The security team wants to be alerted in real-time when a user fails to authenticate to the BIG-IP management interface multiple times, as this may indicate a brute-force attack. The administrator needs to configure a mechanism to monitor for this event and send a notification. What should be configured?

Create an iRule that monitors the management port and sends a syslog message on failed logins.

Configure a 'System Event' alert that triggers on the 'AUTH_FAILED' event and sends an email to the security team.

Enable the 'Audit Log' and manually check it each morning for failed logins.

Set up a 'TCP Dump' on the management interface to capture login attempts.

A BIG-IP administrator needs to grant a junior team member the ability to view configuration and statistics but explicitly prevent them from making any changes. The administrator also wants to ensure that this user's login activity is logged. What is the correct role and configuration to assign?

Assign the 'Administrator' role and rely on the audit log to track changes.

Assign the 'Manager' role and disable the audit log for this user.

Assign the 'Guest' role and enable the audit log.

Assign the 'Operator' role and ensure the audit log is enabled.

F5Certified Administrator, BIG-IP

Domain 1Objective 8

U/A F5CAB1 Practice Questions (Page 2)

Part of the Securing BIG-IP domain, which makes up ~29% of our current practice bank. F5 does not publish an official question count, but from its 30-minute exam (~10–20 total, ~3–6 in this domain), expect 1–1 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

5concepts

Questions 6–10

6foundation · easy
Which BIG-IP object is used to store the private key and certificate for a website's SSL/TLS configuration?
Select an answer first
7foundation · easy
An administrator needs to grant a user the ability to view configuration and statistics on a BIG-IP device but must NOT allow any changes. Which built-in role should be assigned?
Select an answer first
8application · medium
The security team wants to be alerted in real-time when a user fails to authenticate to the BIG-IP management interface multiple times, as this may indicate a brute-force attack. The administrator needs to configure a mechanism to monitor for this event and send a notification. What should be configured?
Select an answer first
9foundation · easy
Which authentication method can be used to allow BIG-IP administrators to authenticate using their existing corporate Active Directory credentials?
Select an answer first
10application · medium
A BIG-IP administrator needs to grant a junior team member the ability to view configuration and statistics but explicitly prevent them from making any changes. The administrator also wants to ensure that this user's login activity is logged. What is the correct role and configuration to assign?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to F5CAB1

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “F5CAB1” is a trademark of its owner, used for identification only.

U/A F5CAB1 Practice Questions (Page 2)

Questions 6–10

Which BIG-IP object is used to store the private key and certificate for a website's SSL/TLS configuration?

An administrator needs to grant a user the ability to view configuration and statistics on a BIG-IP device but must NOT allow any changes. Which built-in role should be assigned?

Which authentication method can be used to allow BIG-IP administrators to authenticate using their existing corporate Active Directory credentials?

A BIG-IP administrator needs to grant a junior team member the ability to view configuration and statistics but explicitly prevent them from making any changes. The administrator also wants to ensure that this user's login activity is logged. What is the correct role and configuration to assign?

Keep studying — Securing BIG-IP