[2023年更新]合格できるF5 303テスト練習問題試験問題集
高合格率303問題集解答で303問題集と正解回答
質問 164
A BIG-IP Administrator needs to configure the BIG-IP system to perform load balancing for FTP servers running passive mode FTP.
How should the administrator configure the Virtual Server to perform this load balancing?
- A. A Forwarding Virtual Server
- B. A Standard Virtual Server + FTP profile
- C. A Performance Layer 4 Virtual Server + FTP profile
- D. A Message Routing Virtual Server
正解: B
質問 165
An LTM Specialist is troubleshooting virtual server 10.0.0.1:443 residing on VLAN vlan301. The web application is accessed via www.example.com. The LTM Specialist wants to save a packet capture with complete decrypted payload for external analysis.
Which command should the LTM Specialist execute on the LTM device command line interface?
- A. tcpdump -vvv -s 0 -ni vlan301 'host 10.0.0.1 and port 443' -w /var/tmp/trace.cap
- B. ssldump -Aed -ni vlan301 -k
/config/filestore/files_d/Common_d/certificate_key_d/:Common:www.example.com.key_1 >
/var/tmp/trace.cap - C. tcpdump -vvv -s 0 'host 10.0.0.1 and port 443' -w /var/tmp/trace.cap
- D. ssldump -Aed -k
/config/filestore/files_d/Common_d/certificate_key_d/:Common:www.example.com.key_1 >
/var/tmp/trace.cap
正解: B
質問 166
Which file should the BIG-IP Administrator check to determine when a Virtual Server changed its status
- A. /var/log/tm
- B. /var/log/audit
- C. /var/log/lastlog
- D. /var/log/monitors
正解: A
質問 167
An LTM device has been configured to log the reasons for generating TCP RST packets.
The following log entry occurs:
"01230140:3: RST sent from 192.168.1.100:80 to 192.168.1.124:39272, [0x112d82a:1721] {peer} TCP RST from remote system." Which condition will trigger this log entry?
- A. The host at the other end terminated the TCP connection.
- B. The LTM device reset the connection because no pool members are available.
- C. A virtual server connection limit has been reached.
- D. The LTM device has reached the maximum number of allowed attempts to send the data segment to the affected TCP connection.
正解: A
質問 168
A BIG-IP Administrator needs to view the CPU utilization of a particular Virtual Server. Which section of the Configuration Utility should the administrator use for this purpose?
- A. Statistics > Module Statistics > Local Traffic > Virtual Addresses
- B. Statistics > Module Statistics > Traffic Summary
- C. Statistics > Module Statistics > Local Traffic > Virtual Servers
- D. Statistics > Analytics > Process CPU Utilization
正解: C
質問 169
While working with a web developer, it is determined that additional logic is required to assess the pool member availability.
Which twomonitor types should be used in this scenario? (Choose two)
- A. TCP Echo
- B. TCP
- C. Scripted
- D. External
- E. Gateway ICMP
正解: C,D
質問 170
Refer of the exhibit.
The 816-IP Administrator runs the command shown and observes a device trust issue between BIG-IP devices in a device group. The issue prevents config sync on device bigip3.local.
What is preventing the config sync?
- A. Next Active Load factor is 0 on bigip1.local
- B. Next Active Load factor is 1 on bigip1.local
- C. Time Delta to local system is 12
- D. Both devices are standby
正解: A
解説:
Explanation
Option A should be bioip3.local?. if choose bigip3.local, you should choose A.
質問 171
What is a benefit provided by F5 Enterprise Manager?
- A. Enterprise Manager allows administrators to analyze traffic flow and create custom application IPS signatures.
- B. Enterprise Manager allows administrators to identify application vulnerabilities. Virtual patches are then automatically generated and applied to remediate the detected application vulnerability.
- C. Enterprise Manager allows administrators to establish baseline application usage and generate an alert if an administratively set threshold for the application is exceeded.
- D. Enterprise Manager allows administrators to monitor all application traffic. Configuration optimization suggestions based on the observed traffic patterns are then generated for the administrator to review and apply.
正解: C
質問 172
An TLM Specialist has an Exchange that must use the LTM device to route traffic to the internet.
Which SNAT/NAT configure allows the Exchange server's traffic access the internet through the LTM device?
- A. NAT
- B. SNAT List
- C. SNAT Automap
- D. SNAT Pool
正解: B
質問 173
AN LTM Specialist needs to determine the delay between anLTM device and the internal web server for a specific client.
Which two AVR reporting options should the LTM Specialist enable to measure the delay? (Choose two.)
- A. User agents
- B. Methods
- C. Response codes
- D. Client IP
- E. Server latency
正解: D,E
解説:
Explanation
The problem is to specify the server delay of the client
質問 174
The active LTM device in a high-availability (HA) pair performs a failover at the same time the network team reports an outage of a switch on the network.
Which two items could have caused the failover event? (Choose two.)
- A. the standby LTM that lost connectivity on the failover VLAN
- B. a monitor on a pool in an HA group
- C. an Auditor role that has access to the GUI
- D. a VLAN fail-safe setting
- E. the standby LTM that was rebooted
正解: B,D
質問 175
-- Exhibit -
-- Exhibit --
Refer to the exhibit.
An LTM Specialist is investigating reports that users are unable to perform some commands through an FTP virtual server. The users are receiving the FTP error "500 Illegal PORT command." The virtual server is configured to SNAT using automap. The LTM Specialist performs a capture on the server side of the LTM device.
Why is the server returning this error?
- A. PORT command disallowed
- B. Active IP address in LOGIN command
- C. Active IP address in PORT command
- D. LIST command disallowed
正解: C
質問 176
Which two subsystems could the LTM Specialist utilize to access an LTM device with lost management interface connectivity? (Choose two.)
- A. ILO
- B. SCCP
- C. AOM
- D. ALOM
正解: B,C
質問 177
DNS queries from two internal DNS servers are being load balanced to external DNS Servers via a Virtual Server on a BIG-P device. The DNS queries originate from 192.168.101.100 and 192.168.101.200 and target 192.168.21.50 All DNS queries destined for the external DNS Servers fail Which property change should the BIG-IP Administrator make in the Virtual Server to resolve this issue?
- A. Type to Performance (HTTP)
- B. Source Address to 192.168.101.0/24
- C. Protocol to UDP
- D. Protocol Profile (Client) to DNS-OPTIMZED
正解: C
質問 178
An LTM Specialist is receiving reports from customers about multiple applications failing to work properly.
The LTM Specialist looks at the services running and notices that the bigd process has NOT started.
How are monitored LTM device objects marked when the bigd process is stopped?
- A. red or offline
- B. unchanged until bigd is restarted
- C. blue or unchecked
- D. green or available
正解: B
質問 179
An LTM is configure an application that isseparated into several subdomains across multiple virtual servers.
Many of these subdomains require encryption and could be accessed by anyone on the internet. The configuration must NOT result in SSL warnings to end users.
How should the LTM Specialist configure the SSL profiles for these virtual servers?
- A. Obtain a wildcard certificate, create one ClientSSL profile and apply to all SSL Virtual Servers
- B. Create a self-singed SSL certificate for each subdomain make a Clientprofile for each SSL Virtual Server
- C. Obtain an SSL certificate for each subdomain, make a ServerSSL profile for each subdomain, and apply to the related SSL Virtual Server.
- D. Create a self-singed SSL certificate for each subdomain make a ClientSSL profile for each subdomain, and apply to the related SSL Virtual server
正解: A
解説:
Explanation
The topic is that there are multiple domain names in the business, and HTTPS services are provided to the internet, and users cannot be allowed to generate SSL alarms. The require client ssl and use CA certificate instead of self-singed certificate. And multiple domain names, you can use wildcard certificates.
質問 180
An LTM Specialist is tasked with ensuring that the syslogs for the LTM device are sent to a remote syslog server.
The following is an extract from the config file detailing the node and monitor that the LTM device is using for the remote syslog server:
monitor
Syslog_15002 {
defaults from udp
dest *:15002
}
node 91.223.45.231 {
monitor Syslog_15002
screen RemoteSYSLOG
}
There seem to be problems communicating with the remote syslog server. However, the pool monitor shows that the remote server is up.
The network department has confirmed that there are no firewall rules or networking issues preventing the LTM device from communicating with the syslog server. The department responsible for the remote syslog server indicates that there may be problems with the syslog server. The LTM Specialist checks the BIG-IP LTM logs for errors relating to the remote syslog server. None are found. The LTM Specialist does a tcpdump:
tcpdump -nn port 15002, with the following results:
21:28:36.395543 IP 192.168.100.100.44772 > 91.223.45.231.15002: UDP, length 19
21:28:36.429073 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 169
21:28:36.430714 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 181
21:28:36.840524 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 169
21:28:36.846547 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 181
21:28:39.886343 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 144 NotE. 192.168.100.100 is the self IP of the LTM device.
Why are there no errors for the remote syslog server in the log files?
- A. When the remote syslog sever fails, it returns to service before the timeout for the monitor has expired.
- B. The "verbose" logging option needs to be enabled for the pool.
- C. The -log option for tcpdump needs to be used.
- D. The monitor type used is inappropriate.
正解: D
質問 181
Users are unable to reach an application. The BIG-IP Administrator checks the Configuration Utility and observes that the Virtual Server has a red diamond in front of the status. What is causing this issue?
- A. All pool members have been disabled.
- B. The Virtual Server is disabled.
- C. All pool members are down.
- D. The Virtual Server is receiving HTTPS traffic over HTTP virtual.
正解: C
質問 182
An ITM Specialist has the configuration shown:
The LTM Specialist needs to create a new virtual server in part B.
Which virtual address(es) should be used for the new virtual server?
- A. 10.90.0.1 and 10.12.0.1
- B. 10.120.0.1 only
- C. 10.100.0.1 and.10.120.0.1
- D. 10.90.0.1 and 10.100.0.1
正解: C
質問 183
AN LTM Specialist is setting up a new HTTPS virtual server to decrypt client traffic. SNAT the traffic and send the encrypted traffic to the poor member, the client's IP address must be included in the traffic sent to the pool member.
What is a complete set of profiles that must be configured for the virtual server to meet these requirements?
- A. TCP, Client SSL, Server SSL, HTTP
- B. TCP, Client SSL, Server SSL
- C. TCP , Server SSL, HTTP
- D. TCP, Client SSL, HTTP
正解: A
質問 184
Which three HTTP headers allow an application server to determine the client's language compatibility, browser, operating system type, and compression compatibility? (Choose three.)
- A. Accept
- B. User-Agent
- C. Accept-Language
- D. Host
- E. Accept-Encoding
正解: B,C,E
質問 185
What do the following iRule commands do when they are used in the same iRule?
set hsl [HSL::open -proto UDP -pool syslog_server_pool]
HSL::send $hsl "<190> [HTTP::host] from [whereis [IP::client_addr] country continent state city zip] , IP:
[IP::client_addr]"
- A. The commands set up a high-speed logging connection and then send the host header, HTTP payload, and client geographical detail to the connection.
- B. The commands set up a high-speed logging connection to the LTM device and then send the host header and client geographical detail to the connection.
- C. The commands set up a high-speed logging connection and then send the host header and client geographical detail to the connection.
- D. The commands set up a high-speed logging connection and then send the geographical database to the server.
正解: C
質問 186
A BIG-IP Administrator wants to add the ASM Module to an HA pair of BIG-IP devices. The BIG-IP Administrator has already installed a new Add-On License on both devices in the HA pair. What should the BIG-IP Administrator do next to use the module?
- A. Reboot both BIG-IP devices
- B. Reactivate the Licenses on both BIG IP devices
- C. Provision the new module on both BIG-IP device's
- D. Synchronize both BIG-IP devices
正解: C
質問 187
......
303認証試験問題集ガイド解答は練習専門JPNTest：https://www.jpntest.com/shiken/303-mondaishu
最高のベストBIG-IP ASM学習試験問題集ガイドは最高の303試験：https://drive.google.com/open?id=17_WOAQGQWB5EGHbQ0ifL9IGUvx7-4i8C