10 exam-style questions with answers and explanations, straight from our 1,030-question bank. Tap an answer to check yourself. When you're ready, take the scored version in the free practice test.
The F5CAB1 exam has 30 questions and runs 0 hours 30 minutes.
These 10 free F5CAB1 questions are organized by exam domain, so you can see how each part of the BIG-IP Administration: Install, Initial Configuration, and Upgrade blueprint is tested. Reveal the answer and explanation under each question.
An administrator creates a new self IP address on the internal VLAN and leaves all of its settings at their defaults. A colleague then attempts to open an SSH session to that self IP address and the connection fails. What is the reason?
Correct answer: C - The default port lockdown setting on a new self IP permits only ICMP
An administrator sets port lockdown to Allow None on the self IP of a VLAN that hosts several production virtual servers. What is the effect on client application traffic to those virtual servers?
Correct answer: A - Client traffic continues to be processed normally
A newly licensed BIG-IP has just completed the Setup Utility and no additional hardening has been performed. Which statement accurately describes access to the Configuration Utility at this point?
Correct answer: D - Access is permitted from any source address until the allow list is changed
An administrator uses TMSH to restrict SSH access to a single management subnet and confirms the change with a list command. After an unplanned reboot several days later, SSH is again reachable from all networks. What explains this?
Correct answer: B - The change was applied to the running configuration but never saved to disk
A device DoS vector is generating attack detection events, but packet analysis confirms that no traffic is actually being dropped. Which configuration explains this behavior?
Correct answer: A - The detection threshold has been exceeded but the rate limit has not
An administrator can reach the Configuration Utility using the management IP address, but browsing to the internal self IP address returns no response. Both addresses are routable from the workstation. What should be examined first?
Correct answer: C - The port lockdown setting on the internal self IP
A junior engineer proposes configuring a virtual server to listen on the BIG-IP management IP address in order to conserve data-plane addresses. Why is this not possible?
Correct answer: A - The management interface is handled by the host operating system, not by TMM
During initial configuration, an administrator assigns the management IP address from a subnet that is already in use by an existing self IP address. What is the expected consequence?
Correct answer: D - Management access becomes unreliable due to ambiguous routing
After replacing both the httpd and sshd allow lists with an incorrect subnet, an administrator can no longer reach the BIG-IP over the network by any method. Which recovery approach will work?
Correct answer: B - Connect through the serial console, which bypasses the network allow lists
A BIG-IP appliance is passing production traffic without any issues. An attempt to install a newer software version fails with a licensing error. Which condition is the most likely cause?
Correct answer: C - The target software was released after the license Service Check Date
The F5CAB1 exam also covers these domains. Drill them in the full free practice test:
The full bank has 1,020 more F5CAB1 questions with explanations.
Continue in the free practice test →
View plans