F5CAB1 Install, Initial Configuration, and Upgrade Practice Test 5 — 15 Questions

Question 1

An administrator is preparing to install a new BIG-IP virtual edition (VE) license using the command line interface. Which TWO files or parameters are strictly required to complete a manual activation when the device lacks direct internet access? (Choose two.)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The unique Dossier generated from the unactivated BIG-IP VE instance.. Manual licensing of a BIG-IP VE offline requires generating a dossier from the device and submitting it to the F5 licensing portal to receive the signed license file. Providing the exact dossier string and subsequently installing the returned license file completes the activation process securely without requiring outbound internet connectivity from the management network.

Answer

The root administrator password hash exported from the configuration utility.

Answer

The enterprise registration key provided in the F5 software purchase order email.

Answer

The private SSL certificate used for securing administrative web management traffic.

Question 2

An administrator is performing a fresh installation of BIG-IP VE on a hypervisor. After booting the ISO, the system fails to reach the Configuration Utility. Which initial task must be completed via the serial console to enable network access?

Accepted Answer

Execute the 'config' utility via the CLI.. Before the Configuration Utility is accessible, the BIG-IP system requires a base network configuration, including the management IP address, netmask, and default gateway. Without these parameters, the system cannot route traffic to the management interface. Performing this via the console is essential because the GUI is inactive until the management IP is routable, ensuring secure initial connectivity for subsequent administrative tasks.

Answer

Run the 'tmsh install software' command.

Answer

Enable the 'bigdb' variable for GUI access.

Answer

Format the primary partition using 'fdisk'.

Question 3

Refer to the exhibit. An administrator receives this error when attempting to install a new software version. What is the most appropriate remediation step?

Accepted Answer

Delete an old, unused software volume.. The 'No space left on device' error indicates the target boot location is full. The administrator must delete an unused software volume to reclaim space. Managing boot locations is a standard administrative task in BIG-IP environments, ensuring that at least one volume remains available for future upgrades or rollbacks, thereby maintaining system reliability during the transition to new software versions.

Answer

Expand the virtual disk in the hypervisor.

Answer

Run 'touch' on the partition to clear logs.

Answer

Perform a 'factory reset' of the device.

Question 4

Which license activation method is required for a BIG-IP device that is physically isolated from the Internet?

Accepted Answer

Manual activation via dossier file upload.. Devices without Internet access must use the manual license activation process. This involves generating a dossier on the F5 device, submitting it to the F5 licensing server via a machine with Internet access, receiving a license file, and uploading it back to the BIG-IP. This process ensures that highly secure environments can license their F5 hardware without violating air-gap security policies.

Answer

Automatic activation via F5 Licensing Server.

Answer

Activation via the F5 BIG-IQ platform.

Answer

Activation using the local 'lic-key' command.

Question 5

When configuring a High Availability (HA) pair, which step must be completed immediately after the initial installation on both devices?

Accepted Answer

Verify matching software version and license.. Before synchronizing configurations, both devices must have the same software version and license to ensure compatibility. Establishing HA requires identical software builds because configuration synchronization may fail if versions mismatch. This foundational step prevents synchronization errors, ensuring that the primary and standby devices operate as a unified system, which is critical for maintaining session persistence and high availability during failover scenarios.

Answer

Assign a virtual IP address to the pair.

Answer

Configure the VLANs and self-IPs.

Answer

Enable the 'config-sync' feature globally.

Question 6

An administrator is upgrading a BIG-IP system. Which THREE tasks should be part of the pre-upgrade checklist to minimize risk?

Accepted Answer

Create a UCS archive of the current configuration.. Pre-upgrade checklists are vital to prevent downtime and data loss. Creating a user configuration set (UCS) allows for easy recovery if the upgrade fails. Reviewing release notes identifies known issues specific to the target version. Validating that the current configuration is free of errors ensures the upgrade doesn't propagate invalid settings to the new boot location. These steps protect the environment's stability and operational integrity during the maintenance window.

Answer

Install the latest iApps templates.

Answer

Change the root password to a new value.

Question 7

Which component of the BIG-IP initial setup is used to ensure that administrative access to the system is restricted to trusted management subnets?

Accepted Answer

Management port allowed addresses. The 'Management IP' configuration includes the ability to set packet filter rules or restrict GUI/SSH access via management allowed lists. Limiting access ensures that only specific, authorized subnets can interact with the management plane. This is a vital security best practice, preventing unauthorized actors from attempting to log in to the management interface of the F5 device from public or untrusted network segments.

Answer

Self-IP allow list

Answer

Route table configuration

Answer

VLAN tagging policies

Question 8

During an initial configuration, an administrator is asked to set the 'Host Name'. Why is it critical to set a unique and descriptive host name?

Accepted Answer

It is needed for log identification.. A unique host name is essential for identifying individual devices within a cluster, especially in HA configurations. In logs and alerts, the host name allows administrators to quickly pinpoint which node is reporting an event. Proper naming conventions prevent confusion during management tasks and troubleshooting, ensuring that configuration changes are applied to the correct unit without ambiguity, which is critical for consistent operational management.

Answer

It is required for the licensing process.

Answer

It dictates the management IP address.

Answer

It is used by the client browser for SSL.

Question 9

When installing BIG-IP software, what is the purpose of the 'Install Configuration' option during the process?

Accepted Answer

To migrate settings from the previous version.. The 'Install Configuration' option determines whether the existing configuration from the previous software version is imported into the new installation. This is a critical convenience feature that minimizes manual reconfiguration efforts after an upgrade. By selecting this option, the administrator ensures that virtual servers, policies, and network settings are automatically migrated, allowing for a seamless transition between software versions and maintaining service continuity without significant manual intervention.

Answer

To reset the system to factory defaults.

Answer

To install the base OS drivers only.

Answer

To verify the license key validity.

Question 10

An administrator is setting up a new BIG-IP appliance. Which TWO steps are mandatory for the device to process application traffic?

Accepted Answer

Create a VLAN and assign interfaces.. Processing application traffic requires both a configured VLAN and a self-IP for routing. The VLAN segments the physical network, and the self-IP acts as the L3 address for the BIG-IP on that segment. Without both, the device cannot receive or route traffic to back-end servers. These are the fundamental L3 building blocks that must be configured correctly before any virtual server can process client requests.

Answer

Enable the 'Route Domains' feature.

Answer

Install the Advanced WAF module.

Answer

Configure a default gateway in the GUI.

Question 11

An administrator is upgrading a high-availability pair. What is the standard procedure to ensure zero-downtime during the upgrade process?

Accepted Answer

Upgrade the standby node first.. The standard procedure involves upgrading the standby unit first, ensuring it is healthy, then failing over traffic to the upgraded unit. Finally, the former active unit is upgraded. This approach ensures that one device is always ready to process traffic, maintaining high availability throughout the maintenance window. It mitigates the risk of a full outage and allows for immediate rollback if the new version displays unexpected behavior on the standby node.

Answer

Upgrade both units simultaneously.

Answer

Upgrade the active node first.

Answer

Perform a 'force offline' on both nodes.

Question 12

After a fresh installation of BIG-IP, which task is considered a 'Day 0' security hardening requirement?

Accepted Answer

Change default administrative passwords.. Changing default passwords for the root and admin accounts is the most fundamental security step. F5 appliances come with well-known default credentials; leaving these unchanged allows anyone with network access to gain administrative control. This is the first action an administrator should take to secure the management plane and prevent unauthorized access before any other network configuration or traffic management policies are implemented.

Answer

Configure an NTP server.

Answer

Enable the 'bigdb' security variable.

Answer

Assign a management VLAN ID.

Question 13

An administrator accidentally deleted a configuration file. Which action would be the most efficient way to restore the system configuration to its previous state?

Accepted Answer

Restore from a UCS file.. Restoring a previously created UCS (User Configuration Set) archive is the fastest and most reliable way to recover from an accidental configuration loss. The UCS file contains all the necessary data to rebuild the system configuration. This standard recovery procedure minimizes downtime and human error, providing a clean and predictable path back to the last known working state of the BIG-IP device.

Answer

Perform a factory reset.

Answer

Re-install the TMOS software.

Answer

Use the 'tmsh load config' command.

Question 14

An administrator is performing an initial setup on a new BIG-IP appliance via the serial console. After completing the basic network and management IP configuration, the administrator needs to verify that the management route is correctly established. Which command should the administrator execute from the TMOS shell?

Accepted Answer

show /sys management-route. The TMOS shell (tmsh) provides administrative control over the BIG-IP system. Executing the show /sys management-route command displays the active management routes configured on the management interface, ensuring out-of-band administrative traffic routes correctly through the designated gateway, which is a critical validation step during initial deployment.

Answer

show /net route

Answer

list /sys global-settings

Answer

show /sys ip-address

Question 15

An administrator is upgrading a BIG-IP pair. After upgrading the standby unit, which step should be performed before upgrading the active unit?

Accepted Answer

Force the standby unit to become active.. The standard high-availability upgrade path involves upgrading the standby unit first to verify the new software version's stability. By failing over traffic to the newly upgraded unit, the administrator validates that the application services function as expected. If issues arise, the administrator can fail back to the original active unit, minimizing downtime and ensuring a controlled transition during the maintenance window for the entire cluster.

Answer

Delete the sync-failover device group.

Answer

Reboot the active unit immediately.

Answer

Change the management IP address of the active unit.