F5 BIG-IP Administration Install, Initial Configuration, and Upgrade (F5CAB1) Certification Sample Questions

01. During initial deployment, DHCP is enabled on the management port. What information can BIG-IP obtain from DHCP on first boot?
a) An IPv4 address, a default route, plus DNS and NTP servers
b) An IPv4 address only, with the default route for that address configured manually
c) A self IP, a traffic group, and DNS servers
d) A management IP, a default route, DNS servers, and all licensed module keys

02. Why might a module not appear as available for provisioning even on a system with ample RAM?
a) Because the active boot location determines which modules may be provisioned
b) Because modules can be enabled only from a session on the management IP
c) Because a module appears as available for provisioning only after the system is rebooted
d) Because the license determines which module combinations a system may provision

03. BIG-IP software management installs a new version into a volume other than the one currently in use. Why is software organized that way?
a) To bypass the license Service Check Date during an upgrade
b) To remove the need for any reboot during an upgrade
c) To keep the current version running while a new one is staged
d) To let a new software version overwrite the version currently in use

04. You need to allow SSH management access only from a jump subnet and deny all other SSH sources. Which control most directly addresses that requirement?
a) Configure SSH IP Allow to Specify Range
b) Set Port Lockdown to Allow All
c) Restrict the HTTPd allow list to the jump subnet
d) Move the self IP to traffic-group-local-only

05. An administrator wants to check which modules are licensed from TMUI, then confirm which of them are provisioned from the command line. Which pairing of screen and command does that?
a) System > Platform, then tmsh show sys software
b) System > License, then tmsh list sys provision
c) System > Archives, then tmsh list net self
d) Device Management > Devices, then tmsh list sys db

06. What should an administrator expect after submitting a change to module provisioning in the Configuration utility?
a) A ConfigSync push to the peer is required before the change applies
b) Only TMM restarts, and the rest of the system keeps running normally
c) The system reboots, and provisioning takes effect once it returns
d) The license must be reactivated before the change applies

07. After a static management IP is assigned, an administrator can reach TMUI from a workstation on the same subnet but not from a workstation on a different subnet. Which follow-up check is most appropriate first?
a) Verify whether a default route exists for the management port
b) Verify whether a static route exists for the self IP subnet
c) Verify whether the virtual server default pool is available
d) Verify whether CMP is enabled on the virtual server

08. Which command helps an administrator determine the default services that self IP port lockdown can reference?
a) tmsh list sys management-ip
b) tmsh list sys provision
c) tmsh list net vlan all-properties
d) tmsh list net self-allow defaults

09. A module appears under Active Modules on the license page, and its provisioning level is None on the resource provisioning page. What does that combination indicate?
a) The module is provisioned but not licensed
b) The module is licensed but not provisioned
c) The module becomes active only after a reboot to a new volume
d) The module is running in trial mode

10. The output of list sys provision on a BIG-IP system contains sys provision ltm { level nominal } and sys provision afm { }. What is the correct interpretation?
a) LTM is provisioned at nominal, and AFM is not provisioned
b) Both modules are provisioned, and both are running at nominal
c) AFM is licensed permanently, and LTM is unlicensed
d) Both modules are provisioned, but neither is active until a reboot