F5CAB1 Install, Initial Configuration, and Upgrade Practice Test 2 — 15 Questions

Question 1

An administrator is planning an initial configuration for a new BIG-IP deployment. Which THREE items must be configured to ensure the management network is secure and accessible?

Accepted Answer

Change the default 'admin' and 'root' passwords.. Securing the management interface is the first line of defense against unauthorized access to the BIG-IP system. By restricting administrative access and ensuring only authenticated connections are allowed, the administrator builds a robust foundation for the appliance. These three configurations ensure that even if the internal network is compromised, the BIG-IP management plane remains hardened against common attack vectors and unauthorized login attempts from untrusted segments.

Answer

Configure an NTP server for time synchronization.

Answer

Disable the serial console port for physical security.

Question 2

Which TWO actions should be performed after successfully upgrading a BIG-IP system to ensure long-term stability?

Accepted Answer

Re-run the configuration synchronization (ConfigSync).. Post-upgrade tasks are critical for ensuring that the newly updated system performs reliably in production. By verifying configuration consistency and updating administrative workflows, administrators prevent issues such as forgotten legacy settings or outdated monitoring scripts. These steps are a standard part of the F5 maintenance lifecycle, ensuring that the appliance is not only running the latest version but is also optimized for operational efficiency and continued security compliance within the enterprise.

Answer

Delete all existing log files.

Answer

Change the default root password again.

Answer

Format the inactive boot partition.

Question 3

Refer to the exhibit. An administrator wants to install BIG-IP version 17.1.0 on the system. Which action should the administrator take to begin the installation process?

Accepted Answer

Use the Software Management utility to install the ISO to HD1.2.. The exhibit shows that HD1.2 and HD1.3 are empty. To perform a successful upgrade, the administrator must upload the ISO to the BIG-IP and then run the installation process, selecting an inactive volume as the destination. By installing to an inactive volume, the system maintains the current running version as a fallback, allowing for a quick rollback if the upgrade encounters unexpected issues during the transition.

Answer

Reformat the HD1.1 volume to clear space before installing.

Answer

Run the 'switchboot' command to make HD1.2 active before uploading.

Answer

Delete HD1.3 to expand the size of HD1.2.

Question 4

Refer to the exhibit. An administrator receives this error while attempting to import a new device certificate for the management interface. What is the most likely cause of this error?

Accepted Answer

The certificate name already exists in the system certificate store.. This error occurs because the BIG-IP is attempting to associate a certificate that is already assigned to a system object, such as the device identity used for trust. To replace it, the administrator must first ensure the certificate is not currently being referenced by the device's own identity profile, or they must replace it by modifying the existing profile rather than attempting to create a duplicate entry in the certificate store.

Answer

The certificate is expired.

Answer

The certificate is not signed by a trusted CA.

Answer

The private key is missing from the import file.

Question 5

During an initial configuration, an administrator needs to change the BIG-IP host name. What is the impact of changing the host name on an existing HA cluster?

Accepted Answer

The change will cause the device to be removed from the sync group.. Changing the hostname of a BIG-IP node in an HA cluster can disrupt the device trust relationship, which relies on the hostname to identify the nodes in the cluster configuration. This can cause the synchronization process to fail, as the peer may no longer recognize the device identity. Therefore, one must carefully update the device trust and sync group settings whenever a hostname change is performed in an HA environment.

Answer

No impact; the device trust is based on IP address only.

Answer

The change automatically updates all cluster members.

Answer

The change forces a hardware-level reboot of all cluster nodes.

Question 6

An administrator is configuring the initial network settings on a new BIG-IP appliance. The management interface must be reachable from the corporate network, and the data plane traffic must be segregated. The administrator assigns an IP address to the management interface via the LCD panel. Which additional step is required to ensure that the management interface can be accessed from a remote subnet?

Accepted Answer

Configure a default route on the management interface.. The management interface on BIG-IP has its own routing table, separate from the TMM data plane. To reach remote networks, a default route must be configured on the management interface. This is typically done during initial configuration via the LCD or tmsh. Without it, the management interface can only communicate locally, preventing remote administration.

Answer

Add a static ARP entry for the management gateway.

Answer

Enable the management interface in the TMM network configuration.

Answer

Assign a floating self IP to the management interface.

Question 7

An administrator is preparing a BIG-IP iSeries appliance (running TMOS 17.x) for a new deployment. The management network uses a /24 subnet and the default gateway is 10.10.10.1. The administrator wants to ensure the BIG-IP can reach an external license server (F5 licensing server) and download the license over the management interface. Which configuration step is required for this to succeed?

Accepted Answer

Configure the management interface IP address, subnet mask, and default gateway on the management network, and ensure the management route is configured.. To license a BIG-IP and allow external management access, the management interface must have a valid IP address, subnet mask, and default gateway. This enables the BIG-IP to reach the F5 licensing server. The management route is independent of data plane routing, so it must be explicitly configured. Options B, C, and D fail to provide the necessary static management gateway.

Answer

Configure the management interface with an IP address and subnet mask only, and rely on the existing default route on the data plane for external connectivity.

Answer

Enable DHCP on the management interface so that it automatically obtains an IP address, subnet mask, and default gateway from the network.

Answer

Configure a VLAN on an internal interface and assign a self IP address, then use that self IP to contact the licensing server.

Question 8

An administrator is upgrading a BIG-IP HA pair from version 15.1.5 to 16.1.3. The administrator has already installed the new image on both devices and is ready to reboot the standby device. After rebooting the standby device into the new version, the administrator notices that the active device is still running the old version and the configuration changes made on the standby are not synchronizing. What is the most likely cause?

Accepted Answer

The standby device was rebooted into the new version, but the active device is still on the old version, causing a version mismatch that prevents configuration synchronization.. In a BIG-IP HA pair, configuration synchronization requires both devices to run the same software version. When one device is upgraded and the other is not, the sync process fails because the configuration schemas differ. The administrator must upgrade and reboot the active device to the same version to restore synchronization. This is a critical step in the HA upgrade process.

Answer

The standby device's configuration was not backed up before the upgrade, causing the sync process to fail.

Answer

The active device's default route was not configured, preventing it from reaching the standby device.

Answer

The standby device's management IP address changed during the upgrade, breaking the trust relationship.

Question 9

An administrator is planning to upgrade a BIG-IP HA pair from version 16.1 to 17.1. The pair is currently in an active/standby configuration with config sync enabled. The administrator wants to minimize downtime during the upgrade. Which two steps should be performed before starting the upgrade on the first device? (Choose two.)

Accepted Answer

Upgrade the standby device first, then fail over from the active device to the newly upgraded standby.. To minimize downtime during an HA upgrade, the administrator should first ensure the configuration is synchronized. Then, upgrade the standby device, fail over to it, and finally upgrade the original active device. This sequence maintains service availability. Backing up is prudent but not a step that directly minimizes downtime. Disabling failover or management interfaces would be counterproductive.

Answer

Back up the configuration of both devices to an external location before starting the upgrade.

Answer

Disable the management interface on the active device to force traffic through the standby.

Answer

Disable the synchronization and failover operations on the first device to prevent automatic failover during the upgrade.

Question 10

A junior administrator is performing the initial configuration of a new BIG-IP appliance via the LCD panel. The administrator needs to set the management IP address, netmask, and default gateway. Which menu path on the LCD panel should be used?

Accepted Answer

System > Management IP. The LCD panel on a BIG-IP provides a quick way to set the management IP, netmask, and default gateway. The correct menu path is System > Management IP. This allows the administrator to configure basic network settings without needing a console connection. Once set, the administrator can access the web UI or SSH for further configuration.

Answer

Network > Interfaces > Management

Answer

Configuration > Network > Management

Answer

System > Management > Network

Question 11

An administrator is preparing to license a new BIG-IP appliance using the automatic license activation method. The device has not yet been configured with a hostname or management IP. Which two actions must the administrator perform to ensure successful license activation? (Choose two.)

Accepted Answer

Obtain and enter the registration key from the F5 licensing portal.. Automatic license activation requires the BIG-IP to communicate with F5's licensing servers. This necessitates a valid registration key and proper network configuration on the management interface, including DNS and a default gateway, to resolve and reach the licensing servers.

Answer

Configure the BIG-IP to use an HTTP proxy for licensing traffic.

Answer

Assign a public IP address directly to the management interface.

Answer

Enable the 'license activation' service on the data-plane VLAN.

Question 12

A BIG-IP administrator needs to upgrade a standalone device from v16.1.3 to v17.1.1. Before starting, the administrator runs `tmsh show sys software` and sees that the inactive volume is missing or not available. What is the most appropriate action to prepare the system for the upgrade?

Accepted Answer

Install the new version to the inactive volume using the `tmsh install sys software image` command with the appropriate image file.. When the inactive volume is missing, the administrator must install the new software image to create it. The `tmsh install sys software image` command performs this installation. After installation, the system can boot into the new volume. Other commands listed do not create volumes and are not part of the upgrade preparation process. The correct action ensures a smooth upgrade path.

Answer

Use the `tmsh reboot volume` command to force the creation of a new volume.

Answer

Run the `tmsh load sys config` command to regenerate the volume structure.

Answer

Create a new volume using the `tmsh create sys software volume` command.

Question 13

An administrator is preparing to install a new BIG-IP system in a data center. The management network uses a /24 subnet, and the default management IP address is 192.168.1.245/24. The administrator wants to change the management IP to 10.10.10.5/24 and set the default gateway to 10.10.10.1 using the command-line interface. Which command should be used to accomplish this?

Accepted Answer

tmsh modify sys global-settings mgmt-dhcp disabled; tmsh create sys management-ip 10.10.10.5/24; tmsh create sys management-route default gateway 10.10.10.1. To change the management IP and gateway on a BIG-IP using tmsh, you must first disable DHCP for management, then configure the management IP address, and finally add a default management route. The commands are 'modify sys global-settings mgmt-dhcp disabled', 'create sys management-ip /', and 'create sys management-route default gateway '. This ensures the management interface has a static address and can reach remote networks.

Answer

tmsh modify sys global-settings mgmt-dhcp disabled

Answer

tmsh create net interface mgmt ip 10.10.10.5 netmask 255.255.255.0

Answer

tmsh modify sys management-ip 10.10.10.5/24

Question 14

An administrator is performing an initial configuration of a BIG-IP system. The administrator needs to ensure that the device is properly licensed and that the management interface is configured with a static IP address. Which two tasks must be completed before the BIG-IP can be fully operational? (Choose two.)

Accepted Answer

Install a license using the 'tmsh install sys license registration-key <key>' command.. The two mandatory tasks for initial configuration are assigning a static management IP and installing a valid license. The management IP allows administrative access and communication with the license server, while the license unlocks the system's capabilities. Other tasks like default route, VLANs, or self-IPs are important for specific deployments but not strictly required for the BIG-IP to be considered operational at the base level.

Answer

Set up a VLAN and assign it to an interface.

Answer

Create a self-IP for the management network.

Answer

Configure a default route for the management interface using 'sys management-route'.

Question 15

An administrator is performing the initial configuration of a BIG-IP system that will be deployed in a high-availability (HA) pair. The administrator needs to configure the HA pair to ensure proper failover and synchronization. Which TWO tasks are required to establish a functional HA pair? (Choose two.)

Accepted Answer

Configure a redundant pair with a unique failover multicast address. To establish a functional HA pair on BIG-IP, you must configure a redundant pair with a unique failover multicast address and set up configuration and failover state synchronization. These tasks ensure that the devices can communicate, detect failures, and synchronize their configurations and states, enabling seamless failover. The other options are either incorrect or not required for HA functionality.

Answer

Set the same hostname on both devices

Answer

Assign a floating IP address to the management interface

Answer

Enable spanning tree protocol on the management interface