Free F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade Exam Questions and Answers

A secondary administrator has been granted access to a BIG-IP device through its Management Interface, but is unable to access the Configuration Utility (WebUI). What command can be run from the CLI to capture the network traffic on the management interface and troubleshoot the issue? (Choose two.)

Select 2 answers.

• AA. tcpdump -i eth0 -n port 443
• BB. tcpdump -i mgmt -n port 443
• CC. tcpdump -i 0.0 -n port 443
• DD. tcpdump -i tun0 -n port 443
• EE. tcpdump -i management -n port 443

An organization is planning to upgrade a BIG-IP system from 16.1.x to 17.1.x. For a successful upgrade, the Service Check Date must be equal to or newer than the License Check Date required for 17.1.x. Which command will show the Service Check Date on the BIG-IP system being upgraded?

• AA. grep "Service check date" /config/bigip.license
• BB. grep "Service check date" /config/bigip.conf
• CC. grep "Service check date" /config/svc_chk_date.dat
• DD. grep "Service check date" /config/BigDB.dat

The BIG-IP Administrator needs to update access to the Configuration Utility to include the 172.28.31.0/24 and 172.28.65.0/24 networks. From the TMOS Shell (tmsh), which command should the BIG-IP Administrator use to complete this task?

• AA. modify /sys httpd allow add { 172.28.31.0/255.255.255.0 172.28.65.0/255.255.255.0 }
• BB. modify /sys httpd allow add { 172.28.31.0 172.28.65.0 }
• CC. modify /sys httpd permit add { 172.28.31.0/255.255.255.0 172.28.65.0/255.255.255.0 }

The Port Lockdown feature prevents unwanted connection attempts to a Self IP. Which three types of connection attempts are unaffected by Port Lockdown settings?

• AA. Defined virtual server traffic, Secure Shell (SSH), Centralized Management Infrastructure (CMI)
• BB. Centralized Management Infrastructure (CMI), Secure Shell (SSH), Internet Control Message Protocol (ICMP)
• CC. Defined virtual server traffic, Internet Control Message Protocol (ICMP), Centralized Management Infrastructure (CMI)

How can the BIG-IP Administrator tell when an unlicensed module has been provisioned?

• AA. A BIG-IP does not allow unlicensed modules to be provisioned.
• BB. When provisioning an unlicensed module, a warning will appear.
• CC. A Provisioning Warning will be displayed in the GUI in the upper left corner.

A BIG-IP device is licensed for LTM, ASM, APM, and AFM. Currently, it will only be used for load balancing and web application firewalling. To ensure optimal performance and efficient resource utilization, which of the following module provisioning combinations is the best choice?

• AA. LTM: Dedicated ASM: Dedicated APM: Minimal AFM: Minimal
• BB. LTM: Dedicated ASM: Dedicated APM: None AFM: None
• CC. LTM: Nominal ASM: Nominal APM: None AFM: None
• DD. LTM: Nominal ASM: Nominal APM: Minimal AFM: Minimal

The device is currently on v15.1.2.1. The BIG-IP Administrator needs to boot the device back to v13.1.0.6to gather data for troubleshooting. The system shows: Sys::Software Status Volume Product Version Build Active Status Allowed HD1.1 BIG-IP 15.1.2.1 0.0.10 yes complete yes HD1.2 BIG-IP 13.1.0.6 0.0.3 no complete yes Which is the correct command-line sequence to boot the device to version 13.1.0.6?

• AA. Use tmsh to select a new boot volume, tmsh reboot HD1.2
• BB. switchboot -b HD1.2, then reboot
• CC. switchboot -I HD1.2, then reboot
• DD. Use tmsh to select a new boot volume, tmsh switchboot HD1.2

A BIG-IP Administrator needs to purchase new licenses for a BIG-IP appliance. The administrator needs to know: Whether a module is licensed The memory requirement for that module Where should the administrator view this information in the System menu?

• AA. Configuration » OVSDB
• BB. Software Management
• CC. Configuration » Device
• DD. Resource Provisioning

A BIG-IP Administrator is responsible for deploying a new software image on an F5 BIG-IP HA pair and has scheduled a one-hour maintenance window. With a focus on minimizing service disruption, which of the following strategies is the most appropriate?

• AA. Update the active node first, reboot to the newly updated boot location and verify functionality, then push the update from the active to the standby node and reboot the standby node.
• BB. Reset the Device Trust, apply the update to each node separately, reboot both nodes, then re-establish the Device Trust.
• CC. Update the standby node first and reboot it to the newly updated boot location, failover to the newly updated node and verify functionality. Repeat the upgrade procedures on the next node, which is now in standby mode.
• DD. Update both nodes in the HA pair, then reboot both nodes simultaneously to ensure they run the same software version.

What will setting a Self IP to "Allow None" for Port Lockdown do?

• AA. Block HA communications, causing the systems to report their peer as offline and go active-active.
• BB. Block HA communications, causing the systems to report their peer as online ready.
• CC. Default allow port 1026 access between peer devices and traffic processing across the network failover.