A security administrator wants to restrict management access to the BIG-IP configuration utility to only the IT department's subnet. Which feature should be used to enforce this restriction?

Network address translation (NAT)

A company's security policy requires that all administrative actions on BIG-IP be traceable to a specific individual. Currently, three network engineers share the 'admin' account to perform configuration changes. The compliance team also needs a record of who logged in and what commands were executed. What should the administrator configure to meet these requirements?

Create individual user accounts with appropriate roles and enable audit logging to capture login events and command activity.

Use the admin account for all changes and rely on the system's syslog-ng to track command history.

Keep the shared admin account but change its password monthly and review the audit log for login times.

Create individual accounts with the Administrator role and disable the audit log to improve performance.

F5Certified Administrator, BIG-IP

Domain 1Objective 8

U/A F5CAB1 Practice Questions (Page 1)

Part of the Securing BIG-IP domain, which makes up ~29% of our current practice bank. F5 does not publish an official question count, but from its 30-minute exam (~10–20 total, ~3–6 in this domain), expect 1–1 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

5concepts

Questions 1–5

1foundation · easy
A security administrator wants to restrict management access to the BIG-IP configuration utility to only the IT department's subnet. Which feature should be used to enforce this restriction?
Select an answer first
2application · medium
A company's security policy requires that all administrative actions on BIG-IP be traceable to a specific individual. Currently, three network engineers share the 'admin' account to perform configuration changes. The compliance team also needs a record of who logged in and what commands were executed. What should the administrator configure to meet these requirements?
Select an answer first
3foundation · easy
Which BIG-IP profile is used to decrypt inbound HTTPS traffic from clients and then re-encrypt it before sending to pool members?
Select an answer first
4foundation · easy
Which BIG-IP feature allows a virtual server to translate the destination IP address of incoming packets to the IP address of a pool member?
Select an answer first
5foundation · easy
Which BIG-IP feature can be applied to a virtual server to protect against SYN flood attacks?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to F5CAB1

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “F5CAB1” is a trademark of its owner, used for identification only.

U/A F5CAB1 Practice Questions (Page 1)

Questions 1–5

A security administrator wants to restrict management access to the BIG-IP configuration utility to only the IT department's subnet. Which feature should be used to enforce this restriction?

Which BIG-IP profile is used to decrypt inbound HTTPS traffic from clients and then re-encrypt it before sending to pool members?

Which BIG-IP feature allows a virtual server to translate the destination IP address of incoming packets to the IP address of a pool member?

Which BIG-IP feature can be applied to a virtual server to protect against SYN flood attacks?

Keep studying — Securing BIG-IP