F5 BIG-IP Administration Install, Initial Configuration, and Upgrade (F5CAB1) Certification Sample Questions

01. A BIG-IP administrator can browse to TMUI locally but cannot manage the device from a workstation on another subnet after assigning a static management IP. Which follow-up check is most appropriate first?
Select the best answer
a) Verify whether a default route was configured for the management port
b) Verify whether the self IP is floating
c) Verify whether the default pool is available
d) Verify whether CMP is enabled

02. A list sys provision output shows sys provision ltm { level nominal } and sys provision afm { }. What is the correct interpretation?
Select the best answer.
a) LTM and AFM are both provisioned at nominal
b) LTM is provisioned at nominal, and AFM is not provisioned
c) AFM is licensed permanently, and LTM is unlicensed
d) Both modules are disabled until the next reboot

03. After a software image has been installed successfully, where in TMUI would an administrator activate the newly installed boot location?
Select the best answer.
a) System > Archives
b) System > Resource Provisioning
c) System > Software Management > Boot Locations
d) System > Platform

04. An administrator is reviewing SSH restrictions for the BIG-IP management interface. Which setting directly controls whether SSH is open to all sources or only a defined range?
Select the best answer.
a) Port Lockdown
b) Source Address Translation
c) Route Advertisement
d) SSH IP Allow

05. An administrator wants to verify module licensing in TMUI and then verify provisioning from the CLI. Which sequence is the best match?
Select the best answer.
a) System > License, then list sys provision
b) System > Platform, then show sys software
c) System > Archives, then show net self
d) Device Management > Devices, then list sys db

06. In TMUI resource provisioning, which allocation choices are presented for licensed modules in the documented workflow?
Select the best answer.
a) Disabled or Enabled
b) Small or Large
c) Minimum or Nominal
d) Trial or Permanent

07. Which command family is most directly associated with viewing configured software volumes and rebooting to a specific volume from the CLI?
Select the best answer.
a) sys software volume
b) net self volume
c) cm device volume
d) sys license volume

08. Why does BIG-IP software management allow installation to a different volume while the current one remains active?
Select the best answer.
a) To eliminate the need for a reboot permanently
b) To test and stage a new image during a maintenance process while the current installation continues running
c) To avoid licensing checks during upgrades
d) To force all traffic groups into active-active mode

09. You need to allow SSH management access only from a jump subnet and deny all other SSH sources. Which control most directly addresses that requirement?
Select the best answer.
a) Configure SSH IP Allow to Specify Range
b) Set Port Lockdown to Allow All
c) Disable the admin account
d) Move the self IP to traffic-group-local-only

10. You want to evaluate a new self IP firewall policy without affecting production traffic. Which action should you take?
Select the best answer.
a) Disable the policy entirely
b) Apply the policy globally
c) Stage the policy on the self IP
d) Set the policy order to last