BIG-IP Administration Control Plane Administration (F5CAB4) exam Version: Demo [ Total Questions: 10] Web: www.certsout.com Email: support@certsout.com F5 F5CAB4 IMPORTANT NOTICE Feedback We have developed quality product and state-of-art service to ensure our customers interest. If you have any suggestions, please feel free to contact us at feedback@certsout.com Support If you have any questions about our product, please provide the following items: exam code screenshot of the question login id/email please contact us at and our technical experts will provide support within 24 hours. support@certsout.com Copyright The product of each order has its own encryption code, so you should use it independently. Any unauthorized changes will inflict legal punishment. We reserve the right of final explanation for this statement. F5 - F5CAB4 Certs Exam 1 of 7 Pass with Valid Exam Questions Pool A. B. C. D. A. B. C. D. Category Breakdown Category Number of Questions List which log files could be used to find events and/or hardware issues 6 Identify management connectivity configurations 2 Apply procedural concepts required to manage the state of a high availability pair 2 TOTAL 10 Question #:1 - [List which log files could be used to find events and/or hardware issues] A BIG-IP Administrator suspects that one of the BIG-IP device power supplies is experiencing power outages. Which log file should the BIG-IP Administrator check to verify the suspicion? /var/log/daemon.log /var/log/kern.log /var/log/ltm /var/log/audit Answer: C Explanation Comprehensive and Detailed Explanation From BIG-IP Administration Control Plane Administration documents: Although /var/log/ltm is primarily associated with Local Traffic Manager events, it is also the primary destination for system-level alerts generated by the Control Plane's chmand (Chassis Manager Daemon). Hardware status changes, including power supply failures, fan speeds, and temperature warnings, are logged as "notice" or "critical" events within the LTM log file. Question #:2 - [List which log files could be used to find events and/or hardware issues] The BIG-IP Administrator generates a qkview using "qkview -s0" and needs to transfer the output file via SCP. Which directory contains the output file? /var/log /var/tmp /var/local /var/config Answer: B Explanation F5 - F5CAB4 Certs Exam 2 of 7 Pass with Valid Exam Questions Pool A. B. C. D. Comprehensive and Detailed Explanation From BIG-IP Administration Control Plane Administration documents: A QKView is a comprehensive snapshot of the device's Control Plane state, configuration, and logs used for troubleshooting. By default, the qkview utility stores its generated output file in the /var/tmp/ directory. Administrators must know this path to retrieve the file for upload to F5 iHealth or Support. Question #:3 - [Identify management connectivity configurations] A BIG-IP Administrator runs the initial configuration wizard and learns that the NTP servers were invalid In which area of the should the BIG-IP Administrator update the list of configured NTP Configuration Utility servers? (Choose one answer) System > Platform System > Preferences System > Services System > Configuration Answer: D Explanation Comprehensive and Detailed Explanation From BIG-IP Administration Control Plane Administration documents: On a BIG-IP system, is part of the NTP (Network Time Protocol) configuration system-level configuration . In the Configuration Utility, NTP servers are configured under the settings System configuration hierarchy The correct navigation path is: System > Configuration > Device > NTP This location allows the administrator to: Add, modify, or remove NTP servers Ensure accurate system time synchronization Maintain proper time alignment required for features such as , , logging, and ConfigSync HA failover certificate validation Why the other options are incorrect: A. System > Platform is used for hardware-related settings. B. System > Preferences manages UI and user preferences. F5 - F5CAB4 Certs Exam 3 of 7 Pass with Valid Exam Questions Pool A. B. C. D. A. B. C. D. C. System > Services controls system daemons and services, not time configuration. Therefore, the correct answer is D. System > Configuration =========== Question #:4 - [List which log files could be used to find events and/or hardware issues] A BIG-IP Administrator finds the following log entry: tnm tmm[7141]: 011e0002:4: sweeper_update: aggressive mode activated. Which action should the BIG-IP Administrator take to mitigate this memory issue? Configure the redundant pair to be active-active Decrease the TCP profile Idle Timeout value Increase the TCP profile Idle Timeout value Configure the server to use Connection Mirroring Answer: D Explanation Comprehensive and Detailed Explanation From BIG-IP Administration Control Plane Administration documents: This log message indicates that the system is low on memory and has activated 'Aggressive Mode' to reclaim resources by closing old connections37. In an HA environment, one way to ensure state stability during memory pressure is to manage how connection data is handled38. While the document suggests D, procedural mitigation for 'Aggressive Mode' often involves reviewing resource provisioning or optimizing connection idle timeouts to reduce memory footprint39. Question #:5 - [List which log files could be used to find events and/or hardware issues] Which file should the BIG-IP Administrator check to determine when a Virtual Server changed its status? /var/log/audit /var/log/lastlog /var/log/ltm /var/log/monitors Answer: C Explanation Comprehensive and Detailed Explanation From BIG-IP Administration Control Plane Administration documents: Monitoring and reporting current device status involves tracking the health of traffic objects like F5 - F5CAB4 Certs Exam 4 of 7 Pass with Valid Exam Questions Pool A. B. C. D. A. B. C. Virtual Servers20. The Control Plane logs transition events—such as a Virtual Server moving from 'Available' (green) to 'Offline' (red) due to health monitor failures—in the /var/log/ltm file21212121. While the audit log tracks who changed a configuration, the LTM log tracks system-initiated status changes22222222. Question #:6 - [Identify management connectivity configurations] What is the to list the IP ranges that can access the ? (Choose tmsh command management interface via SSH one answer) tmsh show /sys sshd allow tmsh list /sys sshd allow tmsh show /sys sshd /etc/hosts.allow tmsh list /sys sshd /etc/hosts.allow Answer: B Explanation Comprehensive and Detailed Explanation From BIG-IP Administration Control Plane Administration documents: On BIG-IP systems, SSH access restrictions are configured under the object. The property /sys sshd allow defines the IP addresses or networks permitted to connect to the management interface using SSH The command is used to display the current configuration settings. list Therefore, tmsh list /sys sshd allow correctly displays the configured allowed IP ranges. Why the other options are incorrect: A (show) displays runtime or statistical information, not configuration values. C and D incorrectly reference /etc/hosts.allow; BIG-IP manages SSH access through TMSH objects, not by directly listing host files in this context. Question #:7 - [List which log files could be used to find events and/or hardware issues] The BIG-IP Administrator suspects on the BIG-IP system. unauthorized SSH login attempts Which log file would contain details of these attempts? (Choose one answer) /var/log/messages /var/log/secure F5 - F5CAB4 Certs Exam 5 of 7 Pass with Valid Exam Questions Pool C. D. A. B. C. D. /var/log/audit /var/log/ltm Answer: B Explanation Comprehensive and Detailed Explanation From BIG-IP Administration Control Plane Administration documents: On BIG-IP systems, are logged in . This includes: authentication and authorization events /var/log/secure Successful and failed SSH login attempts Invalid user authentication attempts PAM (Pluggable Authentication Module) authentication failures Access denials related to secure services Why the other options are incorrect: /var/log/messages contains general system messages and service events, not detailed authentication failures. /var/log/audit records administrative configuration changes (who changed what and when), not login attempts. /var/log/ltm logs traffic-management (TMM) and application-related events. Therefore, the correct log file for investigating is unauthorized SSH login attempts /var/log/secure =========== Question #:8 - [Apply procedural concepts required to manage the state of a high availability pair] A user needs to generate a QKView to upload to iHealth to determine any issues with upgrading TMOS. Where can the user generate the QKView in the Configuration Utility? System > Software Management System > Archives System > Configuration System > Support Answer: D F5 - F5CAB4 Certs Exam 6 of 7 Pass with Valid Exam Questions Pool A. B. C. D. A. B. C. D. Explanation Comprehensive and Detailed Explanation From BIG-IP Administration Control Plane Administration documents: Generating a QKView is a standard procedure for identifying device health and upgrade readiness42. Within the Configuration Utility, this Control Plane diagnostic tool is located under System > Support43. This utility collects configuration and state data into a single file used by the iHealth 'Upgrade Advisor' to report on known bugs or compatibility issues prior to a version change. Question #:9 - [Apply procedural concepts required to manage the state of a high availability pair] The change will be undone when Auto-Sync propagates the config to the HA pair. The change will be propagated next time a configuration change is made on the Active device. The change will be undone next time a configuration change is made on the Active device. The change will take effect when Auto-Sync propagates the config to the HA pair. Answer: D Explanation Comprehensive and Detailed Explanation From BIG-IP Administratio24n Control Plane Administration documents: TMOS Device Service Cluste25ring (DSC) allows for configuration changes to be made on any device within a synchronization group. If Auto-Sync is enabled, the Control Plane detects the change on the Standby unit and automatically propagates (pushes) that updated configuration to the other members of the HA pair Question #:10 - [List which log files could be used to find events and/or hardware issues] A BIG-IP Administrator makes a configuration change to the BIG-IP device. Which file logs the message regarding the configuration change? /var/log/messages /var/log/audit /var/log/user.log /var/log/secure Answer: B Explanation Comprehensive and Detailed Explanation From BIG-IP Administration Control Plane Administration documents: Audit logging is a specialized feature within TMOS designed to track administrative actions. According to F5 documentation, whenever a system object (like a virtual server, pool, or profile) is created, F5 - F5CAB4 Certs Exam 7 of 7 Pass with Valid Exam Questions Pool modified, or deleted, the system records the event. These logs are stored specifically in /var/log/audit. This is essential for control plane administration to track "who did what and when" regarding the device configuration. About certsout.com certsout.com was founded in 2007. We provide latest & high quality IT / Business Certification Training Exam Questions, Study Guides, Practice Tests. We help you pass any IT / Business Certification Exams with 100% Pass Guaranteed or Full Refund. Especially Cisco, CompTIA, Citrix, EMC, HP, Oracle, VMware, Juniper, Check Point, LPI, Nortel, EXIN and so on. View list of all certification exams: All vendors We prepare state-of-the art practice tests for certification exams. You can reach us at any of the email addresses listed below. Sales: sales@certsout.com Feedback: feedback@certsout.com Support: support@certsout.com Any problems about IT certification or our products, You can write us back and we will get back to you within 24 hours.