https://register.example.com to a set of three web servers. Persistence needs to be ensured. No persistence mirroring is allowed SSL offloading is required.

A fourth web server with fewer resources will be used to handle requests from engine bots to https://register.example.comvrobots.txt by an iRule. The (Rule will use the HTTP_REQUEST event. .

What are the required profile and persistence settings to implement this

Options:

A.

tcp. dientssl, hup, source address persistence

B.

tcp, clientssl, http. cookie persistence

C.

tcp, clientssl, serverssl, ssl persistence

D.

tcp, clientssl, http, serverssl cookie persistence

Buy Now
Questions 7

An LTM Specialist has just manually failed the active LTM device over to the standby LTM device. The LTM Specialist notices the newly active LTM device is NOT currently receiving traffic. The LTM Specialist verifies the newly active device is responding to ARP but still no traffic is hitting the virtual servers. The LTM Specialist also notices that the virtual servers eventually start responding.

What should be added to the configuration to resolve the problem?

Options:

A.

vlan failsafe

B.

floating self IP

C.

network failover

D.

MAC masquerading

E.

connection mirroring

Buy Now
Questions 8

A configuration change is made on the standby member of a device group.

What is displayed as "Recommended Action" on the Device Management Overview screen?

Options:

A.

Force active member of device group to standby

B.

Activate device with the most recent configuration

C.

Synchronize the active member configuration to the group.

D.

Synchronize the standby member configuration to the group

Buy Now
Questions 9

Refer to the exhibit.

A BIG-IP Administrator creates a new Virtual Server to load balance SSH traffic. Users are unable to log on to the servers.

What should the BIG-IP Administrator do to resolve the issue?

Options:

A.

Set Protocol to UDP

B.

Set HTTP Profile to None

C.

Set Source Address to 10.1.1.2

D.

Set Destination Addresses/Mask to 0.0.0.0/0

Buy Now
Questions 10

A BIG-IP Administrator need to ensure that a pool member and down by the monitor the BIG-IP system

sends existing connections to another be pool member.

Which should the BIG-IP Administrator perform to meet this goal?

Options:

A.

Set Action on Service Down sing under the server configuration to reselect.

B.

Reconfigure the pool motor members as UP.

C.

Enable mirroring within the persistence profile.

D.

Set Action Service Down setting under the pool configuration to reselect.

Buy Now
Questions 11

An LTM device an application that requires all connections to be secured via SSL The device must verify that request contain a specific cookie before allowing the request to be sent to the pool member.

Which virtual server type should an LTM Specialist configure on the LTM device?

Options:

A.

Stateless

B.

Performance (HTTP)

C.

Standard

D.

Performance (Layer 4)

E.

Forwarding (IP)

Buy Now
Questions 12

An LTM device has a virtual server mapped to www5f.com with a pool assigned. The objects are defined

as follows:

Virtual server. Destination 192.168.245.100.443 netmask 255.255.255.0

Persistence: Source address persistence netmask 255.0.0.0

SNAT:AutoMap

Profiles: HnP/TCP

How should the BIG-IP Administrator modify the persistence profile so that each unique IP address

creates a persistence record?

Options:

A.

netmask 0.0.0.0

B.

netmask 255.255.255.255

C.

netmask 255.255.0.0

D.

netmask 255.256.255.0

Buy Now
Questions 13

What is the effect of an iRule error such as referencing an undefined variable?

Options:

A.

The iRule execution will continue with the next statement.

B.

The execution of the current event within the iRule will be terminated.

C.

The iRule execution will be terminated, and both the client and server side connections will be reset.

D.

The connection will continue, but the iRule will NOT be executed again for the lifetime of the connection.

Buy Now
Questions 14

An LTM Specialist needs to upgrade all guests on a Viprion eight CMP guests.

What is the maximum number of guests that the LTM Specialist should upgrade at once?

Options:

A.

Eight

B.

One

C.

TWO

D.

Four

Buy Now
Questions 15

An LTM HTTP pool has an associated monitor that sends a string equal to 'GET /test.html'.

Which two configurations could an LTM Specialist implement to allow server administrators to disable their pool member servers without logging into the LTM device? (Choose two.)

Options:

A.

Set monitor to transparent and ask the server team to set string ‘TRANSPARENT’ in test.html.

B.

Set ‘receive string’ equal to 'SERVER UP and ask the server team to set string ‘SERVER DOWN’ in test.html.

C.

Set ‘alias’ equal to 'SERVER DOWN’ and ask the server team to set string ‘SERVER DOWN’ in test.html.

D.

Set ‘receive disable string’ equal to 'SERVER DOWN’ and ask the server team to set string ‘SERVER DOWN’ in test.html.

E.

Set ‘disable pool member’ equal to 'SERVER UP’ and ask the server team to set string ‘SERVER DOWN’ in test.html.

Buy Now
Questions 16

An FTP monitor is NOT working correctly.

Which three pieces of information does the LTM Specialist need to provide to ensure a properly working FTP monitor? (Choose three.)

Options:

A.

alias

B.

File path

C.

username

D.

password

E.

FTP server port

F.

FTP server IP address

Buy Now
Questions 17

Refer to the exhibit.

A BIG-IP Administrator needs to deploy an application on the BIG-IP system to perform SSL offload and

re-encrypt the traffic to pool members.

During testing, users are unable to connect to the application.

What must the BIG-IP Administrator do to resolve the issue?

Options:

A.

Remove the configured SSL Profile (Client)

B.

Configure Protocol Profile (Server) as splitsession-default-tcp

C.

Enable Forward Proxy in the SSL Profile (Client)

D.

Configure an SSL Profile (Server)

Buy Now
Questions 18

-- Exhibit –

-- Exhibit --

Refer to the exhibits.

How should the LTM Specialist minimize the configuration?

Options:

A.

Remove the pool member level monitors.

B.

The configuration is as minimized as possible.

C.

Create a single monitor and apply it to each pool member.

D.

Create a single monitor, apply it to the pool, and remove the pool member level monitors.

Buy Now
Questions 19

These log entries can have different root causes:

Jun 28 05:01:21 LTM_A notice mcpd[27545]: 0107143a:5: CMI reconnect timer: enabled

Jun 28 05:01:21 LTM_A notice mcpd[27545]: 01071431:5: Attempting to connect to CMI peer 1.1.1.2 port 6699

Jun 28 05:01:21 LTM_A notice mcpd[27545]: 01071432:5: CMI peer connection established to 1.1.1.2 port 6699

Jun 28 05:01:26 LTM_A notice mcpd[27545]: 0107143a:5: CMI reconnect timer: disabled, all peers are connected

Which two commands should be used to obtain additional information on these entries? (Choose two.)

Options:

A.

tmsh show /sys mcpd

B.

bigstart status mcpd

C.

tmsh modify /sys db log.mcpd.level value debug

D.

tmsh modify /sys db log.cmi.level value debug

Buy Now
Questions 20

Which command line interface command will check if the BIG-IP platform contains a packet velocity ASIC (PVA)?

Options:

A.

bigpipe platform show | grep -i pva

B.

tmsh show /sys hardware pva status

C.

tmsh show /sys hardware | grep -i pva

D.

tmsh show /ltm hardware | grep -i pva

Buy Now
Questions 21

A custom HTTP monitor is failing to a pool member 10.10.3.75:8080 that serves up www.example.com.

A ping works to the pool member address.

The SEND string that the monitor is using is: GET/HTTP/l.l/r/n/Host.www.example.com/r/n/Connection

Close/r/n/r/n

Which CLI tool syntax will show that the web server returns the correct HTTP response?

Options:

D.

tracepath 10.10.3.75:8080 GET /index

Buy Now
Questions 22

An LTM Specialist has recently taken over administration or an LTM devicethat has experienced resource availability issues. The LTM device will need to be solely used for load balancing and SSL offload. Previously, the LTM device was also used to provide statistical analysis of application traffic. However, that functionality has been moved to a third party solution.

Based on the output below, which configuration change should be made to ensure the LTM module receives the most amount of resources?

Options:

A.

Provision AVR to Minimum. Provision LTM at Maximum

B.

Provision AVR to none.Provision LTM to Dedicated

C.

Provision AVR to Minimum, Provision LTM to Dedicated

D.

Provision LTM to Dedicated, Provision AVR to Dedicated

Buy Now
Questions 23

A BIG-IP Administrator opens a case with F5 Support. The support engineer requests the BIG-IP

appliance chassis serial number.

Which TMSH command will provide this information?

Options:

A.

. list /sys software

B.

show /sys version

C.

list/sys diags

D.

show /sys hardware

Buy Now
Questions 24

A BIG-IP Administrator explicitly creates a traffic group on a BIG-IP device.

Which two types of configuration objects can be associated with this traffic group? (Choose two.)

Options:

A.

Pool Members

B.

Virtual Addresses

C.

iRules

D.

VLANS

E.

Application Instances

Buy Now
Questions 25

A OneConnect profile is applied to a virtual server. The LTM Specialist would like the client source IP addresses within the 10.10.10.0/25 range to reuse an existing server side connection.

Which OneConnect profile source mask should the LTM Specialist use?

Options:

A.

0.0.0.0

B.

255.255.255.0

C.

255.255.255.128

D.

255.255.255.224

E.

255.255.255.255

Buy Now
Questions 26

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

An LTM Specialist is troubleshooting a sync-failover group of three BIG-IP LTM devices. The command used is "tmsh run cm watch-devicegroup-device."

What does the output mean?

Options:

A.

Configuration is synchronized between all the devices.

B.

Configuration is not synchronized. Some modifications have been done on bigipA.

C.

Configuration is not synchronized. Some modifications have been done on bigipB.

D.

Configuration is not synchronized. Some modifications have been done on bigipC.

Buy Now
Questions 27

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

An LTM Specialist sets up AVR alerts and notifications for a specific virtual server if the server latency exceeds 50ms. The LTM Specialist simulates a fault so that the server latency is consistently exceeding the 50ms threshold; however, no alerts are being received.

Which configuration should the LTM Specialist modify to achieve the expected results?

Options:

A.

The rule should be adjusted to trigger when server latency is above 50ms.

B.

SNMP alerting should be enabled to allow e-mail to be sent to the support team.

C.

User Agents needs to be enabled to ensure the correct information is collected to trigger the alert.

D.

The metric "Page Load Time" needs to be enabled to ensure that the correct information is collected.

Buy Now
Questions 28

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

An LTM Specialist is investigating reports that users are unable to perform some commands through an FTP virtual server. The LTM Specialist performs a capture on the server side of the LTM device.

What is the issue with the application?

Options:

A.

data connection failing

B.

LIST command disallowed

C.

PORT command disallowed

D.

command connection failing

Buy Now
Questions 29

A node is a member of various pools and hosts different web applications. If a web application is unavailable, the BIG-IP appliance needs to mark the pool member down for that application pool. What should a BIG-IP Administrator deploy at the pool level to accomplish this?

Options:

A.

A UDP monitor with a custom interval/timeout

B.

A combination of ICMP + TCP monitor

C.

An HTTP monitor with custom send/receive strings

D.

A TCP monitor with a custom interval/timeout

Buy Now
Questions 30

Refer to the exhibit.

Why is the virtual server responsive to incoming connections?

Options:

A.

The pool member is disabled

B.

The pool member monitor failed

C.

The node is disabled.

D.

The node monitor failed

Buy Now
Questions 31

-- Exhibit –

-- Exhibit --

Refer to the exhibits.

Users are able to access the application when connecting to the virtual server but are unsuccessful when connecting directly to the application servers. The LTM Specialist wants to allow direct access to the application servers.

Which configuration change resolves this problem?

Options:

A.

Enable port 443 on the virtual server.

B.

Configure a SNAT pool on the LTM device.

C.

Disable address translation on the virtual server.

D.

Configure an IP Forwarding virtual server on the LTM device.

E.

Configure a route to the web server subnet on the network router.

Buy Now
Questions 32

Refer to the exhibit.

A BIG-IP Administrator configures a now VLAN on an HA pair of devices that does NOT yet have any

traffic. This action causes the assigned traffic group to fail over to the standby device.

Which VLAN setting should be changed to prevent this issue?

Options:

A.

Auto Last Hop

B.

Fail-safe

C.

Customer Tag

D.

Source Check

Buy Now
Questions 33

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

A virtual server is set up on an LTM device as follows:

Virtual server address 78.24.213.79

Default Persistence ProfilE. source_addr, 600s.

Pool NamE. Pool1

Pool Members: 10.72.250.52:80 and 10.72.250.60:80 (both on Internal Vlan)

There are several current connections to the virtual server, and pool member 10.72.250.52:80 has been set to a "Disabled" state.

A tcpdump on the Internal Vlan shows traffic going to 10.72.250.52:80.

How soon after the persistence table query was run can existing connections be refreshed/renewed to ensure that no requests are sent to 10.72.250.52?

Options:

A.

196 seconds

B.

460 seconds

C.

539 seconds

D.

590 seconds

E.

591 seconds

Buy Now
Questions 34

A BIG-IP Administrator creates an HTTP Virtual Server using an iApp template. After the Virtual Server is

created, the user requests to change the destination IP addresses. The BIG-IP Administrator tries to

change the destination IP address from 10.1.1.1 to 10.2.1.1 in Virtual Server settings, but receives the

following error:

The application service must be updated using an application management interface

What is causing this error?

Options:

A.

The Application Service was NOT deleted before making the IP address change.

B.

The IP addresses are already in use.

C.

The Application Services have Strict Updates enabled.

D.

The IP addresses used are NOT from the same subnet as the Self IP.

Buy Now
Questions 35

An LTM Specialist needs to provide statistics regarding the round-trip time betweenthe clients and the servers.

Which metric should be part of the analytics profile to provide that information?

Options:

A.

Page Load Time

B.

User Sessions

C.

Max TPS and Throughout

D.

Response Codes

Buy Now
Questions 36

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

A client attempts to connect from a Google Chrome browser to a virtual server on a BIG-IP LTM. The virtual server is SSL Offloaded. When the client connects, the client receives an SSL error. After trying Mozilla Firefox and Internet Explorer browsers, the client still receives the same errors.

The LTM Specialist does an ssldump on the virtual server and receives the results as per the exhibit.

What is the problem?

Options:

A.

The SSL key length is incorrect.

B.

The BIG-IP LTM is NOT serving a certificate.

C.

The BIG-IP LTM is NOT listening on port 443.

D.

The client needs to be upgraded to the appropriate cipher-suite.

Buy Now
Questions 37

In preparation for a maintenance task, an LTM Specialist performs a "Force to Standby" on LTM device Unit 1. LTM device Unit 2 becomes active as expected. The maintenance task requires the reboot of Unit 1. Shortly after the reboot is complete, the LTM Specialist discovers that Unit 1 has become active and Unit 2 has returned to standby.

What would cause this behavior?

Options:

A.

Unit 1 is set with the redundancy state preference of active in devices groups.

B.

Unit 1 is set with the redundancy state preference of active in high availability.

C.

A traffic group is configured with Auto Failback, and Unit 1 is the default device.

D.

A device group is configured with Auto Failback, and Unit 1 is the default device.

Buy Now
Questions 38

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

A user is unable to access an HTTP application via a virtual server.

What is the cause of the failure?

Options:

A.

The host header requires a host name.

B.

The virtual server is in the disabled state.

C.

The Connection: Keep-Alive header is set.

D.

There is no pool member available to service the request.

Buy Now
Questions 39

An LTM Specialist configures a new virtual server with a single pool member. The LTM Specialist has NOT defined a health monitor for the pool, pool member or node.

What is the status of the virtual server?

Options:

A.

Available (Enabled)

B.

Offline (Disabled)

C.

Unavailable (Enabled)

D.

Unknown (Enabled)

Buy Now
Questions 40

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

An LTM Specialist is performing an HTTP trace on the client side of the LTM device and notices there are many undesired headers being sent by the server in the response. The LTM Specialist wants to remove all response headers except "Set-Cookie" and "Location."

How should the LTM Specialist modify the HTTP profile to remove undesired headers from the HTTP response?

Options:

A.

Enter the desired header names in the 'Request Header Insert' field.

B.

Enter the undesired header names in the 'Request Header Erase' field.

C.

Enter the undesired header names in the 'Response Header Erase' field.

D.

Enter the desired header names in the 'Response Headers Allowed' field.

Buy Now
Questions 41

TWO LTM devices are in the same Device Group and configured for Ac live/Standby Failover. The LTM Specialist observes that the HA Active and Standby device constantly changes state. All network links use the default route domain A dedicated fiber ink is used for the HA connection with a latency of 250 ms but no packet loss.

What is causing the change in failover state to occur?

Options:

A.

The HA network is using the default routing domain.

B.

The HA network is using multicast IP.

C.

The HA network is not configured for mirroring.

D.

The HA network latency is too high.

Buy Now
Questions 42

-- Exhibit –

-- Exhibit --

Refer to the exhibits.

A customer requests to offload SSL for an internal website. The front page of the website loads correctly; however, selecting links on the page fails.

How should the LTM Specialist fix the issue?

Options:

A.

Create a new SNAT pool.

Add internal network IPs to the SNAT pool.

Add the SNAT pool to the VS.

B.

Create a new HTTP profile.

Enable Insert X-Forwarded-For.

Add the new HTTP profile to the VS.

C.

Create a new HTTP profile.

Enable redirect rewrite.

Add the new HTTP profile to the VS.

D.

Create a new Server SSL profile.

Enable Proxy SSL.

Add the Server SSL profile to the VS.

Buy Now
Questions 43

An LTM Specialist needs to provide access to a 8BG-IP to device for a company's support person access to the BIG IP device, but are NOT allowed to change any settings All support the support remote access to the BIG-IP device, but are NOTallowed to change ant settings. All support have accounts in the company's Active Directory

Which method is appropriate to provide access for the support personnel to the BIG-JP device?

Options:

A.

configure remote authentication for all users with a default userrole of Guest

B.

configure remote authentication and map support personnel users to the Guest user role

C.

configure remote authentication and map support personnel users to the Operator user role

D.

configure remote authentication for all users with adefault user role of Operator

Buy Now
Questions 44

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

An administrator created a monitor to a pool member web server, which resulted in a pool member that is marked red. The administrator knows the web server is working when it is accessed from another computer.

What should the administrator do to correct the problem?

Options:

A.

Change the default gateway on the server.

B.

Create a SNAT in the LTM device configuration.

C.

Change the route to the client in the LTM configuration.

D.

Change the username and/or password on the monitor.

Buy Now
Questions 45

What is the correct command to reset an LTM device to its default settings?

Options:

A.

tmsh reset-all default

B.

tmsh set /sys config defaults

C.

tmsh load /sys config default

D.

tmsh /util bigpipe reset-factory-defaults

Buy Now
Questions 46

Which three HTTP headers allow an application server to determine the client's language compatibility, browser, operating system type, and compression compatibility? (Choose three.)

Options:

A.

Accept

B.

Accept-Encoding

C.

Accept-Language

D.

Host

E.

User-Agent

Buy Now
Questions 47

An LTM Specialist needs to configure a virtual server with the requirements displayed below.

Application is currently an internal HTTPapplication

Encrypted external user access

Links are hard for siteA example.com and need to rewritten to siteB.Example.com

Which profiles must the LTM Specialist use to provide the proper functionality?

Options:

A.

Clientssll, Stream

B.

Serverless, Stream

C.

Clientssl, fastL4, Stream

D.

Serverless, fastL4, Stream

Buy Now
Questions 48

A BIG-IP Administrator is performing maintenance on the active BIG-IP device of an HA pair. The BIG-IP

Administrator needs to minimize traffic disruptions.

What should the BIG-IP Administrator do to start the maintenance activity?

Options:

A.

Reboot the BIG-IP device.

B.

Move resources to a new Traffic Group.

C.

Force the BIG-IP device to standby.

D.

Disable switch ports of the BIG-IP device.

Buy Now
Questions 49

There is a fault with an LTM device load balanced trading application that resides on directly connected VLAN vlan-301. The application virtual server is 10.0.0.1:80 with trading application backend servers on subnet 192.168.0.0/25. The LTM Specialist wants to save a packet capture with complete payload for external analysis.

Which command should the LTM Specialist execute on the LTM device command line interface?

Options:

A.

tcpdump -vvv -w /var/tmp/trace.cap 'net 192.168.0.0/25'

B.

tcpdump -vvv -s 0 -w /var/tmp/trace.cap 'net 192.168.0.0/25'

C.

tcpdump -vvv -nni vlan-301 -w /var/tmp/trace.cap 'net 192.168.0.0/25'

D.

tcpdump -vvv -s 0 -nni vlan-301 -w /var/tmp/trace.cap 'net 192.168.0.0/25'

Buy Now
Questions 50

A BIG-IP Administrator has configured a BIG-IP cluster with remote user authentication against dcOl

f5trn.com. Only local users can successfully log into the system. Configsync is also failing.

Which two tools should the 8IG-IP Administrator use to further investigate these issues? (Choose two)

Options:

A.

ntpq

B.

pam_timestamp_check

C.

passwd

D.

pwck

E.

dig

Buy Now
Questions 51

Two LTM devices must be manually configured to restrict in the same Device Group.

What is the correct order of steps to meet this requirement?

Options:

A.

Configure VLAN, Configure-Sync IP, Configure Failover type, Establish Device Trust, Sync Device Trust, Create type, Establish Device Sync Device Trust, Create Device Group.

B.

Configure VLAN, Configure Self-IPs, Configure Config-Sync IP.Configure Failover type, Establish Device Trust, Sync Device Trust, Create Device Group.

C.

Configure Self-IPs, Configure VLAN, Configure Config-Sync IP. Configure Failover type, Establish Device Trust, Sync Device Trust, Create Device Group

D.

Configure VLAN, Configure Config-Sync IP. Configure Self-IPs. Configure Failover type. Establish Device Trust, Create Device Group

Buy Now
Questions 52

An LTM Specialist is experiencing issues in a failover event. Certain long-lasting FTP event. Certain long-lasting FTP connections using a single node pool are forced to reconnect. The bigip.conf extract isshown:

What does the LTM Specialist need to change in the configuration to avoid this issue?

Options:

A.

snatpool

B.

persistence mirroring

C.

connection mirroring

D.

ftp profile

Buy Now
Questions 53

A BIG-IP Administrator assigns the default http health monitor to a pool that has three members listening on port 80 When the administrator connects to each pool member via the CURL utility, two of the members respond with a status of 404 Not Found while the third responds with 200 OK. What will the pool show for member availability?

Options:

A.

All members offline.

B.

Two members offline and one member online.

C.

Two members online and one member offline.

D.

All members online.

Buy Now
Questions 54

Exhibit.

- The ITM devices LTM 1 and LTM2 are configured in Device Group X (Sync-Failover)

- LTM3 and LTM4 are configured in Device Group Y (Sync-Only)

- An LTM specialist configures Device Group Z (Sync-Only) to keep several profiles in (sync-Only) to keep several profiles in sync across all devices.

- Device GROUP X has four Traffic Groups A.B.C and D configured.

- Device Group Y has four Traffic Groups E, F. G, and H configured

- Auto Fallback IS NOT Enabled.

- Each Device group is healthy and able to pass traffic for any traffic groupassigned to that Device

Group.

The data center that contains LTM2 and LTM4 loses power. After 10 minutes; power is restored and all devices are up and healthy.

What is the state of each Traffic Group on each ITM device after power is restored?

A)

B)

C)

D)

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 55

OneLTM device in an HA pair of LTM devices is unable to reach its default gateway. An HA Failover event needs to happen.

Which configuration item enables this behavior?

Options:

A.

iRule

B.

Gateway Fail Safe

C.

Gateway pool monitor

D.

Gateway pool

Buy Now
Questions 56

During a high-demand traffic event, the BIG-IP Administrator needs to limit the number of new

connections per second allowed to a Virtual Server.

What should the administrator apply to accomplish this task?

Options:

A.

An HTTP Compression profile to the Virtual Server

B.

A connection rate limit to the Virtual Server

C.

A connection limit to the Virtual Server

D.

A OneConnect profile to the Virtual Server

Buy Now
Questions 57

An LTM device is deployed in a one-armed topology. The virtual server, clients, and web servers are connected on the LTM device internal VLAN. A client tries to connect to the virtual server and is unable to establish a connection. A packet capture from the LTM device internal VLAN shows that the HTTP request is being forwarded to the web server.

From which two additional locations should protocol analyzer data be collected? (Choose two.)

Options:

A.

network interface of web server

B.

network interface of client machine

C.

internal VLAN interface of LTM device

D.

external VLAN interface of LTM device

E.

any network interface of the Internet firewall

Buy Now
Questions 58

Given LTM device ltm log:

Sep 26 20:51:08 local/lb-d-1 notice promptstatusd[3695]: 01460006:5: semaphore mcpd.running(1) held

Sep 26 20:51:08 local/lb-d-1 notice promptstatusd[3695]: 01460006:5:

Sep 26 20:51:08 local/lb-d-1 warning promptstatusd[3695]: 01460005:4: mcpd.running(1) held, wait for mcpd

Sep 26 20:51:08 local/lb-d-1 info sod[3925]: 010c0009:6: Lost connection to mcpd - reestablishing.

Sep 26 20:51:08 local/lb-d-1 err bcm56xxd[3847]: 012c0004:3: Lost connection with MCP: 16908291 ... Exiting bsx_connect.cpp(174)

Sep 26 20:51:08 local/lb-d-1 info bcm56xxd[3847]: 012c0012:6: MCP Exit Status

Sep 26 20:51:08 local/lb-d-1 info bcm56xxd[3847]: 012c0012:6: Info: LACP stats (time now:1348717868) : no traffic

Sep 26 20:51:08 local/lb-d-1 info bcm56xxd[3847]: 012c0014:6: Exiting...

Sep 26 20:51:08 local/lb-d-1 err lind[3842]: 013c0004:3: IO error on recv from mcpd - connection lost

Sep 26 20:51:08 local/lb-d-1 notice bigd[3837]: 01060110:5: Lost connection to mcpd with error 16908291, will reinit connection.

Sep 26 20:51:08 local/lb-d-1 err statsd[3857]: 011b0004:3: Initial subscription for system configuration failed with error ''

Sep 26 20:51:08 local/lb-d-1 err statsd[3857]: 011b0001:3: Connection to mcpd failed with error '011b0004:3: Initial subscription for system configuration failed with error '''

Sep 26 20:51:08 local/lb-d-1 err csyncd[3851]: 013b0004:3: IO error on recv from mcpd - connection lost

.............skipping more logs.....

Sep 26 20:51:30 local/lb-d-1 notice sod[3925]: 01140030:5: HA proc_running bcm56xxd is now responding.

Sep 26 20:51:34 local/lb-d-1 notice sod[3925]: 01140030:5: HA proc_running mcpd is now responding.

Sep 26 20:51:34 local/lb-d-1 notice sod[3925]: 010c0018:5: Standby

Which daemon failed?

Options:

A.

promptstatusd

B.

mcpd

C.

sod

D.

bcm56xxd

E.

lind

Buy Now
Questions 59

A web application requires the client to provide the destination server and service identification.

Which HTTP header will supply this information?

Options:

A.

Host

B.

From

C.

Expect

D.

Connection

Buy Now
Questions 60

An LTM Specialist is configuring a client profile to offload processing a new application Company policy requires that clients can resume session for up to 30 minutes, but must renegotiate a new session after that.

Which setting should the LTM Specialist change to satisfy this requirement?

Options:

A.

Renegotiate Max Record Delay

B.

Renegotiation period

C.

Cachesize

D.

Cache timeout

Buy Now
Questions 61

Which process can be eliminated by terminating SSL communication on the LTM device rather than the backend pool members?

Options:

A.

generating CSRS

B.

obtaining SSL certificatesfrom a certificate authority

C.

administering SSL on the web servers

D.

applying security patches on the backend pool members

Buy Now
Questions 62

An LTM Specialist is troubleshooting an issue with a new virtual server. When connecting through the virtual server, clients receive the message "The connection was reset" in the browser, although connections directly to the pool member show the application is functioning correctly.

ltm pool srv1_https_pool {

members {

192.168.2.1:https{

address 192.168.2.1

}

}

}

ltm virtual https_example_vs {

destination 192.168.1.155:https

ip-protocol tcp

mask 255.255.255.255

pool srv1_https_pool

profiles {

http { }

tcp { }

}

snat automap

vlans-disabled

}

How should the LTM Specialist resolve this issue?

Options:

A.

Enable HTTP monitoring on the pool.

B.

Add a ClientSSL profile to the virtual server.

C.

Disable SNAT Automap on the virtual server.

D.

Remove the HTTP profile from the virtual server.

Buy Now
Questions 63

AN LTM Specialist is using an external monitor evaluate the hard drive usage of a node. The monitor has marked the node down because it exceeded the specific threshold. The disk usage on the server has been corrected below the threshold, however, the node remains offline.

Which feature is causing this problem?

Options:

A.

The parameter Time Until UP has a value greater than 0

B.

The value of Manual Resume is set to No

C.

The value for UP interval is enable with a value greater than 0

D.

The value for Manual Resume is set to Yes

Buy Now
Questions 64

An LTM Specialist is troubleshooting an issue with a new virtual server. When connecting through the virtual server, clients receive the message "Unable to connect" in the browser, although connections directly to the pool member show the application is functioning correctly. The LTM configuration is:

ltm virtual /Common/vs_https {

destination /Common/10.10.1.110:443

ip-protocol udp

mask 255.255.255.255

pool /Common/pool_https

profiles {

/Common/udp { }

}

translate-address enabled

translate-port enabled

vlans-disabled

}

ltm pool /Common/pool_https {

members {

/Common/172.16.20.1:443 {

address 172.16.20.1

}

}

}

How should the LTM Specialist resolve this issue?

Options:

A.

Remove an HTTP monitor from the pool.

B.

Add an HTTP profile to the virtual server.

C.

Enable the pool member on the correct VLAN.

D.

Select the correct protocol for the virtual server.

Buy Now
Questions 65

Active connections to pool members are unevenly distributed. The load balancing method is Least Connections (member) Priority Group Activation is disabled. What is a potential cause of the event distribution?

Options:

A.

Priority Group Activation is disabled

B.

SSL Profile Server is applied

C.

Persistence profile is applied

D.

incorrect load balancing method

Buy Now
Questions 66

Four members in a server pool have similar hardware platforms. An LTM Specialist needs the load balancing method that canselect the server with the fewest entries in the persistence table.

Which load balancing method should the LTM Specialist use?

Options:

A.

Observed

B.

Dynamic Ratio

C.

Least Sessions

D.

Leas Connections

Buy Now
Questions 67

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

An LTM Specialist configures a virtual server that balances HTTP connections to a pool of three application servers. Approximately one out of every three connections to the virtual server fails.

Which two actions will resolve the problem? (Choose two.)

Options:

A.

Assign a custom HTTP monitor to the pool.

B.

Enable SNAT automap on the virtual server.

C.

Verify that port lockdown is set to allow port 80.

D.

Verify the default gateway on the application servers.

E.

Increase the TCP timeout value in the default TCP profile.

Buy Now
Questions 68

A web application is meant to log the URI of the resource that responded to the client's initial Request-URI.

Which HTTP header will supply this information?

Options:

A.

Via

B.

Server

C.

Trailer

D.

Referer

Buy Now
Questions 69

Which iRule statement demotes a virtual server from CMP?

Options:

A.

set ::foo 123

B.

set static::foo 123

C.

persist source_addr 1800

D.

[ class match $HTTP_CONTENT contains my_data_class ]

Buy Now
Questions 70

A BIG-IP Administrator notices that one of the servers that runs an application is NOT receiving any traffic. The BIG-IP Administrator examines the configuration status of the application and observes the displayed monitor configuration and affected Pool Member status. What is the possible cause of this issue?

Options:

A.

The Node Health Monitor is NOT responding.

B.

The application is NOT responding with the expected Receive String.

C.

HTTP 1.1 is NOT appropriate for monitoring purposes.

D.

The BIG-IP device is NOT able to reach the Pool.

Buy Now
Questions 71

DNS queries from two internal DNS servers are being load balanced to external DNS Servers via a Virtual

Server on a BIG-P device. The DNS queries originate from 192.168.101.100 and 192.168.101.200 and

target 192.168.21.50

All DNS queries destined for the external DNS Servers fail

Which property change should the BIG-IP Administrator make in the Virtual Server to resolve this issue?

Options:

A.

Protocol Profile (Client) to DNS-OPTIMZED

B.

Type to Performance (HTTP)

C.

Protocol to UDP

D.

Source Address to 192.168.101.0/24

Buy Now
Questions 72

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

Which step should an LTM Specialist take next to finish upgrading to HD1.3?

Options:

A.

Install image to HD1.3

B.

Install hotfix to HD1.3

C.

Activate HD1.3

D.

Relicense HD1.3

Buy Now
Questions 73

-- Exhibit –

-- Exhibit --

Refer to the exhibits.

A virtual server has been configured for SSL offload on a single-arm network. On average, the virtual server will be handling 100,000 connections, with a peak of 130,000 connections. Between the virtual server and the web servers there is a single reverse proxy to provide site caching. The proxy is configured to perform source IP persistence before contacting the web servers. The site is logging users out immediately after logging them in.

What should the LTM Specialist do to resolve this issue?

Options:

A.

Add a source address persistence profile to the virtual server.

B.

Create an iRule to add client IP persistence to a SNAT pool member.

C.

Change the virtual server server-side TCP profile to tcp-lan-optimized.

D.

Configure the virtual server HTTP profile to insert an X-Forwarded-For header.

Buy Now
Questions 74

A LTM device needs to load balance active and passive FTP traffic while using only a single virtual server.

Which virtual server type should an LTM Specialist configure on the LTM device?

Options:

A.

Forwarding (Layer 2)

B.

Standard

C.

Stateless

D.

DHCP relay

E.

Forwarding (IP)

Buy Now
Questions 75

An LTM Specialist observes decreased performance and intermittent connection reap LTM system.

Based on the configuration, which action will address these issues?

Options:

A.

Use an optimized TCP profile.

B.

Use a FastL4 profile on the virtual server

C.

Use a default caching profile on the virtual server.

D.

Use a shorter idle timeout on the TCP profile.

Buy Now
Questions 76

A BIG-IP system has the following configuration:

* SNAT is set to Auto Map

* There are two VLANs internal and external

* Default route is pointed to the gateway on external VLAN

* Self P for internal VLAN is 1921.1.2

* Self IP for external VLAN is 192.1.2.2

* Floating IP addresses for internal VLAN is 192.1.1.1

* Floating IP addresses for external VLAN is 192.1.2.1

* The Virtual Server IP address is 192.1.1.100

Which IP address does the BIG-IP system use first when traffic reaches the servers on the internal VLAN?

Options:

A.

192.1.1.100

B.

192.1.2.2

C.

192.1.1.1

D.

192.1.2.1

Buy Now
Questions 77

Given:

Filesystem Size Used Avail Use% Mounted on

/dev/md11 248M 248M 0 100% /

/dev/md13 3.0G 76M 2.8G 3% /config

/dev/md12 1.7G 1.1G 476M 71% /usr

/dev/md14 3.0G 214M 2.6G 8% /var

/dev/md0 30G 2.2G 26G 8% /shared

/dev/md1 6.9G 288M 6.3G 5% /var/log

none 3.9G 452K 3.9G 1% /dev/shm

none 3.9G 19M 3.9G 1% /var/tmstat

none 3.9G 1.2M 3.9G 1% /var/run

prompt 4.0M 12K 4.0M 1% /var/prompt

/dev/md15 12G 8.3G 3.1G 74% /var/lib/mysql

Which command is used to produce this output?

Options:

A.

df

B.

du

C.

lsof

D.

ps

E.

vmstat

Buy Now
Questions 78

A BIG-IP Operator has made a grave error and deleted a few virtual servers on the active LTM device fronting the web browsing proxies. The BIG-IP Operator has NOT yet performed a configuration sync.

Which command should the LTM Specialist execute on the active LTM device to force a failover to the standby node and restore web browsing?

Options:

A.

tmsh /sys failover standby

B.

tmsh run /sys failover standby

C.

tmsh /sys failover status standby

D.

tmsh run /sys failover status standby

Buy Now
Exam Code: 303
Exam Name: BIG-IP ASM Specialist
Last Update: May 17, 2024
Questions: 0

PDF + Testing Engine

$450

Testing Engine

$95

PDF (Q&A)

$80