F5CAB1 Practice Test 5 — 10 Questions

Question 1

An administrator is setting up a new BIG-IP appliance. Which TWO steps are mandatory for the device to process application traffic?

Accepted Answer

Create a VLAN and assign interfaces.. Processing application traffic requires both a configured VLAN and a self-IP for routing. The VLAN segments the physical network, and the self-IP acts as the L3 address for the BIG-IP on that segment. Without both, the device cannot receive or route traffic to back-end servers. These are the fundamental L3 building blocks that must be configured correctly before any virtual server can process client requests.

Answer

Enable the 'Route Domains' feature.

Answer

Install the Advanced WAF module.

Answer

Configure a default gateway in the GUI.

Question 2

Which component in the initial setup wizard allows the administrator to define the management network IP address and subnet mask?

Accepted Answer

Platform Configuration. Defining the management network is the first critical step in enabling remote access to a newly installed BIG-IP appliance. The setup wizard guides the administrator through this process to ensure connectivity is established before any traffic processing configurations are applied. Getting this step correct is paramount, as incorrect management networking can lead to immediate lockout, requiring physical console access to remediate the network settings on the device.

Answer

Traffic Management

Answer

Device Certificates

Answer

Resource Provisioning

Question 3

An administrator is performing an initial setup on a new BIG-IP appliance via the serial console. After completing the basic network and management IP configuration, the administrator needs to verify that the management route is correctly established. Which command should the administrator execute from the TMOS shell?

Accepted Answer

show /sys management-route. The TMOS shell (tmsh) provides administrative control over the BIG-IP system. Executing the show /sys management-route command displays the active management routes configured on the management interface, ensuring out-of-band administrative traffic routes correctly through the designated gateway, which is a critical validation step during initial deployment.

Answer

show /net route

Answer

list /sys global-settings

Answer

show /sys ip-address

Question 4

An administrator attempts to upgrade a BIG-IP system but receives an error stating that the 'required intermediate version' has not been reached. What is the correct way to handle this situation?

Accepted Answer

Install the intermediate version first, then the target.. BIG-IP upgrades often require specific intermediate software versions to ensure the configuration database (the bigip.conf file) is migrated correctly. Jumping from a very old version to the latest can cause the conversion script to fail. The administrator must install the mandatory intermediate version first, boot into it to allow the database conversion to occur, and then proceed with the final upgrade to the desired target version.

Answer

Force the install using the '--ignore-version' flag.

Answer

Manually copy the bigip.conf file to the new version.

Answer

Re-license the device using the target version keys.

Question 5

When configuring the management network for a new F5 BIG-IP appliance, what is the primary purpose of the 'Management Port' versus the 'TMM Interfaces'?

Accepted Answer

The management port provides out-of-band access, separating control traffic from data traffic.. The management port is dedicated to administrative traffic, such as SSH and the Configuration Utility, isolating it from the production data traffic handled by the TMM (Traffic Management Microkernel). This separation is vital for security and stability, ensuring that an administrator can always access the device even if the production network is saturated with traffic or experiencing a network storm.

Answer

The management port handles high-speed traffic, while TMM is for console access.

Answer

TMM interfaces are only used for internal communication, not client traffic.

Answer

The management port is the only way to perform a software upgrade.

Question 6

Which THREE steps are essential during the initial configuration of a high-availability (HA) pair after the base software is installed?

Accepted Answer

Establish a device trust between the two BIG-IP devices.. Configuring HA requires ensuring that the devices can communicate over a dedicated sync-failover link, that they share a common device group, and that trust is established between them. These steps are critical because they allow the BIG-IPs to synchronize configurations and coordinate failover events, which ensures that the standby unit can immediately take over traffic processing if the active unit fails.

Answer

Synchronize the license keys across all cluster members.

Answer

Assign the same IP address to the management interfaces of both units.

Question 7

Which license activation method is required for a BIG-IP device that is physically isolated from the Internet?

Accepted Answer

Manual activation via dossier file upload.. Devices without Internet access must use the manual license activation process. This involves generating a dossier on the F5 device, submitting it to the F5 licensing server via a machine with Internet access, receiving a license file, and uploading it back to the BIG-IP. This process ensures that highly secure environments can license their F5 hardware without violating air-gap security policies.

Answer

Automatic activation via F5 Licensing Server.

Answer

Activation via the F5 BIG-IQ platform.

Answer

Activation using the local 'lic-key' command.

Question 8

What is the primary function of the 'ConfigSync' process during the initial setup of a redundant pair?

Accepted Answer

To replicate configuration data between units.. ConfigSync is responsible for replicating configuration data between units in a high availability pair. During initial setup, it ensures that both the active and standby units possess identical configurations, including virtual servers, pools, and profiles. This is critical for failover; if the active unit fails, the standby unit must have an exact replica of the configuration to take over traffic management without any service disruption or mismatch.

Answer

To synchronize the software version between units.

Answer

To perform load balancing between two BIG-IPs.

Answer

To update the license status of the standby unit.

Question 9

Which utility should an administrator use to verify the integrity of the BIG-IP configuration before performing an upgrade?

Accepted Answer

tmsh load sys config verify. The 'tmsh load sys config verify' command is a critical diagnostic tool. It simulates the loading of the configuration, identifying syntax errors or incompatibilities that could prevent the device from booting correctly after an upgrade. Running this check beforehand allows the administrator to remediate issues in a controlled environment, preventing the nightmare scenario of a non-bootable production system following a major software version update.

Answer

tcpdump -i 0.0

Answer

show sys software status

Answer

config check-all

Question 10

You are preparing a BIG-IP for production. You need to ensure that the system is secure by default. Which task should be performed as part of the initial configuration hardening process?

Accepted Answer

Change the default 'root' and 'admin' passwords.. Hardening is a critical phase of the initial configuration. Changing default credentials, disabling unused services, and ensuring the root account is restricted are essential to protect the device from unauthorized access. These steps reduce the attack surface of the appliance, ensuring that the BIG-IP is not vulnerable to common automated exploits that target default configurations and factory settings immediately upon being deployed to the network.

Answer

Disable the GUI and only use CLI for all configuration tasks.

Answer

Remove the default 'Common' partition from the configuration.

Answer

Enable all available F5 features to test functionality.