F5 BIG-IP Administration Control Plane Administration (F5CAB4) Certification Sample Questions

01. Which risk follows from setting port lockdown to Allow All on an external-facing self-IP?
a) The system stops processing load-balanced traffic through the virtual servers on that VLAN.
b) Clients on the external network can bypass the packet filters, the security policies, and the iRules applied to virtual servers.
c) Administrative services such as SSH and the GUI become reachable on that self-IP.
d) Configuration synchronization with the other members of the device group stops working.

02. An administrator needs to confirm which NTP servers the BIG-IP system has been configured to use. Where in the GUI is that list shown?
a) Statistics > Performance > System
b) System > Logs > System
c) Device Management > Overview
d) System > Configuration > Device > NTP

03. To save disk space, the BIG-IP system rotates and compresses older log files. Which file extension identifies these compressed files?
a) .bak
b) .gz
c) .Z
d) .old

04. An administrator reviews the virtual server list in the Configuration Utility and sees a yellow triangle beside one virtual server. What does that status icon indicate?
a) An administrator has disabled the virtual server, so it refuses new connections.
b) The pool members behind the virtual server are down, so it is offline.
c) No monitor is assigned, so the system cannot determine the virtual server's state.
d) The virtual server is temporarily unavailable, and it can recover without administrator action.

05. Which TMSH command returns a summary of the system's hardware, including the serial number and the platform type?
a) tmsh show sys hardware
b) tmsh show net interface
c) tmsh list sys platform
d) tmsh show sys version

06. An administrator needs to determine whether a BIG-IP device was placed in the forced offline state or went offline because of a system fault. Which GUI location is the best place to check the device's current failover state?
a) Statistics > Dashboard
b) Device Management > Overview
c) Local Traffic > Virtual Servers
d) System > Logs > Local Traffic

07. Which remote authentication protocol is used when BIG-IP administrative logins are integrated with Microsoft Active Directory?
a) LDAP
b) TACACS+
c) SNMP
d) OCSP

08. An administrator is locked out of the Configuration Utility but still has serial console access. Which TMSH command reports the state of the management interface?
a) tmsh list net mgmt-interface
b) tmsh show sys interface
c) tmsh show sys management-status
d) tmsh show net interface mgmt

09. The sync status shown in the Configuration utility reports Disconnected. What is the most likely impact of this status?
a) The Configuration utility can no longer be reached over HTTPS on the management address.
b) The device has lost its license and requires reactivation.
c) Configuration changes on this unit will not reach the peer.
d) Traffic processing has stopped on every virtual server on the unit.

10. An administrator adds a new device to the trust domain and the operation fails with a certificate verification error. What is a common cause of this failure?
a) The devices are in different physical data centers.
b) The standby unit has a higher CPU load than the active unit.
c) One device uses a 10 Gbps interface while the other uses 1 Gbps.
d) The devices have different time settings (NTP desynchronization).