F5CAB1 Practice Test 3 — 10 Questions

Question 1

After a fresh installation of BIG-IP, which task is considered a 'Day 0' security hardening requirement?

Accepted Answer

Change default administrative passwords.. Changing default passwords for the root and admin accounts is the most fundamental security step. F5 appliances come with well-known default credentials; leaving these unchanged allows anyone with network access to gain administrative control. This is the first action an administrator should take to secure the management plane and prevent unauthorized access before any other network configuration or traffic management policies are implemented.

Answer

Configure an NTP server.

Answer

Enable the 'bigdb' security variable.

Answer

Assign a management VLAN ID.

Question 2

An administrator needs to deploy a new BIG-IP physical appliance and perform the initial network configuration. Which interface is specifically dedicated out-of-band for initial management access and configuration tasks?

Accepted Answer

The dedicated management network port labeled MGMT.. The Management port on a BIG-IP physical appliance is an out-of-band network interface isolated from the traffic management microkernel. It is explicitly designed for administrative access via SSH, HTTPS, and the Configuration utility, ensuring that management traffic does not interfere with client-facing application data flows.

Answer

The serial console port using a rollover cable and terminal emulation software.

Answer

The first high-speed data port configured as part of the default internal VLAN.

Answer

The high-availability serial failover cable connection between the redundant appliances.

Question 3

An administrator is upgrading a BIG-IP from v13.1.1 to v16.1.0. During the upgrade, the administrator receives an error that the disk space is insufficient to install the new image. The administrator checks and finds that the `/var` partition is nearly full. What is the most appropriate action to resolve this issue?

Accepted Answer

Delete old UCS backup files and logs from `/var` to free up space.. Freeing up space on the `/var` partition by deleting old UCS backups and logs is the correct action. This safely reclaims space needed for the new image. Other options involve invalid commands, incorrect installation locations, or deleting critical system files. The administrator should also ensure that other partitions have sufficient space.

Answer

Resize the `/var` partition using the `tmsh modify sys disk` command.

Answer

Install the new image to the `/shared` partition instead of the inactive volume.

Answer

Use the `tmsh delete sys software image` command to remove the current active image and free space.

Question 4

When configuring a new BIG-IP VE, which TWO network settings are required to ensure the device can communicate with external licensing servers?

Accepted Answer

A valid default gateway in the management network.. Network connectivity is the prerequisite for all licensing. BIG-IP Virtual Editions must reach the F5 activation servers to validate their registration keys. Without correct routing and DNS, the license state will remain 'unlicensed', preventing the activation of any modules. This is a common failure point for new VE deployments, and mastering these requirements is essential for ensuring a smooth, successful provisioning of virtual infrastructure.

Answer

A static IP address on the data plane.

Answer

An SNMP community string.

Answer

A secondary management interface.

Question 5

An administrator is performing an initial setup on a newly deployed BIG-IP VE appliance in a cloud environment. After accessing the Configuration utility, the administrator needs to license the system using a registration key. Which workflow must be completed to successfully provision and license the device?

Accepted Answer

Submit the registration key to generate a dossier, activate it online or offline to retrieve the license, install the license, and then provision modules.. Licensing a BIG-IP VE requires the registration key to be submitted to the F5 activation server either directly through the system or via a dossier. This generates a valid license file containing the feature modules, which must be installed before provisioning resources. Provisioning allocates CPU and memory based on the licensed modules, ensuring the appliance operates stably within cloud capacity constraints.

Answer

Provision the desired modules first, upload the raw license text file, and then reboot the management daemon to apply changes.

Answer

Run the configuration utility setup wizard, bypass the licensing step by using trial mode, and provision all available modules simultaneously.

Answer

Connect via serial console, execute the default setup script, assign a management IP, and automatically trigger the cloud marketplace auto-licensing daemon.

Question 6

Which TWO of the following are mandatory requirements when setting up a BIG-IP license via the 'Base Registration Key' method?

Accepted Answer

The management interface must have outbound internet access.. The base registration key method requires the BIG-IP to reach the F5 licensing servers to exchange the key for a license file. This process necessitates both outbound internet access for the device and a valid registration key provided by F5. Without these, the device cannot validate its entitlement, and the licensing process will fail, leaving the system in an unlicensed state where traffic processing is effectively disabled.

Answer

The device must be part of an HA cluster.

Answer

The device must be running in FIPS-compliant mode.

Answer

The user must have a physical smart card.

Question 7

An administrator is performing a fresh installation of BIG-IP VE on a hypervisor. After booting the ISO, the system fails to reach the Configuration Utility. Which initial task must be completed via the serial console to enable network access?

Accepted Answer

Execute the 'config' utility via the CLI.. Before the Configuration Utility is accessible, the BIG-IP system requires a base network configuration, including the management IP address, netmask, and default gateway. Without these parameters, the system cannot route traffic to the management interface. Performing this via the console is essential because the GUI is inactive until the management IP is routable, ensuring secure initial connectivity for subsequent administrative tasks.

Answer

Run the 'tmsh install software' command.

Answer

Enable the 'bigdb' variable for GUI access.

Answer

Format the primary partition using 'fdisk'.

Question 8

Refer to the exhibit. An administrator receives this error after a fresh installation and reboot. What must be done to resolve this?

Accepted Answer

Perform a manual license re-activation.. A fresh BIG-IP installation requires license activation to enable the system's licensed features. Without a valid license, the configuration daemon (mcpd) will refuse to load the configuration, as it cannot verify which modules are authorized for use. This is a common occurrence in new deployments and is resolved by contacting the F5 licensing server to register the system's base registration key.

Answer

Reboot the device into the previous boot slot.

Answer

Delete the current configuration files.

Answer

Check the physical license dongle on the chassis.

Question 9

Refer to the exhibit. An administrator reviews the system status after an upgrade attempt on a high-availability BIG-IP pair. The command output indicates a critical service failure. Which immediate diagnostic step should the administrator take?

Accepted Answer

Access the command line interface to examine /var/log/ltm for initialization errors and verify license validity for the newly installed software version.. The command output highlights that the Traffic Management Microkernel is suppressed, indicating a critical hardware or software initialization failure following an upgrade. Investigating log files such as /var/log/ltm and /var/log/boot.log helps isolate whether the issue stems from corrupted configuration syntax, license mismatches, or incompatible software images during the boot process.

Answer

Reboot the active device immediately into the previous boot location and initiate a configuration sync across the high-availability peer.

Answer

Modify the BIG-IP platform properties file to disable hardware acceleration and restart the master control program daemon using bigstart restart.

Answer

Run a complete factory default reset via the command line and restore the configuration from a UCS archive generated prior to the upgrade.

Question 10

Which THREE components are verified during the installation process of a new BIG-IP software version?

Accepted Answer

Software image integrity checksum.. During installation, the BIG-IP system validates the integrity of the software image to prevent corrupted installations. It also checks for sufficient disk space in the target volume to ensure the system can successfully extract all files. Finally, the system confirms hardware compatibility, ensuring the specific platform model supports the software version being installed, which is crucial for preventing kernel panic or driver mismatch issues after the first boot.

Answer

Local client user session count.

Answer

External DNS server latency.