Spring Sale Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: buysanta

Exact2Pass Menu

BIG-IP ASM Specialist

Last Update 4 hours ago Total Questions : 520

The BIG-IP ASM Specialist content is now fully updated, with all current exam questions added 4 hours ago. Deciding to include 303 practice exam questions in your study plan goes far beyond basic test preparation.

You'll find that our 303 exam questions frequently feature detailed scenarios and practical problem-solving exercises that directly mirror industry challenges. Engaging with these 303 sample sets allows you to effectively manage your time and pace yourself, giving you the ability to finish any BIG-IP ASM Specialist practice test comfortably within the allotted time.

Question # 121

An LTM device provides load balancing to a web application? The LTM device has two dual-core processors and a licensed SSL Transactions Per Second (TPS) limit of 500 CMP is enabled.

TLS connections are used between client systems and virtual servers on the LTM device, as well as from the LTM device to servers used as part of LTM pool.

TLS enabled virtual servers utilize certificates based on 2048-bit keys

During a peak period. 2560 new TLS transactions per second are attempted to the web application via the LTM device.

What will happen in this scenario?

A.

560 new TLS transactions will be silently discarded due to the SSL TPS license limit

B.

Nothing: TLS transactions per second are NOT affected by an SSL TPS license limit

C.

2060 new TLS transactions will be silently discarded due to the SSL TPS license limit

D.

Nothing: 2560 TLS transactions per second is within the SSI TPS license limit.

Question # 122

An LTM Specialist needs to provide access to a 8BG-IP to device for a company's support person access to the BIG IP device, but are NOT allowed to change any settings All support the support remote access to the BIG-IP device, but are NOT allowed to change ant settings. All support have accounts in the company's Active Directory

Which method is appropriate to provide access for the support personnel to the BIG-JP device?

A.

configure remote authentication for all users with a default user role of Guest

B.

configure remote authentication and map support personnel users to the Guest user role

C.

configure remote authentication and map support personnel users to the Operator user role

D.

configure remote authentication for all users with a default user role of Operator

Question # 123

An LTM Specialist needs to apply SNAT using currently used SNAT pool to a new virtual server.

What needs to be completed before applying that configuration change?

A.

Review connection for the selected SNAT pool and enlarge it if appropriate

B.

Make sure that the BIG-IP device is NOT operating under heavy load during peak times

C.

Verify that the IP address of the SNAT pool are in the same subnet as the pool members

D.

Verify that the IP address of the SNAT pool are in the same VLAN as the pool members.

Question # 124

A web application is meant to log the URI of the resource that responded to the client's initial Request-URI.

Which HTTP header will supply this information?

A.

Via

B.

Server

C.

Trailer

D.

Referer

Question # 125

An LTM Specialist needs to modify the logging level for tcpdump execution events. Checking the BigDB Key, the following is currently configured:

sys db log.tcpdump.level {

value "Notice"

}

Which command should the LTM Specialist execute on the LTM device to change the logging level to informational?

A.

tmsh set /sys db log.tcpdump.level value informational

B.

tmsh set /sys db log.tcpdump.level status informational

C.

tmsh modify /sys db log.tcpdump.level value informational

D.

tmsh modify /sys db log.tcpdump.level status informational

Question # 126

-- Exhibit –

-- Exhibit --

Refer to the exhibits.

An LTM Specialist configures a virtual server for an internal application to perform client-side encryption while allowing the server-side traffic to be unencrypted. Application users report that images are NOT loading through the virtual server; however, images load when going directly to the server.

What should the LTM Specialist configure to allow the images to load through the virtual server?

A.

HTTP profile with "SSL Offload" enabled

B.

HTTP profile with "SSL Offload" disabled

C.

Stream profile with source "http:" and target "https:"

D.

Stream profile with target "http:" and source "https:"

Question # 127

Refer to the exhibit

A connection is being established to IP 1.1.1.1 on port 8080.

Which virtual server will handle the connection?

A.

fwd_8080_vs

B.

host_vs

C.

host_ 8080_VS

D.

fwdvs

Question # 128

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

A client attempts to connect from a Google Chrome browser to a virtual server on a BIG-IP LTM. The virtual server is SSL Offloaded. When the client connects, the client receives an SSL error. The client receives the same errors when trying Mozilla Firefox and Internet Explorer browsers.

The LTM Specialist does an ssldump on the virtual server and receives the results as per the exhibit.

How should this be resolved?

A.

Set the virtual server to listen on port 443 (HTTPS).

B.

Upgrade the client to support the appropriate SSL cipher suite.

C.

Select the appropriate "SSL Profile (Client)" in the virtual server settings.

D.

Adjust the SSL key length in the SSL profile to match the minimum required by the client.

Question # 129

An IT administrator wants to log which server is being load balanced to by a user with IP address 10.10.10.25.

Which iRule should the LTM Specialist use to fulfill the request?

A.

when SERVER_CONNECTED {

if { [IP::addr [IP::remote_addr]] equals 10.10.10.25] } {

log local0. "client 10.10.10.25 connected to pool member [IP::addr [LB::server addr]]" }

}

B.

when CLIENT_ACCEPTED {

if { [IP::addr [clientside [IP::remote_addr]] equals 10.10.10.25] } {

log local0. "client 10.10.10.25 connected to pool member [IP::addr [LB::server addr]]" }

}

C.

when SERVER_CONNECTED {

if { [IP::addr [clientside [IP::remote_addr]] equals 10.10.10.25] } {

log local0. "client 10.10.10.25 connected to pool member [IP::addr [LB::server addr]]" }

}

D.

when CLIENT_ACCEPTED {

if { [IP::addr [IP::remote_addr] equals 10.10.10.25] } {

log local0. "client 10.10.10.25 connected to pool member [IP::addr [LB::server addr]]" }

}

Question # 130

A device on the network is configured with the same IP address as the management address of the active LTM device, causing the management GUI to be inaccessible.

Which two methods should the LTM Specialist use to access the LTM device in order to change the management IP address? (Choose two.)

A.

Connect via ssh to the AOM IP address.

B.

Connect via ssh to the management address.

C.

Connect to the LTM device via serial connection.

D.

Connect a monitor and keyboard to the LTM device.

E.

Connect via ssh to the standby unit and connect via ssh across the serial link between the devices.

Question # 131

What should the LT'M Specialist add to the virtual server?

A.

one Stream profile and an iRule with the command of STREAM expression (@http:// @https:// @@internalapp@publicapp@)

B.

two Stream profiles and an iRule with the command of STREAM expression (@http:// @https:// @@internalapp@publicapp@)

C.

one Stream profile with the expression of @http:// @https:// @

D.

Two Stream profiles, one profile for each rewrite requirement

Question # 132

Refer to the exhibit.

How long will the persistence record remain in the table?

A.

180 seconds after the last packet

B.

180 seconds after the initial table entry

C.

300 seconds after the initial table entry

D.

300 seconds after the last packet

Question # 133

A BIG-IP device sends out the following SNMP trap:

big-ipo.f5.com - bigipExternalLinkChange Link: 1.0 is DOWN

Where in the BIG-IP Configuration utility should the BIG-IP Administrator verify the current status of Link

1.0?

A.

System > Platform

B.

Network > Trunks > Trunk List

C.

Statistics > Performance > System

D.

Network > Interfaces > Interface List

Question # 134

A BIG-IP Administrator needs to purchase new licenses for a BIG-IP appliance.

The administrator needs to know if a module is licensed and the memory requirement for that module.

Where should the administrator view this information in the System menu?

A.

Resource Provisioning

B.

Configuration > Device

C.

Software Management

D.

Configuration > OVSDB

Question # 135

An LTM Specialist needs to create a pool with a set of monitor that checks both the pool members and corresponding application service ports. The pool members have services on port 80. The application service is on port 8009.

The LTM device should load balance traffic to the pool member when the pool member and corresponding application service pass monitor.

Which monitor and parameter set meets this requirement?

A.

TCP monitor for port*

Plus a custom TCP monitor with alias port 8009,

And the pool’s availability requirements set to the ALL

B.

TCP monitor for port

Plus a ustom TCP monitor with alias port 8009,

And the pool’s availability requirement set to All

C.

TCP monitor for port*

Plus a custom TCP monitor with alias port 8009

And the pool ‘s availability requirement set to 1.

D.

TCP monitor for port

Plus a custom TCP monitor with alias port 80

And the pool’s availability requirement set to ALL

Go to page: