F5 Networks 303 Exam Questions Instant Access

Question 1

A set of servers is used for an FTP application as well as an HTTP website via separate BIG-IP Pools. The

server support team reports that some servers are receiving a lot more traffic than others.

Which Load Balancing Method should the BIG-IP Administrator apply to even out the connection count?

ARatio (Member)

BLeast Connections (Member)

CLeast Connections (Node)

DRatio (Node)

Answer : C

The connection is required to be balanced, and the unit is the server and the application port is the unit,

so it is node.

Question 2

An LTM Specialist has just captured trace /var/tmp/trace.cap for site www.example.com while listening on virtual address 10.0.0.1:443 configured on partition Application

AThe data payload being captured is SSL encrypted.
Which command should the LTM Specialist execute to decrypt the data payload?

Assldump -Aed -nr /var/tmp/trace.cap -k /config/filestore/files_d/Common_d/certificate_d/:Common:www.example.com.crt_1

Bssldump -Aed -nr /var/tmp/trace.cap -k /config/filestore/files_d/Common_d/certificate_key_d/:Common:www.example.com.key_1

Cssldump -Aed -nr /var/tmp/trace.cap -k /config/filestore/files_d/ApplicationA_d/certificate_d/:ApplicationA:www.example.com.crt_1

Dssldump -Aed -nr /var/tmp/trace.cap -k /config/filestore/files_d/ApplicationA_d/certificate_key_d/:ApplicationA:www.example.com.key_1

Answer : B

Question 3

The picture belongs to static content, you can configure static content cache in FS to meet this demand

An LTM Specialist must configure session persistence for a highly available, highly utilized web-based application.

* The following requirements are provided:

* http proxy setup for security

persistence information available to the HA peer in case of failover

The LTM Specialist needs to minimize additional burden on the LTM device to the greatest extent possible.

Which persistence profile should be used?

ACookie insert

BUniversal

CSource Address Affinity

DDestination Address Affinity

Answer : A

Question 4

Which Standard Virtual Server settings should an LTM Specialist use to load balance across routed path of two different ISPs?

Aaddress translation enabled and port translation disabled

Bboth address and port translation enabled

Cboth address and port translation disabled

Daddress translation disabled and port translation enabled

Answer : B

Question 5

Given this as the first packet displayed of an ssldump:

2 2 1296947622.6313 (0.0001) S>CV3.1(74) Handshake

ServerHello

random[32]=

19 21 d7 55 c1 14 65 63 54 23 62 b7 c4 30 a2 f0

b8 c4 20 06 86 ed 9c 1f 9e 46 0f 42 79 45 8a 29

session_id[32]=

c4 44 ea 86 e2 ba f5 40 4b 44 b4 c2 3a d8 b4 ad

4c dc 13 0d 6c 48 f2 70 19 c3 05 f4 06 e5 ab a9

cipherSuite TLS_RSA_WITH_RC4_128_SHA

compressionMethod NULL

In reviewing the rest of the ssldump, the application data is NOT being decrypted.

Why is ssldump failing to decrypt the application data?

AThe application data is encrypted with SSLv3.

BThe application data is encrypted with TLSv1.

CThe data is contained within a resumed TLS session.

DThe BigDB Key Log.Tcpdump.Level needs to be adjusted.

Answer : C

Question 6

Which iRule will reject any connection originating from a 10.0.0.0/8 network?

Awhen CLIENT_ACCEPTED {
set remote_ip [IP::addr [IP::remote_addr] mask 8]
switch $remote_ip {
'10.0.0.0' { reject }
'11.0.0.0' { pool pool_http1}
default { pool http_pool }
}
}

Bwhen CLIENT_ACCEPTED {
set remote_ip [IP::addr [IP::local_addr] mask 8]
switch $remote_ip {
'10.0.0.0' { reject }
'11.0.0.0' { pool pool_http1}
default { pool http_pool }
}
}

Cwhen CLIENT_ACCEPTED {
set remote_ip [IP::addr [IP::client_addr] mask 255.0.0.0]
switch $remote_ip {
'10.0.0.0' { reject }
'11.0.0.0' { pool pool_http1}
default { pool http_pool }
}
}

Dwhen CLIENT_ACCEPTED {
set remote_ip [IP::addr [IP::local_addr] mask 255.0.0.0]
switch $remote_ip {
'10.0.0.0' { reject }
'11.0.0.0' { pool pool_http1}
default { pool http_pool }
}
}

Answer : C

Question 7

When importing a PEM formatted SSL certificate, which text needs to appear first in the file?

A--START CERTIFICATE....

B...BEGIN CERTIFICATE....

C...SECURITY CERTIFICATE....

D...SSL CERTIFICATE....

Answer : B

F5 Networks BIG-IP ASM Specialist 303 Exam Questions