Spring Sale Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: buysanta

Exact2Pass Menu

BIG-IP ASM Specialist

Last Update 3 hours ago Total Questions : 520

The BIG-IP ASM Specialist content is now fully updated, with all current exam questions added 3 hours ago. Deciding to include 303 practice exam questions in your study plan goes far beyond basic test preparation.

You'll find that our 303 exam questions frequently feature detailed scenarios and practical problem-solving exercises that directly mirror industry challenges. Engaging with these 303 sample sets allows you to effectively manage your time and pace yourself, giving you the ability to finish any BIG-IP ASM Specialist practice test comfortably within the allotted time.

Question # 1

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

An LTM Specialist has created a virtual server to load balance traffic to a pool of HTTPS servers. The servers use client certificates for user authentication. The virtual server has clientssl, serverssl, and http profiles enabled. Clients are unable to connect to the application through the virtual server. Clients are able to connect to the application servers directly.

What is the root cause of the problem?

A.

The application server does NOT support 2048-bit keys.

B.

The clientssl profile is NOT set to require a client certificate.

C.

The LTM device does NOT trust the issuing CA of the client certificate.

D.

The application server does NOT see the client certificate due to SSL offload.

Question # 2

Exhibit.

An LTM Specialist needs to configure VS^HTTP and VS_DB for an online shopping site. The VS HTTP passes the client requests to the webservers. The webservers query the database servers through the VS_DB. Initially, the LTM Specialist finds the database servers directly return the packets to the webservers.

which setting must be enabled for the configuration to function correctly?

A.

VS_HTTP snat auto map

B.

VS.HTTP auto last hop

C.

VS DB auto last hop

D.

VS_DB snat auto map

Question # 3

A BIG-IP Administrator is configuring a pool with members who have differing capabilities. Connections

to pool members must be load balanced appropriately.

Which load balancing method should the BIG-IP Administrator use?

A.

Least Sessions

B.

Least Connections (member)

C.

Fastest (node)

D.

Weighted Least Connections (member)

Question # 4

An LTM Specialist is troubleshooting an issue with a new virtual server. When connecting through the virtual server, clients receive the message "The connection was reset" in the browser, although connections directly to the pool member show the application is functioning correctly.

ltm pool srv1_https_pool {

members {

192.168.2.1:https{

address 192.168.2.1

}

}

}

ltm virtual https_example_vs {

destination 192.168.1.155:https

ip-protocol tcp

mask 255.255.255.255

pool srv1_https_pool

profiles {

http { }

tcp { }

}

snat automap

vlans-disabled

}

How should the LTM Specialist resolve this issue?

A.

Enable HTTP monitoring on the pool.

B.

Add a ClientSSL profile to the virtual server.

C.

Disable SNAT Automap on the virtual server.

D.

Remove the HTTP profile from the virtual server.

Question # 5

An LTM device pool has suddenly been marked down by a monitor. The pool consists of members 10.0.1.1:443 and 10.0.1.2:443 and are verified to be listening. The affected virtual server is 10.0.0.1:80.

Which two tools should the LTM Specialist use to troubleshoot the associated HTTPS pool monitor via the command line interface? (Choose two.)

A.

curl

B.

telnet

C.

ssldump

D.

tcpdump

Question # 6

Refer to the exhibit.

The BIG-IP Administrator has modified an iRule on one device of an HA pair. The BIG-IP Administrator

notices there is NO traffic on the BIG-IP device in which they are logged into.

What should the BIG-IP Administrator do to verify if the iRule works correctly?

A.

Push configuration from this device to the group and start to monitor traffic on this device

B.

Pull configuration to this device to the cluster and start to monitor traffic on this device

C.

Log in to the other device in the cluster, push configuration from it, and start to monitor traffic on that device

D.

Log in to the other device in the cluster, pull configuration to it, and start to monitor traffic on that device

Question # 7

An LTM Specialist creates an Analytics wide to show the type of browsers used to access a certain application. However, the generated statistics only sum up all transaction for that application under one item called ‘ Aggregated.’’

What should the LTM Specialist do to resolve this problem?

A.

Verify that the Analytics profile is assigned to the applications virtual server.

B.

Make sure ‘’User Agent’’ is selected in the Analytics profile.

C.

Drill down into the stats to show the User Agents correlated in the Aggregated group.

D.

Make sure ‘’User Sessions’’ is selected in the Analytics profile

Question # 8

A pool with a default connection limit is configured to use Round Robin as the load balancing method. An LTM Specialist needs to ensure that the LTM device selects a server with the fewest number of connections when new clients connect. Another pool is using the same set of backend servers.

Which load balancing-method should the pool be changed to?

A.

Weighted Least Connections (node]

B.

Weighted Least Connections (member)

C.

Least Connections

D.

Least Connections

Question # 9

Refer to the exhibit.

Which two pool members should be chosen for a new connection? (Choose two.)

A.

172.16.15.9.80

B.

172.16.15.4.80

C.

172.10.15.2.80

D.

172.16.15.1.80

E.

172.16.15.7.80

Question # 10

Given the log entry:

011f0005:3: HTTP header (32800) exceeded maximum allowed size of 32768 (Client sidE. vip=/Common/VS_web profile=http pool=/Common/POOL_web client_ip=10.0.0.1)

Which HTTP profile setting can be modified temporarily to resolve the issue?

A.

Increase Maximum Requests

B.

Decrease Maximum Requests

C.

Increase Maximum Header Count

D.

Decrease Maximum Header Count

E.

Increase Maximum Header size

F.

Decrease Maximum Header size

Question # 11

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

An LTM Specialist is troubleshooting a sync-failover group of three BIG-IP LTM devices. The command used is "tmsh run cm watch-devicegroup-device."

What does the output mean?

A.

Configuration is synchronized between all the devices.

B.

Configuration is not synchronized. Some modifications have been done on bigipA.

C.

Configuration is not synchronized. Some modifications have been done on bigipB.

D.

Configuration is not synchronized. Some modifications have been done on bigipC.

Question # 12

A Client makes the request displayed below to the application server.

Which virtual server type should an LTM Specialist use to load balance based on the URI?

.A. Forwarding (Layer 2)

B. Stateless

C. Standard

D. Performance (Layer 4)

Question # 13

These log entries can have different root causes:

Jun 28 05:01:21 LTM_A notice mcpd[27545]: 0107143a:5: CMI reconnect timer: enabled

Jun 28 05:01:21 LTM_A notice mcpd[27545]: 01071431:5: Attempting to connect to CMI peer 1.1.1.2 port 6699

Jun 28 05:01:21 LTM_A notice mcpd[27545]: 01071432:5: CMI peer connection established to 1.1.1.2 port 6699

Jun 28 05:01:26 LTM_A notice mcpd[27545]: 0107143a:5: CMI reconnect timer: disabled, all peers are connected

Which two commands should be used to obtain additional information on these entries? (Choose two.)

A.

tmsh show /sys mcpd

B.

bigstart status mcpd

C.

tmsh modify /sys db log.mcpd.level value debug

D.

tmsh modify /sys db log.cmi.level value debug

Question # 14

-- Exhibit –

-- Exhibit --

Refer to the exhibit.

A virtual server is set up on an LTM device as follows:

Virtual server address 78.24.213.79

Default Persistence ProfilE. source_addr, 600s.

Pool NamE. Pool1

Pool Members: 10.72.250.52:80 and 10.72.250.60:80 (both on Internal Vlan)

There are several current connections to the virtual server, and pool member 10.72.250.52:80 has been set to a "Disabled" state.

A tcpdump on the Internal Vlan shows traffic going to 10.72.250.52:80.

How soon after the persistence table query was run can existing connections be refreshed/renewed to ensure that no requests are sent to 10.72.250.52?

A.

196 seconds

B.

460 seconds

C.

539 seconds

D.

590 seconds

E.

591 seconds

Question # 15

A BIG-IP Administrator assigns the default http health monitor to a pool that has three members listening on port 80 When the administrator connects to each pool member via the CURL utility, two of the members respond with a status of 404 Not Found while the third responds with 200 OK. What will the pool show for member availability?

A.

All members offline.

B.

Two members offline and one member online.

C.

Two members online and one member offline.

D.

All members online.

Go to page: