F5CAB1 Practice Test 2 — 30 Questions

Question 1

An administrator accidentally deleted a configuration file. Which action would be the most efficient way to restore the system configuration to its previous state?

Accepted Answer

Restore from a UCS file.. Restoring a previously created UCS (User Configuration Set) archive is the fastest and most reliable way to recover from an accidental configuration loss. The UCS file contains all the necessary data to rebuild the system configuration. This standard recovery procedure minimizes downtime and human error, providing a clean and predictable path back to the last known working state of the BIG-IP device.

Answer

Perform a factory reset.

Answer

Re-install the TMOS software.

Answer

Use the 'tmsh load config' command.

Question 2

Refer to the exhibit. An administrator receives this error while running a TMSH script to provision modules. What is the likely cause?

Accepted Answer

The provisioning level is set to an unsupported value.. Provisioning errors often stem from invalid resource levels being assigned to a module. Each module has specific requirements and allowed values (e.g., nominal, dedicated, none). When an invalid setting is provided, the system rejects the command to prevent system instability. Understanding the resource allocation model is essential to ensure that the BIG-IP appliance operates within its performance limits while enabling the required application delivery services for the enterprise environment.

Answer

Insufficient physical memory is installed.

Answer

The license does not support this module.

Answer

The management interface is down.

Question 3

An administrator needs to verify the current software version running on both boot partitions. Which command provides this information?

Accepted Answer

tmsh show sys software. Knowing the version on each boot slot is vital for planning upgrades and verifying the current state of the device. The 'show sys software' command provides a clear view of all installed versions and their corresponding locations. This information is essential for managing multiple boot partitions and ensuring that the correct software is targeted for the next maintenance activity or system failover event.

Answer

uname -a

Answer

cat /etc/version

Answer

tmsh list sys hardware

Question 4

An administrator is upgrading a BIG-IP system and receives a warning that the 'config sync' state is 'Not Fully Synchronized'. What is the correct action to take before proceeding with the upgrade?

Accepted Answer

Force a configuration sync from the active to the standby unit.. Proceeding with an upgrade while the sync state is not 'In Sync' is dangerous because the devices in the HA pair may have different configurations. This inconsistency can lead to unexpected behavior after the upgrade, such as traffic outages or corrupted data, as the system tries to merge or reconcile conflicting configurations during the reboot. Always synchronize the configuration before changing the software version to ensure a stable, predictable transition.

Answer

Ignore the warning; the upgrade will force a synchronization.

Answer

Delete the standby unit from the device group.

Answer

Perform a factory reset on both devices.

Question 5

An administrator is installing a new BIG-IP version via the command line using the 'tmsh' utility. Which command is used to verify that the installation has successfully completed and that the new boot slot is ready to be made active?

Accepted Answer

tmsh show sys software. Verifying the installation status is a vital step before attempting to switch boot partitions. The 'show sys software' command provides the current status of all boot volumes, showing whether the install finished successfully or encountered errors. This allows the administrator to confirm the build version is correctly extracted before proceeding with the switch, preventing the risk of booting into a corrupted or incomplete installation that would cause downtime.

Answer

tmsh list sys software

Answer

tmsh check sys software

Answer

tmsh verify sys software

Question 6

An administrator is configuring a new BIG-IP high-availability (HA) pair. The administrator has already configured the management IPs and licensed both devices. Which additional step is required to ensure the devices can communicate for config sync and failover?

Accepted Answer

Configure a self IP on a dedicated VLAN for failover and config sync traffic.. To enable config sync and failover, the BIG-IP devices must have self IP addresses on a common VLAN. These self IPs are used for heartbeat and synchronization traffic. The management interface is not used for this purpose. Configuring a dedicated self IP on each device ensures reliable HA communication.

Answer

Set up a default route on the management interface to the peer's management IP.

Answer

Configure a static ARP entry for the peer's management IP on both devices.

Answer

Enable spanning tree protocol on all VLANs to prevent loops between the devices.

Question 7

An administrator is performing an initial setup of a new BIG-IP appliance via the Configuration Utility. After setting the management IP address, they are unable to reach the device from their workstation. Which factor is most likely responsible for this connectivity failure?

Accepted Answer

The management default gateway route was not defined in the initial network setup.. Initial configuration requires that the management interface is physically connected to the management network and that the management route is properly configured. If the default gateway is missing or incorrect, the BIG-IP cannot route packets back to the administrator's workstation, even if the IP assignment was successful. Verifying routing tables is a critical troubleshooting step during deployment to ensure bidirectional traffic flow between the management console and the BIG-IP management port.

Answer

The license has not been activated, disabling all management plane access.

Answer

The port lockdown setting on the management interface is set to 'Allow None'.

Answer

The appliance is running a different software version than the browser supports.

Question 8

An administrator is upgrading a BIG-IP pair. After upgrading the standby unit, which step should be performed before upgrading the active unit?

Accepted Answer

Force the standby unit to become active.. The standard high-availability upgrade path involves upgrading the standby unit first to verify the new software version's stability. By failing over traffic to the newly upgraded unit, the administrator validates that the application services function as expected. If issues arise, the administrator can fail back to the original active unit, minimizing downtime and ensuring a controlled transition during the maintenance window for the entire cluster.

Answer

Delete the sync-failover device group.

Answer

Reboot the active unit immediately.

Answer

Change the management IP address of the active unit.

Question 9

What is the primary benefit of performing a clean installation of BIG-IP software on a new boot volume?

Accepted Answer

It ensures the system is free from previous software corruption.. A clean installation allows the system to start with a fresh OS and core binaries, significantly reducing the risk of carrying over corrupted files or incompatible settings from a legacy version. This method is the safest way to ensure system stability and performance in a production environment, as it eliminates the 'baggage' of previous configurations and system states that could potentially cause instability when running newer software versions on the BIG-IP appliance.

Answer

It automatically migrates all custom scripts.

Answer

It is the only way to upgrade the license key.

Answer

It increases the speed of traffic processing.

Question 10

An administrator is performing an initial configuration on a new BIG-IP appliance using the Setup Utility via the management port. After completing the network and IP settings, the administrator loses management connectivity. Which action should the administrator take first to resolve the issue?

Accepted Answer

Connect via serial console, verify the management route table, and ensure the correct default gateway is assigned.. Losing management connectivity after running the Setup Utility typically happens because the default gateway was misconfigured or omitted, preventing routing back to the administrator subnet. Verifying and correcting the gateway via the serial console restores layer 3 communication without needing a full factory reset. This ensures the initial provisioning workflow can proceed smoothly in accordance with F5 deployment best practices.

Answer

Perform a factory reset using the LCD panel to restart the initial setup wizard from the beginning.

Answer

Unplug the management cable for thirty seconds and plug it back into a different switch port to force DHCP discovery.

Answer

Reboot the appliance using the physical power switch to reload the factory default IP configuration.

Question 11

An administrator is setting up a new BIG-IP appliance. Which TWO steps are mandatory for the device to process application traffic?

Accepted Answer

Create a VLAN and assign interfaces.. Processing application traffic requires both a configured VLAN and a self-IP for routing. The VLAN segments the physical network, and the self-IP acts as the L3 address for the BIG-IP on that segment. Without both, the device cannot receive or route traffic to back-end servers. These are the fundamental L3 building blocks that must be configured correctly before any virtual server can process client requests.

Answer

Enable the 'Route Domains' feature.

Answer

Install the Advanced WAF module.

Answer

Configure a default gateway in the GUI.

Question 12

Which component in the initial setup wizard allows the administrator to define the management network IP address and subnet mask?

Accepted Answer

Platform Configuration. Defining the management network is the first critical step in enabling remote access to a newly installed BIG-IP appliance. The setup wizard guides the administrator through this process to ensure connectivity is established before any traffic processing configurations are applied. Getting this step correct is paramount, as incorrect management networking can lead to immediate lockout, requiring physical console access to remediate the network settings on the device.

Answer

Traffic Management

Answer

Device Certificates

Answer

Resource Provisioning

Question 13

An administrator is performing an initial setup on a new BIG-IP appliance via the serial console. After completing the basic network and management IP configuration, the administrator needs to verify that the management route is correctly established. Which command should the administrator execute from the TMOS shell?

Accepted Answer

show /sys management-route. The TMOS shell (tmsh) provides administrative control over the BIG-IP system. Executing the show /sys management-route command displays the active management routes configured on the management interface, ensuring out-of-band administrative traffic routes correctly through the designated gateway, which is a critical validation step during initial deployment.

Answer

show /net route

Answer

list /sys global-settings

Answer

show /sys ip-address

Question 14

An administrator attempts to upgrade a BIG-IP system but receives an error stating that the 'required intermediate version' has not been reached. What is the correct way to handle this situation?

Accepted Answer

Install the intermediate version first, then the target.. BIG-IP upgrades often require specific intermediate software versions to ensure the configuration database (the bigip.conf file) is migrated correctly. Jumping from a very old version to the latest can cause the conversion script to fail. The administrator must install the mandatory intermediate version first, boot into it to allow the database conversion to occur, and then proceed with the final upgrade to the desired target version.

Answer

Force the install using the '--ignore-version' flag.

Answer

Manually copy the bigip.conf file to the new version.

Answer

Re-license the device using the target version keys.

Question 15

When configuring the management network for a new F5 BIG-IP appliance, what is the primary purpose of the 'Management Port' versus the 'TMM Interfaces'?

Accepted Answer

The management port provides out-of-band access, separating control traffic from data traffic.. The management port is dedicated to administrative traffic, such as SSH and the Configuration Utility, isolating it from the production data traffic handled by the TMM (Traffic Management Microkernel). This separation is vital for security and stability, ensuring that an administrator can always access the device even if the production network is saturated with traffic or experiencing a network storm.

Answer

The management port handles high-speed traffic, while TMM is for console access.

Answer

TMM interfaces are only used for internal communication, not client traffic.

Answer

The management port is the only way to perform a software upgrade.

Question 16

Which THREE steps are essential during the initial configuration of a high-availability (HA) pair after the base software is installed?

Accepted Answer

Establish a device trust between the two BIG-IP devices.. Configuring HA requires ensuring that the devices can communicate over a dedicated sync-failover link, that they share a common device group, and that trust is established between them. These steps are critical because they allow the BIG-IPs to synchronize configurations and coordinate failover events, which ensures that the standby unit can immediately take over traffic processing if the active unit fails.

Answer

Synchronize the license keys across all cluster members.

Answer

Assign the same IP address to the management interfaces of both units.

Question 17

Which license activation method is required for a BIG-IP device that is physically isolated from the Internet?

Accepted Answer

Manual activation via dossier file upload.. Devices without Internet access must use the manual license activation process. This involves generating a dossier on the F5 device, submitting it to the F5 licensing server via a machine with Internet access, receiving a license file, and uploading it back to the BIG-IP. This process ensures that highly secure environments can license their F5 hardware without violating air-gap security policies.

Answer

Automatic activation via F5 Licensing Server.

Answer

Activation via the F5 BIG-IQ platform.

Answer

Activation using the local 'lic-key' command.

Question 18

What is the primary function of the 'ConfigSync' process during the initial setup of a redundant pair?

Accepted Answer

To replicate configuration data between units.. ConfigSync is responsible for replicating configuration data between units in a high availability pair. During initial setup, it ensures that both the active and standby units possess identical configurations, including virtual servers, pools, and profiles. This is critical for failover; if the active unit fails, the standby unit must have an exact replica of the configuration to take over traffic management without any service disruption or mismatch.

Answer

To synchronize the software version between units.

Answer

To perform load balancing between two BIG-IPs.

Answer

To update the license status of the standby unit.

Question 19

Which utility should an administrator use to verify the integrity of the BIG-IP configuration before performing an upgrade?

Accepted Answer

tmsh load sys config verify. The 'tmsh load sys config verify' command is a critical diagnostic tool. It simulates the loading of the configuration, identifying syntax errors or incompatibilities that could prevent the device from booting correctly after an upgrade. Running this check beforehand allows the administrator to remediate issues in a controlled environment, preventing the nightmare scenario of a non-bootable production system following a major software version update.

Answer

tcpdump -i 0.0

Answer

show sys software status

Answer

config check-all

Question 20

You are preparing a BIG-IP for production. You need to ensure that the system is secure by default. Which task should be performed as part of the initial configuration hardening process?

Accepted Answer

Change the default 'root' and 'admin' passwords.. Hardening is a critical phase of the initial configuration. Changing default credentials, disabling unused services, and ensuring the root account is restricted are essential to protect the device from unauthorized access. These steps reduce the attack surface of the appliance, ensuring that the BIG-IP is not vulnerable to common automated exploits that target default configurations and factory settings immediately upon being deployed to the network.

Answer

Disable the GUI and only use CLI for all configuration tasks.

Answer

Remove the default 'Common' partition from the configuration.

Answer

Enable all available F5 features to test functionality.