303 Free Certification Exam Material from CertkingdomPDF with 525 Questions
Use Real 303 - 100% Cover Real Exam Questions
NEW QUESTION 237
Which command will identify the active LTM device currently handling client traffic?
- A. tmsh show /sys ha-status all-properties
- B. tmsh run /sys failover standby
- C. tmsh list /sys ha-status
- D. b ha table show
- E. tmsh show /cm traffic-group
Answer: E
NEW QUESTION 238
An application is being load balanced through the LTM device using the configuration displayed below.
The network has been re-engineered to NAT all client connection. As a result, allclient connections are hitting the same pool member.
Which changes should the LTM Specialist make in order to restore load balancing functionality wile maintaining session persistence?
- A. Change the virtual serer type to Forwarding (Layer 4) and leave the persistence type tohash source Address
- B. Leave the virtual server type set Performance (Layer 4) and change the persistence type to hash
- C. Change the virtual server type to Standard, add an httpprofile, and change the persistence profile to Destination Address
- D. Change the virtual server to Standard add an http profile, and change the persistence profile to Cookie persistence
Answer: D
NEW QUESTION 239
A stand-alone LTM device is to be paired with a second LTM device to create an active/standby pair. The current stand-alone LTM device is in production and has several VLANs with floating IP addresses configured. The appropriate device service clustering (DSC) configurations are in place on both LTM devices.
Which two non-specific DSC settings should the LTM Specialist configure on the second LTM device to ensure no errors are reported when attempting to synchronize for the first time? (Choose two.)
- A. VLANs
- B. default route
- C. self IP addresses
- D. pools
Answer: A,C
NEW QUESTION 240
An LTM Specialist observes decreased performance and intermittent connection reap LTM system.
Based on the configuration, which action will address these issues?
- A. Use an optimized TCP profile.
- B. Use a shorter idle timeout on the TCP profile.
- C. Use a FastL4 profile on the virtual server
- D. Use a default caching profile on the virtual server.
Answer: B
NEW QUESTION 241
An LTM Specialist is troubleshooting an issue with a new virtual server. When connecting through the virtual server, clients receive the message "Unable to connect" in the browser, although connections directly to the pool member show the application is functioning correctly. The LTM configuration is:
ltm virtual /Common/vs_https {
destination /Common/10.10.1.110:443
ip-protocol udp
mask 255.255.255.255
pool /Common/pool_https
profiles {
/Common/udp { }
}
translate-address enabled
translate-port enabled
vlans-disabled
}
ltm pool /Common/pool_https {
members {
/Common/172.16.20.1:443 {
address 172.16.20.1
}
}
}
How should the LTM Specialist resolve this issue?
- A. Remove an HTTP monitor from the pool.
- B. Enable the pool member on the correct VLAN.
- C. Add an HTTP profile to the virtual server.
- D. Select the correct protocol for the virtual server.
Answer: D
NEW QUESTION 242
An LTM Specialist configured a virtual server to load balance a custom application. The application works when it is tested from within the firewall but it fails when tested externally. The pool member address is
192.168.200.10:80. A capture from an external client shows:
GET /index.jsp HTTP/1.1
Host: 207.206.201.100
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:15.0) Gecko/20100101 Firefox/15.0.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Connection: keep-alive HTTP/1.1 302 Found DatE. Wed, 17 Oct 2012 23:09:55 GMT Server: Apache/2.2.15 (CentOS) Location:
http://192.168.200.10/user/home.jsp
Content-LengtH. 304
Connection: close
What is the solution to this issue?
- A. Configure redirect rewrite option in the HTTP profile.
- B. Add a Web Acceleration Profile to the virtual server.
- C. Assign a SNAT pool to the virtual server.
- D. Configure a content filter on the backend web server.
Answer: A
NEW QUESTION 243
An LTM is configure an application that isseparated into several subdomains across multiple virtual servers.
Many of these subdomains require encryption and could be accessed by anyone on the internet. The configuration must NOT result in SSL warnings to end users.
How should the LTM Specialist configure the SSL profiles for these virtual servers?
- A. Obtain a wildcard certificate, create one ClientSSL profile and apply to all SSL Virtual Servers
- B. Create a self-singed SSL certificate for each subdomain make a Clientprofile for each SSL Virtual Server
- C. Create a self-singed SSL certificate for each subdomain make a ClientSSL profile for each subdomain, and apply to the related SSL Virtual server
- D. Obtain an SSL certificate for each subdomain, make a ServerSSL profile for each subdomain, and apply to the related SSL Virtual Server.
Answer: A
Explanation:
Explanation
The topic is that there are multiple domain names in the business, and HTTPS services are provided to the internet, and users cannot be allowed to generate SSL alarms. The require client ssl and use CA certificate instead of self-singed certificate. And multiple domain names, you can use wildcard certificates.
NEW QUESTION 244
Refer to the exhibit.
An LTMSpecialist configures the two syslog destination Syslog destination #1 can receive messages but the syslog destination #2 can NOT receive messages.
Which command sill correct the issue?
- A. {/Common)(tmos) # modify Ays syslog remote servers modify {syslog_dest2 {local- ip 10.208.102
254)} - B. {Common(tmos) # modify/syslog remote-servers modify {syslog_dest2 {lost.10.10.10.28 }}
- C. {/Common) (tmos) # modify /sys syslog remote-servers modify {syslog_dest2 {host 10 208.102.254 }}
- D. {/Common)(tmos) # modify /syssyslog remote-servers modify (syslog_dest2 {local-ip
Answer: D
NEW QUESTION 245
Refer to the exhibit
A connection is being established to IP 1.1.1.1 on port 8080.
Which virtual server will handle the connection?
- A. host_vs
- B. fwdvs
- C. fwd_8080_vs
- D. host_ 8080_VS
Answer: A
NEW QUESTION 246
-- Exhibit -
-- Exhibit --
Refer to the exhibits.
After upgrading LTM from v10 to v11, users are unable to connect to an application. The virtual server is using a client SSL profile for re-terminating SSL for payload inspection, but a server SSL profile is being used to re-encrypt the request.
A client side ssldump did NOT show any differences between the traffic going directly to the server and the traffic being processed by the LTM device. However, packet capture was done on the server, and differences were noted.
Which modification will allow the LTM device to process the traffic correctly?
- A. Change Secure Renegotiation to "Request."
- B. Change to different ciphers on the server SSL profile.
- C. Enable ProxySSL option in the server SSL profile.
- D. Enable Strict Resume.
Answer: A
NEW QUESTION 247
AN LTM Specialist needs to determine the delay between anLTM device and the internal web server for a specific client.
Which two AVR reporting options should the LTM Specialist enable to measure the delay? (Choose two.)
- A. Response codes
- B. Methods
- C. User agents
- D. Client IP
- E. Server latency
Answer: D,E
Explanation:
Explanation
The problem is to specify the server delay of the client
NEW QUESTION 248
Refer to the exhibit.
A pool member fails the monitor checks for about 30 minutes and then starts passing the monitor checks. New traffic is Not being sent to the pool member.
What is the likely reason for this problem?
- A. Time Until Up is zero
- B. Manual resume is enabled
- C. The pool member is disabled
- D. Monitor Type is TCP Half Open
Answer: B
NEW QUESTION 249
-- Exhibit -
-- Exhibit --
Refer to the exhibits.
Users are able to access the application when connecting to the virtual server but are unsuccessful when connecting directly to the application servers. The LTM Specialist wants to allow direct access to the application servers.
Why are users unable to connect directly to the application servers?
- A. The router does NOT have a route to the server subnet.
- B. The LTM device does NOT have a SNAT on the External VLAN.
- C. The LTM device does NOT have an IP Forwarding virtual server on the Internal VLAN.
- D. The web server does NOT have a correct default gateway.
- E. The LTM device does NOT have an IP Forwarding virtual server on the External VLAN.
Answer: D
NEW QUESTION 250
A node is assigned two monitors as seen in this configuration.
What is the status of a member that runs on that node and listens on port 443?
- A. DOWN
- B. UNKNOWN
- C. UNAVAILABLE
- D. UP
Answer: C
NEW QUESTION 251
A BIG-IP Administrator needs to apply a health monitor for a pool of database servers named DB_Pool that uses TCP port 1521.
Where should the BIG-IP Administrator apply this monitor?
- A. Local Traffic > Profiles > Protocol > TCP
- B. Local Traffic > Pools > DB Pool > Properties
- C. Local Traffic > Nodes > Default Monitor
- D. Local Traffic > Pools > De Pool > Members
Answer: B
NEW QUESTION 252
A BIG-IP Administrator needs to configure the BIG-IP system to perform load balancing for FTP servers running passive mode FTP.
How should the administrator configure the Virtual Server to perform this load balancing?
- A. A Standard Virtual Server + FTP profile
- B. A Performance Layer 4 Virtual Server + FTP profile
- C. A Message Routing Virtual Server
- D. A Forwarding Virtual Server
Answer: A
NEW QUESTION 253
A web server administrator informs the BIG-IP Administrator that web servers are overloaded Starting next month, the BIG-IP device will terminate SSL to reduce web server load. The BIG-IP device is ready using client SSL client profile and Rules on HTTP level. What actions should the BIG-IP Administrators to achieve the desired configuration?
- A. Remove the chart SSL profile and change the Virtual Server to accept HTTP
- B. Remove the server SSL profile and change the Virtual Server to accept HTTP traffic
- C. Remove the client SSL profile and configure the Pool Members to US HTTP
- D. Remove the server SSL profile and configure the Pool Members to use HTTP
Answer: D
NEW QUESTION 254
An LTM Specialist troubleshooting an issue looks at the following /var/log/ltm entries:
Oct 2 04:52:42 slot1/tmm7 crit tmm7[21734]: 01010201:2: Inet port exhaustion on 10.143.109.5 to
10.143.147.150:53 (proto 17)
Oct 2 05:37:16 slot1/tmm7 crit tmm7[21734]: 01010201:2: Inet port exhaustion on 10.143.109.5 to
10.143.147.150:53 (proto 17)
Oct 2 05:57:32 slot1/tmm2 crit tmm2[21729]: 01010201:2: Inet port exhaustion on 10.143.109.5 to
10.143.147.150:53 (proto 17)
Oct 2 06:30:03 slot1/tmm7 crit tmm7[21734]: 01010201:2: Inet port exhaustion on 10.143.109.5 to
10.143.147.150:53 (proto 17)
Oct 2 06:37:44 slot1/tmm2 crit tmm2[21729]: 01010201:2: Inet port exhaustion on 10.143.109.5 to
10.143.147.150:53 (proto 17)
Oct 2 06:47:05 slot1/tmm5 crit tmm5[21732]: 01010201:2: Inet port exhaustion on 10.143.109.5 to
10.143.147.150:53 (proto 17)
Which configuration item should the LTM Specialist review to fix the issue?
- A. SNAT Pool
- B. Virtual Server Port Translation
- C. Port Lockdown
- D. Pool Member
Answer: A
NEW QUESTION 255
......
Dumps Brief Outline Of The 303 Exam: https://www.certkingdompdf.com/303-latest-certkingdom-dumps.html