F5CAB1 Practice Questions

Question 1

An administrator is performing an initial configuration of a BIG-IP system via the Configuration Utility. During the setup, the administrator navigates to the 'Device Certificate' section and chooses to generate a new self-signed certificate. What is the primary purpose of this certificate on the BIG-IP?

Accepted Answer

It provides secure access to the BIG-IP management interface via HTTPS.. During initial configuration, the BIG-IP generates a self-signed device certificate that is bound to the management web server. This certificate enables HTTPS access to the Configuration Utility, ensuring that administrative traffic is encrypted. It is not used for data-plane SSL offloading or external authentication by default. Understanding its role helps administrators properly secure management access and avoid confusing it with other certificate uses.

Answer

It is used for SSL offloading of client connections to virtual servers.

Answer

It secures communication between the BIG-IP and external authentication servers.

Answer

It is used for mutual authentication between BIG-IP devices in a device group.

Question 2

Which license requirement must be met before a BIG-IP device can be used in a production environment?

Accepted Answer

A valid license key must be activated on the device.. A valid F5 license is strictly required for the device to operate. The license file dictates which modules (LTM, ASM, APM) are enabled and how much hardware capacity is available. Without a valid license, the system enters a restricted mode where traffic management services will not start, rendering the device useless for production traffic. Proper licensing ensures that the features are legally enabled and supported.

Answer

The license must be manually updated every 24 hours.

Answer

The license must be shared with the peer in a cluster.

Answer

The license must be stored in a public cloud bucket.

Question 3

An administrator wants to ensure that a newly installed BIG-IP version is tested before putting it into production. What is the most effective way to accomplish this?

Accepted Answer

Install to an inactive volume and boot into it.. The best method is to boot into the new version while keeping the old version intact on another volume. This allows for validation of the configuration and traffic handling in the new environment. If issues arise, the administrator can quickly reboot back into the original, known-good boot location, minimizing downtime and allowing for a safe, staged migration to the new software release.

Answer

Use the 'switch' command during a live production peak.

Answer

Perform the upgrade on the active partition directly.

Answer

Clone the configuration to a secondary device.

Question 4

During initial configuration, which license requirement must be met before provisioning modules like LTM or ASM?

Accepted Answer

The license must be activated using the registration key.. Licensing is the foundational step that unlocks the features for which the customer has paid. Without a valid license, the system remains in a restricted state where no modules can be provisioned. Understanding this process is vital for any administrator as it is the first major hurdle when deploying new F5 hardware or virtual editions into a production environment.

Answer

The license file must be manually edited.

Answer

The license can be shared between multiple BIG-IP units.

Answer

The license automatically activates without internet access.

Question 5

Refer to the exhibit. An administrator wants to upgrade the system to version 16.1.2. Based on the output, what should the administrator do next?

Accepted Answer

Reboot the system to switch to HD1.2.. The output shows the current active version is 15.1.0 on HD1.1, and 16.1.2 is already installed on HD1.2. Because the software is installed but not active, the administrator must trigger a reboot to switch the active volume. This workflow is essential for minimizing downtime, as the installation phase is already finished and only the boot partition switch remains to finalize the system upgrade process.

Answer

Run the install command for 16.1.2 again.

Answer

Delete HD1.1 to free up space.

Answer

Create a new volume HD1.3.

Question 6

An administrator is upgrading a BIG-IP instance and notices that the configuration load is taking an unusually long time. Which log file should be checked to identify the cause?

Accepted Answer

/var/log/ltm. Monitoring logs during the upgrade process is critical for identifying why a system is stalling. The 'ltm' log file contains high-level information about system events, including configuration loading and daemon initialization status. By checking this file, the administrator can see if the configuration parser is stuck on a specific object or if a process is failing to start, allowing for targeted troubleshooting rather than guessing the reason for the delay.

Answer

/var/log/audit

Answer

/var/log/kern.log

Answer

/var/log/secure

Question 7

An administrator is upgrading a BIG-IP system. Which THREE tasks should be part of the pre-upgrade checklist to minimize risk?

Accepted Answer

Create a UCS archive of the current configuration.. Pre-upgrade checklists are vital to prevent downtime and data loss. Creating a user configuration set (UCS) allows for easy recovery if the upgrade fails. Reviewing release notes identifies known issues specific to the target version. Validating that the current configuration is free of errors ensures the upgrade doesn't propagate invalid settings to the new boot location. These steps protect the environment's stability and operational integrity during the maintenance window.

Answer

Install the latest iApps templates.

Answer

Change the root password to a new value.

Question 8

Which action should an administrator perform after a successful software upgrade but before putting the device back into production?

Accepted Answer

Test production traffic and check system logs.. Verification is the final, crucial step of any upgrade process. Testing application traffic, checking system logs for errors, and validating synchronization status ensure the upgrade was not only successful in terms of the install process but also that the services are behaving as expected. This minimizes the risk of post-upgrade production issues that could impact end-users, reflecting an expert approach to maintenance and lifecycle management.

Answer

Immediately initiate a failover to the peer.

Answer

Re-install the license files.

Answer

Delete the old configuration backups.

Question 9

An administrator is preparing to install a new version of BIG-IP software on a device running an older version. Before starting the installation, the administrator wants to ensure that the existing configuration is backed up and can be restored if needed. Which tool should the administrator use to create a full configuration backup that includes all configuration files and can be used for restoration?

Accepted Answer

tmsh save sys ucs <filename>. The tmsh save sys ucs command is the correct tool for creating a full configuration backup on a BIG-IP system. It generates a UCS archive that includes all configuration files, licenses, and certificates, allowing for complete restoration. This is essential before an upgrade to ensure that the system can be recovered if the upgrade fails or if there are issues with the new version.

Answer

tmsh create sys backup

Answer

tmsh load sys config

Answer

tmsh save sys config

Question 10

An administrator is preparing to upgrade a BIG-IP system from version 15.1 to 16.1. The administrator wants to ensure that the upgrade process completes successfully and that the configuration is preserved. Which action should be taken before starting the upgrade?

Accepted Answer

Create a UCS backup and verify that the current configuration is compatible with the target version.. Creating a UCS backup and verifying compatibility are essential pre-upgrade steps. The UCS backup allows restoration if the upgrade fails, and compatibility checks help identify issues that could prevent a successful upgrade. These actions ensure that the configuration is preserved and the upgrade proceeds smoothly.

Answer

Disable all virtual servers to prevent traffic during the upgrade.

Answer

Run the 'tmsh save sys config' command to save the current configuration.

Answer

Install the new version on a different partition and then copy the configuration files manually.

Question 11

An administrator is upgrading a BIG-IP from version 15.1 to 17.1. After the upgrade, the administrator notices that the device is not passing traffic and the TMOS logs show that the TMM process failed to start. Which action should the administrator take first to resolve the issue?

Accepted Answer

Check the /var/log/ltm and /var/log/tmm logs for specific error messages related to the TMM failure.. When TMM fails to start after an upgrade, the first step is to examine the logs for specific errors. The logs in /var/log/ltm and /var/log/tmm provide detailed information that can pinpoint the cause, such as a configuration object that is incompatible with the new version. Based on the error, the administrator can decide whether to fix the configuration, apply a patch, or roll back.

Answer

Reinstall the new software image using the tmsh command install sys software.

Answer

Reboot the BIG-IP into the previous software volume and restore the UCS backup.

Answer

Disable the TMM process and restart the BIG-IP to allow traffic to flow using the host processor.

Question 12

Refer to the exhibit. An administrator receives this error when attempting to install a new software version. What is the most appropriate remediation step?

Accepted Answer

Delete an old, unused software volume.. The 'No space left on device' error indicates the target boot location is full. The administrator must delete an unused software volume to reclaim space. Managing boot locations is a standard administrative task in BIG-IP environments, ensuring that at least one volume remains available for future upgrades or rollbacks, thereby maintaining system reliability during the transition to new software versions.

Answer

Expand the virtual disk in the hypervisor.

Answer

Run 'touch' on the partition to clear logs.

Answer

Perform a 'factory reset' of the device.

Question 13

An administrator is preparing to upgrade a BIG-IP from version 14.1.4 to 16.1.2. The administrator runs the command 'tmsh show sys software' and sees that the new version is installed but not active. The administrator then reboots the system. After the reboot, the administrator checks the active software version and finds it is still 14.1.4. What is the most likely reason?

Accepted Answer

The administrator did not set the new version as the active boot location.. After installing a new software version, it is placed in a separate boot location. To activate it, the administrator must set that boot location as the default boot target, typically using 'tmsh set sys software volume <volume> active' or via the GUI. Rebooting alone will boot the previously active volume. This is a common oversight during upgrades and leads to the old version remaining active.

Answer

The administrator did not run the 'tmsh install sys software' command to finalize the installation.

Answer

The administrator did not create a UCS backup before the upgrade.

Answer

The upgrade failed because the administrator did not run the 'tmsh load sys config' command.

Question 14

An administrator is setting up a BIG-IP for the first time. Why is it important to configure the 'Management Port' before running the setup wizard?

Accepted Answer

To ensure secure administrative access to the device.. The management port provides the dedicated out-of-band pathway for configuration and maintenance of the BIG-IP device. By ensuring this is set up correctly, the administrator guarantees that the appliance is reachable for remote management tasks. This is a foundational configuration step because without it, the administrator cannot access the web interface or CLI remotely to finalize the more complex traffic management configuration required for the production application delivery environment.

Answer

To enable traffic processing for the data plane.

Answer

To allow the device to synchronize configuration between peers.

Answer

To allow the device to connect to the Internet for updates.

Question 15

What is the primary function of the 'Provisioning' tab in the BIG-IP system?

Accepted Answer

To allocate system resources to specific modules.. Provisioning controls the allocation of CPU and memory resources to specific modules like LTM, ASM, or APM. This is crucial because it defines what services the BIG-IP can provide. Mismanagement here can lead to resource starvation for critical applications, so understanding how to balance these resources based on hardware capacity is a key skill for F5 administrators managing performance in production environments.

Answer

To install new software versions.

Answer

To configure virtual server IP addresses.

Answer

To manage user accounts and permissions.

F5 Certified Administrator: Install, Initial Configuration, and Upgrade F5CAB1 practice test

Three ways to study

Study F5CAB1 by domain

Study F5CAB1 by topic

Install, Initial Configuration, and Upgrade practice questions

F5CAB1 fundamentals practice questions

F5CAB1 scenario practice questions

F5CAB1 troubleshooting practice questions

F5 Certified Administrator: Install, Initial Configuration, and Upgrade practice questions