303 BIG-IP ASM Specialist Exam Free Dumps

1. An LTM Specialist needs to gather website statistics such as latency and throughput on the existing virtual server. This virtual server load Balances the backend web servers.

Which F5 feature will provide this?

2. Which Standard Virtual Server settings should an LTM Specialist use to load balance across routed path of two different ISPs?

3. An LTM Specialist needs to terminate client SSL traffic and based on the cookie presented by client.

Which set of profiles should the LTM Specialist use?

4. An LTM Specialist observes decreased performance and intermittent connection reap LTM system.





Based on the configuration, which action will address these issues?

5. An LTM Specialist regularly provides analytics reports that show that traffic generated by different

subnets within the organization. The LTM Specialist needs show the associate department names next the IP addresses in the reports.

Which step should the LTM Specialist take to meet this requirement?

6. in which Application Visibility and Reporting (AYR) profile must the SMTP profile be defined to configure notifications via email?

7. An LTM device configuration is as shown:





What should be the two expected outcomes based on this configuration? (Choose two.)

8. An LTM Specialist needs to load balance an application using an LTM device to meet the requirements:

The application servers do NOT Support SSL, but client access to the application should be secured.

Multiple requests from the same client should be sent to the same pool member.

All pool members will have roughly the same processing power, and traffic should be distributed evenly.

The LTM device is NOT the pool members' default gateway.

which configuration should the LTM Specialist.

9. Remote users who access the LTM device are authenticated via Radius. The default remote user role is Guest Some users need LTM device with the Administrator role. The F5 Radius attributes are configure on the Radius server.

Which configuration item needs to be created?

10. An HTTP monitor is created and assigned to a pool with the following non-default configuration:

Interval: 7 seconds

Timeout: 22 seconds

Reverse: Yes

Send String: GET/status.html HTTP/1.1/r/nHost:test.example.com/r/nConnector:Close Receive

String: Up

The HTTP server sends the following response:





What is the resulting pool status?

11. An ITM Specialist has the configuration shown:





The LTM Specialist needs to create a new virtual server in part

B.

Which virtual address(es) should be used for the new virtual server?

12. A pool with a default connection limit is configured to use Round Robin as the load balancing method. An LTM Specialist needs to ensure that the LTM device selects a server with the fewest number of connections when new clients connect. Another pool is using the same set of backend servers.

Which load balancing-method should the pool be changed to?

13. An LTM device needs an additional traffic group.

Which configuration item is required?

14. A new HITP server has been deployed on an LTM device. The application running on the server must be monitored by the LIM device. The following is required:

A new HITP server has been deployed on an LTM device. The application running on the server must be monitored by the LIM device. The following is required:

When the server is unavailable, it will send an HTTP status code of 200 in response to a request for the status html page.

When the server is available. I will send and HTTP status code of 201 in response to a request for the status html page.

When the 200 status code is received, the pool member should receive No new connections.

Which configuration change should be made to meet these requirements?

15. set payload {CACHE:: payload}

}

Which two profiles should be used on the virtual server? (Choose two.)

16. A design requires the LTM device to become HA standby when the one of the two physical interface on the External trunk is down the External trunk is an interface on the External VLAN

Which TMOS command enables this behavior?

17. Traffic to a pool of SFTP servers that share storage must be balanced by an LTM device.

What are the required profile and persistence settings for a standard virtual server?

18. An LTM Specialist needs to provide access to a 8BG-IP to device for a company's support person access to the BIG IP device, but are NOT allowed to change any settings All support the support remote access to the BIG-IP device, but are NOT allowed to change ant settings. All support have accounts in the company's Active Directory

Which method is appropriate to provide access for the support personnel to the BIG-JP device?

19. A VCMP guest has the following characteristics:

• Resources allocated for CPU memory, network interfaces, and disk space

• Virtual disk created

• The guest is NOT running

The guest is NOT running in which state is the VCMP guest

20. Exhibit.





Webserver_pool consists of 6 members. phpAuction_80_pool consists of 2 members LTM1 is the current Active member.

LTM1 loses connectivity to 3 of the 6 members in the webserver_pool LTM2 still has connectivity to all servers.

What is the expected failover behavior?

21. The web application team requests help from the LTM Specialist to Improve the performance of their web sites that are load balanced by the F5 LTM device with a Standard Virtual Server.

Which virtual server type will improve the performance of the web application servers?

22. A virtual server is using a TCP profile based on the top-wan-optimized profile for a streaming application Users report videos are loading slowly.

Which setting should be modified in the TCP profile to optimize the application?

23. An LI M device is experiencing a high volume of traffic. The virtual server is struggling under the load. The problem appears to be on the server side connections. The virtual server is accepting connections. The virtual server is accepting connections on https and is configured with an SSL profile and http pool.

What should be added to increase the performance of the device?

24. A LTM device needs to load balance active and passive FTP traffic while using only a single virtual server.

Which virtual server type should an LTM Specialist configure on the LTM device?

25. Refer to the exhibit.





An LTM Specialist has multiple SNAT and virtual server objects configured as in the bigip.conf shown.

The LTM Specialist tests a connection from a client with. IP 172.163.31.11 to 192.168.0.100:80.

Which two objects will show an increase in Local Traffic statistics connections?

26. A new DNS virtual server has been configured. Testing reveals that DNS server has failed to accept

DNS over TCP.

The configuration of the virtual server is as follows:





Which action should be taken to correct this issue?

27. A BIG IP system load balances connections to a web application. A TCP-based Denial of Service attack against the web application is occurring, which has caused very high memory utilization on the LTM device due to stale TCP connections.

Which TCP profile option should be used to reduce memory utilization?

28. A customer wants to select the pool for an application based on information found in the path of the URL.

For example:

http://www.example.com/app 1 should be sent to the app 1 pool http.//www.exampie.com/app 2 should be sent to the app2 pool

Which two profiles need to be assigned to the virtual server? (Choose two.)

29. An LTM device provides load balancing to a web application? The LTM device has two dual-core processors and a licensed SSL Transactions Per Second (TPS) limit of 500 CMP is enabled.

TLS connections are used between client systems and virtual servers on the LTM device, as well as from the LTM device to servers used as part of LTM pool.

TLS enabled virtual servers utilize certificates based on 2048-bit keys

During a peak period. 2560 new TLS transactions per second are attempted to the web application via the LTM device.

What will happen in this scenario?

30. An unwanted IP address tries to connect to the configuration utility via Self IP An LTM Specialist needs to block the attempts based on the IP address.

How should the ITM Specialist block the attempts without affecting other users?

31. An LTM Specialist is configuring a virtual server with an IP address.

Which configuration is unsupported?

32. A virtual server is experiencing intermittent port exhaustion.

What should be done to fix this issue?

33. Refer to the exhibit





Given the bigip conf extract shown where the servers only talk http on port 80, which node will receive the next user request?

34. AN LTM Specialist is setting up a new HTTPS virtual server to decrypt client traffic. SNAT the traffic and send the encrypted traffic to the poor member, the client's IP address must be included in the traffic

sent to the pool member.

What is a complete set of profiles that must be configured for the virtual server to meet these requirements?

35. A new web application is being deployed Mutual SSL authentication must be used to authenticate clients.

Which of the following two tasks must be completed to meet the requirements? (Choose two)

36. An LTM Specialist needs to provide statistics regarding the round-trip time between the clients and the servers.

Which metric should be part of the analytics profile to provide that information?

37. In an iApp, which configuration protects against accidental changes to an application Services configuration?

38. Refer to the exhibit.





A pool is contoured with four members. A user has a current connection established with 10.18.1.40.

The virtual server has a persistence Profile configured.

39. A BIG IP device delivers the online shopping website https://shop.example.com. Two pool members handle the traffic. An iRule directs requests with the hip parameter "environment=development" to a third pool member for a staging environment.

Which combination of profiles is needed at minimum?

40. An LTM Specialist configures a new virtual server with a single pool member. The LTM Specialist has

NOT defined a health monitor for the pool, pool member or node.

What is the status of the virtual server?

41. An LTM Specialist has recently taken over administration or an LTM device that has experienced resource availability issues. The LTM device will need to be solely used for load balancing and SSL offload. Previously, the LTM device was also used to provide statistical analysis of application traffic. However, that functionality has been moved to a third party solution.

Based on the output below, which configuration change should be made to ensure the LTM module receives the most amount of resources?

42. An LTM Specialist has noticed in the audit log that there are numerous attempts to log into the Admin account. Theses attempts are sourced from a suspicious IP address range to the Configuration

Utility of the LTM device.

How should the LTM Specialist block these attempts?

43. A Client makes the request displayed below to the application server.

Which virtual server type should an LTM Specialist use to load balance based on the URI?

44. A virtual server with SNAT automap enabled selects pool member 10.20.0.10.443 for the server-side flow. The client side flow source IP is 192.168.0.10.





Which source IP should be expected in the server-side connection?

45. Refer to the following iRule:





What is a complete list of profiles that must be applied to the virtual server for this iRule?

46. An LTM Specialist is removing some of the load off an existing cluster by adding a adding a third BIG-IP device to the device group. The new device can deliver twice the performance of the other two devices.

The LTM Specialist needs to make sure that the BIG-IP device with the highest available capacity is always selected to take over a traffic group in the event of a failover.

Which failover method is most appropriate?

47. Consider the monitor configuration displayed below.





What is the status of a pool member that responds with ''200 OK''?

48. Exhibit.





An LTM Specialist needs to configure VS^HTTP and VS_DB for an online shopping site. The VS HTTP passes the client requests to the webservers. The webservers query the database servers through the VS_DB. Initially, the LTM Specialist finds the database servers directly return the packets to the webservers.

which setting must be enabled for the configuration to function correctly?

49. A node is assigned two monitors as seen in this configuration.





What is the status of a member that runs on that node and listens on port 443?

50. A web application is configured as follows:





What should be modified to set a maximum request limit?

51. A virtual server configuration for traffic destined to a server is as shown:





HTTP traffic is destined to the 10 10.20.1 server from the source.

Based on precedence, which virtual server accepts this traffic?

52. AN LIM Specialist must upgrade the VCMP Guest active/standby LTM pair from version 11.3 to 11.5.3 on two VCMP Hosts.

Where should the LTM Specialist import the latest 11.5.3 ISO images?

53. An LTM Specialist needs to configures virtual server that uses PVA or OPVA.

Which virtual server type should be used?

54. A virtual server configuration for traffic destined to a server is as shown:





FTP traffic is destined to the 192.168.1.101 server from the source of 192.168.2.129.

Based on precedence, which virtual server accepts this traffic?

55. A Web Server Administrator uses a manual process to display a page when the service is down.

Which feature on the LTM device should be used to automate the service down page?

56. An SSL application is being migrated to the LTM device. Both encrypted and unencrypted traffic are accepted by the server.

The virtual server configuration is as follows:





Which LTM device profile should be used on the LTM device to reduce the CPU load on the current.

57. An TLM Specialist needs to configure a virtual server to terminate SSL connection on the LTM device. Cryptographic information must be re-authorized for SSL sessions that remain open for longer than 30 seconds.

Which settings should the LTM Specialist configure in the client SSL profile?

58. When importing a PEM formatted SSL certificate, which text needs to appear first in the file?

59. A pool has four members. Ail of the servers have been designed and configured with the same application. Each client's request can significantly the performance of the servers.

Which load balancing method should the LTM Specialist use to maintain a relatively even load across all servers?

60. An LTM Specialist has trouble with SNMP traps in the management network

The ITM Specialist takes the network capture shown to troubleshoot:





What should the UM Specialist change to capture packets related to this workflow?

61. Exhibit.





- The ITM devices LTM 1 and LTM2 are configured in Device Group X (Sync-Failover)

- LTM3 and LTM4 are configured in Device Group Y (Sync-Only)

- An LTM specialist configures Device Group Z (Sync-Only) to keep several profiles in (sync-Only) to keep several profiles in sync across all devices.

- Device GROUP X has four Traffic Groups A.B.C and D configured.

- Device Group Y has four Traffic Groups E, F. G, and H configured

- Auto Fallback IS NOT Enabled.

- Each Device group is healthy and able to pass traffic for any traffic group assigned to that Device Group.

The data center that contains LTM2 and LTM4 loses power. After 10 minutes; power is restored and all devices are up and healthy.

What is the state of each Traffic Group on each ITM device after power is restored?

A)





B)





C)





D)

62. Exhibit.





The three VLANS shown provide connectivity to backend servers. The backend servers are being moved to unmanaged switches and require separate interfaces.

How should the F5 device interfaces be configured?

63. Refer to the exhibit.





The http monitor is applied to a pool All members are enabled One pool member stops responding

TCP port 80. The server still responds to ping.

What is the resulting status of this pool member?

64. An LTM Specialist needs to create a virtual server to pass TCP traffic to three pool members.

Which two virtual server types should be used to meet the requirements? (Choose two)

65. An LTM Specialist needs to add a pool that will load balance MYSOL services. It has four members, each with differing hardware platforms. All pool members are already assigned to another pool for load balancing FTP traffic.

Which load balancing method is most effective when the LTM Specialist sets up the pool?

66. While working with a web developer, it is determined that additional logic is required to assess the pool member availability.

Which two monitor types should be used in this scenario? (Choose two)

67. An LTM device configured with a management IP address and route and a series of self-IPs and TMM routes. Both management and TMM have a routing entry for 101 10/24 Application traffic is being load balanced and sent to pool member 10.1.1.123 with SNAT Automap and configured.

Which route will the LTM device use?

68. An application is sensitive to packet loss and unexpected session termination. A pair of LTM devices is configured in an Active/Standby high availability configuration. SNATS are NOT used and the virtual server contains a Universal Persistence profile.

Which two actions must an LTM Specialist take to ensure the sessions are maintained between the client and server during an LTM device failover event while maintaining maximum uptime? (Choose two.)

69. A web server's default gateway is the network router. The LTM Specialist needs to introduce an LTM device to load balance to the web servers without changing the server's default gateway.

Which deployment method and settings should the LTM Specialist use to ensure correct traffic flow and that the web servers can obtain the actual con IP addresses?

70. Exhibit.





The LTM devices LTM1 and LTM2 are configured in a Device Group (Sync Failover) with Network Failover configured on both the management and HA and Internal VLANS. and ConfigSync is confined in a Device Group (Sync Failover) with Network Failover and internal are tagged on a single trunk with subnets Connection Mirroring is configured on both the HA interlace directly connected between LTM1 and LTM2, and the management interlace is connected to a management switch. The LTM devices have four Traffic Groups defined, and both LTM devices are healthy and capable of passing traffic for any of the Traffic Groups.

An LTM Specialist disconnects the cable for the HA network in an effort to test failover.

Which HA functionality works in this case?

71. Refer to the exhibit.





An LTM Specialist configures the two syslog destination Syslog destination #1 can receive messages but the syslog destination #2 can NOT receive messages.

Which command sill correct the issue?

72. An LTM Specialist needs to enable TCP connection re-use for a non-HTTP application. The application uses a simple request response protocol where each request and response is contained within a single packet.

Which configuration option should the LTM Specialist adjust?

73. An HA pair of LTM devices that load balance multiple HTTPS applications utilizes highly customized RAM Cache and compression profiles on each virtual server.

The LTM Specialist who is administering the HA pair regularly observes entines in the log similar to the following:

tmm tmm I708S1 011e0002.4. sweeper_update: aggressive mode activated (117504/138240 pages) No DoS attacks arc occurring. No user problems have been reported.

Which step should the LTM Specialist take to help mitigate the issue?

74. An LTM Specialist must reconfigure a BIG-IP LTM system that load balances traffic to web application servers. The application developer inform the LTM Specialist that TLS must be used to communicate with the application servers.

Which additional profile is required as part of virtual server configuration?

75. What should the LT'M Specialist add to the virtual server?

76. An LTM Specialist discovers an issue with the custom http monitor that returns in a false positive status.

The end users cannot get the right website, but the http monitor marks the pool member UP.

What is causing the false positive result?

77. An LTM Specialist needs to assign a health monitor to a pool with two pool members 10.10.10 101 and 10.10.10.102 Both pool members are listening on port 8080 with TCP. The health of the application depends on the health of an another server (10 10 10 100) that runs port 9080 with TCP.

Which two custom TCP monitors should be selected as the pool's health monitors' (Choose two)

78. Which process can be eliminated by terminating SSL communication on the LTM device rather than the backend pool members?

79. An LTM device load balances a pool of routers. The LTM device needs to verify path availability to an HTTP server with the IP address 192 168.10 10. located beyond the routers.

Which monitor type and parameters arc required?

80. One LTM device in an HA pair of LTM devices is unable to reach its default gateway. An HA Failover event needs to happen.

Which configuration item enables this behavior?

81. Exhibit.





The server team has recently configured the three new DNS servers shown for the data center. No current DNS servers are currently configured on the LTM device.

Which command should be used to configure the LTM device to use the new DNS servers?

82. An LTM Specialist needs to create an iRule that creates persistence records based on a JSESSIONID cookie. If a persistence record already exists, then the iRule must persist the client connection according to the existing record.

Which persistence profile enables the iRule to meet these requirements?

83. An LTM Administrator receives an email from the NOC stating that the switch connected to the backend server was shut down for maintenance. The BIG-IP device handles only UDP traffic. The BIG IP device did not fail over to a DR location when no pool members were available.

When the LTM Administrator checks the pool, it confirms that the monitor is still marking UP the pool member.

A tcpdump of the traffic shows the following output:





A list of the monitor configuration shows the following:





Which two modifications to the LTM configuration will mark this pool member down, when the switch is down? (Choose two.)

84. An LTM Specialist needs to deploy a virtual server that will load balance traffic targeting https://register.example.com to a set of three web servers. Persistence needs to be ensured. No persistence mirroring is allowed SSL offloading is required.

A fourth web server with fewer resources will be used to handle requests from engine bots to https://register.example.comvrobots.txt by an iRule. The (Rule will use the HTTP_REQUEST event..

What are the required profile and persistence settings to implement this

85. An LTM device receives a response string containing "error"

Which monitor type and parameter will mark the HTTP server as down?

86. A custom TCP application using a single server is being migrated to the LTM device. A server is being added to the pool. The application is known to violate the TCP protocol RFC. The application currently works without error from a user perspective.

Which virtual server type is appropriate in this situation?

87. Four members in a server pool have similar hardware platforms. An LTM Specialist needs the load balancing method that can select the server with the fewest entries in the persistence table.

Which load balancing method should the LTM Specialist use?

88. Refer to the exhibit.





The http monitor is applied to a pool. All members are enabled. One server responds as follows.





What is the resulting status of this poo! member?

89. An application is making heavy use of a large, high-quality JPEG image file. An LTM Specialist needs to enhance page load times without increasing server load.

Which profile should be applied to the virtual server to perform this task?

90. The picture belongs to static content, you can configure static content cache in FS to meet this demand An LTM Specialist must configure session persistence for a highly available, highly utilized web-based application.

* The following requirements are provided:

* http proxy setup for security

persistence information available to the HA peer in case of failover

The LTM Specialist needs to minimize additional burden on the LTM device to the greatest extent possible.

Which persistence profile should be used?

91. An LTM specialist needs to create a new account with the admin role called "newadmin' and access to all partitions.

Which tmsh command should be executed?

92. Refer to the exhibit.





The LTM devices LTM3 and LTM2 have four Traffic Groups defined with approximately the sar of failover objects defined in each group.

- Traffic Groups A and C have Default Device set to LTM1

- Traffic Groups Band D have Default Device set to LTM2.

- Traffic Groups B and C do NOT have Auto Failback enabled.

Traffic Groups A and D have Auto Failback enabled with a timeout value of 60 seconds.

- Traffic Groups A and D have Auto Fallback enabled with a timeout value of 60 seconds. Both LTM devices are healthy and able to pass traffic for any Traffic Group.

LTM1 loses connectivity on interface 1.4. The LTM Specialists notified 60 seconds after the interface goes down.

What is the state of the Traffic Groups on each LTM device?

93. An LTM Specialist has detected that a brute force login attack is occurring against the SSH service via a BIG-IP management interface. Login attempts are occurring from many IPs within the internal company network.

BIG-IP SSH access restrictions are in place as follows:





The LTM Specialist has determined that SSH access should only occur from the 192.168.1.0/24 and 172.16.254.0/23 networks.

Which tmsh command should the LTM Specialist use to permit access from the desired networks only?

94. An LTM Specialist is experiencing issues in a failover event. Certain long-lasting FTP event. Certain long-lasting FTP connections using a single node pool are forced to reconnect.

The bigip.conf extract is shown:





What does the LTM Specialist need to change in the configuration to avoid this issue?

95. TWO LTM devices are in the same Device Group and configured for Ac live/Standby Failover. The LTM Specialist observes that the HA Active and Standby device constantly changes state. All network links use the default route domain A dedicated fiber ink is used for the HA connection with a latency of 250 ms but no packet loss.

What is causing the change in failover state to occur?

96. An LTM Specialist needs to use a set of addresses to access an Internet website in an outbound configuration.

Which feature should the LTM Specialist configure?

97. An LTM specialist needs to upgrade a VCMP quest in an HA Setup with minimum interruption for all VCMP guest instances.

In which should the LTM Specialist perform this upgrade?

98. An LTM Specialist needs to apply SNAT using currently used SNAT pool to a new virtual server.

What needs to be completed before applying that configuration change?

99. AN LTM Specialist is deploying an iRule designed to determine the country of origin of an incoming client connection. The iRule needs to be used with an SSL-enabled web application.

Which profile required for the iRule to function properly?

100. AN LTM Specialist needs to determine the delay between an LTM device and the internal web server for a specific client.

Which two AVR reporting options should the LTM Specialist enable to measure the delay? (Choose two.)

101. An application is being load balanced through the LTM device using the configuration displayed below.

The network has been re-engineered to NAT all client connection. As a result, all client connections are hitting the same pool member.









Which changes should the LTM Specialist make in order to restore load balancing functionality wile maintaining session persistence?

102. An LTM Specialist reports that an application si no longer reachable after it has been upgraded.

Nothing has been changed in the configuration on the LTM device.

The logs indicates that health monitors to all servers have failed as shown:

What should the LTM Specialist verify next?

103. An organization’s development team creates an application to put behind the F5 LTM device. The application can be quite load intensive at first, and then evens out over time. The team’s load balancing method needs to select a pool after taking into account the pool member’s response over the time to avoid landing on a busy pool member.

Which of the following load balancing methods meets this requirement?

104. An application is expected to maintain more than 100,000 concurrent TCP connections to a single pool member.

What is an appropriate SNAT configuration in this situation?

105. AN LTM Specialist is using an external monitor evaluate the hard drive usage of a node. The monitor has marked the node down because it exceeded the specific threshold. The disk usage on the server has been corrected below the threshold, however, the node remains offline.

Which feature is causing this problem?

106. A web server is being overloaded with HTTPS traffic. To decrease the load on the server, the LTM Specialist and the Server. Administrator decide to perform SSL offloading on the LTM device.

The configuration of the virtual server is as follows:





Which change must be made to the configuration to perform SSL offloading?

107. An LTM Specialist is configuring a new virtual server on an LTM device and assigning a SNAT pool that is already is use another virtual server. Both virtual servers use the same pool members to load balance traffic. A maximum of 35,000 users needs to be able to access each virtual server ta any time. The network architecture does NOT allow the backend servers to use the LTM device as a default gateway.

What is the minimum number of SNAT addresses required in the SNAT pool to meet the needs of the virtual servers?

108. An LTM Specialist needs to create two virtual servers.

The application has links for both HTTP and HTTPS version of application. The client must be persistence to a pool member, no matter which virtual server is accessed.

What must be selected in the Source Address Affinity persistence profile?

109. An LTM Specialist to configure a backend server to be disabled it takes longer than 30 seconds to respond to a request.

Which values should the LTM Specialist enter for interval and timeout?

110. Remote office users are having performance issues with a virtual hosted on the F5 LTM. The LTM Specialist reviews the configuration for the virtual server and determine that some settings are set

with default profiles.

Which profile should the LTM Specialist enable to improve virtual server performance?

111. An LTM Specialist needs to configure a virtual server with the requirements displayed below.

Application is currently an internal HTTP application

Encrypted external user access

Links are hard for siteA example.com and need to rewritten to siteB.Example.com.

Which profiles must the LTM Specialist use to provide the proper functionality?

112. AN LTM Specialist receives reports that an external company application is having reliability issues.

The F5 Administrator finds the following in /vat/log/ltm file.





The LTM Specialist determines that the F5 LTM device is entering into Aggressive Mode Adaptive Reaping, which is causing the site reliability issues.

What is the most likely reason that the LTM device has entered into Aggressive Mode Adaptive Reaping?

113. A web developer needs a virtual server configured for an application.

The application details are as follows:

Application is accessed on port 443.

The application traffic is encrypted by the server.

HTTP is not being used. No data manipulation is necessary.

Throughput is critical.

NO connections are terminated on the LTM.

Which configuration provides the best performance?

A)





B)





C)





D)

114. RADIUS authentication has been configured on the LTM device.

The default remote user access requirements are as shown:

Read only access to the configuration Utility

Access to TMOS shell

Which two items need to be configured in this situation? (Choose two)

115. What should an LTM Specialist configure on an LTM device to send AVR notification emails?

116. The network team has recently added a new syslog server with IP address 10.1.1.1.

Which command adds the new syslog entry on the F5 LTM device?

A)





B)





C)





D)

117. An LTM is configure an application that is separated into several subdomains across multiple virtual servers. Many of these subdomains require encryption and could be accessed by anyone on the internet. The configuration must NOT result in SSL warnings to end users.

How should the LTM Specialist configure the SSL profiles for these virtual servers?

118. An LTM Specialist needs to force only FTP traffic, sourced from subnet 10.10.10.0/24 to virtual server 10.10.20.1 to the new FTP1 server.

The following virtual servers are configured on the LTM device:

Traffic sourced from 10.10.10/24 must use the specific pool member for load balancing.

Which configuration change is needed to meet the requirements?

119. An LTM Specialist needs to upgrade all guests on a Viprion eight CMP guests.

What is the maximum number of guests that the LTM Specialist should upgrade at once?

120. An LTM Specialist is configuring a client profile to offload processing a new application Company policy requires that clients can resume session for up to 30 minutes, but must renegotiate a new session after that.

Which setting should the LTM Specialist change to satisfy this requirement?

121. An LTM Specialist upgrades the switching infrastructure and the backend servers on the LAN segments.

The LTM Specialist notices a 20% memory usage increase on the BIG-IP device while handling the same number of concurrent connections.

A comparison of statistics pre-upgrade and post-upgrade shows a significant reduction on the following:

-RTT between the BIG-IP device and the backend servers

-Packet drops in the switch

Time to First Byte (TTFB)

The LTM Specialist is concerned with the scalability of the number of concurrent connections with the new memory usage.

Which setting should be changed to reduce the memory usage on the BIG-IP device?

122. An LTM Specialist needs to use the tmsh command to create a pool named http_pool with member 10.10.101:80 on an LTM device.

Which expression should the LTM Specialist use?

123. The network team introduces a new subnet 10.10.22.0/24 to the network. The route needs to be configured on the F5 device to access this network via the 30.30.30.158 gateway.

How should the LTM Specialist configure this route?

124. An LTM Specialist is the administrator of an HA pair that contains two BIG IP units and one floating traffic group (TG1). A new project requires the creation of 30 virtual servers. The Specialist decides to create a new floating traffic group (TG2) to handle this requirement. Objects for this project created by the BIG-IP Managers must appears in the correct traffic group.

Which configuration should the LTM Specialist use to meet the requirement?

125. Refer to the exhibit.





The pool shown is configured with four pool members in a variety of states. The application is receiving a large number of request. The LTM Specialist needs to make changes to make sure that all members receive the same levels of traffic.

Which changes need to be made?

126. A new iRule needs to be tested. The LTM Specialist needs to measure page load times and monitor potential changes in memory usage A load test is scheduled.

Which two features should the LTM Specialist use to monitor these requirements? (Choose two.)

127. An LTM Specialist needs to create a pool with a set of monitor that checks both the pool members and corresponding application service ports. The pool members have services on port 80. The application service is on port 8009.

The LTM device should load balance traffic to the pool member when the pool member and corresponding application service pass monitor.

Which monitor and parameter set meets this requirement?

128. TWO BIG-IP appliances need to be configured to load balance multiple firewall in a firewall sandwich, Which health monitor setting should be used to verify that the firewalls are able to forward traffic?

129. An LTM Specialist configures a new HTTPS virtual server that contains a valid example.com ssl certificate. The LTM Special receives an error in the browser when connecting.

What must be added to the SSL Client profile to fix this issue?

130. An LTM Specialist must create a new virtual server for HTTP access. The LTM Specialist creates a forwarding virtual server to reach the resource.

What is a potential result of this action?

131. An LTM Specialist needs to configure a setup for antivirus scanning of HTTP traffic with an internet Contact adaption Protocol (ICAP) server.

Which two server type should be used? (Choose two.)

132. Where does a LTM Specialist view all of the objects that are part of a deployed iApp?

133. Six servers have a varying number of connections that change based on the user load.

Which load balancing method should an LTM Specialist apply to divided the web application traffic to the servers on the relative performance trend?

134. Two LTM devices must be manually configured to restrict in the same Device Group.

What is the correct order of steps to meet this requirement?

135. To improve application security, an LTM Specialist must configure a BIG application access. The BIG IP system to authenticate the client certificate before permitting application access. The BIG-IP system must also support the ability to red to redirect users to a certificate enrolment system without generating a browser error.

Within the Client SSL profile, which value should the LTM Specialist select for the Client Certificate option?

136. A virtual server is configured to handle https traffic. The clientssl profile is configured to use a2048-bit RSA key. Due to security requirements, is the LTM Specialist needs to use a 4096-bit RSA key in the future.

What two effects will this change have on the BIG-IP device? (Choose two)

137. An application requires load balancing functionality. The application must be encrypted to the client.

Certain content must be manipulated by the following IRule:





Which set of profiles must be applied to the virtual server?

138. An LTM Specialist plans to enable connection mirroring for a virtual server in an HA environment.

What must the LTM Specialist consider before implementing the configuration change?

139. An LTM Specialist must reconfigure a BIG-IP system that load balances traffic to a web application. The security department has informed the LTM Specialist that the following cipher string must be used for TLS connections from BIG-IP to the web application. NATIVE:IMDS:EXPORT:IDHE:EDH@SPEED

In which virtual server profile should the cipher string be configured?

140. An LTM device needs to be configured a virtual server. The application requires SSL encryption from the client to the server and an X-Forwarded-For added by the LTM device.

Which virtual server type should the LTM Specialist use?

141. An LTM Specialist decides to offload SSL traffic on the LTM device instead of just passing it through. The LTM Specialist needs to change the configure from a Performance (Layer 40 virtual server to a Standard virtual server with SSL offload.

Which two element the LTM Specialist consider when performance this task? (Choose two.)

142. Refer to the Exhibit.





An LTM Specialist notices that two members in a pool are overloaded. To relive the existing members a fourth member (10.128.20.14) is brought up.

How many member will receive and process new connections?

143. An LTM device an application that requires all connections to be secured via SSL The device must verify that request contain a specific cookie before allowing the request to be sent to the pool member.

Which virtual server type should an LTM Specialist configure on the LTM device?

144. A company plans to launch a huge marketing campaign and expects increase demand of their secure website. With the current virtual server setup, the LTM Specialist expects that the LTM device will reach its capacity limits. For the wen application to function properly. Cookies persistence is required. The LTM Specialist needs to reduce LTM device load without breaking the application.

Which two settings should the LTM Specialist modify to meet the requirement? (Choose two.)

145. An TLM Specialist has an Exchange that must use the LTM device to route traffic to the internet.

Which SNAT/NAT configure allows the Exchange server’s traffic access the internet through the LTM device?

146. An LTM Specialist creates an Analytics wide to show the type of browsers used to access a certain application. However, the generated statistics only sum up all transaction for that application under one item called ‘Aggregated.’’

What should the LTM Specialist do to resolve this problem?

147. An LTM device is configure with the wildcard virtual servers displayed below.

A client connection is made to 172.24.31.14:443.

148. A OneConnect profile is applied to a virtual server. The LTM Specialist would like the client source IP addresses within the 10.10.10.0/25 range to reuse an existing server side connection.

Which OneConnect profile source mask should the LTM Specialist use?

149. An LTM device is load balancing telnet and ssh applications in a client/server environment experiencing significant packet delay.

Which setting in the TCP profile should reduce the amount of packet delay?

150. An LTM device is load balancing SIP traffic. An LTM Specialist notices that sometimes the SIP request is being load balanced to the same server as the initial connection.

Which setting in the UDP profile will make the LTM device more evenly distribute the SIP traffic?

151. Internet clients connecting to a virtual server to download a file are experiencing about 150 ms of latency and no packet loss.

Which built-in client-side TCP profile provides the highest throughput?

152. Windows PC clients are connecting to a virtual server over a high-speed, low-latency network with no packet loss.

Which built-in client-side TCP profile provides the highest throughput for HTTP downloads?

153. Users are experiencing low throughput when downloading large files over a high-speed WAN connection. Extensive packet loss was found to be an issue but CANNOT be eliminated.

Which two TCP profile settings should be modified to compensate for the packet loss in the network? (Choose two.)

154. An LTM Specialist is working with an LTM device configured with 10 virtual servers on the same domain with a different key/cert pair per virtual. For examplE. www.example.com; ftp.example.com; ssh.example.com; ftps.example.com.

What should the LTM Specialist do to reduce the number of objects on the LTM device?

155. 10.10.12:80 {

address 10.10.10.13 }

}

}

Which three objects in the virtual server configuration can be removed without disrupting functionality of the virtual server? (Choose three.)

156. An LTM device is running BIG-IP v10.2.0 software. The LTM Specialist is tasked with upgrading the LTM device to BIG-IP v11.2.0 HF1. The LTM Specialist starts the upgrade process by selecting the uploaded Hotfix and installing to an unused volume. After 10 minutes, the LTM Specialist checks the status of the upgrade process and notices that the process is stalled at 0%.

What should the LTM Specialist verify?

157. A stand-alone LTM device is to be paired with a second LTM device to create an active/standby pair. The current stand-alone LTM device is in production and has several VLANs with floating IP addresses configured. The appropriate device service clustering (DSC) configurations are in place on both LTM devices.

Which two non-specific DSC settings should the LTM Specialist configure on the second LTM device to ensure no errors are reported when attempting to synchronize for the first time? (Choose two.)

158. What is the correct command to reset an LTM device to its default settings?

159. In which file would the LTM Specialist find virtual server configurations?

160. When re-licensing an LTM device from the command line interface, which tmsh command should the LTM Specialist use to generate the required information to provide on the F5 licensing portal?

161. A device on the network is configured with the same IP address as the management address of the active LTM device, causing the management GUI to be inaccessible.

Which two methods should the LTM Specialist use to access the LTM device in order to change the management IP address? (Choose two.)

162. The LTM Specialist is in the process of creating a USB boot drive for the purpose of restoring the BIG-IP software to an LTM device. A separate LTM device has been selected for the purpose of creating the USB boot drive. The BIG-IP software ISO has already been uploaded and mounted on the separate LTM device.

Which command should the LTM Specialist use to trigger the LTM device to install the BIG-IP software to the USB boot drive?

163. An LTM Specialist has installed a hotfix that updated the SCCP firmware package.

Which command will ensure that the host subsystem and SCCP reboot?

164. Which procedure should an LTM Specialist follow to move a configuration from a 1500 to a 1600 hardware platform during an upgrade?