5.03 Evaluate the Variables Relevant to Automation and Orchestration Using F5 RESTful APIs 402 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A DevOps engineer is writing a Python script that uses the BIG-IP REST API to automate pool member health checks. The script currently uses HTTP basic authentication with a service account that has the 'Operator' role. During a security review, the engineer is told to eliminate credentials from the script and use a more secure authentication method. The script will run on a hardened CI/CD runner that has network access to the BIG-IP management interface. Which approach should the engineer implement?

   • ASwitch to using the iControl REST API with the 'X-F5-Auth-Token' header and hardcode the token in the script for simplicity.
   • BUse the 'admin' account with basic authentication because it has the necessary permissions to perform health check operations without additional configuration.
   • CGenerate a token by POSTing the service account credentials to /mgmt/shared/authn/login, store the token in a secure vault, and use it in the Authorization header for subsequent requests.
   • DContinue using basic authentication but encrypt the script file with a password manager so the credentials are not visible in plain text.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Why is state management important in F5 REST API automation workflows?

   • ATo encrypt the data in transit.
   • BTo increase the speed of API requests.
   • CTo ensure that repeated executions produce consistent results.
   • DTo reduce the number of API calls.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is a common automation use case for the F5 REST API?

   • AInstalling operating system patches on the BIG-IP.
   • BMonitoring physical temperature sensors.
   • CConfiguring the BIOS settings of the BIG-IP hardware.
   • DProvisioning virtual servers and managing pools.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which F5 REST API call would you use to create a new virtual server?

   • ADELETE to /mgmt/tm/ltm/virtual
   • BPOST to /mgmt/tm/ltm/virtual
   • CPUT to /mgmt/tm/ltm/virtual
   • DGET to /mgmt/tm/ltm/virtual
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the principle of least-privilege access in the context of F5 REST API usage?

   • AGranting users only the permissions necessary to perform their tasks.
   • BUsing the same role for all automation scripts.
   • CDisabling authentication for automation scripts.
   • DGranting all users full administrator access.
   Reveal Solution Discussion Select an answer first