F5CAB1 Practice Test 1 — 10 Questions

Question 1

An administrator is performing an initial configuration of a BIG-IP system via the Configuration Utility. During the setup, the administrator navigates to the 'Device Certificate' section and chooses to generate a new self-signed certificate. What is the primary purpose of this certificate on the BIG-IP?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

It provides secure access to the BIG-IP management interface via HTTPS.. During initial configuration, the BIG-IP generates a self-signed device certificate that is bound to the management web server. This certificate enables HTTPS access to the Configuration Utility, ensuring that administrative traffic is encrypted. It is not used for data-plane SSL offloading or external authentication by default. Understanding its role helps administrators properly secure management access and avoid confusing it with other certificate uses.

Answer

It is used for SSL offloading of client connections to virtual servers.

Answer

It secures communication between the BIG-IP and external authentication servers.

Answer

It is used for mutual authentication between BIG-IP devices in a device group.

Question 2

Which license requirement must be met before a BIG-IP device can be used in a production environment?

Accepted Answer

A valid license key must be activated on the device.. A valid F5 license is strictly required for the device to operate. The license file dictates which modules (LTM, ASM, APM) are enabled and how much hardware capacity is available. Without a valid license, the system enters a restricted mode where traffic management services will not start, rendering the device useless for production traffic. Proper licensing ensures that the features are legally enabled and supported.

Answer

The license must be manually updated every 24 hours.

Answer

The license must be shared with the peer in a cluster.

Answer

The license must be stored in a public cloud bucket.

Question 3

An administrator wants to ensure that a newly installed BIG-IP version is tested before putting it into production. What is the most effective way to accomplish this?

Accepted Answer

Install to an inactive volume and boot into it.. The best method is to boot into the new version while keeping the old version intact on another volume. This allows for validation of the configuration and traffic handling in the new environment. If issues arise, the administrator can quickly reboot back into the original, known-good boot location, minimizing downtime and allowing for a safe, staged migration to the new software release.

Answer

Use the 'switch' command during a live production peak.

Answer

Perform the upgrade on the active partition directly.

Answer

Clone the configuration to a secondary device.

Question 4

During initial configuration, which license requirement must be met before provisioning modules like LTM or ASM?

Accepted Answer

The license must be activated using the registration key.. Licensing is the foundational step that unlocks the features for which the customer has paid. Without a valid license, the system remains in a restricted state where no modules can be provisioned. Understanding this process is vital for any administrator as it is the first major hurdle when deploying new F5 hardware or virtual editions into a production environment.

Answer

The license file must be manually edited.

Answer

The license can be shared between multiple BIG-IP units.

Answer

The license automatically activates without internet access.

Question 5

Refer to the exhibit. An administrator wants to upgrade the system to version 16.1.2. Based on the output, what should the administrator do next?

Accepted Answer

Reboot the system to switch to HD1.2.. The output shows the current active version is 15.1.0 on HD1.1, and 16.1.2 is already installed on HD1.2. Because the software is installed but not active, the administrator must trigger a reboot to switch the active volume. This workflow is essential for minimizing downtime, as the installation phase is already finished and only the boot partition switch remains to finalize the system upgrade process.

Answer

Run the install command for 16.1.2 again.

Answer

Delete HD1.1 to free up space.

Answer

Create a new volume HD1.3.

Question 6

An administrator is upgrading a BIG-IP instance and notices that the configuration load is taking an unusually long time. Which log file should be checked to identify the cause?

Accepted Answer

/var/log/ltm. Monitoring logs during the upgrade process is critical for identifying why a system is stalling. The 'ltm' log file contains high-level information about system events, including configuration loading and daemon initialization status. By checking this file, the administrator can see if the configuration parser is stuck on a specific object or if a process is failing to start, allowing for targeted troubleshooting rather than guessing the reason for the delay.

Answer

/var/log/audit

Answer

/var/log/kern.log

Answer

/var/log/secure

Question 7

An administrator is upgrading a BIG-IP system. Which THREE tasks should be part of the pre-upgrade checklist to minimize risk?

Accepted Answer

Create a UCS archive of the current configuration.. Pre-upgrade checklists are vital to prevent downtime and data loss. Creating a user configuration set (UCS) allows for easy recovery if the upgrade fails. Reviewing release notes identifies known issues specific to the target version. Validating that the current configuration is free of errors ensures the upgrade doesn't propagate invalid settings to the new boot location. These steps protect the environment's stability and operational integrity during the maintenance window.

Answer

Install the latest iApps templates.

Answer

Change the root password to a new value.

Question 8

Which action should an administrator perform after a successful software upgrade but before putting the device back into production?

Accepted Answer

Test production traffic and check system logs.. Verification is the final, crucial step of any upgrade process. Testing application traffic, checking system logs for errors, and validating synchronization status ensure the upgrade was not only successful in terms of the install process but also that the services are behaving as expected. This minimizes the risk of post-upgrade production issues that could impact end-users, reflecting an expert approach to maintenance and lifecycle management.

Answer

Immediately initiate a failover to the peer.

Answer

Re-install the license files.

Answer

Delete the old configuration backups.

Question 9

An administrator is preparing to install a new version of BIG-IP software on a device running an older version. Before starting the installation, the administrator wants to ensure that the existing configuration is backed up and can be restored if needed. Which tool should the administrator use to create a full configuration backup that includes all configuration files and can be used for restoration?

Accepted Answer

tmsh save sys ucs <filename>. The tmsh save sys ucs command is the correct tool for creating a full configuration backup on a BIG-IP system. It generates a UCS archive that includes all configuration files, licenses, and certificates, allowing for complete restoration. This is essential before an upgrade to ensure that the system can be recovered if the upgrade fails or if there are issues with the new version.

Answer

tmsh create sys backup

Answer

tmsh load sys config

Answer

tmsh save sys config

Question 10

An administrator is preparing to upgrade a BIG-IP system from version 15.1 to 16.1. The administrator wants to ensure that the upgrade process completes successfully and that the configuration is preserved. Which action should be taken before starting the upgrade?

Accepted Answer

Create a UCS backup and verify that the current configuration is compatible with the target version.. Creating a UCS backup and verifying compatibility are essential pre-upgrade steps. The UCS backup allows restoration if the upgrade fails, and compatibility checks help identify issues that could prevent a successful upgrade. These actions ensure that the configuration is preserved and the upgrade proceeds smoothly.

Answer

Disable all virtual servers to prevent traffic during the upgrade.

Answer

Run the 'tmsh save sys config' command to save the current configuration.

Answer

Install the new version on a different partition and then copy the configuration files manually.