303 F5 BIG-IP ASM Specialist exact Exam Questions

BIG-IP ASM Specialist

Last Update 4 hours ago Total Questions : 520

The BIG-IP ASM Specialist content is now fully updated, with all current exam questions added 4 hours ago. Deciding to include 303 practice exam questions in your study plan goes far beyond basic test preparation.

You'll find that our 303 exam questions frequently feature detailed scenarios and practical problem-solving exercises that directly mirror industry challenges. Engaging with these 303 sample sets allows you to effectively manage your time and pace yourself, giving you the ability to finish any BIG-IP ASM Specialist practice test comfortably within the allotted time.

Question # 136

An LTM Specialist must reconfigure a BIG-IP system that load balances traffic to a web application. The security department has informed the LTM Specialist that the following cipher string must be used for TLS connections from BIG-IP to the web application.

NATIVE:IMDS:EXPORT:IDHE:EDH@SPEED

In which virtual server profile should the cipher string be configured?

Server SSL

CB. Client SSL

SPDY profile

Rewrite profile

Question # 137

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

An LTM Specialist is reviewing the virtual server configuration on an LTM device.

Which two actions should the LTM Specialist perform to minimize the virtual server configuration? (Choose two.)

Remove 'snat automap' from the virtual server.

Remove the 'http' profile from the virtual server.

Remove the 'default_class' from the virtual server.

Combine 'acct_class' and 'marketing_class' into one class and update associations on the virtual server.

Combine 'marketing_class' and 'default_class' into one class and update associations on the virtual server.

Question # 138

Refer to the exhibit

The network team creates a new VLAN on the switches. The BIG-IP Administrator needs to create a

configuration on the BIG-IP device. The BIG-IP Administrator creates a new VLAN and Self IP, but the

servers on the new VLAN are NOT reachable from the BIG-IP device.

Which action should the BIG-IP Administrators to resolve this issue?

Set Port Lockdown of Set IP to Allow All

Change Auto Last Hop to enabled

Assign a physical interface to the new VLAN

Create a Floating Set IP Address

Question # 139

An SSL application is being migrated to the LTM device. Both encrypted and unencrypted traffic are accepted by the server. The virtual server configuration is as follows:

Which LTM device profile should be used on the LTM device to reduce the CPU load on the current.

Protocol

serverssl

clientsssl

stream

Question # 140

An LTM Specialist needs to enable TCP connection re-use for a non-HTTP application. The application uses a simple request response protocol where each request and response is contained within a single packet.

Which configuration option should the LTM Specialist adjust?

increase the connection limit for pool members

increase the idle Timeout in a custom TCP profile

use a Performance (Layer 4) Virtual Server

assign a OneConnect profile

Question # 141

An LTM device configured with a management IP address and route and a series of self-IPs and TMM routes. Both management and TMM have a routing entry for 101 10/24 Application traffic is being load balanced and sent to pool member 10.1.1.123 with SNAT Automap and configured.

Which route will the LTM device use?

TMM route regardless of the management port status

both routes, which will duplicate traffic on both management and TMM interface

equal cost multipath load balancing via both routes

management route when TMM interface is down or TMM is offline

management route regardless of the management port status

Question # 142

An LTM device receives a response string containing "error"

Which monitor type and parameter will mark the HTTP server as down?

HTTP monitor, Receive String "error", and set the Reverse option to Yes

HTTP monitor and Receive String "error'' ... flag is up

HTTP monitor. Receive String "down", and set the Reverse option to Yes .... flag is

HTTP monitor and Receive Disable String "error'' .... flag is disable

Question # 143

An LTM Specialist upgrades the switching infrastructure and the backend servers on the LAN segments.

The LTM Specialist notices a 20% memory usage increase on the BIG-IP device while handling the same number of concurrent connections.

A comparison of statistics pre-upgrade and post-upgrade shows a significant reduction on the following:

-RTT between the BIG-IP device and the backend servers

-Packet drops in the switch

Time to First Byte (TTFB)

The LTM Specialist is concerned with the scalability of the number of concurrent connections with the new memory usage.

Which setting should be changed to reduce the memory usage on the BIG-IP device?

Reduce the proxy buffer high setting on the server-side TCP profile

Increase the receive window of the client-side TCP profile

Increase the proxy buffer high setting on the server-side TCP profile

Reduce the idle of the client-side TCP profile

Question # 144

A BIG-IP Administrator must configure the BIG-IP device to send system log messages to a remote syslog server In addition, the log messages need to be sent over TCP for guaranteed delivery. What should the BIG-IP Administrator configure?

syslog-ng

Request Logging Profile

HSL Logging

Remote Logging

Question # 145

A user wants to use the iHealth Upgrade Advisor to determine any issues with upgrading TMOS from 13.0 to 13.1.

Where can the user generate the QKView to upload to iHealth?

System > Software Management

System > Archives

System > Configuration

System > Support

Question # 146

-- Exhibit –

-- Exhibit --

Refer to the exhibits.

An LTM device has been configured for load balancing a number of different application servers. Configuration changes need to be made to the LTM device to allow administrative management of the servers in 172.16.10/24, 172.16.20/24, and 172.16.30/24 networks. The servers require outbound access to numerous destinations for operations.

Which solution has the simplest configuration changes while maintaining functionality and basic security?

Remove 172.16.10.0:0/24, 172.16.20.0:0/24, and 172.16.30.0:0/24, and keep 0.0.0.0:0/0.0.0.0 enabled on all VLANs.

Replace 172.16.10.0:0/24, 172.16.20.0:0/24, and 172.16.30.0:0/24, with 172.16.0.0:0/16, and keep 0.0.0.0:0/0.0.0.0.

Enable 172.16.10.0:0/24, 172.16.20.0:0/24, and 172.16.30.0:0/24 on ingress VLAN(s), and enable 0.0.0.0:0/0.0.0.0 on egress VLAN(s).

Enable 172.16.10.0:0/24, 172.16.20.0:0/24, and 172.16.30.0:0/24 on egress VLAN(s), and enable 0.0.0.0:0/0.0.0.0 on ingress VLAN(s).

Question # 147

Which iRule will reject any connection originating from a 10.0.0.0/8 network?

when CLIENT_ACCEPTED {

set remote_ip [IP::addr [IP::remote_addr] mask 8]

switch $remote_ip {

"10.0.0.0" { reject }

"11.0.0.0" { pool pool_http1}

default { pool http_pool }

}

when CLIENT_ACCEPTED {

set remote_ip [IP::addr [IP::local_addr] mask 8]

switch $remote_ip {

"10.0.0.0" { reject }

"11.0.0.0" { pool pool_http1}

default { pool http_pool }

}

when CLIENT_ACCEPTED {

set remote_ip [IP::addr [IP::client_addr] mask 255.0.0.0]

switch $remote_ip {

"10.0.0.0" { reject }

"11.0.0.0" { pool pool_http1}

default { pool http_pool }

}

when CLIENT_ACCEPTED {

set remote_ip [IP::addr [IP::local_addr] mask 255.0.0.0]

switch $remote_ip {

"10.0.0.0" { reject }

"11.0.0.0" { pool pool_http1}

default { pool http_pool }

}

Question # 148

All pool members are online. All other virtual server settings are at default What might after the load balancing behavior?

enabing SNAT automap

enabing a falback host in the http profile

adding a oneconnect profile

adding a persistence profile

Question # 149

Which two subsystems could the LTM Specialist utilize to access an LTM device with lost management interface connectivity? (Choose two.)

AOM

ILO

SCCP

ALOM

Question # 150

A virtual server for a set of web services is constructed on an LTM device. The LTM Specialist has created an iRule and applied this iRule to the virtual server:

when HTTP_REQUEST {

switch [HTTP::uri] {

"/ws1/ws.jsp" {

log local0. "[HTTP::uri]-Redirected to JSP Pool"

pool JSP

}

default { log local0. "[HTTP::uri]-Redirected to Non-JSP Pool"

pool NonJSP

}

However, the iRule is NOT behaving as expected. Below is a snapshot of the log:

/WS1/ws.jsp-Redirected to JSP Pool

/WS1/WS.jsp-Redirected to Non-JSP Pool