F5CAB1 Practice Exam 4 — 20 Questions

Question 1

An administrator is setting up a BIG-IP appliance. Where should the management IP address be configured to ensure the device is accessible for remote administration?

Accepted Answer

On the dedicated 'MGMT' physical interface.. The management IP is configured specifically on the 'Management' interface in the Network section of the Configuration Utility. This interface is distinct from the TMM-controlled data interfaces. Assigning the management IP here ensures that administrative traffic is routed separately from the data plane, providing secure out-of-band management that is critical for maintaining access to the device during production traffic congestion or system-wide network issues.

Answer

On one of the front-panel data interfaces (1.1, 1.2, etc.).

Answer

In the Global Traffic Manager (GTM) listener configuration.

Answer

Via the console serial port connection only.

Question 2

A BIG-IP administrator is upgrading a standalone device from version 15.1.5 to 16.1.0 using an ISO image. The administrator mounts the ISO, runs the installation script, and reboots. After the reboot, the administrator notices that the management IP address is unchanged, but the configuration has been reset to default. What is the most likely cause?

Accepted Answer

The administrator performed a clean install instead of an upgrade.. The most likely cause is that the administrator selected the clean install option when running the installation script from the ISO. Unlike an upgrade, a clean install wipes the existing configuration and installs the new version with default settings. The management IP may persist if it was set outside the BIG-IP configuration, such as via the hypervisor or if manually reconfigured. To avoid this, administrators should choose the upgrade option and verify that the configuration is preserved.

Answer

The ISO image was corrupted, causing a partial upgrade.

Answer

The administrator did not create a UCS backup before upgrading.

Answer

The administrator forgot to run the 'load sys config' command after the upgrade.

Question 3

A network administrator is performing the initial configuration of a new BIG-IP device. The administrator needs to assign a management IP address to the device. Which configuration object should be used?

Accepted Answer

A management IP address on the management interface.. The management IP address is assigned to the dedicated management interface (MGMT) on the BIG-IP. This interface is used for out-of-band management, separate from data plane traffic. It allows administrators to access the device via SSH, HTTPS, and other management protocols, even if data plane interfaces are down.

Answer

A self IP address on the management VLAN.

Answer

A management route on the management interface.

Answer

A floating self IP address on the management VLAN.

Question 4

When configuring a High Availability (HA) pair, which step must be completed immediately after the initial installation on both devices?

Accepted Answer

Verify matching software version and license.. Before synchronizing configurations, both devices must have the same software version and license to ensure compatibility. Establishing HA requires identical software builds because configuration synchronization may fail if versions mismatch. This foundational step prevents synchronization errors, ensuring that the primary and standby devices operate as a unified system, which is critical for maintaining session persistence and high availability during failover scenarios.

Answer

Assign a virtual IP address to the pair.

Answer

Configure the VLANs and self-IPs.

Answer

Enable the 'config-sync' feature globally.

Question 5

An administrator is upgrading a BIG-IP device and wants to ensure the previous configuration is preserved in case of an issue. What is the best practice for backup before an upgrade?

Accepted Answer

Create and download a UCS file.. Backing up the configuration is a critical safety net. A User Configuration Set (UCS) file acts as a complete snapshot of the system's state. By creating this file and downloading it to a remote location, the administrator ensures that even a catastrophic failure during the upgrade can be mitigated by restoring the device to its exact previous state, ensuring business continuity.

Answer

Copy the /config directory to a USB drive.

Answer

Take a snapshot of the hypervisor.

Answer

Use the 'save sys config' command.

Question 6

An administrator is preparing to upgrade a BIG-IP from version 15.1 to 17.1. The administrator wants to ensure that the upgrade process can be rolled back if necessary. Which action should be taken before starting the upgrade to enable rollback?

Accepted Answer

Install the new version to a new boot location.. To enable rollback during a BIG-IP upgrade, you must install the new version to a separate boot location. This leaves the existing boot location with the current version untouched. If the upgrade does not go as planned, you can reboot the system into the old boot location, restoring the previous software version. Other actions like creating a UCS backup or saving the configuration are good practices for disaster recovery but do not provide a software rollback path.

Answer

Run the 'tmsh save sys config' command.

Answer

Enable the 'auto-rollback' feature in the upgrade settings.

Answer

Create a UCS backup of the current configuration.

Question 7

You are deploying a new BIG-IP VE instance in a cloud environment. The deployment script fails to complete the initial provisioning. Which setting, if incorrect, is the most common cause for cloud-based deployment failures?

Accepted Answer

Outbound connectivity to the licensing server is blocked by security groups.. In cloud environments, the virtual machine must be able to communicate with the Cloud's metadata service and the F5 licensing server. If the DNS configuration or the security group/firewall rules are not properly set to allow outbound traffic to these services, the BIG-IP will be unable to license itself or complete the initial setup scripts, leading to a failed deployment.

Answer

The hostname does not match the F5 cloud marketplace image name.

Answer

The virtual disk size was increased beyond the original template.

Answer

The root password was set to a value that is too complex.

Question 8

When configuring a new BIG-IP device, what is the primary purpose of the 'Setup Utility'?

Accepted Answer

To perform the basic initial system configuration.. The Setup Utility serves as the initial configuration interface for a newly provisioned BIG-IP. It streamlines the input of essential parameters like device hostname, management network settings, and licensing. By guiding the administrator through these critical tasks, it ensures the device is correctly identified on the network and entitled to function, providing a consistent foundation before more advanced features like Local Traffic Manager or Security policies are implemented.

Answer

To automatically optimize the TCP/IP stack for performance.

Answer

To create all virtual servers and pools.

Answer

To manage existing user traffic on the device.

Question 9

An administrator is configuring a new BIG-IP and needs to ensure that the device's management interface is accessible only from a specific secure jump host. Which configuration element should be modified?

Accepted Answer

Update the Management Interface allowed list.. Restricting management access is a fundamental security practice. By modifying the 'Allowed IP addresses' list within the management interface configuration, the BIG-IP will only accept traffic from designated IP addresses. This effectively mitigates the risk of unauthorized access attempts from the broader network, ensuring that only trusted machines, such as a secure jump host, can interact with the system's management services.

Answer

Modify the Virtual Server access list.

Answer

Create a packet filter on the external interface.

Answer

Disable the HTTPS service on the device.

Question 10

After upgrading a BIG-IP, the administrator notices that specific traffic management features are now missing. What is the most likely reason?

Accepted Answer

The modules were not provisioned after the reboot.. Missing features after an upgrade often result from improper provisioning. When upgrading to a newer BIG-IP version, the resource allocation for modules (e.g., LTM, AFM) may be reset or require manual reassignment. If the module is not correctly provisioned to a 'Nominal' or 'Dedicated' level, the associated functionality will not be loaded into the memory, making the features appear absent even though the software version is correct.

Answer

The license was invalidated by the upgrade.

Answer

The configuration file was deleted.

Answer

The browser cache requires clearing.

Question 11

An administrator has just completed the initial configuration of a BIG-IP appliance and needs to verify that the management interface is reachable from the corporate network. The administrator is on a workstation that can ping the management IP. Which command should the administrator run on the BIG-IP to confirm that the default gateway is correctly configured?

Accepted Answer

tmsh list sys management-route. To verify the default gateway on the management interface, the administrator should list the management routes. The command 'tmsh list sys management-route' displays the configured routes, including the default route and its gateway. This confirms that the gateway is set correctly. Other commands like showing the management IP or global settings do not provide the gateway information. Checking interface status is unrelated to gateway configuration.

Answer

tmsh show net interface

Answer

tmsh show sys management-ip

Answer

tmsh show sys global-settings

Question 12

A network engineer is preparing a new BIG-IP appliance for installation in a data center. The rack has both 120V and 208V power available. The engineer wants to ensure the device powers on correctly and is not damaged. Which power consideration should the engineer follow?

Accepted Answer

Verify the appliance's power supply rating and connect it to the appropriate voltage source as specified in the platform's hardware guide.. The correct approach is to verify the appliance's power requirements in the hardware guide before connecting power. BIG-IP platforms have varying power specifications, and using the wrong voltage or cord can damage the device or cause it to fail. Proper site preparation includes confirming power and environmental requirements to ensure a successful installation.

Answer

Connect the appliance only to a 120V outlet, because all BIG-IP appliances are designed exclusively for 120V.

Answer

Use a standard 120V computer power cord for all BIG-IP appliances, regardless of the model, because the power supplies auto-sense voltage.

Answer

Connect the appliance to a 208V outlet without checking the hardware guide, because higher voltage always improves performance.

Question 13

A network administrator is upgrading a BIG-IP from version 15.1 to 17.1 using the default upgrade process. After the upgrade, the administrator notices that the configuration from the previous version is not fully loaded and some objects are missing. The administrator checks the upgrade logs and sees a message about a configuration conversion failure. What is the most likely cause?

Accepted Answer

The configuration contains objects or features that are deprecated or unsupported in the new version, causing the conversion to fail.. Configuration conversion failures during upgrades are typically caused by deprecated or unsupported objects in the new version. The BIG-IP upgrade process automatically converts the configuration, but if an object cannot be converted, it is skipped and an error is logged. The administrator must review the logs to identify the problematic objects and manually update or remove them. This ensures a clean configuration load.

Answer

The administrator did not run the 'tmsh save sys config' command before the upgrade, so the configuration was not saved to the new version.

Answer

The upgrade was performed without first installing the latest hotfix for the current version, leading to an incompatible upgrade path.

Answer

The upgrade process requires a manual re-import of the configuration using 'tmsh load sys config' from a backup.

Question 14

A network administrator is setting up a new BIG-IP appliance and needs to license it using the automatic licensing method. The administrator has configured the management IP and default gateway. Which additional configuration is required for automatic licensing to succeed?

Accepted Answer

Configure DNS servers on the BIG-IP.. For automatic licensing to work, the BIG-IP must be able to reach the F5 licensing server. This requires the management interface to have internet connectivity and, crucially, DNS resolution. The BIG-IP uses DNS to resolve the licensing server's hostname. Without DNS configured, the licensing process cannot locate the server, and the license activation will fail. While NTP, proxy, and static routes can be relevant in specific network setups, they are not universally required for automatic licensing.

Answer

Configure a proxy server for licensing traffic.

Answer

Configure NTP servers on the BIG-IP.

Answer

Configure the BIG-IP to use a static route for the licensing server.

Question 15

An administrator is preparing to install a new BIG-IP appliance in a data center where the management network does not have a DHCP server. The administrator connects to the console and completes the initial configuration. Which action must be taken to ensure the BIG-IP is reachable on the management network after the initial setup?

Accepted Answer

Assign a management IP address, netmask, and default gateway using the console configuration utility or tmsh.. In a network without DHCP, the management interface must be manually configured with a static IP address, netmask, and default gateway. This is accomplished during the initial console setup or later via tmsh. Without this step, the BIG-IP cannot be reached on the management network, preventing remote administration and further configuration.

Answer

Enable the DHCP client on the management interface with a static fallback address.

Answer

Create a VLAN group that includes the management interface and assign an IP address to it.

Answer

Configure a self IP on the management VLAN using the tmsh command create net self.

Question 16

What is the main advantage of using a UCS file for configuration management?

Accepted Answer

It contains the entire configuration including keys and certs.. A UCS file provides an all-in-one archive of the BIG-IP system configuration, including certificates, keys, and license files. This portability is the cornerstone of F5 configuration management, allowing administrators to migrate configurations between different hardware or virtual environments with ease. It is the gold standard for backups, ensuring that the entire state of the system can be recovered accurately during disaster recovery scenarios.

Answer

It allows for real-time configuration synchronization.

Answer

It compresses the log files for faster uploading.

Answer

It enables auto-update of the BIG-IP firmware.

Question 17

A network administrator is installing a new BIG-IP appliance and needs to license it. The administrator has a base registration key and wants to activate the license online. Which step is required to complete the license activation?

Accepted Answer

Configure the management interface with a valid IP address and DNS settings to allow outbound HTTPS access to F5.. Online license activation requires the BIG-IP management interface to have network connectivity to F5's licensing servers. This means a valid IP address, gateway, and DNS must be configured. Once connectivity is established, the administrator can enter the base registration key and the BIG-IP will automatically retrieve and install the license.

Answer

Access the F5 licensing portal and manually generate a license file, then upload it to the BIG-IP.

Answer

Disable the default firewall rules to allow licensing traffic on port 80.

Answer

Install a license server on the internal network and point the BIG-IP to it.

Question 18

An administrator is preparing to install a new BIG-IP virtual edition (VE) license using the command line interface. Which TWO files or parameters are strictly required to complete a manual activation when the device lacks direct internet access? (Choose two.)

Accepted Answer

The unique Dossier generated from the unactivated BIG-IP VE instance.. Manual licensing of a BIG-IP VE offline requires generating a dossier from the device and submitting it to the F5 licensing portal to receive the signed license file. Providing the exact dossier string and subsequently installing the returned license file completes the activation process securely without requiring outbound internet connectivity from the management network.

Answer

The root administrator password hash exported from the configuration utility.

Answer

The enterprise registration key provided in the F5 software purchase order email.

Answer

The private SSL certificate used for securing administrative web management traffic.

Question 19

An administrator is upgrading a BIG-IP from version 14.1 to 17.1. The administrator wants to ensure that the upgrade does not fail due to insufficient disk space. Which command should be used to check the available disk space on the BIG-IP before the upgrade?

Accepted Answer

df -h. Before upgrading a BIG-IP, it is critical to verify sufficient disk space. The 'df -h' command, run from the bash shell, provides a clear view of available space on all file systems. If any partition is nearly full, the upgrade may fail. The administrator should ensure there is enough free space, typically by removing old software images or log files. This command is the standard way to check disk usage on Linux-based systems like TMOS.

Answer

show /system disk-usage

Answer

tmsh show sys disk

Answer

ls -l /var/log

Question 20

What is the purpose of the 'Active' status in the BIG-IP software volume table?

Accepted Answer

It identifies the partition currently running the system.. The 'Active' status indicates which partition is currently running the operating system. Knowing how to identify the active volume is essential because all software installations must be performed on the 'inactive' volume to ensure traffic is not interrupted. This fundamental understanding prevents accidental service outages by ensuring the administrator never installs software directly onto the partition that is currently managing production traffic.

Answer

It identifies the partition with the latest updates.

Answer

It shows which partition is currently syncing.

Answer

It indicates the volume where logs are stored.