What is the purpose of disabling unused services on a BIG-IP system?

To improve the speed of the Configuration utility

To comply with licensing requirements

To free up memory for data-plane processing

To reduce the attack surface available to potential attackers

Which command-line command is used to configure the management IP address on a BIG-IP system?

tmsh modify sys management-ip address 192.168.1.10 netmask 255.255.255.0

config network mgmt-ip 192.168.1.10 255.255.255.0

tmsh modify sys mgmt-ip address 192.168.1.10 netmask 255.255.255.0

ifconfig mgmt 192.168.1.10 netmask 255.255.255.0

Which of the following is a recommended security best practice for managing a BIG-IP system?

Allow all services to run to ensure functionality

Disable SSH and use only HTTP for management access

Use HTTPS and SSH for management access and disable insecure protocols

Use the default self-signed certificate for HTTPS

A BIG-IP administrator cannot reach the management interface from a remote workstation. The management IP is correctly configured. What is the most likely cause?

The data-plane VLANs are not configured

The management IP access list is blocking the workstation's IP address

A BIG-IP administrator manages a fleet of devices from a central jump host. The management network is a dedicated VLAN with no internet access. The administrator wants to ensure that only the jump host's IP address (10.10.10.5) can reach the BIG-IP management interface over HTTPS. Which configuration should be applied?

Disable the HTTPS management service and rely on SSH for all administrative access.

Create a network access list allowing only 10.10.10.5 to the management port, and apply it to the management interface.

Set the management gateway to the jump host's IP address.

Configure the management IP with a netmask of 255.255.255.255 to isolate it from the network.

F5Certified Administrator, BIG-IP

Domain 1Objective 1

Securing Management-IP F5CAB1 Practice Questions (Page 1)

Part of the Securing BIG-IP domain, which makes up ~29% of our current practice bank. F5 does not publish an official question count, but from its 30-minute exam (~10–20 total, ~3–6 in this domain), expect 1–1 from this objective — we provide 11 practice questions to prepare you well beyond it. (estimate)

11questions here

3free pages

5concepts

Questions 1–5

1foundation · easy
What is the purpose of disabling unused services on a BIG-IP system?
Select an answer first
2foundation · easy
Which command-line command is used to configure the management IP address on a BIG-IP system?
Select an answer first
3foundation · easy
Which of the following is a recommended security best practice for managing a BIG-IP system?
Select an answer first
4foundation · easy
A BIG-IP administrator cannot reach the management interface from a remote workstation. The management IP is correctly configured. What is the most likely cause?
Select an answer first
5application · medium
A BIG-IP administrator manages a fleet of devices from a central jump host. The management network is a dedicated VLAN with no internet access. The administrator wants to ensure that only the jump host's IP address (10.10.10.5) can reach the BIG-IP management interface over HTTPS. Which configuration should be applied?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to F5CAB1

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “F5CAB1” is a trademark of its owner, used for identification only.