Weekend Sale Special Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: bigdisc65

BIG-IP ASM 303 F5 Study Notes

Page: 18 / 19
Question 72

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

An LTM Specialist is troubleshooting an issue with SSL and is receiving the error shown when connecting to the virtual server. When connecting directly to the pool member, clients do NOT receive this message, and the application functions correctly. The LTM Specialist exports the appropriate certificate and key from the pool member and imports them into the LTM device. The LTM Specialist then creates the Client SSL profile and associates it with the virtual server.

What is the issue?

Options:

A.

The SSL certificate and key have expired.

B.

The SSL certificate and key do NOT match.

C.

The client CANNOT verify the certification path.

D.

The common name on the SSL certificate does NOT match the hostname of the site.

Question 73

An LTM Specialist is creating a custom EAV monitor.

In which directory should the LTM Specialist upload the script?

Options:

A.

/usr/monitor

B.

/usr/monitors

C.

/config/monitors

D.

/usr/bin/monitors

E.

/config/templates

Question 74

A webserver is being overloaded with HTTPS traffic. To decrease the load on the server, the LTM Specialist and the Server. Administrator decide to perform SSL offloading on the LTM device. The configuration of the virtual server is as follows:

Which change must be made to the configuration to perform SSL offloading?

Options:

A.

Remove the clientssl and http profiles

B.

Remove the clients profile

C.

Remove the clientssl and serverssl profiles

D.

Remove the severssl profile

Question 75

-- Exhibit –

-- Exhibit --

Refer to the exhibits.

A virtual server has been configured for SSL offload on a single-arm network. On average, the virtual server will be handling 100,000 connections, with a peak of 130,000 connections. Between the virtual server and the web servers there is a single reverse proxy to provide site caching. The proxy is configured to perform source IP persistence before contacting the web servers. The site is logging users out immediately after logging them in.

What should the LTM Specialist do to resolve this issue?

Options:

A.

Add a source address persistence profile to the virtual server.

B.

Create an iRule to add client IP persistence to a SNAT pool member.

C.

Change the virtual server server-side TCP profile to tcp-lan-optimized.

D.

Configure the virtual server HTTP profile to insert an X-Forwarded-For header.

Page: 18 / 19
Exam Code: 303
Exam Name: BIG-IP ASM Specialist
Last Update: May 16, 2024
Questions: 0
303 pdf

303 PDF

$28  $80
303 Engine

303 Testing Engine

$33.25  $95
303 PDF + Engine

303 PDF + Testing Engine

$157.5  $450