303問題集で2022年最新のF5 303試験問題 [Q16-Q38]

5/5 - (3 votes)

303問題集で2022年最新のF5 303試験問題

無料で使える303ブレーン問題集でダウンロード（303テスト問題集無料更新された)

質問16、 While investigating the cause of a device failover, an LTM Specialist discovers the following events in
/var/log/ltm:
01010029:5: Clock advanced by 518 ticks
01010029:5: Clock advanced by 505 ticks
01010029:5: Clock advanced by 590 ticks
01010029:5: Clock advanced by 568 ticks
01010029:5: Clock advanced by 1681 ticks
01010029:5: Clock advanced by 6584 ticks
01140029:5: HA daemon_heartbeat tmm fails action is failover and restart.
010c0026:5: Failover condition, active attempting to go standby.
Which issue caused the failover?

NTP being out of sync

TMM being descheduled

VLAN Fail-safe heartbeats

HA missing heartbeat packets

質問17、 A BIG-IP Administrator configures remote authentication and needs to make sure that users can still login even when the remote authentication server is unavailable.
Which action should the BIG-IP Administrators in the remote authentication configuration to meet this requirement?

Set partition access to “All”

Enable the Fallback to Local option

Configure a remote role grove

Configure a second remote user directory

質問18、 An LTM Specialist configures two LTM devices in a high-availability pair with trusts established and device groups configured properly using network failover. After several months, the LTM Specialist notices that changes made to one LTM device do NOT cause the synchronization status to update to “changes pending,” and this device does NOT synchronize with the device group.
Which two steps should the LTM Specialist take to identify the issue? (Choose two.)

Verify that NTP is synchronized.

Verify the network connectivity between the devices.

Verify that the devices are not using self-signed certificates.

Verify that ConfigSync is using the management IP address.

Verify that port lockdown on the ConfigSync interface is set to allow port 1026.

質問19、 Which procedure should an LTM Specialist follow to move a configuration from a 1500 to a 1600 hardware platform during an upgrade?

tmsh save sys config file filename.scf
copy the file from the /var/local/scf directory from one device to the other tmsh load sys config file filename.scf

tmsh save sys backup file filename.scf
copy the file from the /var/local/scf directory from one device to the other tmsh load sys backup file filename.scf

tmsh save sys backup file filename.scf
copy the file from the /var/local/ucs directory from one device to the other tmsh load sys backup file filename.scf

tmsh save sys config file filename.scf
copy the file from the /var/local/ucs directory from one device to the other tmsh load sys config file filename.scf

質問20、 An LTM Specialist loads a UCS file generated on a different LTM device and receives the following error message:
“mcpd[2395]: 01070608:0: License is not operational (expired or digital signature does not match contents)” Which command should the LTM Specialist use to prevent the error?

tmsh show /sys license

tmsh show /sys hardware

bigpipe config save /config.ucs

tmsh load /sys /ucs rma <path/to/UCS>

tmsh load /sys ucs <path/to/UCS> no-license

質問21、 Given LTM device ltm log:
Sep 26 20:51:08 local/lb-d-1 notice promptstatusd[3695]: 01460006:5: semaphore mcpd.running(1) held Sep 26 20:51:08 local/lb-d-1 notice promptstatusd[3695]: 01460006:5:
Sep 26 20:51:08 local/lb-d-1 warning promptstatusd[3695]: 01460005:4: mcpd.running(1) held, wait for mcpd Sep 26 20:51:08 local/lb-d-1 info sod[3925]: 010c0009:6: Lost connection to mcpd – reestablishing.
Sep 26 20:51:08 local/lb-d-1 err bcm56xxd[3847]: 012c0004:3: Lost connection with MCP: 16908291 …
Exiting bsx_connect.cpp(174)
Sep 26 20:51:08 local/lb-d-1 info bcm56xxd[3847]: 012c0012:6: MCP Exit Status Sep 26 20:51:08 local/lb-d-1 info bcm56xxd[3847]: 012c0012:6: Info: LACP stats (time now:1348717868) :
no traffic
Sep 26 20:51:08 local/lb-d-1 info bcm56xxd[3847]: 012c0014:6: Exiting…
Sep 26 20:51:08 local/lb-d-1 err lind[3842]: 013c0004:3: IO error on recv from mcpd – connection lost Sep 26 20:51:08 local/lb-d-1 notice bigd[3837]: 01060110:5: Lost connection to mcpd with error 16908291, will reinit connection.
Sep 26 20:51:08 local/lb-d-1 err statsd[3857]: 011b0004:3: Initial subscription for system configuration failed with error ” Sep 26 20:51:08 local/lb-d-1 err statsd[3857]: 011b0001:3: Connection to mcpd failed with error ‘011b0004:3:
Initial subscription for system configuration failed with error ”’
Sep 26 20:51:08 local/lb-d-1 err csyncd[3851]: 013b0004:3: IO error on recv from mcpd – connection lost
………….skipping more logs…..
Sep 26 20:51:30 local/lb-d-1 notice sod[3925]: 01140030:5: HA proc_running bcm56xxd is now responding.
Sep 26 20:51:34 local/lb-d-1 notice sod[3925]: 01140030:5: HA proc_running mcpd is now responding.
Sep 26 20:51:34 local/lb-d-1 notice sod[3925]: 010c0018:5: Standby
Which daemon failed?

promptstatusd

mcpd

sod

bcm56xxd

lind

質問22、 A custom TCP application using a single server is being migrated to the LTM device. A server is being added to the pool. The application is known to violate the TCP protocol RFC. Theapplication currently works without error from a user perspective.
Which virtual server type is appropriate in this situation?

Stateless TCP protocol is not applicable

Performance (Layer 4)-pure layer A forwarding

forwarding (Layer 2) pure routingforwarding, pool cannot be specified

Standard-tcp profile exists, RFC verification will be performed

質問23、 Remote office users are having performance issues with a virtual hosted on the F5 LTM. The LTM Specialist reviews the configuration for the virtual server and determine that some settings are set with default profiles.
Which profile should the LTM Specialist enable to improve virtual server performance?

A WAN optimized client side profile

A FastL4 profile on the virtual server

An HTTP profile for the virtual server

A Stream profile for the remote user networks

質問24、 A BIG-IP Administrator needs to view the CPU utilization of a particular Virtual Server. Which section of the Configuration Utility should the administrator use for this purpose?

Statistics > Module Statistics > Local Traffic > Virtual Addresses

Statistics > Module Statistics > Traffic Summary

Statistics > Analytics > Process CPU Utilization

Statistics > Module Statistics > Local Traffic > Virtual Servers

質問25、 An LTM Specialist has detected that a brute force login attack is occurring against the SSH service via a BIG-IP management interface. Login attempts are occurring from many IPs within the internal company network. BIG-IP SSH access restrictions are in place as follows:

The LTM Specialist has determined that SSH access should only occur from the 192.168.1.0/24 and
172.16.254.0/23 networks.
Whichtmsh command should the LTM Specialist use to permit access from the desired networks only?

modify.sys sshd allow add {”192.168. 10/24 , ” ”172. 16 2540/23”)

modify /sys sshd login disable (”10.0.00/8”, ”172 16.0 0/12”, ”192. 168.0.0/16”)

modify/sys allow replace-all-with {”192.168.1.00/24”, ”192.16.254.0/23”}

modify/sys sshd login enable {”192.166.10/24”” ”172.16 254 0/23

質問26、 An LTM device provides load balancing to a web application? The LTM device has two dual-core processors and a licensed SSL Transactions Per Second (TPS) limit of 500 CMP is enabled.
TLS connections are used between client systems and virtual servers on the LTM device, as well as from the LTM device to servers used as part of LTM pool.
TLS enabled virtual servers utilize certificates based on 2048-bit keys During a peak period. 2560 new TLStransactions per second are attempted to the web application via the LTM device.
What will happen in this scenario?

560 new TLS transactions will be silently discarded due to the SSL TPS license limit

Nothing: TLS transactions per second are NOT affected by an SSL TPS license limit

2060 new TLS transactions will be silently discarded due to the SSL TPS license limit

Nothing: 2560 TLS transactions per second is within the SSI TPS license limit.

質問27、 A customer needs to intercept all of the redirects its application is sending to clients. When a redirect is matched, the customer needs to log a message including the client IP address.
Which iRule should be used?

when HTTP_RESPONSE {
if { [HTTP::is_3xx] } {
log local0. “redirecting client ip address [IP::addr [IP::remote_addr]]”
}
}

when HTTP_REQUEST {
if { [HTTP::is_301] } {
log local0. “redirecting client ip address [IP::addr [IP::remote_addr]]”
}
}

when HTTP_REQUEST {
if { [HTTP::is_redirect] } {
log local0. “redirecting client ip address [IP::addr [IP::remote_addr]]”
}
}

when HTTP_RESPONSE {
if { [HTTP::is_redirect] } {
log local0. “redirecting client ip address [IP::addr [IP::remote_addr]]”
}
}

質問28、 A BIG-IP Administrator suspects that one of the BIG-IP device power supplies is experiencing power outages.
Which log file should the BIG-IP Administrator check to verify the suspicion?

/war /log/daemon.log

/var/log/kern.log

/var/log/ltm

/var/log/audit

質問29、 A BIG-IP Administrator creates a new VLAN on BIG-IP Cluster Member A and attaches an Interface to it.
Although the Auto Config Sync is in place, the new VLAN does NOT show up on Cluster Member B.
What should the BIG-IP Administrator do to ensure the new VLAN is configured on each Cluster Member?

Configure the new VLAN manually on Cluster Member B.

Reset the Device Trust of the BIG-IP Cluster on either Cluster Member.

Configure a Default Route for the new VLAN on Cluster Member A.

Enable the Interface that is attached to the new VLAN on Cluster Member A.

質問30、 A new VLAN vlan301 has been configured on a highly available LTM device in partition ApplicationA. A new directly connected backend server has been placed on vlan301. However, there are connectivity issues pinging the default gateway. The VLAN self IPs configured on the LTM devices are 192.168.0.251 and
192.168.0.252 with floating IP 192.168.0.253. The LTM Specialist needs to perform a packet capture to assist with troubleshooting the connectivity.
Which command should the LTM Specialist execute on the LTM device command line interface to capture the attempted pings to the LTM device default gateway on VLAN vlan301?

tcpdump -ni /ApplicationA/vlan301 ‘host 192.168.0.253’

tcpdump -ni vlan301 ‘host 192.168.0.253’

tcpdump -ni /ApplicationA/vlan301 ‘host 192.168.0.251 or host 192.168.0.252’

tcpdump -ni vlan301 ‘host 192.168.0.251 or host 192.168.0.252’

質問31、 An LTM specialist needs to upgrade a VCMP quest in an HA Setup with minimum interruption for all VCMP guestinstances.
In which should the LTM Specialist perform this upgrade?

Relicense the host. Failover all guest’s active traffic-groups to the other host, copy image to gest, create guest UCS install and set boot location to new volume, reboot

Failover this specific guest’s active traffic-group to the other Host, Relicense the guest, copy image to guest , create guest UCS, install and set boot location to new volume, reboot

Failover all guests’ active traffic-group to the other Host, Relicense the host, copy image to guest, create guest UCS, install and set boot location to new volume , reboot

Failover all guests’ active traffic-group to the other host, copy image to guest, create guest UCS install and set boot location to new volume, reboot, Relicense the host

質問32、 A set of servers is used for an FTP application as well as an HTTP website via separate BIG-IP Pools. The server support team reports that some servers are receiving a lot more traffic than others.
Which Load Balancing Method should the BIG-IP Administrator apply to even out the connection count?

Ratio (Member)

Least Connections (Member)

Least Connections (Node)

Ratio (Node)

質問33、 An application is being load balanced through the LTM device using the configuration displayed below.
The network has been re-engineered to NAT all client connection. As a result, allclient connections are hitting the same pool member.

Which changes should the LTM Specialist make in order to restore load balancing functionality wile maintaining session persistence?

Change the virtual server type to Standard, add an httpprofile, and change the persistence profile to Destination Address

Leave the virtual server type set Performance (Layer 4) and change the persistence type to hash

Change the virtual serer type to Forwarding (Layer 4) and leave the persistence type tohash source Address

Change the virtual server to Standard add an http profile, and change the persistence profile to Cookie persistence

質問34、 — Exhibit –

— Exhibit —
Refer to the exhibit.
Which profile could be removed or changed on this virtual server to reduce CPU load on the LTM device without increasing server side bandwidth usage?

tcp

http

httpcompression

optimized-caching

質問35、 What should an LTM Specialist configure on an LTM device to send AVR notification emails?

Email notification to be sent via iControl from the LTM device

Syslog on the LTM device to send to an SMTP server

Custom SNMP traps on the LTM device for AVR notifications

Email notification to be sent via SMTP from the LTM device

質問36、 — Exhibit –

— Exhibit —
Refer to the exhibit.
A client attempts to connect from a Google Chrome browser to a virtual server on a BIG-IP LTM. The virtual server is SSL Offloaded. When the client connects, the client receives an SSL error. The client receives the same errors when trying Mozilla Firefox and Internet Explorer browsers.
The LTM Specialist does an ssldump on the virtual server and receives the results as per the exhibit.
How should this be resolved?

Set the virtual server to listen on port 443 (HTTPS).

Upgrade the client to support the appropriate SSL cipher suite.

Select the appropriate “SSL Profile (Client)” in the virtual server settings.

Adjust the SSL key length in the SSL profile to match the minimum required by the client.

質問37、 A web application requires the client to provide the destination server and service identification.
Which HTTP header will supply this information?

Host

From

Expect

Connection

質問38、 — Exhibit –

— Exhibit —
Refer to the exhibit.
An LTM Specialist has a virtual server set up on the LTM device as per the exhibit. The LTM Specialist receives reports of intermittent issues. Some clients are connecting fine while others are failing to connect.
The LTM Specialist does a tcpdump on the relevant interfaces, with the following results extracted:
What is causing the intermittent issues?