tigreee 4

When looking at this BIG-IP prompt: root@virtual-bigip1] Peer Time Out of Sync What does the message indicate? (Choose one answer). That one of the NTP sources has a skewed clock. That the peer BIG-IP is unreachable for the device group. That the local time is correct, but the remote time is incorrect. That there was a time synchronization issue between the BIG-IP device and its peer.

Users are unable to reach an application. The BIG-IP Administrator checks the Configuration Utility and observes that the Virtual Server has a red diamond in front of the status. What is causing this issue? (Choose one answer. The Virtual Server is receiving HTTPS traffic over an HTTP virtual. All pool members are down. All pool members have been disabled. The Virtual Server is disabled.

Which method is recommended for creating a new user from the CLI? (Choose one answer). A. Run tmsh create auth user username prompt-for-password from bash. B. Edit bigip.conf to add the new user and the user’s clear-text password. C. Run f5adduser 'username' then f5passwd username from bash or tmsh. D. Run useradd 'username' then passwd username from bash or tmsh.

A BIG-IP Administrator needs to determine who changed a Virtual Server configuration. In which log file would the BIG-IP Administrator find this data? (Choose one answer). A. /var/log/audit. B. /var/log/secure. C. /var/log/ltm.

What is the tmsh command to list the IP ranges that can access the management interface via SSH? (Choose one answer). tmsh show /sys sshd allow. tmsh list /sys sshd allow. tmsh show /sys sshd /etc/hosts.allow. tmsh list /sys sshd /etc/hosts.allow.

The BIG-IP Administrator runs the command: netstat -an | grep 443 and sees the following output: tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN What does this output indicate about the service on port 443? (Choose one answer). The service is actively listening only on the loopback interface. The service is actively listening on all interfaces for HTTPS traffic. The service indicates no connections to the LISTEN port. The service is in a standby state and unable to accept connections.

A BIG-IP Administrator uses a device group to share the workload and needs to perform service on a BIG-IP device currently active for a traffic group. The administrator needs to enable the traffic group to run on another BIG-IP device in the device group. What should the administrator do to meet the requirement? (Choose one answer). Create a new Traffic Group and then fail to Standby Unit. Select Traffic Group and then select Failover. Select Traffic Group and then select Force to Standby. Select Traffic Group on Primary Unit and then select Demote.

An organization is performing a major release upgrade to its BIG-IP system. The system is under medium load and has enough disk space to perform the upgrade. Which pre-upgrade task is disruptive to regular system performance and should be performed during a maintenance window? (Choose one answer). Create a QKView. Reactivate the license. tmsh save sys config. Generate a UCS.

New Syslog servers have been deployed in an organization. The BIG-IP Administrator must reconfigure the BIG-IP system to send log messages to these servers. In which location in the Configuration Utility can the BIG-IP Administrator make the needed configuration changes to accomplish this? (Choose one answer). System > Configuration > Local Traffic. System > Logs > Configuration. System > Logs > Audit. System > Configuration > Device.

The BIG-IP Administrator suspects unauthorized SSH login attempts on the BIG-IP system. Which log file would contain details of these attempts? (Choose one answer). /var/log/messages. /var/log/secure. /var/log/audit. /var/log/ltm.

Which command will provide the BIG-IP Administrator with the current device HA status? (Choose one answer). list /cm failover. show /sys failover. show /cm failover-status.

In which of the following log files would log events pertaining to pool members being marked “UP” or “DOWN” by their Health Monitors be written? (Choose one answer). /var/log/audit. /var/log/ltm. /var/log/secure. /var/log/monitors.

Administrative user accounts have been defined on the remote LDAP server and are unable to log in to the BIG-IP device. Which log file should the BIG-IP Administrator check to find the related messages? (Choose one answer). /var/log/user.log. /var/log/ltm. /var/log/messages. /var/log/secure.

A BIG-IP Administrator needs to load a UCS file but must exclude the license file. How should the administrator perform this task? (Choose one answer). From the GUI, select the UCS file and click Restore. From the CLI with command tmsh load /sys ucs <ucs filename>. From the CLI with command tmsh load /sys ucs <ucs filename> no-license. From the GUI, select the UCS file, uncheck the license box, and click Restore.

Which log file should the BIG-IP Administrator check to determine if a specific user tried to log in to the BIG-IP Configuration Utility? (Choose one answer). /var/log/pam/tallylog. /var/log/secure. /var/log/ltm. /var/log/httpd.

A BIG-IP Administrator needs to restore a UCS file to an F5 device using the Configuration Utility. Which section of the Configuration Utility should the BIG-IP Administrator access to perform this task? (Choose one answer). System > Configuration. System > Archives. Local Traffic > Virtual Servers. Local Traffic > Policies.

One of the two members of a device group has been decommissioned. The BIG-IP Administrator tries to delete the device group, but is unsuccessful. Prior to removing the device group, which action should be performed? (Choose one answer). Remove all members from the device group. Make sure all members of the device group are in sync. Remove the decommissioned device from the device group. Disable the device group.

A BIG-IP Administrator runs the initial configuration wizard and learns that the NTP servers were invalid. In which area of the Configuration Utility should the BIG-IP Administrator update the list of configured NTP servers? (Choose one answer). System > Platform. System > Preferences. System > Services. System > Configuration.

A BIG-IP Administrator receives an RMA replacement for a failed F5 device. The Administrator tries to restore a UCS taken from the previous device, but the restore fails. The following error appears in the /var/log/ltm: insufficient pool members. 01070608:3: License is not operational (expired, digital signature does not match contents) What should the BIG-IP Administrator do to avoid this error? (Choose one answer). Remove the license information from the UCS archive. Revoke the license prior to restoring. Use the appropriate tmsh command with the no-license option. Reactivate the license on the new device using the manual activation method.

The BIG-IP system is provisioned for LTM only. The BIG-IP Administrator is tasked with provisioning ASM. What process restarts when the BIG-IP Administrator changes the module provisioning? (Choose one answer). bd. tmm. sshd. httpd.

Which TMSH command initiates a manual configuration synchronization to the specified device group? (Choose one answer). tmsh load sys config to-group <device_group>. tmsh modify sys failover auto-sync enable. tmsh run cm config-sync to-group <device_group>. tmsh run sys device-group update-config.

A BIG-IP Administrator makes a configuration change to the BIG-IP device. Which file logs the message regarding the configuration change?. /var/log/messages. /var/log/audit. /var/log/user.log. /var/log/secure.

New Syslog servers have been deployed in an organization. The BIG-IP Administrator must reconfigure the BIG-IP system to send log messages to these servers. In which location in the Configuration Utility can the BIG-IP Administrator make the needed configuration changes to accomplish this?. System > Logs > Configuration. System > Configuration > Local Traffic. System > Logs > Audit2. System > Configuration > Device3.

A BIG-IP device sends out the following SNMP trap: big-ipo.f5.com - bigipExternalLinkChange Link: 1.0 is DOWN. Where in the BIG-IP Configuration utility should the BIG-IP Administrator verify the current status of Link 1.0?. System > Platform. Network > Trunks > Trunk List. Statistics > Performance > System. Network > Interfaces > Interface List.

A BIG-IP Administrator makes a configuration change to a Virtual Server on the Standby device of an HA pair. The HA pair is currently configured with Auto-Sync Enabled. What effect will the change have on the HA pair configuration?. The change will be undone when Auto-Sync propagates the config to the HA pair. The change will be propagated next time a configuration change is made on the Active device. The change will be undone next time a configuration change is made on the Active device. The change will take effect when Auto-Sync propagates the config to the HA pair.

Users report that traffic is negatively affected every time a BIG-IP device fails over. The traffic becomes stabilized after a few minutes. What should the BIG-IP Administrator do to reduce the impact of future failovers?. Enable Failover Multicast Configuration. Set up Failover Method to HA Order. Configure MAC Masquerade. Configure a global SNAT Listener.

Administrative user accounts have been defined on the remote LDAP server and are unable to log in to the BIG-IP device. Which log file should the BIG-IP Administrator check to find the related messages?28. /var/log/secure. /var/log/messages. /var/log/ltm. /var/log/user.log.

The BIG-IP Administrator has modified an iRule on one device of an HA pair. The BIG-IP Administrator notices there is NO traffic on the BIG-IP device in which they are logged into. What should the BIG-IP Administrator do to verify if the iRule works correctly?. Push configuration from this device to the group and start to monitor traffic on this device. Pull configuration to this device to the cluster and start to monitor traffic on this device. Log in to the other device in the cluster, push configuration from it, and start to monitor traffic on that device. Log in to the other device in the cluster, pull configuration to it, and start to monitor traffic on that device.

A configuration change is made on the standby member of a device group. What is displayed as "Recommended Action" on the Device Management Overview screen?. Force active member of device group to standby. Activate device with the most recent configuration. Synchronize the active member configuration to the group. Synchronize the standby member configuration to the group.

A BIG-IP Administrator discovers malicious brute-force attempts to access the BIG-IP device on the management interface via SSH. The BIG-IP Administrator needs to restrict SSH access to the management interface. Where should this be accomplished?. System > Configuration. Network > Interfaces. Network > Self IPs. System > Platform.

A BIG-IP Administrator needs to view the CPU utilization of a particular Virtual Server. Which section of the Configuration Utility should the administrator use for this purpose?. Statistics > Module Statistics > Local Traffic > Virtual Addresses. Statistics > Module Statistics > Traffic Summary1. Statistics > Analytics > Process CPU Utilization234. Statistics > Module Statistics > Local Traffic > Virtual Servers567.

A BIG-IP Administrator is setting up a new BIG-IP device. The network administrator reports that the interface has an incompatible media speed. The BIG-IP Administrator needs to change this setting manually. From which location should the BIG-IP Administrator perform this task?14. On the Front Console15. In the TMOS Shell Command line16. In the Configuration Utility, Network > Interface17. In the Configuration Utility, System > Configuration18.

An LTM device has a virtual server mapped to www.f5.com. Users report that when they connect to /resources/201.1.2h.l_l.com they are unable to receive content. What is the likely cause of the issue?. The pool associated with the virtual server does not have priority group activation enabled. The virtual address does not have ARP enabled. The virtual address does not have route advertising enabled. The pool associated with the virtual server is falling its health check.

A BIG-IP Administrator reviews the Plane CPU Usage performance chart and discovers a high percentage of Control Plane utilization. Which type of traffic does this indicate a higher usage of?. Administrative. Tunnel. Accelerated. Application.

One of the two members of a device group has been decommissioned. The BIG-IP Administrator tries to delete the device group, but is unsuccessful. Prior to removing the device group, which action should be performed?. Disable the device group. Remove all members from the device group. Remove the decommissioned device from the device group. Make sure all members of the device group are in sync.

The BIG-IP appliance fails to boot. The BIG-IP Administrator needs to run the End User Diagnostics (EUD) utility to collect data to send to F5 Support. Where can the BIG-IP Administrator access this utility?. Console Port. Internal VLAN interface. External VLAN interface. Management Port.

The BIG-IP Administrator generates a qkview using "qkview -s0" and needs to transfer the output file via SCP. Which directory contains the output file?. /var/log. /var/tmp. /var/local. /var/config.

A BIG-IP Administrator needs to fall over the active device. The administrator logs into the Configuration Utility and navigates to Device Management > Traffic Group. However, "Force to Standby" is greyed out. What is causing this issue?. The BIG-IP Administrator is NOT logged into command line to tail over. The BIG-IP Administrator is on the Standby Device. The BIG-IP Administrator is logged in as root. The BIG-IP Administrator is logged in as administrator.

BIG-IP Administrator must determine if a Virtual Address is configured to fail over to the standby member of a device group. In which area of the Configuration Utility can this be confirmed?. Device Management > Traffic Groups. Device Management > Devices34. Local Traffic > Virtual Servers35. Device Management > Overview36.

A BIG-IP Administrator suspects that one of the BIG-IP device power supplies is experiencing power outages. Which log file should the BIG-IP Administrator check to verify the suspicion?. /var/log/daemon.log. /var/log/kern.log. /var/log/ltm. /var/log/audit.

A BIG-IP Administrator is conducting maintenance on one BIG-IP appliance in an HA Pair. Why should the BIG-IP Administrator put the appliance into FORCED_OFFLINE state?. To preserve existing connections to Virtual Servers and reduce the CPU load. To allow new connections to Virtual Servers and ensure the appliance becomes active. To terminate connections to the management IP and decrease persistent connections. To terminate existing connections to Virtual Servers and prevent the appliance from becoming active.

Which file should the BIG-IP Administrator check to determine when a Virtual Server changed its status?. /var/log/audit. /var/log/lastlog. /var/log/ltm. /var/log/monitors.

A BIG-IP Administrator must determine if a Virtual Address is configured to fail over to the standby member of a device group. In which area of the Configuration Utility can this be confirmed?. Device Management > Traffic Groups. Device Management > Devices. Local Traffic > Virtual Servers. Device Management > Overview.

A BIG-IP Administrator is unable to connect to the management interface via HTTPS. What is a possible reason for this issue?. The port lockdown setting is configured to Allow None. An incorrect management route is specified. The IP address of the device used to access the management interface is NOT included in the "P Allow" list in the Configuration Utility. The IP address of the device used to access the management interface is NOT included in the "httpd Allow" list in the CLI.

A BIG-IP Administrator needs to restore a UCS file to an F5 device using the Configuration Utility. Which section of the Configuration Utility should the BIG-IP Administrator access to perform this task?. Local Traffic > Virtual Servers. Local Traffic > Policies. System > Archives. System > Configuration.

A BIG-IP Administrator finds the following log entry: tnm tmm[7141]: 011e0002:4: sweeper_update: aggressive mode activated. Which action should the BIG-IP Administrator take to mitigate this memory issue?. Configure the redundant pair to be active-active. Decrease the TCP profile Idle Timeout value. Increase the TCP profile Idle Timeout value. Configure the server to use Connection Mirroring.

A BIG-IP Administrator needs to find which modules have been licensed for use on the BIG-IP system. In which section of the Configuration Utility can the BIG-IP Administrator find this information?. System > Services. System > Resource Provisioning. System > Platform. System > Support.

user needs to generate a QKView to upload to iHealth to determine any issues with upgrading TMOS. Where can the user generate the QKView in the Configuration Utility?. System > Software Management. System > Archives. System > Configuration. System > Support.

A BIG-IP Administrator needs to update the list of configured NTP servers. In which area of the Configuration Utility should the BIG-IP Administrator perform this update?. System > Configuration. System > Services. System > Preferences. System > Platform.

A BIG-IP Administrator needs to export system configuration for migration purposes. Which file type should be used?. SCF. QKView. UCS. ISO.

A BIG-IP Administrator wants to allow management access only from a specific subnet. Where should this be configured?. Network > Self IPs (Port Lockdown). System > Users. Network > Routes. System > Platform.

The BIG-IP Administrator runs the command shown and observes a device trust issue between BIG-IP devices in a device group. The issue prevents config sync on device bigip3.local. What is preventing the config sync?. Next Active Load factor is 0 on bigip1.local. Both devices are standby. Next Active Load factor is 1 on bigip1.local. Time Delta to local system is.

A BIG-IP Administrator needs to restore an encrypted UCS archive from the command line using the TMSH utility. Which TMSH command should the BIG-IP Administrator use to accomplish this?. load /sys config file <filepath> passphrase <password>. load /sys ucs <filepath> no-license. load /sys config file <filepath>. load /sys ucs <filepath> passphrase <password>.

A BIG-IP Administrator defines a device Self IP. The Self IP is NOT reachable from the network. What should the administrator verify first?. The correct Trunk has been selected. The correct VLAN has been selected. Verify if auto last hop is disabled. The correct Interface has been selected.

A node is a member of various pools and hosts different web applications. If a web application is unavailable, the BIG-IP appliance needs to mark the pool member down for that application pool. What should a BIG-IP Administrator deploy at the pool level to accomplish this?. A combination of ICMP + TCP monitor. A TCP monitor with a custom interval/timeout. A UDP monitor with a custom interval/timeout. An HTTP monitor with custom send/receive strings.

A BIG-IP Administrator plans to resolve a non-critical issue with a BIG-IP device in 2 weeks. What Severity level should be assigned to this type of F5 support ticket?. 4. 2. 3. 1.

A BIG-IP Administrator needs to update the license on a BIG-IP device. Where can this be done?. System > Software Management. System > License. System > Platform. Device Management.

A BIG-IP Administrator needs to verify system time synchronization. Where should this be checked?. System > Platform. System > Configuration > Device. System > Logs. System > Software Management.

A BIG-IP Administrator needs to change the management IP address of a BIG-IP device. Where should the administrator perform this task?. Network > VLANs. Network > Interfaces. System > Platform. Network > Self IPs.

A local user account (Users) on the BIG-IP device is assigned the User Manager role. User1 attempts to modify the properties of another account (User2), but the action fails. The BIG-IP Administrator can successfully modify the User2 account. Assuming the principle of least privilege, what is the correct way to allow User1 to modify User2 properties?. Move User2 to the same partition as User1. Grant User administrator privileges. Move User1 to the same partition as User2. Modify the partition access for User1.

The BIG-IP Administrator is investigating disk utilization on the BIG-IP device. What should the BIG-IP Administrator check next? (Choose one answer). Results from the platform diagnostics test. Results from the EUD test. Large files on the / file system. Large files on /usr file system.

Utility, where can the BIG-IP Administrator check system metrics such as CPU and memory usage?. Device Management > Overview. Local Traffic > Virtual Servers. Network > Interfaces. Statistics > Dashboard.

A BIG-IP administrator is troubleshooting inconsistent configuration objects on devices in a device group. The administrator uses the command: tmsh run /cm watch-devicegroup-device and observes the following output: devices <devgroup> device clu_id cl_orig cl_time last_sync 20:21 sync_test bigip_a 3273 bigip_a 14:27:00 20:21 sync_test bigip_b 1745 bigip_b 13:52:34 13:42:04 20:21 sync_test bigip_c 1745 bigip_a 13:52:34 13:42:04 What two conclusions can be made about this output? (Choose two answers). bigip_a has the latest configuration. Two of the devices in the device group have a configuration that is out of date. The config from bigip_c was synced to the other devices in the device group during the most recent ConfigSync. The correct configuration exists on bigip_b and bigip_c because their cluster times match. The correct configuration exists on bigip_a and bigip_c because their cluster times match.

What are the recommended methods for forcing a BIG-IP system to standby mode? (Choose two answers). Active BIG-IP: CLI > tmsh run /sys failover device standby. Active BIG-IP: Configuration Utility > Device Management > Devices > Local Device (Self) > Force to Standby. Active BIG-IP: Configuration Utility > Device Management > Traffic Groups > Local Device (Self) > Force to Standby. Active BIG-IP: CLI > tmsh run /sys failover standby.

As an organization grows, more people have to log into the BIG-IP. Instead of adding more local users, the BIG-IP Administrator is asked to configure remote authentication against a central authentication server. Which two types of remote server can be used here? (Choose two answers). LDAP. OAUTH. RADIUS. SAML Questions and Answers PDF 11/66.

A BIG-IP Administrator needs to check the memory utilization on a BIG-IP system. Which two methods can the BIG-IP Administrator use? (Choose two.). Run the tmsh show /sys memory command. Run the tmsh show /sys traffic command. Go to Statistics > Module Statistics > Traffic Summary in the configuration utility. Go to Statistics > Module Statistics > Memory in the configuration utility.

What can the BIG-IP Administrator do when restoring BIG-IP configuration files with a UCS archive? (Choose two answers). The BIG-IP Administrator can only restore the UCS archive to the same system from which it was saved. The BIG-IP Administrator can restore a UCS archive on a BIG-IP system running a later software version than the version of software the UCS archive was created on. The BIG-IP Administrator can restore a UCS archive on a BIG-IP system on a different platform. The BIG-IP Administrator can only restore a UCS archive on a BIG-IP system running the same version.