F5CAB1 Practice Test 7 — 10 Questions

Question 1

An administrator is setting up a BIG-IP appliance. Where should the management IP address be configured to ensure the device is accessible for remote administration?

Accepted Answer

On the dedicated 'MGMT' physical interface.. The management IP is configured specifically on the 'Management' interface in the Network section of the Configuration Utility. This interface is distinct from the TMM-controlled data interfaces. Assigning the management IP here ensures that administrative traffic is routed separately from the data plane, providing secure out-of-band management that is critical for maintaining access to the device during production traffic congestion or system-wide network issues.

Answer

On one of the front-panel data interfaces (1.1, 1.2, etc.).

Answer

In the Global Traffic Manager (GTM) listener configuration.

Answer

Via the console serial port connection only.

Question 2

A BIG-IP administrator is upgrading a standalone device from version 15.1.5 to 16.1.0 using an ISO image. The administrator mounts the ISO, runs the installation script, and reboots. After the reboot, the administrator notices that the management IP address is unchanged, but the configuration has been reset to default. What is the most likely cause?

Accepted Answer

The administrator performed a clean install instead of an upgrade.. The most likely cause is that the administrator selected the clean install option when running the installation script from the ISO. Unlike an upgrade, a clean install wipes the existing configuration and installs the new version with default settings. The management IP may persist if it was set outside the BIG-IP configuration, such as via the hypervisor or if manually reconfigured. To avoid this, administrators should choose the upgrade option and verify that the configuration is preserved.

Answer

The ISO image was corrupted, causing a partial upgrade.

Answer

The administrator did not create a UCS backup before upgrading.

Answer

The administrator forgot to run the 'load sys config' command after the upgrade.

Question 3

A network administrator is performing the initial configuration of a new BIG-IP device. The administrator needs to assign a management IP address to the device. Which configuration object should be used?

Accepted Answer

A management IP address on the management interface.. The management IP address is assigned to the dedicated management interface (MGMT) on the BIG-IP. This interface is used for out-of-band management, separate from data plane traffic. It allows administrators to access the device via SSH, HTTPS, and other management protocols, even if data plane interfaces are down.

Answer

A self IP address on the management VLAN.

Answer

A management route on the management interface.

Answer

A floating self IP address on the management VLAN.

Question 4

When configuring a High Availability (HA) pair, which step must be completed immediately after the initial installation on both devices?

Accepted Answer

Verify matching software version and license.. Before synchronizing configurations, both devices must have the same software version and license to ensure compatibility. Establishing HA requires identical software builds because configuration synchronization may fail if versions mismatch. This foundational step prevents synchronization errors, ensuring that the primary and standby devices operate as a unified system, which is critical for maintaining session persistence and high availability during failover scenarios.

Answer

Assign a virtual IP address to the pair.

Answer

Configure the VLANs and self-IPs.

Answer

Enable the 'config-sync' feature globally.

Question 5

An administrator is upgrading a BIG-IP device and wants to ensure the previous configuration is preserved in case of an issue. What is the best practice for backup before an upgrade?

Accepted Answer

Create and download a UCS file.. Backing up the configuration is a critical safety net. A User Configuration Set (UCS) file acts as a complete snapshot of the system's state. By creating this file and downloading it to a remote location, the administrator ensures that even a catastrophic failure during the upgrade can be mitigated by restoring the device to its exact previous state, ensuring business continuity.

Answer

Copy the /config directory to a USB drive.

Answer

Take a snapshot of the hypervisor.

Answer

Use the 'save sys config' command.

Question 6

An administrator is preparing to upgrade a BIG-IP from version 15.1 to 17.1. The administrator wants to ensure that the upgrade process can be rolled back if necessary. Which action should be taken before starting the upgrade to enable rollback?

Accepted Answer

Install the new version to a new boot location.. To enable rollback during a BIG-IP upgrade, you must install the new version to a separate boot location. This leaves the existing boot location with the current version untouched. If the upgrade does not go as planned, you can reboot the system into the old boot location, restoring the previous software version. Other actions like creating a UCS backup or saving the configuration are good practices for disaster recovery but do not provide a software rollback path.

Answer

Run the 'tmsh save sys config' command.

Answer

Enable the 'auto-rollback' feature in the upgrade settings.

Answer

Create a UCS backup of the current configuration.

Question 7

You are deploying a new BIG-IP VE instance in a cloud environment. The deployment script fails to complete the initial provisioning. Which setting, if incorrect, is the most common cause for cloud-based deployment failures?

Accepted Answer

Outbound connectivity to the licensing server is blocked by security groups.. In cloud environments, the virtual machine must be able to communicate with the Cloud's metadata service and the F5 licensing server. If the DNS configuration or the security group/firewall rules are not properly set to allow outbound traffic to these services, the BIG-IP will be unable to license itself or complete the initial setup scripts, leading to a failed deployment.

Answer

The hostname does not match the F5 cloud marketplace image name.

Answer

The virtual disk size was increased beyond the original template.

Answer

The root password was set to a value that is too complex.

Question 8

When configuring a new BIG-IP device, what is the primary purpose of the 'Setup Utility'?

Accepted Answer

To perform the basic initial system configuration.. The Setup Utility serves as the initial configuration interface for a newly provisioned BIG-IP. It streamlines the input of essential parameters like device hostname, management network settings, and licensing. By guiding the administrator through these critical tasks, it ensures the device is correctly identified on the network and entitled to function, providing a consistent foundation before more advanced features like Local Traffic Manager or Security policies are implemented.

Answer

To automatically optimize the TCP/IP stack for performance.

Answer

To create all virtual servers and pools.

Answer

To manage existing user traffic on the device.

Question 9

An administrator is configuring a new BIG-IP and needs to ensure that the device's management interface is accessible only from a specific secure jump host. Which configuration element should be modified?

Accepted Answer

Update the Management Interface allowed list.. Restricting management access is a fundamental security practice. By modifying the 'Allowed IP addresses' list within the management interface configuration, the BIG-IP will only accept traffic from designated IP addresses. This effectively mitigates the risk of unauthorized access attempts from the broader network, ensuring that only trusted machines, such as a secure jump host, can interact with the system's management services.

Answer

Modify the Virtual Server access list.

Answer

Create a packet filter on the external interface.

Answer

Disable the HTTPS service on the device.

Question 10

After upgrading a BIG-IP, the administrator notices that specific traffic management features are now missing. What is the most likely reason?

Accepted Answer

The modules were not provisioned after the reboot.. Missing features after an upgrade often result from improper provisioning. When upgrading to a newer BIG-IP version, the resource allocation for modules (e.g., LTM, AFM) may be reset or require manual reassignment. If the module is not correctly provisioned to a 'Nominal' or 'Dedicated' level, the associated functionality will not be loaded into the memory, making the features appear absent even though the software version is correct.

Answer

The license was invalidated by the upgrade.

Answer

The configuration file was deleted.

Answer

The browser cache requires clearing.