Free F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade Exam Questions and Answers
BIG-IP Administration Install, Initial Configuration, and Upgrade is part of the F5 Professional Certification programme. F5 runs a real technical ladder — Certified Administrator, then Technology Specialist for BIG-IP LTM, DNS, ASM or APM, then Solution Expert — with the sales-focused Technical Professional sitting outside it entirely, so the two should not be read as rungs of one thing. The 101, 201, 301 and 401 numbering tracks that progression. F5 publishes little else openly: no question count, duration, pass mark, price or recertification period appears on its public pages, which point instead to exam blueprints and a login-gated candidate portal.
Candidates comparing F5CAB1 exam dumps, ExamTopics and other F5CAB1 practice tests use this page for the answers and explanations behind each question. Download the free F5CAB1 PDF, then sit the timed F5CAB1 exam simulation before booking with F5.
Last updated: October 30, 2026
- Provider
- F5
- Questions in our bank
- 1000+
- Free to read
- First 10, with answers
- Our test mode duration & pass mark
- 130 mins · 70%
- Verified answers
- Reviewed weekly
- Practice format
- Multiple choice
Recommended: Switch to Test Mode to start a practice test that simulates the real exam experience.
Question #1
A BIG-IP Administrator needs to review which client addresses are permitted to open SSH sessions to the BIG-IP system. Which tmsh command displays this list?
Correct answer: C
Explanation
The allow property of the sys sshd object holds the addresses and networks that may connect over SSH, so list /sys sshd allow displays it. The sys httpd allow property is the equivalent list for the Configuration utility, which is the tempting wrong choice. The management-ip object shows the interface address, not who may connect to it.
Continue with F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #2
A BIG-IP system has AFM provisioned. A BIG-IP Administrator must add an active rule under Security > Network Firewall > Active Rules that drops ICMP traffic destined for the self IP 10.20.1.5 only. Traffic to virtual servers and to other self IPs must not be affected. Which context should the administrator select for the rule?
Correct answer: C
Explanation
The Self IP context attaches the policy to a single self IP, so only traffic addressed to 10.20.1.5 is evaluated. A Route Domain context would apply to every object in route domain 0, and the Virtual Server and Management Port contexts cover different traffic entirely.
Continue with F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #3
In the Configuration utility, which menu path lists the installed volumes and shows which one is the active boot location?
Correct answer: D
Explanation
The Boot Locations page lists each volume with its installed version and marks the active one. Image List only shows the image files uploaded to the system, which is the tempting wrong answer because it is on the same menu.
Continue with F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #4
Which BIG-IP module must be licensed and provisioned to apply stateful network firewall rules in the Self IP context?
Correct answer: A
Explanation
AFM provides the network firewall, including policies and rules enforced at the global, route domain, virtual server, self IP and management port contexts. ASM protects web applications and APM handles access control, so neither supplies network firewall rules.
Continue with F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #5
Which tmsh command displays the registration key, license dates and active modules of a BIG-IP system?
Correct answer: C
Explanation
show /sys license reports the installed license, including the Active Modules section. show /sys provision reports modules that are provisioned and their resource use, which can differ from what is licensed.
Continue with F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #6
A security policy requires SSH sessions to the BIG-IP system to be disconnected after 10 minutes of inactivity. Which tmsh command meets this requirement?
Correct answer: B
Explanation
The sshd inactivity-timeout property is expressed in seconds, so 10 minutes is 600. A value of 10 would drop sessions after 10 seconds. The httpd idle timeout affects Configuration utility sessions and the console timeout affects only the serial console.
Continue with F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #7
A script runs in the advanced shell (bash) of a BIG-IP system and must list the licensed modules without calling tmsh. Which command should the script use?
Correct answer: C
Explanation
The license file /config/bigip.license contains an active module line for each licensed module. The provision stanza in bigip_base.conf shows what is provisioned, which can differ from what is licensed, and the other locations do not hold license data.
Continue with F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #8
A BIG-IP administrator needs to display the provisioning level of each module from the TMOS Shell (tmsh). Which command should the administrator use?
Correct answer: D
Explanation
The sys provision component holds the provisioning level (none, minimum, nominal, dedicated) of every module, and tmsh list sys provision displays it. tmsh show sys license reports what the license allows, which is a different question from what is provisioned.
Continue with F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #9
A BIG-IP administrator can ping the management IP address 10.20.9.15/24 from a jump host on 10.20.9.0/24, but the same ping from a laptop on 10.20.5.0/24 times out. The management port is cabled to the correct switch port. Which tmsh command should the administrator run to verify that the BIG-IP has a route back to the laptop's network through the management interface?
Correct answer: D
Explanation
Return traffic from the management interface uses the management routing table, which is shown by tmsh list sys management-route. A management route or gateway for 10.20.5.0/24 is needed for the laptop to connect. The net route table applies only to data plane traffic, which is the tempting wrong choice.
Continue with F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #10
A BIG-IP administrator has downloaded a TMOS base ISO file to a workstation and wants to upload it by using the Configuration utility. Which menu path should the administrator use?
Correct answer: A
Explanation
Base software ISO files are imported from the Image List page. Hotfix List is used for hotfix ISO files, and Volume List is where an installed image is placed on a boot location. System > Archives handles UCS files, not software images.
Continue with F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Discussion
Explain your reasoning, not just the letterOther F5 certifications
Reviews
Write a review★★★★★
Exam Practice is worth every penny. The mock exams are realistic, and the feedback helped me focus on key areas.
Amit SharmaVerified buyer
★★★★★
I highly recommend Exam Practice. The feedback after each test helped me improve significantly, and I passed my exams easily.
Oscar NyströmVerified buyer
★★★★★
This platform is a lifesaver. The practice questions and explanations are so detailed. It’s the best study tool I’ve ever used.
Hannah SmithVerified buyer
FAQ
Learn More: https://www.f5.com/learn/certification
- Q1: What is the F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade exam?
- A: F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade is a F5 certification exam. Judging by the questions in our bank, it concentrates on big-ip, lockdown, tmos, self-ip and TMSH.
- Q2: What topics does the F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade exam cover?
- A: Questions in our F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade bank cluster around big-ip, lockdown, tmos, self-ip, TMSH, jump, module and HTTPD. Working through the full set is the quickest way to find which of these you are weakest on.
- Q3: How should I prepare for F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade?
- A: Work through the F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade practice questions here, checking your answer on each one, then sit the practice test to rehearse the exam under timed conditions before the real thing.
- Q4: Are these real F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade exam questions?
- A: They are drawn from officially released past questions and from community members who have sat F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade. Answers are verified and updated weekly.
- Q5: Where do I register for the F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade exam?
- A: Register through F5 directly. Exampractice is not affiliated with F5 and does not administer the exam.
- Q6: Is there a free F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade sample?
- A: Yes. Every F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade page shows a free sample of real questions. Upgrading opens the full bank and the practice test.
- Q7: What are F5 Certification Exams?
- A: F5 Certification Exams validate your expertise in managing and optimizing F5’s application delivery and security solutions, including BIG-IP, BIG-IQ, and other F5 technologies. These certifications demonstrate your proficiency in deploying, configuring, and troubleshooting F5 products to ensure secure and high-performing applications.
- Q8: Why should I pursue F5 Certification?
- A: F5 Certification enhances your professional credibility, showcasing your skills and knowledge in application delivery and security. This can lead to better job opportunities, higher salaries, and career advancement in network administration, security, and IT infrastructure roles.
- Q9: What are the benefits of F5 Certification?
- A: Benefits include recognition as a certified F5 professional, improved job performance, access to exclusive resources, continuing education opportunities, and staying current with the latest F5 technologies and best practices.
- Q10: Who should take F5 Certification Exams?
- A: Network engineers, system administrators, security professionals, and anyone involved in managing and securing application delivery using F5 products should consider these certifications to validate their expertise and advance their careers.
- Q11: What types of F5 Certification Exams are available?
- A: F5 offers various certification paths, including:
- Q12: How do I prepare for F5 Certification Exams?
- A: Preparation can include official F5 training courses, study guides, practice exams, online tutorials, and hands-on experience with F5 products and solutions.
- Q13: Where can I take F5 Certification Exams?
- A: F5 Certification Exams can be taken at authorized Pearson VUE testing centers worldwide or online, providing flexibility to fit your schedule and location.
- Q14: How do F5 Certifications impact my career?
- A: F5 Certifications significantly boost your career by demonstrating your expertise to employers, making you a more competitive candidate for advanced roles and promotions in network administration, security, and IT infrastructure.
- Q15: Are there any prerequisites for F5 Certification Exams?
- A: Some exams may have prerequisites, such as foundational knowledge or prior experience with F5 products. Check the specific requirements for each certification path on the F5 Certification website.
- Q16: How often do I need to recertify for F5 Certifications?
- A: F5 Certifications typically require recertification every two years to ensure that certified professionals stay updated with the latest F5 technologies and industry practices.