A BIG-IP Administrator needs to determine who changed a Virtual Server configuration.In which log file would the BIG-IP Administrator find this data? (Choose one answer)
Answer(s): A
Comprehensive and Detailed Explanation From BIG-IP Administration Control Plane Administration documents:The audit log (/var/log/audit) records configuration changes made on the BIG-IP system, including:Who made the change (user account)What was changed (for example, a virtual server modification)When the change occurredHow it was performed (GUI, TMSH, or API)Why the other options are incorrect:/var/log/secure logs authentication events such as login successes and failures, not configuration changes./var/log/ltm logs traffic-management and runtime LTM events, not administrative configuration modifications.Therefore, the correct log file for tracking who changed a virtual server is /var/log/audit.
What is the tmsh command to list the IP ranges that can access the management interface via SSH? (Choose one answer)
Answer(s): B
Comprehensive and Detailed Explanation From BIG-IP Administration Control Plane Administration documents:On BIG-IP systems, SSH access restrictions are configured under the /sys sshd object. The allow property defines the IP addresses or networks permitted to connect to the management interface using SSH.The list command is used to display the current configuration settings.Therefore, tmsh list /sys sshd allow correctly displays the configured allowed IP ranges.Why the other options are incorrect:A (show) displays runtime or statistical information, not configuration values.C and D incorrectly reference /etc/hosts.allow; BIG-IP manages SSH access through TMSH objects, not by directly listing host files in this context.
The BIG-IP Administrator runs the command:netstat -an | grep 443and sees the following output:tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTENWhat does this output indicate about the service on port 443? (Choose one answer)
Comprehensive and Detailed Explanation From BIG-IP Administration Control Plane Administration documents:In netstat output:0.0.0.0:443 means the service is bound to all available IPv4 interfaces on the system.LISTEN indicates the service is actively waiting for incoming connection requests.Therefore, this output confirms that a service (commonly HTTPS/443, such as the BIG-IP Configuration Utility or an application listener) is actively listening on all interfaces, making B the correct answer.Why the other options are incorrect:A would show 127.0.0.1:443 if it were loopback-only.C is incorrect because LISTEN explicitly indicates readiness to accept connections.D is unrelated; standby state does not affect socket binding shown by netstat.Hence, the correct answer is B.
A BIG-IP Administrator uses a device group to share the workload and needs to perform service on a BIG-IP device currently active for a traffic group. The administrator needs to enable the traffic group to run on another BIG-IP device in the device group.What should the administrator do to meet the requirement? (Choose one answer)
Comprehensive and Detailed Explanation From BIG-IP Administration Control Plane Administration documents:Traffic Groups are the mechanism BIG-IP uses to control which device owns specific application traffic in a high-availability (HA) configuration. When maintenance is required on a device that is currently active for a traffic group, the correct and recommended action is to fail over that traffic group to another device in the device group.Failing over the traffic group moves ownership of that traffic group (and the virtual servers associated with it) to another available device without forcing the entire device into standby.This allows targeted maintenance while minimizing impact to other traffic groups that may still be active on the device.Why the other options are incorrect:A is unnecessary and incorrect; traffic groups are not recreated for routine maintenance.C forces the entire device to standby, which may move more traffic than intended.D (Demote) affects device trust/priority behavior and is not the standard or recommended method for moving traffic group ownership.Therefore, selecting the Traffic Group and choosing Failover is the correct solution.
As an organization grows, more people have to log into the BIG-IP. Instead of adding more local users, the BIG-IP Administrator is asked to configure remote authentication against a central authentication server.Which two types of remote server can be used here? (Choose two answers)
Answer(s): A,C
Comprehensive and Detailed Explanation From BIG-IP Administration Control Plane Administration documents:BIG-IP supports remote authentication by integrating with centralized authentication services through its AAA framework. The supported and commonly used remote authentication servers include:LDAP (A)Used to authenticate users against directory services such as Active Directory or other LDAP- compliant directories.RADIUS (C)Commonly used for centralized authentication, authorization, and accounting, especially in network and security environments.Why the other options are incorrect:OAUTH (B) is an authorization framework, not supported as a direct administrative authentication backend for BIG-IP management access.SAML (D) is primarily used for single sign-on (SSO) in application authentication scenarios, not for BIG-IP administrative login authentication.Thus, the correct remote authentication server types are LDAP and RADIUS.
Post your Comments and Discuss F5 F5CAB4 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the F5CAB4 content, but please register or login to continue.