You notice that the device trust status shows 'Untrusted' between two BIG-IP devices. What is a basic troubleshooting step you should take?

Verify network connectivity between the devices on the management and HA interfaces.

Increase the failover timeout value.

Change the HA mode from active/standby to active/active.

Reboot the active device to re-establish trust.

In the BIG-IP Configuration utility, where can you view device trust status in the context of high availability?

Local Traffic → Virtual Servers → Trust

Device Management → Device Trust

Network → Interfaces → Trust

System → High Availability → Trust

A BIG-IP pair was working correctly, but after a certificate on the active device was renewed, the devices show as 'untrusted' in `tmsh show sys trust`. The administrator has verified network connectivity between the devices. What is the most likely cause and the correct action?

The certificate renewal caused a temporary sync issue. Wait for the next sync cycle to resolve it.

The certificate renewal changed the device's hostname. Update the hostname in the device group.

The renewed certificate is not trusted by the peer. Re-run the trust setup wizard to re-exchange certificates.

The certificate renewal requires a reboot of both devices. Reboot the active device first.

A BIG-IP administrator is troubleshooting a sync-failover issue between two devices in a device group. The administrator runs `tmsh show sys trust` on the active device and sees the peer listed with a status of 'untrusted'. Which immediate action should the administrator take to re-establish trust?

Re-establish trust by re-running the trust setup wizard or using `tmsh modify sys trust` to re-add the peer

Run `tmsh modify sys trust peer status trusted`

Re-run `tmsh show sys trust` on the standby device to verify the output matches

Reboot both devices to force a fresh trust negotiation

F5Certified Administrator, BIG-IP

Domain 1Objective 4

Show Device Trust Status F5CAB4 Practice Questions (Page 3)

Part of the Apply procedural concepts required to manage the state of a high availability pair domain, which makes up ~9% of our current practice bank. F5 does not publish an official question count, but from its 30-minute exam (~10–20 total, ~1–2 in this domain), expect 1–1 from this objective — we provide 14 practice questions to prepare you well beyond it. (estimate)

14questions here

3free pages

5concepts

Questions 11–14

11foundation · easy
You notice that the device trust status shows 'Untrusted' between two BIG-IP devices. What is a basic troubleshooting step you should take?
Select an answer first
12foundation · easy
In the BIG-IP Configuration utility, where can you view device trust status in the context of high availability?
Select an answer first
13expert · hard
A BIG-IP pair was working correctly, but after a certificate on the active device was renewed, the devices show as 'untrusted' in `tmsh show sys trust`. The administrator has verified network connectivity between the devices. What is the most likely cause and the correct action?
Select an answer first
14application · medium
A BIG-IP administrator is troubleshooting a sync-failover issue between two devices in a device group. The administrator runs `tmsh show sys trust` on the active device and sees the peer listed with a status of 'untrusted'. Which immediate action should the administrator take to re-establish trust?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to F5CAB4

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “F5CAB4” is a trademark of its owner, used for identification only.