[2023年11月]更新のF5 303公式認定ガイドPDF [Q235-Q255]

[2023年11月]更新のF5 303公式認定ガイドPDF

試験303 BIG-IP ASM Specialist

F5 303認定試験は、業界で非常に尊敬されているベンダー中立認定です。この認定は、専門家がアプリケーションセキュリティの分野で専門知識を実証するのに役立つように設計されています。認定試験は、潜在的な雇用主とクライアントにスキルと知識を紹介する素晴らしい方法です。 F5 303認定試験は、アプリケーションセキュリティの分野でキャリアを進めたい専門家にとって必須の専門家にとっては必須です。

質問 # 235
Refer to the exhibit.

A pool member fails the monitor checks for about 30 minutes and then starts passing the monitor checks. New traffic is Not being sent to the pool member.
What is the likely reason for this problem?

A. Manual resume is enabled
B. The pool member is disabled
C. Time Until Up is zero
D. Monitor Type is TCP Half Open

正解：A

質問 # 236
A new HITP server has been deployed on an LTM device. The application running on the server must be monitored by the LIM device. The following is required:
A new HITP server has been deployed on an LTM device. The application running on theserver must be monitored by the LIM device. The following is required:
When the server is unavailable, it will send an HTTP status code of 200 in response to a request for the status html page.
When the server is available. I will send and HTTP status code of 201 in response to a request for the status html page.
When the 200 status code is received, the pool member should receive No new connections.
Which configuration change should be made to meet these requirements?

A. set the Send String to GET/status html and the Receive String to 200 and Receive Disable String to 201.
B. set the Send String to Get /status html and the Receive Disable String to 200 and Receive String to 201.
C. set the Send String to GET Arian and the Receive String to 200 and Receive Disable String to 201.
D. set the Send String to GET Arian and the Receive Disable String to 200 andReceive String to 201.

正解：B

質問 # 237
Refer to the exhibit.

An LTMSpecialist configures the two syslog destination Syslog destination #1 can receive messages but the syslog destination #2 can NOT receive messages.
Which command sill correct the issue?

A. {/Common) (tmos) # modify /sys syslog remote-servers modify {syslog_dest2 {host 10 208.102.254 }}
B. {/Common)(tmos) # modify /syssyslog remote-servers modify (syslog_dest2 {local-ip
C. {/Common)(tmos) # modify Ays syslog remote servers modify {syslog_dest2 {local- ip 10.208.102
254)}
D. {Common(tmos) # modify/syslog remote-servers modify {syslog_dest2 {lost.10.10.10.28 }}

正解：B

質問 # 238
A BIG-IP Administrator adds new Pool Members into an existing, highly utilized pool. Soon after, there are reports that the application is failing to load for some users. What pool level setting should the BIG-IP Administrator check?

A. Slow Ramp Time
B. Action On Service Down
C. Allow SNAT
D. Availability Requirement

正解：A

解説：
Explanation
Option ABC is a global configuration, has nothing to do with the new pool member, select D after excluding

質問 # 239
A BIG-IP Administrator needs to remove a pool specific health monitor. There is a pool named Best Pool with two members, one named Best pool member and one named Best pool member2. In the Local Traffic section of the administrative GUI, which stops should the BIG-IP Administrator take to remove a pool level monitor?

A. Monitors > Monitor Name> Instances
B. Pool > Pool List> Best Pool > Health Monitors
C. Pool > Pool List > Best Pool > Members > Health Monitors
D. Nodes > Node List> Best _pool_memberl > Heath Monitors

正解：B

質問 # 240
A failover event is recorded in the log messages:
Jan 01 00:00:50 BIG-IP notice sod[5855]: 01140029:5: HA proc_running tmm fails action is go offline and down links.
Jan 01 00:00:50 BIG-IP notice sod[5855]: 010c0050:5: Sod requests links down.
Jan 01 00:00:50 BIG-IP notice sod[5855]: 010c0054:5: Offline for traffic group /Common/traffic-group-1.
Jan 01 00:00:50 BIG-IP notice sod[5855]: 010c003e:5: Offline
Jan 01 00:00:50 BIG-IP notice logger: /usr/bin/tmipsecd --tmmcount 4 ==> /usr/bin/bigstart stop racoon Jan 01 00:00:50 BIG-IP info lacpd[5502]: 01160016:6: Failover event detected. (Switchboard failsafe disabled while offline) Jan 01 00:00:51 BIG-IP err bcm56xxd[5296]: 012c0010:3: Failover event detected. Marking external interfaces down. bsx.c(3633) Jan 01 00:00:51 BIG-IP info bcm56xxd[5296]: 012c0015:6: Link: 1.1 is DOWN Jan 01 00:00:56 BIG-IP notice mcpd[5318]: 0107143c:5: Connection to CMI peer 10.0.0.3 has been removed Jan 01 00:00:56 BIG-IP notice mcpd[5318]: 0107143a:5: CMI reconnect timer: enabled Jan 01 00:00:56 BIG-IP notice mcpd[5318]: 01071431:5: Attempting to connect to CMI peer 10.0.0.3 port
6699
What is the cause of the failover?

A. Loss of connection to CMI peer 10.0.0.3 initiated the failover.
B. TMM failed, and system fail-safe initiated the failover.
C. A switchboard failure caused system fail-safe to initiate the failover.
D. TMM failed, and VLAN fail-safe initiated the failover.

正解：B

質問 # 241
-- Exhibit -

-- Exhibit --
Refer to the exhibit.
A pair of LTM devices are configured for HA. The LTM Specialist observes from a capture that there is a successful connection from a client directly to a web server and an unsuccessful connection from a client via the LTM device to the same web server.
Which two solutions will solve the configuration problem? (Choose two.)

A. Change server default gateway to point at LTM internal self IP.
B. Change server default gateway to point at LTM internal floating IP.
C. Configure SNAT on the pool.
D. Configure SNAT on the virtual server.

正解：B、D

質問 # 242
Interface 1.2 on a BIG-IP VE has a status of UNINITIALIZED. What is the reason for this status?

A. Interface 1.2 has been disabled.
B. Interface 1.2 has NOT been assigned to a VLAN.
C. No default route has been created.
D. Interface 1.2 has been added to a trunk.

正解：B

解説：
Explanation
trunk is a portchannel, you need to add a physical interface.

質問 # 243
-- Exhibit -

-- Exhibit --
Refer to the exhibit.
An LTM Specialist creates a virtual server to load balance traffic to a pool of HTTPS servers. The servers use client certificates for user authentication. The virtual server has clientssl, serverssl, and http profiles enabled.
Clients are unable to connect to the application through the virtual server, but they are able to connect to the application servers directly.
Which change to the LTM device configuration will resolve the problem?

A. Use the serverssl-insecure-compatible serverssl profile.
B. Configure the clientssl profile to require a client certificate.
C. Install the server certificate/key and enable Proxy SSL.
D. Install the client's issuing Certificate Authority certificate on the LTM device.

正解：C

質問 # 244
Refer to the exhibit.

A pool is contoured with four members. A user has a currentconnection established with 10.18.1.40. The virtual server has a persistence Profile configured.

A. 10.18.1.40
B. 10.18.1.30
C. 10.18.1.20
D. 10.18.1.10

正解：A

質問 # 245
A BIG-IP Administrator wants to add the ASM Module to an HA pair of BIG-IP devices. The BIG-IP Administrator has already installed a new Add-On License on both devices in the HA pair. What should the BIG-IP Administrator do next to use the module?

A. Reactivate the Licenses on both BIG IP devices
B. Provision the new module on both BIG-IP device's
C. Synchronize both BIG-IP devices
D. Reboot both BIG-IP devices

正解：B

質問 # 246
A BIG-IP Administrator configures remote authentication and needs to make sure that users can still login even when the remote authentication server is unavailable.
Which action should the BIG-IP Administrators in the remote authentication configuration to meet this requirement?

A. Configure a remote role grove
B. Configure a second remote user directory
C. Set partition access to "All"
D. Enable the Fallback to Local option

正解：D

質問 # 247
Internet clients connecting to a virtual server to download a file are experiencing about 150 ms of latency and no packet loss.
Which built-in client-side TCP profile provides the highest throughput?

A. tcp-legacy
B. tcp
C. tcp-lan-optimized
D. tcp-wan-optimized

正解：D

質問 # 248
Refer to the exhibit.

The BIG-IP Administrator has modified an iRule on one device of an HA pair. The BIG-IP Administrator notices there is NO traffic on the BIG-IP device in which they are logged into.
What should the BIG-IP Administrator do to verify if the iRule works correctly?

A. Pull configuration to this device to the cluster and start to monitor traffic on this device
B. Log in to the other device in the cluster, pull configuration to it, and start to monitor traffic on that device
C. Push configuration from this device to the group and start to monitor traffic on this device
D. Log in to the other device in the cluster, push configuration from it, and start to monitor traffic on that device

正解：B

解説：
Explanation
The device in the picture is a standby machine, of course there is no traffic, you need to log in to the host, and then pull the configuration to the host.

質問 # 249
Refer to the exhibit.

A BIG-IP Administrator configures the Virtual Server to pass HTTP traffic. Users report that they are unable to access the application What should the administrator do to resolve this issue?

A. Change the Virtual Server name
B. Reconfigure the Pool Members
C. Reconfigure the Source Address
D. Disable .he State

正解：B

質問 # 250
A custom TCP application using a single server is being migrated to the LTM device. A server is being added to the pool. The application is known to violate the TCP protocol RFC. Theapplication currently works without error from a user perspective.
Which virtual server type is appropriate in this situation?

A. Standard-tcp profile exists, RFC verification will be performed
B. Performance (Layer 4)-pure layer A forwarding
C. forwarding (Layer 2) pure routingforwarding, pool cannot be specified
D. Stateless TCP protocol is not applicable

正解：B

質問 # 251
A 8IG-IP Administrator configures a node with a standard icmp Health Monitor. The Node shows as DOWN although the Backend Server is configured to answer ICMP requests. Which step should the administrator take next to find the root cause of this issue?

A. Run a curl Run a qkview
B. Run a qkview
C. Runatcpdump
D. Runanssldump

正解：C

質問 # 252
Refer to the exhibit.

Due to a change in application requirements, a BIG-IP Administrator needs to modify the configuration of a Virtual Server to include a Fallback Persistence Profile.
Which persistence profile type should the BIG-IP Administrator use for this purpose?