303 F5 BIG-IP ASM Specialist exact Exam Questions

BIG-IP ASM Specialist

Last Update 2 hours ago Total Questions : 520

The BIG-IP ASM Specialist content is now fully updated, with all current exam questions added 2 hours ago. Deciding to include 303 practice exam questions in your study plan goes far beyond basic test preparation.

You'll find that our 303 exam questions frequently feature detailed scenarios and practical problem-solving exercises that directly mirror industry challenges. Engaging with these 303 sample sets allows you to effectively manage your time and pace yourself, giving you the ability to finish any BIG-IP ASM Specialist practice test comfortably within the allotted time.

Question # 16

An LTM Specialist needs to use a set of addresses to access an Internet website in an outbound configuration.

Which feature should the LTM Specialist configure?

NAT pool

NAT address

SNAT pool

SNAT address

Question # 17

A client (10.10.1.30) connecting to an HTTPS virtual server (10.10.1.100) with a clientssl profile is getting an SSL error.

Which options will trace this issue?

tcpdump -i external -X -e -nn -vvv -w /shared/ssl_problem.cap port 443 and host 10.10.1.30

ssldump -r /shared/ssl_problem.cap -n -x

tcpdump -i external -s 0 -w /shared/ssl_problem.cap port 443 and host 10.10.10.30 and host 10.10.1.100

ssldump -r /shared/ssl_problem.cap -n -x

tcpdump -i external -X -s 0 -vvv src host 10.10.10.30 and dst host 10.10.1.100 and port 443 > /shared/ssl_problem.cap

ssldump -r /shared/ssl_problem.cap -n -x

tcpdump -i external -X -e -nn -vv port 443 and host 10.10.1.100 and host 10.10.1.30 > /shared/ssl_problem.cap

ssldump -n -x < /shared/ssl_problem.cap

Question # 18

Four members in a server pool have similar hardware platforms. An LTM Specialist needs the load balancing method that can select the server with the fewest entries in the persistence table.

Which load balancing method should the LTM Specialist use?

Observed

Dynamic Ratio

Least Sessions

Leas Connections

Question # 19

The LTM Specialist is in the process of creating a USB boot drive for the purpose of restoring the BIG-IP software to an LTM device. A separate LTM device has been selected for the purpose of creating the USB boot drive. The BIG-IP software ISO has already been uploaded and mounted on the separate LTM device.

Which command should the LTM Specialist use to trigger the LTM device to install the BIG-IP software to the USB boot drive?

tmsh

install

mkdisk

bigip_software_create

Question # 20

One LTM device in an HA pair of LTM devices is unable to reach its default gateway. An HA Failover event needs to happen.

Which configuration item enables this behavior?

iRule

Gateway Fail Safe

Gateway pool monitor

Gateway pool

Question # 21

A BIG-IP Administrator configures a Virtual Server. Users report that they always receive a TCP RST packet to the BIG-IP system when attempting to connect to it. What is the possible reason for this issue?

The virtual server Type is set to Internal

The virtual server Type is set to Reject

The virtual server Type is set to Drop

The virtual server Type is set to Stateless

Question # 22

Refer to the exhibit.

According to the shown Configuration Utility stings What is the setting of the User Directory configuration under the Authentication submenu?

Local

Managed

Remote-TACACS+

Default system configuration

Question # 23

A virtual server is experiencing intermittent port exhaustion. What should be done to fix this issue?

add more SNAT addresses

add more pool members

enable advanced routing

enable SNAT automap

Question # 24

An LTM Specialist has detected that a brute force login attack is occurring against the SSH service via a BIG-IP management interface. Login attempts are occurring from many IPs within the internal company network. BIG-IP SSH access restrictions are in place as follows:

The LTM Specialist has determined that SSH access should only occur from the 192.168.1.0/24 and 172.16.254.0/23 networks.

Which tmsh command should the LTM Specialist use to permit access from the desired networks only?

modify.sys sshd allow add {''192.168. 10/24 , '' ''172. 16 2540/23'')

modify /sys sshd login disable (''10.0.00/8'', ''172 16.0 0/12'', ''192. 168.0.0/16'')

modify/sys allow replace-all-with {''192.168.1.00/24'', ''192.16.254.0/23''}

modify/sys sshd login enable {''192.166.10/24'''' ''172.16 254 0/23

Question # 25

Which two alerting capabilities can be enabled from within an application visibility reporting (AVR) analytics profile? (Choose two.)

sFlow

SNMP

e-mail

LCD panel alert

high speed logging (HSL)

Question # 26

TWO LTM devices are in the same Device Group and configured for Ac live/Standby Failover. The LTM Specialist observes that the HA Active and Standby device constantly changes state. All network links use the default route domain A dedicated fiber ink is used for the HA connection with a latency of 250 ms but no packet loss.

What is causing the change in failover state to occur?

The HA network is using the default routing domain.

The HA network is using multicast IP.

The HA network is not configured for mirroring.

The HA network latency is too high.

Question # 27

An LTM Specialist is troubleshooting virtual server 10.0.0.1:443 residing on VLAN vlan301. The web application is accessed via www.example.com. The LTM Specialist wants to save a packet capture with complete decrypted payload for external analysis.

Which command should the LTM Specialist execute on the LTM device command line interface?

tcpdump -vvv -s 0 'host 10.0.0.1 and port 443' -w /var/tmp/trace.cap

tcpdump -vvv -s 0 -ni vlan301 'host 10.0.0.1 and port 443' -w /var/tmp/trace.cap

ssldump -Aed -k /config/filestore/files_d/Common_d/certificate_key_d/:Common:www.example.com.key_1 > /var/tmp/trace.cap

ssldump -Aed -ni vlan301 -k /config/filestore/files_d/Common_d/certificate_key_d/:Common:www.example.com.key_1 > /var/tmp/trace.cap