303 시험 - F5실제시험문제와 답 - 525문항

Question No : 1

An LTM Specialist is configuring a client profile to offload processing a new application Company policy requires that clients can resume session for up to 30 minutes, but must renegotiate a new session after that.
Which setting should the LTM Specialist change to satisfy this requirement?

A.Renegotiate Max Record Delay
B.Renegotiation period
C.Cache size
D.Cache timeout

정답:
Explanation:
Question stem requires that you can resume SSL session within 30 minutes, then you need to define the ssl cache time in 30 minutes

Question No : 2

An LTM Specialist needs to upgrade all guests on a Viprion eight CMP guests.
What is the maximum number of guests that the LTM Specialist should upgrade at once?

A.Eight
B.One
C.TWO
D.Four

정답:
Explanation:
Each guest is independent, just like hardware upgrades. Can only upgrade one by one, there is no way to upgrade at the same time.

Question No : 3

An LTM Specialist needs to force only FTP traffic, sourced from subnet 10.10.10.0/24 to virtual server 10.10.20.1 to the new FTP1 server.
The following virtual servers are configured on the LTM device:
Traffic sourced from 10.10.10/24 must use the specific pool member for load balancing.
Which configuration change is needed to meet the requirements?

A.Create a new virtual server for traffic sourced from 10.10.10.0/24 on port 80 that is destined to 10.10.20.1/32, and create a new pool has only the pool member FTP1 defined.
B.Add FTP1 to the pool assigned to the MyVS4 virtual server, and remove all other pool members from the pool.
C.Create a new virtual server for traffic sourced from 10.10.10.0/24 on traffic sourced from 10.10.10./24 on port 21 that is destined to 10.10.20.1/32, and create a new pool that has only the pool member FTP1 defined.
D.Add FTP1 to the pool assigned to the MyVS2 virtual server, and remove all other pool member from the pool.

정답:
Explanation:
According to the VS matching order, first match the destination host IP, then match the destination port and finally match the source network segment. In the current network configuration, 10.10.10./24 access to 10.10.10.20.1 will hit MyVS2. If there is no error in the title, subnet 10.10.10.0 to virtual Server 10.10.20.1 to the FTP1 server,’’ Is to distribute all traffic from 10.10.10.1 to FTP1, then D That’s right.

Question No : 4

An LTM is configure an application that is separated into several subdomains across multiple virtual servers. Many of these subdomains require encryption and could be accessed by anyone on the internet. The configuration must NOT result in SSL warnings to end users.
How should the LTM Specialist configure the SSL profiles for these virtual servers?

A.Obtain an SSL certificate for each subdomain, make a Server SSL profile for each subdomain, and apply to the related SSL Virtual Server.
B.Obtain a wildcard certificate, create one Client SSL profile and apply to all SSL Virtual Servers
C.Create a self-singed SSL certificate for each subdomain make a Client SSL profile for each subdomain, and apply to the related SSL Virtual server
D.Create a self-singed SSL certificate for each subdomain make a Client profile for each SSL Virtual Server

정답:
Explanation:
The topic is that there are multiple domain names in the business, and HTTPS services are provided to the internet, and users cannot be allowed to generate SSL alarms. The require client ssl and use CA certificate instead of self-singed certificate. And multiple domain names, you can use wildcard certificates.

Question No : 5

The network team has recently added a new syslog server with IP address 10.1.1.1.
Which command adds the new syslog entry on the F5 LTM device?
A)

B)

C)

D)

A.Option A
B.Option B
C.Option C
D.Option D

정답:

Question No : 6

What should an LTM Specialist configure on an LTM device to send AVR notification emails?

A.Email notification to be sent via iControl from the LTM device
B.Syslog on the LTM device to send to an SMTP server
C.Custom SNMP traps on the LTM device for AVR notifications
D.Email notification to be sent via SMTP from the LTM device

정답:

Question No : 7

RADIUS authentication has been configured on the LTM device.
The default remote user access requirements are as shown:
Read only access to the configuration Utility
Access to TMOS shell
Which two items need to be configured in this situation? (Choose two)

A.Console access is Advanced Shell
B.Console access is Read Only
C.Default remote user role is Guest
D.In Console access is TMSH
E.Default remote user role is Manager
F.Default remote user role is Operator

정답:

Question No : 8

A web developer needs a virtual server configured for an application.
The application details are as follows:
Application is accessed on port 443.
The application traffic is encrypted by the server.
HTTP is not being used. No data manipulation is necessary.
Throughput is critical.
NO connections are terminated on the LTM.
Which configuration provides the best performance?
A)

B)

C)

D)

A.Option A
B.Option B
C.Option C
D.Option D

정답:

Question No : 9

AN LTM Specialist receives reports that an external company application is having reliability issues.
The F5 Administrator finds the following in /vat/log/ltm file.

The LTM Specialist determines that the F5 LTM device is entering into Aggressive Mode Adaptive Reaping, which is causing the site reliability issues.
What is the most likely reason that the LTM device has entered into Aggressive Mode Adaptive Reaping?

A.The LTM device exceeds licensed traffic limits.
B.The site has too many licensed modules.
C.The LTM device has not provisioned AV
D.The site is under DDOS attack

정답:

Question No : 10

An LTM Specialist needs to configure a virtual server with the requirements displayed below.
Application is currently an internal HTTP application
Encrypted external user access
Links are hard for siteA example.com and need to rewritten to siteB.Example.com.
Which profiles must the LTM Specialist use to provide the proper functionality?

A.Clientssll, Stream
B.Serverless, Stream
C.Clientssl, fastL4, Stream
D.Serverless, fastL4, Stream

정답:
Explanation:
For http application and external encryption, clientssl is required, and if the message content needs to be modified, the steam profile is required. FastL4 profile cannot coexist with clientssl and stream.

Question No : 11

Remote office users are having performance issues with a virtual hosted on the F5 LTM. The LTM Specialist reviews the configuration for the virtual server and determine that some settings are set
with default profiles.
Which profile should the LTM Specialist enable to improve virtual server performance?

A.A WAN optimized client side profile
B.A FastL4 profile on the virtual server
C.An HTTP profile for the virtual server
D.A Stream profile for the remote user networks

정답:
Explanation:
They key word is that there are performance problem with Remote office users, no F5. The user experience can be improved through tcp optimization. The expression should be wom-tcp-wan-optimized in Protocol Profile (Client)

Question No : 12

An LTM Specialist to configure a backend server to be disabled it takes longer than 30 seconds to respond to a request.
Which values should the LTM Specialist enter for interval and timeout?

A.Interval 10, timeout 30
B.Interval 10, timeout 31
C.Interval 30, timeout 30
D.Interval 30, timeout 91

정답:
Explanation:
The official recommendation is that timeout 3 times the interval value +1.

Question No : 13

An LTM Specialist needs to create two virtual servers.
The application has links for both HTTP and HTTPS version of application. The client must be persistence to a pool member, no matter which virtual server is accessed.
What must be selected in the Source Address Affinity persistence profile?

A.Match across Virtual Servers
B.Match across Pool Members
C.Match across Services
D.Match across Polls

정답:

Question No : 14

An LTM Specialist is configuring a new virtual server on an LTM device and assigning a SNAT pool that is already is use another virtual server. Both virtual servers use the same pool members to load balance traffic. A maximum of 35,000 users needs to be able to access each virtual server ta any time. The network architecture does NOT allow the backend servers to use the LTM device as a default gateway.
What is the minimum number of SNAT addresses required in the SNAT pool to meet the needs of the virtual servers?

A.2
B.3
C.4
D.1

정답:
Explanation:
Both vs share the same snat pool, and both use the same pool member. Then the concurrent number of snatpool will be added. For each VS, there is a maximum of 35,000 users, and those two VSs have a maximum of 70,000 users. The stem did not mention how many connections each user would have concurrently. Calculated with a minimum of 1 connection, then 70,000 connections would be concurrent. One IP can support 65,535 connection. Therefore, at least 2 or more snaptips are required

Question No : 15

A web server is being overloaded with HTTPS traffic. To decrease the load on the server, the LTM Specialist and the Server. Administrator decide to perform SSL offloading on the LTM device.
The configuration of the virtual server is as follows:

Which change must be made to the configuration to perform SSL offloading?

A.Remove the clientssl and http profiles
B.Remove the clients profile
C.Remove the clientssl and serverssl profiles
D.Remove the severssl profile

정답:

F5 303 시험