Question 1

A web server administrator informs the BIG-IP Administrator that web servers are overloaded Starting next month, the BIG-IP device will terminate SSL to reduce web server load. The BIG-IP device is ready using client SSL client profile and Rules on HTTP level. What actions should the BIG-IP Administrators to achieve the desired configuration?

Options :

A : Remove the server SSL profile and configure the Pool Members to use HTTP

B : Remove the client SSL profile and configure the Pool Members to US HTTP

C : Remove the chart SSL profile and change the Virtual Server to accept HTTP

D : Remove the server SSL profile and change the Virtual Server to accept HTTP traffic

Answer: A

Question 2

Which iRule will reject any connection originating from a 10.0.0.0/8 network?

Options :

A :

when CLIENT_ACCEPTED {

set remote_ip [IP::addr [IP::remote_addr] mask 8]

switch $remote_ip {

"10.0.0.0" { reject }

"11.0.0.0" { pool pool_http1}

default { pool http_pool }

}

B :

when CLIENT_ACCEPTED {

set remote_ip [IP::addr [IP::local_addr] mask 8]

switch $remote_ip {

"10.0.0.0" { reject }

"11.0.0.0" { pool pool_http1}

default { pool http_pool }

}

C :

when CLIENT_ACCEPTED {

set remote_ip [IP::addr [IP::client_addr] mask 255.0.0.0]

switch $remote_ip {

"10.0.0.0" { reject }

"11.0.0.0" { pool pool_http1}

default { pool http_pool }

}

D :

when CLIENT_ACCEPTED {

set remote_ip [IP::addr [IP::local_addr] mask 255.0.0.0]

switch $remote_ip {

"10.0.0.0" { reject }

"11.0.0.0" { pool pool_http1}

default { pool http_pool }

}

Answer: C

Question 3

Given the iRule:

when HTTP_REQUEST {

if {([HTTP::username] ne "") and ([HTTP::password] ne "") } {

log local0. "client ip [IP::remote_addr] credentials provided [HTTP::username] [HTTP::password]"}

else {

pool old_application_pool

}

The associated virtual server has a default pool named new_application_pool.

Which functionality does the iRule provide?

Options :

A : Allows clients with credentials to access the old_application_pool and logs the access of clients without credentials to the new_application_pool.

B : Allows clients without credentials to access the old_application_pool and logs the access of clients with credentials to the new_application_pool.

C : Allows clients with credentials to access the old_application_pool and logs the attempted access of clients with credentials to the new_application_pool.

D : Allows clients without credentials to access the old_application_pool and logs the attempted access of clients without credentials to the new_application_pool.

Answer: B

Question 4

Refer to the exhibit.

An LTM Specialist has multiple SNAT and virtual server objects configured as in the bigip.conf shown. The LTM Specialist tests a connection from a client with. IP 172.163.31.11 to 192.168.0.100:80. Which two objects will show an increase in Local Traffic statistics connections?

Options :

A : VS_A&SNAT_B

B : VS_B&SNAT_B

C : VS_ B & SNAT A

D : VS_A & SNAT A

Answer: A

Question 5

An F5 LTM Specialist needs to perform an LTM device configuration backup prior to RMA swap. Which command should be executed on the command line interface to create a backup?

Options :

A : bigpipe config save /var/tmp/backup.ucs

B : tmsh save /sys ucs /var/tmp/backup.ucs

C : tmsh save /sys config /var/tmp/backup.ucs

D : tmsh save /sys config ucs /var/tmp/backup.ucs

Answer: B

Higher Test Marks with Free Online 303 Exam Practice

Buying Options: