Summer Sale 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: exams65

ExamsBrite Dumps

BIG-IP Administration Install, Initial Configuration, and Upgrade Question and Answers

BIG-IP Administration Install, Initial Configuration, and Upgrade

Last Update Jul 26, 2026
Total Questions : 49

We are offering FREE F5CAB1 F5 exam questions. All you do is to just go and sign up. Give your details, prepare F5CAB1 free exam questions and then go for complete pool of BIG-IP Administration Install, Initial Configuration, and Upgrade test questions that will help you more.

F5CAB1 pdf

F5CAB1 PDF

$36.75  $104.99
F5CAB1 Engine

F5CAB1 Testing Engine

$43.75  $124.99
F5CAB1 PDF + Engine

F5CAB1 PDF + Testing Engine

$57.75  $164.99
Questions 1

For security reasons, a BIG-IP Administrator needs to specify allowable IP ranges for access to the Configuration Utility (WebUI).

The exhibit shows the User Administration section of the Configuration Utility.

The administrator could not find any setting that explicitly restricts access to the Configuration Utility.

Which one of the following is a reason for that?

Options:

A.  

Restricting access to the Configuration Utility can only be done from the Command Line Interface

B.  

The administrator must restrict access by IP address for SSH, which will implicitly restrict access to the Configuration Utility

C.  

To avoid locking out the administrator, recent versions of BIG-IP no longer allow restricting administrator access to the Configuration Utility by source IP address

D.  

The administrator needs to switch to the “Advanced” view mode in order to display the relevant setting

Discussion 0
Questions 2

How should a BIG-IP Administrator check the provisioned CPU percent for a module?

(Choose two.)

Options:

A.  

By running the top command and reviewing the output for the provisioned module.

B.  

By running tmsh show /sys cpu and reviewing the specific module provisioned output.

C.  

By going to System » Resource Provisioning and hovering over the CPU section colors.

D.  

By running tmsh show /sys provision and reviewing the specific module in the output.

E.  

By checking the Dashboard output in the Statistics tab in the GUI.

Discussion 0
Questions 3

The BIG-IP Administrator received a ticket that an authorized user is attempting to connect to the Configuration Utility from a jump host and is being denied.

The HTTPD allow list is configured as:

sys httpd {

allow { 172.28.31.0/255.255.255.0 172.28.65.0/255.255.255.0 }

}

The jump host IP is 172.28.32.22 .

What command should the BIG-IP Administrator use to allow HTTPD access for this jump host?

Options:

A.  

modify /sys httpd allow replace-all-with { 172.28.32.22 }

B.  

modify /sys httpd allow delete { 172.28.31.0/255.255.255.0 172.28.65.0/255.255.255.0 }

C.  

modify /sys httpd allow add { 172.28.32.22 }

Discussion 0
Questions 4

Given that BIGIP- < version > .iso and Hotfix-BIGIP- < version > -ENG.iso have been uploaded to /shared/images on an F5 device, what is the appropriate tmsh command to prepare and update the BIG-IP device with the hotfix of a software version on a new volume HD1.2 ?

(Choose one.)

Options:

A.  

tmsh install /sys software hotfix Hotfix-BIGIP- < version > -ENG.iso create-volume HD1.2

B.  

tmsh install /sys software BIGIP- < version > .iso hotfix Hotfix-BIGIP- < version > -ENG.iso create-volume HD1.2

C.  

tmsh create /sys software hotfix Hotfix-BIGIP- < version > -ENG.iso volume HD1.2

D.  

tmsh copy /sys software hotfix Hotfix-BIGIP- < version > -ENG.iso volume HD1.2

Discussion 0
Questions 5

An F5 BIG-IP Administrator is asked to report which modules are provisioned on the BIG-IP.

In which two ways can this be done?

(Choose two.)

Options:

A.  

Via the GUI at System → Resource Provisioning → Module Allocation

B.  

Via TMSH with show /sys provision

C.  

Via the GUI at Statistics → Module Statistics → System

D.  

Via TMSH with list /sys provision

Discussion 0
Questions 6

A new logging solution is being implemented on the network. Policy requires keeping management traffic sent from the BIG-IP out of the management interface . After configuring the BIG-IP to forward messages to the new Syslog server, the BIG-IP Administrator notices that packets are being sent from a numbered data-plane Self IP .

What should the BIG-IP Administrator change to send the traffic out of the correct interface ?

Options:

A.  

Set the Management IP as the source address when configuring a Remote Syslog destination.

B.  

Create a Management Route for the specific address/subnet of the syslog service via TMSH.

C.  

Create a new Self IP in the same subnet as the management IP address using a route domain.

D.  

Modify the port lockdown settings on the Self IP address to allow UDP port 514 traffic.

Discussion 0
Questions 7

A BIG-IP Administrator needs to install a HotFix on a standalone BIG-IP device.

The device currently has HD1.1 as the Active Boot Location.

The administrator has already reactivated the license and created a UCS archive.

In which sequence should the administrator perform the remaining steps ?

Options:

A.  

Install HotFix in HD1.2, Install base Image in HD1.2, Activate HD1.2

B.  

Install HotFix in HD1.1, Reboot the BIG-IP device, Install UCS Archive

C.  

Install base Image in HD1.2, Install HotFix in HD1.2, Activate HD1.2

D.  

Activate HD1.2, Install base Image in HD1.2, Install HotFix in HD1.2

Discussion 0
Questions 8

A secondary administrator has been granted access to a BIG-IP device through its Management Interface , but is unable to access the Configuration Utility (WebUI) .

What command can be run from the CLI to capture the network traffic on the management interface and troubleshoot the issue?

(Choose two.)

Options:

A.  

tcpdump -i eth0 -n port 443

B.  

tcpdump -i mgmt -n port 443

C.  

tcpdump -i 0.0 -n port 443

D.  

tcpdump -i tun0 -n port 443

E.  

tcpdump -i management -n port 443

Discussion 0
Questions 9

What are the two options for securing a BIG-IP’s management interface?

(Choose two.)

Options:

A.  

Limiting network access through the management interface to a trusted/secured network VLAN.

B.  

Block all management-interface administrative HTTPS and SSH service ports to prevent access.

C.  

Use the BIG-IP’s Self-IP addresses for administrative access rather than the management interface.

D.  

Restrict administrative HTTPS and SSH access to specific IP addresses or IP ranges.

Discussion 0
Questions 10

When is the License Service Check Date enforced on a BIG-IP system?

Options:

A.  

After editing a virtual server

B.  

During a software install

C.  

During system startup

Discussion 0
Questions 11

The Configuration Utility of a BIG-IP device is currently accessible via its management IP 10.53.1.245 from all VLANs.

The BIG-IP Administrator needs to restrict access so only hosts from the 10.0.0.0/24 subnet can access the Configuration Utility.

Which TMSH command accomplishes this?

Options:

A.  

(tmos)# create /net acl MGMT.HTTP rule add { (permit tcp 10.0.0.0 0.0.0.255 host 10.53.1.245 http) }

B.  

(tmos)# modify /ltm httpd allow replace-all-with {10.0.0.0/24}

C.  

(tmos)# create /net acl MGMT.HTTP rule add { (permit tcp 10.0.0.0/24 10.53.1.245 http) (deny ip any any http) }

D.  

(tmos)# modify /sys httpd allow replace-all-with {10.0.0.0/24}

Discussion 0
Questions 12

A BIG-IP Administrator needs to purchase new licenses for a BIG-IP appliance.

The administrator needs to know:

    Whether a module is licensed

    The memory requirement for that module

Where should the administrator view this information in the System menu ?

Options:

A.  

Configuration » OVSDB

B.  

Software Management

C.  

Configuration » Device

D.  

Resource Provisioning

Discussion 0
Questions 13

The BIG-IP Administrator needs to update access to the Configuration Utility to include the 172.28.31.0/24 and 172.28.65.0/24 networks.

From the TMOS Shell (tmsh), which command should the BIG-IP Administrator use to complete this task?

Options:

A.  

modify /sys httpd allow add { 172.28.31.0/255.255.255.0 172.28.65.0/255.255.255.0 }

B.  

modify /sys httpd allow add { 172.28.31.0 172.28.65.0 }

C.  

modify /sys httpd permit add { 172.28.31.0/255.255.255.0 172.28.65.0/255.255.255.0 }

Discussion 0
Questions 14

An administrator is in the process of reactivating the license using the interface displayed in the exhibit.

What is the address of the license server to which the BIG-IP device must be able to establish an outbound connection in order to use the Automatic Activation Method ?

Options:

A.  

license.f5.com

B.  

callhome.f5.com

C.  

ask.f5.com

D.  

activate.f5.com

Discussion 0