U/A F5CAB1 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A BIG-IP administrator needs to monitor the health of the BIG-IP system itself, including CPU usage, memory, and disk space, and be notified if any of these exceed a critical threshold. What should be configured?

   • ACreate an iRule that checks system resources and sends an email when they are high.
   • BSet up a 'TCP Dump' on the management interface to monitor system health.
   • CUse the 'tmsh' command to manually check system resources daily.
   • DConfigure 'System Event' alerts for high CPU, memory, and disk usage.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which BIG-IP feature allows administrators to view real-time statistics about virtual server traffic?

   • AStatistics
   • BSNMP traps
   • CiRules
   • DLog files
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which BIG-IP component is responsible for generating alerts based on system events and log messages?

   • ASNMP
   • BLog destination
   • CiRule
   • DAlert system
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   An organization runs a critical application on BIG-IP that must be highly available. The security team wants to block traffic from a list of known malicious IP addresses. The list is updated frequently by a threat intelligence feed. The administrator needs to implement this blocking with minimal performance impact and without requiring manual updates. What is the most appropriate solution?

   • AAdd the malicious IPs to the 'Deny' list in the 'Access Policy'.
   • BConfigure a 'Network Firewall' policy that references an external 'IP Intelligence' feed.
   • CCreate a network firewall rule with a separate 'drop' rule for each malicious IP address.
   • DUse an iRule that checks the source IP against a data group containing the malicious IPs.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A BIG-IP is configured to terminate TLS for a web application. The backend servers expect to receive HTTP traffic. The security team is concerned about the 'Heartbleed' vulnerability, which affects OpenSSL. The administrator needs to ensure that the BIG-IP is not vulnerable and that the backend communication is secure. What should be done?

   • AConfigure the 'Client SSL' profile to use only TLS 1.3 and leave the backend traffic unencrypted.
   • BEnable the 'ASM' policy to detect and block Heartbleed exploit attempts.
   • CDisable TLS on the Client SSL profile and use plain HTTP for all communication.
   • DUpdate the BIG-IP's TLS/SSL software to a patched version and configure a 'Server SSL' profile to encrypt traffic to the backend.
   Reveal Solution Discussion Select an answer first