F5CAB1 Practice Test 2 — 25 Questions

Question 1

Which TWO of the following are mandatory requirements when setting up a BIG-IP license via the 'Base Registration Key' method?

Accepted Answer

The management interface must have outbound internet access.. The base registration key method requires the BIG-IP to reach the F5 licensing servers to exchange the key for a license file. This process necessitates both outbound internet access for the device and a valid registration key provided by F5. Without these, the device cannot validate its entitlement, and the licensing process will fail, leaving the system in an unlicensed state where traffic processing is effectively disabled.

Answer

The device must be part of an HA cluster.

Answer

The device must be running in FIPS-compliant mode.

Answer

The user must have a physical smart card.

Question 2

An administrator is performing a fresh installation of BIG-IP VE on a hypervisor. After booting the ISO, the system fails to reach the Configuration Utility. Which initial task must be completed via the serial console to enable network access?

Accepted Answer

Execute the 'config' utility via the CLI.. Before the Configuration Utility is accessible, the BIG-IP system requires a base network configuration, including the management IP address, netmask, and default gateway. Without these parameters, the system cannot route traffic to the management interface. Performing this via the console is essential because the GUI is inactive until the management IP is routable, ensuring secure initial connectivity for subsequent administrative tasks.

Answer

Run the 'tmsh install software' command.

Answer

Enable the 'bigdb' variable for GUI access.

Answer

Format the primary partition using 'fdisk'.

Question 3

Refer to the exhibit. An administrator receives this error after a fresh installation and reboot. What must be done to resolve this?

Accepted Answer

Perform a manual license re-activation.. A fresh BIG-IP installation requires license activation to enable the system's licensed features. Without a valid license, the configuration daemon (mcpd) will refuse to load the configuration, as it cannot verify which modules are authorized for use. This is a common occurrence in new deployments and is resolved by contacting the F5 licensing server to register the system's base registration key.

Answer

Reboot the device into the previous boot slot.

Answer

Delete the current configuration files.

Answer

Check the physical license dongle on the chassis.

Question 4

Refer to the exhibit. An administrator reviews the system status after an upgrade attempt on a high-availability BIG-IP pair. The command output indicates a critical service failure. Which immediate diagnostic step should the administrator take?

Accepted Answer

Access the command line interface to examine /var/log/ltm for initialization errors and verify license validity for the newly installed software version.. The command output highlights that the Traffic Management Microkernel is suppressed, indicating a critical hardware or software initialization failure following an upgrade. Investigating log files such as /var/log/ltm and /var/log/boot.log helps isolate whether the issue stems from corrupted configuration syntax, license mismatches, or incompatible software images during the boot process.

Answer

Reboot the active device immediately into the previous boot location and initiate a configuration sync across the high-availability peer.

Answer

Modify the BIG-IP platform properties file to disable hardware acceleration and restart the master control program daemon using bigstart restart.

Answer

Run a complete factory default reset via the command line and restore the configuration from a UCS archive generated prior to the upgrade.

Question 5

Which THREE components are verified during the installation process of a new BIG-IP software version?

Accepted Answer

Software image integrity checksum.. During installation, the BIG-IP system validates the integrity of the software image to prevent corrupted installations. It also checks for sufficient disk space in the target volume to ensure the system can successfully extract all files. Finally, the system confirms hardware compatibility, ensuring the specific platform model supports the software version being installed, which is crucial for preventing kernel panic or driver mismatch issues after the first boot.

Answer

Local client user session count.

Answer

External DNS server latency.

Question 6

An administrator accidentally deleted a configuration file. Which action would be the most efficient way to restore the system configuration to its previous state?

Accepted Answer

Restore from a UCS file.. Restoring a previously created UCS (User Configuration Set) archive is the fastest and most reliable way to recover from an accidental configuration loss. The UCS file contains all the necessary data to rebuild the system configuration. This standard recovery procedure minimizes downtime and human error, providing a clean and predictable path back to the last known working state of the BIG-IP device.

Answer

Perform a factory reset.

Answer

Re-install the TMOS software.

Answer

Use the 'tmsh load config' command.

Question 7

Refer to the exhibit. An administrator receives this error while running a TMSH script to provision modules. What is the likely cause?

Accepted Answer

The provisioning level is set to an unsupported value.. Provisioning errors often stem from invalid resource levels being assigned to a module. Each module has specific requirements and allowed values (e.g., nominal, dedicated, none). When an invalid setting is provided, the system rejects the command to prevent system instability. Understanding the resource allocation model is essential to ensure that the BIG-IP appliance operates within its performance limits while enabling the required application delivery services for the enterprise environment.

Answer

Insufficient physical memory is installed.

Answer

The license does not support this module.

Answer

The management interface is down.

Question 8

An administrator needs to verify the current software version running on both boot partitions. Which command provides this information?

Accepted Answer

tmsh show sys software. Knowing the version on each boot slot is vital for planning upgrades and verifying the current state of the device. The 'show sys software' command provides a clear view of all installed versions and their corresponding locations. This information is essential for managing multiple boot partitions and ensuring that the correct software is targeted for the next maintenance activity or system failover event.

Answer

uname -a

Answer

cat /etc/version

Answer

tmsh list sys hardware

Question 9

An administrator is upgrading a BIG-IP system and receives a warning that the 'config sync' state is 'Not Fully Synchronized'. What is the correct action to take before proceeding with the upgrade?

Accepted Answer

Force a configuration sync from the active to the standby unit.. Proceeding with an upgrade while the sync state is not 'In Sync' is dangerous because the devices in the HA pair may have different configurations. This inconsistency can lead to unexpected behavior after the upgrade, such as traffic outages or corrupted data, as the system tries to merge or reconcile conflicting configurations during the reboot. Always synchronize the configuration before changing the software version to ensure a stable, predictable transition.

Answer

Ignore the warning; the upgrade will force a synchronization.

Answer

Delete the standby unit from the device group.

Answer

Perform a factory reset on both devices.

Question 10

An administrator is installing a new BIG-IP version via the command line using the 'tmsh' utility. Which command is used to verify that the installation has successfully completed and that the new boot slot is ready to be made active?

Accepted Answer

tmsh show sys software. Verifying the installation status is a vital step before attempting to switch boot partitions. The 'show sys software' command provides the current status of all boot volumes, showing whether the install finished successfully or encountered errors. This allows the administrator to confirm the build version is correctly extracted before proceeding with the switch, preventing the risk of booting into a corrupted or incomplete installation that would cause downtime.

Answer

tmsh list sys software

Answer

tmsh check sys software

Answer

tmsh verify sys software

Question 11

An administrator is configuring a new BIG-IP high-availability (HA) pair. The administrator has already configured the management IPs and licensed both devices. Which additional step is required to ensure the devices can communicate for config sync and failover?

Accepted Answer

Configure a self IP on a dedicated VLAN for failover and config sync traffic.. To enable config sync and failover, the BIG-IP devices must have self IP addresses on a common VLAN. These self IPs are used for heartbeat and synchronization traffic. The management interface is not used for this purpose. Configuring a dedicated self IP on each device ensures reliable HA communication.

Answer

Set up a default route on the management interface to the peer's management IP.

Answer

Configure a static ARP entry for the peer's management IP on both devices.

Answer

Enable spanning tree protocol on all VLANs to prevent loops between the devices.

Question 12

An administrator is performing an initial setup of a new BIG-IP appliance via the Configuration Utility. After setting the management IP address, they are unable to reach the device from their workstation. Which factor is most likely responsible for this connectivity failure?

Accepted Answer

The management default gateway route was not defined in the initial network setup.. Initial configuration requires that the management interface is physically connected to the management network and that the management route is properly configured. If the default gateway is missing or incorrect, the BIG-IP cannot route packets back to the administrator's workstation, even if the IP assignment was successful. Verifying routing tables is a critical troubleshooting step during deployment to ensure bidirectional traffic flow between the management console and the BIG-IP management port.

Answer

The license has not been activated, disabling all management plane access.

Answer

The port lockdown setting on the management interface is set to 'Allow None'.

Answer

The appliance is running a different software version than the browser supports.

Question 13

An administrator is upgrading a BIG-IP pair. After upgrading the standby unit, which step should be performed before upgrading the active unit?

Accepted Answer

Force the standby unit to become active.. The standard high-availability upgrade path involves upgrading the standby unit first to verify the new software version's stability. By failing over traffic to the newly upgraded unit, the administrator validates that the application services function as expected. If issues arise, the administrator can fail back to the original active unit, minimizing downtime and ensuring a controlled transition during the maintenance window for the entire cluster.

Answer

Delete the sync-failover device group.

Answer

Reboot the active unit immediately.

Answer

Change the management IP address of the active unit.

Question 14

What is the primary benefit of performing a clean installation of BIG-IP software on a new boot volume?

Accepted Answer

It ensures the system is free from previous software corruption.. A clean installation allows the system to start with a fresh OS and core binaries, significantly reducing the risk of carrying over corrupted files or incompatible settings from a legacy version. This method is the safest way to ensure system stability and performance in a production environment, as it eliminates the 'baggage' of previous configurations and system states that could potentially cause instability when running newer software versions on the BIG-IP appliance.

Answer

It automatically migrates all custom scripts.

Answer

It is the only way to upgrade the license key.

Answer

It increases the speed of traffic processing.

Question 15

An administrator is performing an initial configuration on a new BIG-IP appliance using the Setup Utility via the management port. After completing the network and IP settings, the administrator loses management connectivity. Which action should the administrator take first to resolve the issue?

Accepted Answer

Connect via serial console, verify the management route table, and ensure the correct default gateway is assigned.. Losing management connectivity after running the Setup Utility typically happens because the default gateway was misconfigured or omitted, preventing routing back to the administrator subnet. Verifying and correcting the gateway via the serial console restores layer 3 communication without needing a full factory reset. This ensures the initial provisioning workflow can proceed smoothly in accordance with F5 deployment best practices.

Answer

Perform a factory reset using the LCD panel to restart the initial setup wizard from the beginning.

Answer

Unplug the management cable for thirty seconds and plug it back into a different switch port to force DHCP discovery.

Answer

Reboot the appliance using the physical power switch to reload the factory default IP configuration.

Question 16

An administrator is setting up a new BIG-IP appliance. Which TWO steps are mandatory for the device to process application traffic?

Accepted Answer

Create a VLAN and assign interfaces.. Processing application traffic requires both a configured VLAN and a self-IP for routing. The VLAN segments the physical network, and the self-IP acts as the L3 address for the BIG-IP on that segment. Without both, the device cannot receive or route traffic to back-end servers. These are the fundamental L3 building blocks that must be configured correctly before any virtual server can process client requests.

Answer

Enable the 'Route Domains' feature.

Answer

Install the Advanced WAF module.

Answer

Configure a default gateway in the GUI.

Question 17

Which component in the initial setup wizard allows the administrator to define the management network IP address and subnet mask?

Accepted Answer

Platform Configuration. Defining the management network is the first critical step in enabling remote access to a newly installed BIG-IP appliance. The setup wizard guides the administrator through this process to ensure connectivity is established before any traffic processing configurations are applied. Getting this step correct is paramount, as incorrect management networking can lead to immediate lockout, requiring physical console access to remediate the network settings on the device.

Answer

Traffic Management

Answer

Device Certificates

Answer

Resource Provisioning

Question 18

An administrator is performing an initial setup on a new BIG-IP appliance via the serial console. After completing the basic network and management IP configuration, the administrator needs to verify that the management route is correctly established. Which command should the administrator execute from the TMOS shell?

Accepted Answer

show /sys management-route. The TMOS shell (tmsh) provides administrative control over the BIG-IP system. Executing the show /sys management-route command displays the active management routes configured on the management interface, ensuring out-of-band administrative traffic routes correctly through the designated gateway, which is a critical validation step during initial deployment.

Answer

show /net route

Answer

list /sys global-settings

Answer

show /sys ip-address

Question 19

An administrator attempts to upgrade a BIG-IP system but receives an error stating that the 'required intermediate version' has not been reached. What is the correct way to handle this situation?

Accepted Answer

Install the intermediate version first, then the target.. BIG-IP upgrades often require specific intermediate software versions to ensure the configuration database (the bigip.conf file) is migrated correctly. Jumping from a very old version to the latest can cause the conversion script to fail. The administrator must install the mandatory intermediate version first, boot into it to allow the database conversion to occur, and then proceed with the final upgrade to the desired target version.

Answer

Force the install using the '--ignore-version' flag.

Answer

Manually copy the bigip.conf file to the new version.

Answer

Re-license the device using the target version keys.

Question 20

When configuring the management network for a new F5 BIG-IP appliance, what is the primary purpose of the 'Management Port' versus the 'TMM Interfaces'?

Accepted Answer

The management port provides out-of-band access, separating control traffic from data traffic.. The management port is dedicated to administrative traffic, such as SSH and the Configuration Utility, isolating it from the production data traffic handled by the TMM (Traffic Management Microkernel). This separation is vital for security and stability, ensuring that an administrator can always access the device even if the production network is saturated with traffic or experiencing a network storm.

Answer

The management port handles high-speed traffic, while TMM is for console access.

Answer

TMM interfaces are only used for internal communication, not client traffic.

Answer

The management port is the only way to perform a software upgrade.