F5CAB1 Install, Initial Configuration, and Upgrade Practice Test 7 — 15 Questions

Question 1

Which TWO of the following are mandatory requirements when setting up a BIG-IP license via the 'Base Registration Key' method?

Accepted Answer

The management interface must have outbound internet access.. The base registration key method requires the BIG-IP to reach the F5 licensing servers to exchange the key for a license file. This process necessitates both outbound internet access for the device and a valid registration key provided by F5. Without these, the device cannot validate its entitlement, and the licensing process will fail, leaving the system in an unlicensed state where traffic processing is effectively disabled.

Answer

The device must be part of an HA cluster.

Answer

The device must be running in FIPS-compliant mode.

Answer

The user must have a physical smart card.

Question 2

When configuring a new VLAN on a BIG-IP, what happens if the VLAN is not assigned to any interfaces?

Accepted Answer

The VLAN will be created but cannot pass traffic.. A VLAN that has no assigned interfaces is effectively an internal-only construct. While it can exist in the configuration, it cannot receive or transmit traffic to the external network because there is no physical or virtual path for the packets to enter or leave the BIG-IP system. This is a common configuration state when creating internal-only segments, but it prevents the VLAN from fulfilling its role as a bridge for production traffic.

Answer

The system will generate a critical alarm.

Answer

The system will automatically assign the default management interface.

Answer

The VLAN creation will fail immediately.

Question 3

An administrator is setting up a BIG-IP appliance. Where should the management IP address be configured to ensure the device is accessible for remote administration?

Accepted Answer

On the dedicated 'MGMT' physical interface.. The management IP is configured specifically on the 'Management' interface in the Network section of the Configuration Utility. This interface is distinct from the TMM-controlled data interfaces. Assigning the management IP here ensures that administrative traffic is routed separately from the data plane, providing secure out-of-band management that is critical for maintaining access to the device during production traffic congestion or system-wide network issues.

Answer

On one of the front-panel data interfaces (1.1, 1.2, etc.).

Answer

In the Global Traffic Manager (GTM) listener configuration.

Answer

Via the console serial port connection only.

Question 4

An administrator is upgrading a BIG-IP system and receives a warning that the 'config sync' state is 'Not Fully Synchronized'. What is the correct action to take before proceeding with the upgrade?

Accepted Answer

Force a configuration sync from the active to the standby unit.. Proceeding with an upgrade while the sync state is not 'In Sync' is dangerous because the devices in the HA pair may have different configurations. This inconsistency can lead to unexpected behavior after the upgrade, such as traffic outages or corrupted data, as the system tries to merge or reconcile conflicting configurations during the reboot. Always synchronize the configuration before changing the software version to ensure a stable, predictable transition.

Answer

Ignore the warning; the upgrade will force a synchronization.

Answer

Delete the standby unit from the device group.

Answer

Perform a factory reset on both devices.

Question 5

A network administrator is upgrading a BIG-IP from version 15.1 to 17.1 using the default upgrade process. After the upgrade, the administrator notices that the configuration from the previous version is not fully loaded and some objects are missing. The administrator checks the upgrade logs and sees a message about a configuration conversion failure. What is the most likely cause?

Accepted Answer

The configuration contains objects or features that are deprecated or unsupported in the new version, causing the conversion to fail.. Configuration conversion failures during upgrades are typically caused by deprecated or unsupported objects in the new version. The BIG-IP upgrade process automatically converts the configuration, but if an object cannot be converted, it is skipped and an error is logged. The administrator must review the logs to identify the problematic objects and manually update or remove them. This ensures a clean configuration load.

Answer

The administrator did not run the 'tmsh save sys config' command before the upgrade, so the configuration was not saved to the new version.

Answer

The upgrade was performed without first installing the latest hotfix for the current version, leading to an incompatible upgrade path.

Answer

The upgrade process requires a manual re-import of the configuration using 'tmsh load sys config' from a backup.

Question 6

An administrator is upgrading a BIG-IP from version 14.1 to 17.1. The administrator wants to ensure that the upgrade does not fail due to insufficient disk space. Which command should be used to check the available disk space on the BIG-IP before the upgrade?

Accepted Answer

df -h. Before upgrading a BIG-IP, it is critical to verify sufficient disk space. The 'df -h' command, run from the bash shell, provides a clear view of available space on all file systems. If any partition is nearly full, the upgrade may fail. The administrator should ensure there is enough free space, typically by removing old software images or log files. This command is the standard way to check disk usage on Linux-based systems like TMOS.

Answer

show /system disk-usage

Answer

tmsh show sys disk

Answer

ls -l /var/log

Question 7

An administrator is preparing to install a new version of BIG-IP software on a device running an older version. Before starting the installation, the administrator wants to ensure that the existing configuration is backed up and can be restored if needed. Which tool should the administrator use to create a full configuration backup that includes all configuration files and can be used for restoration?

Accepted Answer

tmsh save sys ucs <filename>. The tmsh save sys ucs command is the correct tool for creating a full configuration backup on a BIG-IP system. It generates a UCS archive that includes all configuration files, licenses, and certificates, allowing for complete restoration. This is essential before an upgrade to ensure that the system can be recovered if the upgrade fails or if there are issues with the new version.

Answer

tmsh create sys backup

Answer

tmsh load sys config

Answer

tmsh save sys config

Question 8

An administrator is upgrading a BIG-IP from v13.1.1 to v16.1.0. During the upgrade, the administrator receives an error that the disk space is insufficient to install the new image. The administrator checks and finds that the `/var` partition is nearly full. What is the most appropriate action to resolve this issue?

Accepted Answer

Delete old UCS backup files and logs from `/var` to free up space.. Freeing up space on the `/var` partition by deleting old UCS backups and logs is the correct action. This safely reclaims space needed for the new image. Other options involve invalid commands, incorrect installation locations, or deleting critical system files. The administrator should also ensure that other partitions have sufficient space.

Answer

Resize the `/var` partition using the `tmsh modify sys disk` command.

Answer

Install the new image to the `/shared` partition instead of the inactive volume.

Answer

Use the `tmsh delete sys software image` command to remove the current active image and free space.

Question 9

A network administrator is performing the initial configuration of a new BIG-IP appliance. The administrator needs to assign a management IP address, set the hostname, and configure DNS and NTP settings. Which interface should be used for management access by default?

Accepted Answer

MGMT interface. The MGMT interface is the dedicated out-of-band management interface on a BIG-IP appliance. It is preconfigured with a default IP address and is used for initial setup, remote administration, and system maintenance. Configuring the management IP on this interface ensures that management traffic is isolated from data traffic, which is a best practice for security and performance.

Answer

VLAN interface

Answer

Loopback interface

Answer

1.1 interface

Question 10

A network administrator is performing the initial configuration of a new BIG-IP device. The administrator needs to assign a management IP address to the device. Which configuration object should be used?

Accepted Answer

A management IP address on the management interface.. The management IP address is assigned to the dedicated management interface (MGMT) on the BIG-IP. This interface is used for out-of-band management, separate from data plane traffic. It allows administrators to access the device via SSH, HTTPS, and other management protocols, even if data plane interfaces are down.

Answer

A self IP address on the management VLAN.

Answer

A management route on the management interface.

Answer

A floating self IP address on the management VLAN.

Question 11

An administrator is performing an initial configuration of a BIG-IP system via the Configuration Utility. During the setup, the administrator navigates to the 'Device Certificate' section and chooses to generate a new self-signed certificate. What is the primary purpose of this certificate on the BIG-IP?

Accepted Answer

It provides secure access to the BIG-IP management interface via HTTPS.. During initial configuration, the BIG-IP generates a self-signed device certificate that is bound to the management web server. This certificate enables HTTPS access to the Configuration Utility, ensuring that administrative traffic is encrypted. It is not used for data-plane SSL offloading or external authentication by default. Understanding its role helps administrators properly secure management access and avoid confusing it with other certificate uses.

Answer

It is used for SSL offloading of client connections to virtual servers.

Answer

It secures communication between the BIG-IP and external authentication servers.

Answer

It is used for mutual authentication between BIG-IP devices in a device group.

Question 12

A BIG-IP administrator is upgrading a standalone device from version 15.1.5 to 16.1.0 using an ISO image. The administrator mounts the ISO, runs the installation script, and reboots. After the reboot, the administrator notices that the management IP address is unchanged, but the configuration has been reset to default. What is the most likely cause?

Accepted Answer

The administrator performed a clean install instead of an upgrade.. The most likely cause is that the administrator selected the clean install option when running the installation script from the ISO. Unlike an upgrade, a clean install wipes the existing configuration and installs the new version with default settings. The management IP may persist if it was set outside the BIG-IP configuration, such as via the hypervisor or if manually reconfigured. To avoid this, administrators should choose the upgrade option and verify that the configuration is preserved.

Answer

The ISO image was corrupted, causing a partial upgrade.

Answer

The administrator did not create a UCS backup before upgrading.

Answer

The administrator forgot to run the 'load sys config' command after the upgrade.

Question 13

An administrator is preparing to upgrade a BIG-IP from version 15.1 to 17.1. The administrator wants to ensure that the upgrade process can be rolled back if necessary. Which action should be taken before starting the upgrade to enable rollback?

Accepted Answer

Install the new version to a new boot location.. To enable rollback during a BIG-IP upgrade, you must install the new version to a separate boot location. This leaves the existing boot location with the current version untouched. If the upgrade does not go as planned, you can reboot the system into the old boot location, restoring the previous software version. Other actions like creating a UCS backup or saving the configuration are good practices for disaster recovery but do not provide a software rollback path.

Answer

Run the 'tmsh save sys config' command.

Answer

Enable the 'auto-rollback' feature in the upgrade settings.

Answer

Create a UCS backup of the current configuration.

Question 14

A network engineer is preparing a new BIG-IP appliance for installation in a data center. The rack has both 120V and 208V power available. The engineer wants to ensure the device powers on correctly and is not damaged. Which power consideration should the engineer follow?

Accepted Answer

Verify the appliance's power supply rating and connect it to the appropriate voltage source as specified in the platform's hardware guide.. The correct approach is to verify the appliance's power requirements in the hardware guide before connecting power. BIG-IP platforms have varying power specifications, and using the wrong voltage or cord can damage the device or cause it to fail. Proper site preparation includes confirming power and environmental requirements to ensure a successful installation.

Answer

Connect the appliance only to a 120V outlet, because all BIG-IP appliances are designed exclusively for 120V.

Answer

Use a standard 120V computer power cord for all BIG-IP appliances, regardless of the model, because the power supplies auto-sense voltage.

Answer

Connect the appliance to a 208V outlet without checking the hardware guide, because higher voltage always improves performance.

Question 15

An administrator is preparing to upgrade a BIG-IP from version 14.1.4 to 16.1.2. The administrator runs the command 'tmsh show sys software' and sees that the new version is installed but not active. The administrator then reboots the system. After the reboot, the administrator checks the active software version and finds it is still 14.1.4. What is the most likely reason?

Accepted Answer

The administrator did not set the new version as the active boot location.. After installing a new software version, it is placed in a separate boot location. To activate it, the administrator must set that boot location as the default boot target, typically using 'tmsh set sys software volume <volume> active' or via the GUI. Rebooting alone will boot the previously active volume. This is a common oversight during upgrades and leads to the old version remaining active.

Answer

The administrator did not run the 'tmsh install sys software' command to finalize the installation.

Answer

The administrator did not create a UCS backup before the upgrade.

Answer

The upgrade failed because the administrator did not run the 'tmsh load sys config' command.