● BIG-IP Administration Control Plane Administration (F5CAB4)
Question #1
Question #2
A BIG-IP administrator is troubleshooting inconsistent configuration objects on device in device group. The administrator uses the command:
tmsh run /cm watch-devicegroup-device
and observes the following output:
devices <devgroup> device clu_id cl_orig cl_time last_sync
20:21 sync_test bigip_a 3273 bigip_a 14:27:00
20:21 sync_test bigip_b 1745 bigip_b 13:52:34 13:42:04
20:21 sync_test bigip_c 1745 bigip_a 13:52:34 13:42:04
What two conclusions can be made about this output?
(Choose two answers)
- A. bigip_a has the latest configuration.
- B. Two of the devices in the device group have a configuration that is out of date.
- C. The config from bigip_c was synced to the other devices in the device group during the most recent configsync.
- D. The correct configuration exists on bigip_b and bigip_c because their cluster times match.
- E. The correct configuration exists on bigip_a and bigip_c because their cluster times match.
Question #3
Users are unable to reach an application. The BIG-IP Administrator checks the Configuration Utility and observes that the Virtual Server has a red diamond in front of the status.
What is causing this issue?
(Choose one answer)
- A. The Virtual Server is receiving HTTPS traffic over HTTP virtual.
- B. All pool members are down.
- C. All pool members have been disabled.
- D. The Virtual Server is disabled.
Question #4
What are the recommended methods for forcing a BIG-IP system to standby mode? (Choose two answers)
- A. Active BIG-IP: CLI > tmsh run /sys failover device standby
- B. Active BIG-IP: Configuration Utility > Device Management > Devices > Local Device (Self) > Force to Standby
- C. Active BIG-IP: Configuration Utility > Device Management > Traffic Groups > Local Device (Self) > Force to Standby
- D. Active BIG-IP: CLI > tmsh run /sys failover standby
Question #5
Which method is recommended for creating a new user from the CLI? (Choose one answer)
- A. Run tmsh create auth user username prompt-for-password from bash
- B. edit bigip.conf to add the new user and the user’s clear-text password
- C. Run f5adduser 'username' then 'f5passwd username' from bash or tmsh
- D. Run useradd 'username' then 'passwd username' from bash or tmsh
Question #6
A BIG-IP Administrator needs to determine who changed a Virtual Server configuration.
In which log file would the BIG-IP Administrator find this data?
(Choose one answer)
- A. /var/log/audit
- B. /var/log/secure
- C. /var/log/ltm
- D. No option
Question #7
What is the tmsh command to list the IP ranges that can access the management interface via ssh? (Choose one answer)
- A. tmsh show /sys sshd allow
- B. tmsh list /sys sshd allow
- C. tmsh show /sys sshd /etc/hosts.allow
- D. tmsh list /sys sshd /etc/hosts.allow
Question #8
The BIG-IP Administrator runs the command:
netstat -an | grep 443
and sees the following output:
tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN
What does this output indicate about the service on port 443?
(Choose one answer)
- A. The service is actively listening only on the loopback interface.
- B. The service is actively listening on all interfaces for HTTPS traffic.
- C. The service indicates no connections to the LISTEN port.
- D. The service is in a standby state and unable to accept connections.
Question #9
A BIG-IP Administrator uses a device group to share the workload and needs to perform service on a BIG-IP device currently active for a traffic group. The administrator needs to enable the traffic group to run on another BIG-IP device in the device group. What should the administrator do to meet the requirement? (Choose one answer)
- A. Create a new Traffic Group and then fail to Standby Unit
- B. Select Traffic Group and then select Failover
- C. Select Traffic Group and then select Force to Standby
- D. Select Traffic Group on Primary Unit and then select Demote
Question #10
As an organization grows, more people have to log into the BIG-IP. Instead of adding more local users, the BIG-IP Administrator is asked to configure remote authentication against a central authentication server.
Which two types of remote server can be used here?
(Choose two answers)
- A. LDAP
- B. OAUTH
- C. RADIUS
- D. SAML
When looking at this BIG-IP prompt: root@virtual-bigip1] Peer Time Out of Sync
what does the message indicate? (Choose one answer)