試験問題集で303練習で無料最新のF5練習テスト
303試験問題、リアル303練習問題集
質問 # 112
The active LTM device in a high-availability (HA) pair performs a failover at the same time the network team reports an outage of a switch on the network.
Which two items could have caused the failover event? (Choose two.)
- A. the standby LTM that was rebooted
- B. a VLAN fail-safe setting
- C. an Auditor role that has access to the GUI
- D. the standby LTM that lost connectivity on the failover VLAN
- E. a monitor on a pool in an HA group
正解：B、E
質問 # 113
A 816-IP Administrator recently deployed an application Users are experiencing slow performance with the application on some remote networks.
Which two modifications can the BIG-IP Administrator make to address this issue? (Choose two)
- A. Apply source_addr profile to the Virtual Server
- B. Apply dest addr profile to the Virtual Server
- C. Apply f5-tcp-lan profile to the Virtual Server
- D. Apply fasti_4 profile to the Virtual Server
- E. Apply f5-tcp-wan profile to the Virtual Server
正解：C、E
質問 # 114
An LTM Specialist needs to deploy a virtual server that will load balance traffic targeting
https://register.example.com to a set of three webservers. Persistence needs to be ensured. No persistence mirroring is allowed SSL offloading is required.
A fourth web server with fewer resources will be used to handle requests from engine bots to
https://register.example.comvrobots.txt by an iRule. The(Rule will use the HTTP_REQUEST event. .
What are the required profile and persistence settings to implement this
- A. tcp, clientssl, serverssl, ssl persistence
- B. tcp, clientssl, http, serverssl cookie persistence
- C. tcp, clientssl, http. cookie persistence
- D. tcp. dientssl, hup, source address persistence
正解：C
解説：
Explanation
The option is wrong, it should be clientssl and serverssl. If the title requires ssl offload instead of encryption, you need clientssl instead of serverssl. irule needs HTTP profile to enable HTTP_REQUEST. If the session cannot be mirrored, the cookie session remains to meet the demand.
質問 # 115
Four members in a server pool have similar hardware platforms. An LTM Specialist needs the load balancing method that canselect the server with the fewest entries in the persistence table.
Which load balancing method should the LTM Specialist use?
- A. Leas Connections
- B. Observed
- C. Dynamic Ratio
- D. Least Sessions
正解：D
解説：
Explanation
Pay attention to theexamination questions, the stem is to ask the session to keep the minimum entries in the table.
質問 # 116
Which three HTTP headers allow an application server to determine the client's language compatibility, browser, operating system type, and compression compatibility? (Choose three.)
- A. Accept-Language
- B. Accept
- C. User-Agent
- D. Host
- E. Accept-Encoding
正解：A、C、E
質問 # 117
There is a fault with an LTM device load balanced trading application that resides on directly connected VLAN vlan-301. The application virtual server is 10.0.0.1:80 with trading application backend servers on subnet 192.168.0.0/25. The LTM Specialist wants to save a packet capture with complete payload for external analysis.
Which command should the LTM Specialist execute on the LTM device command line interface?
- A. tcpdump -vvv -s 0 -nni vlan-301 -w /var/tmp/trace.cap 'net 192.168.0.0/25'
- B. tcpdump -vvv -nni vlan-301 -w /var/tmp/trace.cap 'net 192.168.0.0/25'
- C. tcpdump -vvv -s 0 -w /var/tmp/trace.cap 'net 192.168.0.0/25'
- D. tcpdump -vvv -w /var/tmp/trace.cap 'net 192.168.0.0/25'
正解：A
質問 # 118
The BIG-IP Administrator disable all pool members in a pool Users are still able to reach the pool members.
What is allowing users to continue to reach the disabled poo! members?
- A. A slow ramp time on virtual Server
- B. A persistence profile on the Virtual Server
- C. A slow to time on Pool
- D. A persistence profile on the Pool
正解：B
質問 # 119
While investigating the cause of a device failover, an LTM Specialist discovers the following events in
/var/log/ltm:
01010029:5: Clock advanced by 518 ticks
01010029:5: Clock advanced by 505 ticks
01010029:5: Clock advanced by 590 ticks
01010029:5: Clock advanced by 568 ticks
01010029:5: Clock advanced by 1681 ticks
01010029:5: Clock advanced by 6584 ticks
01140029:5: HA daemon_heartbeat tmm fails action is failover and restart.
010c0026:5: Failover condition, active attempting to go standby.
Which issue caused the failover?
- A. TMM being descheduled
- B. NTP being out of sync
- C. HA missing heartbeat packets
- D. VLAN Fail-safe heartbeats
正解：A
質問 # 120
Users report that traffic is negatively affected every time a BIG-IP device fails over. The traffic becomes stabilized after a few minutes.
What should the BIG-IP Administrator do to reduce the impact of future failovers?
- A. Configure MAC Masquerade
- B. Enable Failover Multicast Configuration
- C. Configure a global SNAT Listener
- D. Set up Failover Method to HA Order
正解：A
質問 # 121
TWO LTM devices are in the same Device Group and configured for Ac live/Standby Failover. The LTM Specialist observes that the HA Active and Standby device constantly changes state. All network links use the default route domain A dedicated fiber ink is used for the HA connection with a latency of 250 ms but no packet loss.
What is causing the change in failover state to occur?
- A. The HA network is not configured for mirroring.
- B. The HA network is using multicast IP.
- C. The HA network is using the default routing domain.
- D. The HA network latency is too high.
正解：B
解説：
質問 # 122
-- Exhibit -
-- Exhibit --
Refer to the exhibit.
An LTM Specialist is investigating reports that users are unable to perform some commands through an FTP virtual server. The users are receiving the FTP error "500 Illegal PORT command." The virtual server is configured to SNAT using automap. The LTM Specialist performs a capture on the server side of the LTM device.
Why is the server returning this error?
- A. LIST command disallowed
- B. Active IP address in LOGIN command
- C. PORT command disallowed
- D. Active IP address in PORT command
正解：D
質問 # 123
An LI M device is experiencing a high volume of traffic. The virtual server is struggling under the load. The problem appears to be on the server side connections. The virtual server isaccepting connections . The virtual server is accepting connections on https and is configured with an SSL profile and http pool.
What should be added to increase the performance of the device?
- A. a SPDY profile
- B. smaller key to the SSL profile
- C. an HTTP Compression profile
- D. a One Connect profile
正解：D
質問 # 124
A new HITP server has been deployed on an LTM device. The application running on the server must be monitored by the LIM device. The following is required:
A new HITP server has been deployed on an LTM device. The application running on theserver must be monitored by the LIM device. The following is required:
When the server is unavailable, it will send an HTTP status code of 200 in response to a request for the status html page.
When the server is available. I will send and HTTP status code of 201 in response to a request for the status html page.
When the 200 status code is received, the pool member should receive No new connections.
Which configuration change should be made to meet these requirements?
- A. set the Send String to GET/status html and the Receive String to 200 and Receive Disable String to 201.
- B. set the Send String to GET Arian and the Receive Disable String to 200 andReceive String to 201.
- C. set the Send String to Get /status html and the Receive Disable String to 200 and Receive String to 201.
- D. set the Send String to GET Arian and the Receive String to 200 and Receive Disable String to 201.
正解：C
質問 # 125
An LTM device is monitoring pool members on port 80. The LTM device is using an HTTP monitor with a send string of GET / and a blank receive string.
What would cause the pool members to be marked down?
- A. A pool member responds with an HTTP 200 series response code.
- B. A pool member does NOT acknowledge the connection SYN on port 80.
- C. A pool member responds with an HTTP 500 series response code.
- D. A pool member responds with an HTTP 300 series response code.
- E. A pool member responds with an HTTP 400 series response code.
正解：B
質問 # 126
An LTM Specialist needs to upgrade all guests on a Viprion eight CMP guests.
What is the maximum number of guests that the LTM Specialist should upgrade at once?
- A. TWO
- B. One
- C. Four
- D. Eight
正解：B
解説：
Explanation
Each guest is independent, just like hardware upgrades. Can only upgrade one by one, there is no way to upgrade at the same time.
質問 # 127
The picture belongs to static content, you can configure static content cache in FS to meet this demand An LTM Specialist must configure session persistence for a highly available, highly utilized web-based application.
* The following requirements are provided:
* http proxy setup for security
persistence information available to the HA peer in case of failover
The LTM Specialist needs to minimize additional burden on the LTM device to the greatest extent possible.
Which persistence profile should be used?
- A. Destination Address Affinity
- B. Source Address Affinity
- C. Cookie insert
- D. Universal
正解：C
質問 # 128
-- Exhibit -
-- Exhibit --
Refer to the exhibits.
Users are able to access the application when connecting to the virtual server but are unsuccessful when connecting directly to the application servers. The LTM Specialist wants to allow direct access to the application servers.
Why are users unable to connect directly to the application servers?
- A. The LTM device does NOT have a SNAT on the External VLAN.
- B. The LTM device does NOT have an IP Forwarding virtual server on the Internal VLAN.
- C. The router does NOT have a route to the server subnet.
- D. The LTM device does NOT have an IP Forwarding virtual server on the External VLAN.
- E. The web server does NOT have a correct default gateway.
正解：E
質問 # 129
Refer to the exhibit.
A BIG-IP Administrator creates a new Virtual Server to load balance SSH traffic. Users are unable to log on to the servers.
What should the BIG-IP Administrator do to resolve the issue?
- A. Set HTTP Profile to None
- B. Set Source Address to 10.1.1.2
- C. Set Destination Addresses/Mask to 0.0.0.0/0
- D. Set Protocol to UDP
正解：A
質問 # 130
An LTM Specialist has installed a hotfix that updated the SCCP firmware package.
Which command will ensure that the host subsystem and SCCP reboot?
- A. reboot
- B. The reboot should be initiated via the HTTPS administration GUI.
- C. full_box_reboot
- D. shutdown -r now
正解：C
質問 # 131
The LTM Specialist is writing a custom HTTP monitor for a web application and has viewed the content by accessing the site directly via their browser. The monitor continually fails. The monitor configuration is:
ltm monitor http /Common/exampleComMonitor {
defaults-from /Common/http
destination *:*
interval 5
recv "Recent Searches"
send "GET /app/feed/current\?uid=20145 HTTP/1.1\\r\\nHost: www.example.com\\r\\nAccept-EncodinG.
gzip, deflate\\r\\nConnection: close\\r\\n\\r\\n"
time-until-up 0
timeout 16
}
A trace shows the following request and response:
Request:
GET /app/feed/current?uid=20145 HTTP/1.1
Host www.example.com
Accept-Encoding gzip, deflate
Connection: close
Response:
HTTP/1.1 302 Moved Temporarily
Date Wed, 17 Oct 2012 18:45:52 GMT
Server Apache
Location https://example.com/login.jsp
Content-Encoding gzip
Content-Type text/html;charset=UTF-8
Set-CookiE. JSESSIONID=261EFFBDA8EC3036FBCC22D991AC6835; Path=/app/feed/current?uid=20145 What is the problem?
- A. The request does NOT include any cookies and the application is expecting a session cookie.
- B. The request includes an Accept-Encoding so the server is responding with a gzipped result and LTM monitors CANNOT handle gzipped responses.
- C. The request does NOT include a User-Agent header.
- D. The HTTP monitor does NOT support monitoring jsp pages.
正解：A
質問 # 132
An LTM Specialist uploaded new releases .iso and .md5 files titled "BIGIP-FILENAME" via the GUI.
Which commands are run via the command line from the root directory to verify the integrity of the new .iso file?
- A. cd /var/shared/images
md5sum --check BIGIP-FILENAME.iso.md5 - B. cd /shared/images
md5sum --check BIGIP-FILENAME.iso.md5 - C. cd /shared/images
md5sum --check BIGIP-FILENAME.iso - D. cd /var/shared/images
md5sum --check BIGIP-FILENAME.iso
正解：B
質問 # 133
Internet clients connecting to a virtual server to download a file are experiencing about 150 ms of latency and no packet loss.
Which built-in client-side TCP profile provides the highest throughput?
- A. tcp
- B. tcp-wan-optimized
- C. tcp-lan-optimized
- D. tcp-legacy
正解：B
質問 # 134
-- Exhibit -
-- Exhibit --
Refer to the exhibit.
A user is unable to access a secure application via a virtual server.
What is the cause of the issue?
- A. The client and server CANNOT agree on a common cipher.
- B. The virtual server does NOT have a pool configured.
- C. The client authentication failed.
- D. The virtual server does NOT have a client SSL profile configured.
正解：C
質問 # 135
A pool has four members. Ail of the servers have been designed and configured with the same application.
Each client's request can significantly the performance of the servers.
Which load balancing method should the LTM Specialist use to maintain a relatively even loadacross all servers?
- A. Observed
- B. Least Connections
- C. Priority Group
- D. Ratio
正解：B
質問 # 136
......
F5 303認定試験は、BIG-IP ASMスペシャリスト認定を取得したいITプロフェッショナルを対象としています。この認定は、F5 BIG-IPアプリケーションセキュリティマネージャ（ASM）で作業したい個人や、この分野での専門知識を証明したい人に最適です。認定試験は、攻撃シグネチャ、ポリシービルディング、レポート作成、トラブルシューティングなど、BIG-IP ASMに関連する多くのトピックをカバーしています。
F5 303 (BIG-IP ASM Specialist) 認定試験は、F5 BIG-IP Application Security Manager (ASM) と共に作業する IT 専門家の知識とスキルをテストするために設計されています。この試験は、候補者が ASM を展開、設定、管理して、Web アプリケーションを様々な攻撃から安全に保護する能力を検証するベンダー中立の認定です。この認定は、Web アプリケーションセキュリティに特化したいと考えているネットワークエンジニア、セキュリティ専門家、システム管理者、その他の IT 専門家に適しています。
F5 303 試験に合格するためには、ウェブプロトコル、アプリケーションセキュリティの概念、ネットワークの概念、そして F5 BIG-IP ASM 機能について深い理解が必要です。また、BIG-IP ASM ソリューションを実際に使用した経験が必要です。この試験では、ウェブアプリケーションセキュリティの概念、ASM の構成、攻撃シグネチャ、脆弱性の緩和戦略などのトピックがカバーされます。F5 303 試験に合格することで、ASM ポリシーを設計、展開、管理する専門家としての能力が認められます。
確認済み303試験問題集と解答で時間限定無料提供！303には正解付き：https://jp.fast2test.com/303-premium-file.html
あなたを合格させる303無料問題集最新のF5練習テスト：https://drive.google.com/open?id=1wONd2s1qxbWHd8J5OSvsv7HEKtA4bzQe