About the Exam

This F5CAB4 exam is one of five exams required for the F5 Certified Administrator, BIG-IP credential. It tests knowledge, skills, and abilities for day-to-day operations and basic deployment, management, security, and support of BIG-IP after it has been installed, configured, and implemented. It is aimed at candidates with a basic understanding of how to install, configure, and upgrade BIG-IP, and passing shows understanding of BIG-IP administration across data plane and control plane topics.

Exam Topics

  • Apply procedural concepts required to manage the state of a high availability pair10%
  • Identify management connectivity configurations10%
  • Identify and report current device status10%
  • List which log files could be used to find events and/or hardware issues10%
  • Apply procedural concepts required to create, manage, and restore a UCS archive10%
  • Explain authentication methods10%
  • Identify configured system services10%
  • Explain config sync10%
  • Given a scenario, determine device upgrade eligibility10%
  • Given a scenario, interpret Service status10%

How to Use This Practice Exam

  1. Browse — Read each question, select your answer, and reveal the explanation.
  2. Exam Mode — Simulate real exam conditions with a timed session and score report.
  3. Learn Mode — Spaced repetition schedules questions you struggle with for long-term retention.

Download the Full Exam PDF

Get every question and answer in a clean, printable PDF built for offline study. Purchase once, keep permanent access, and re-download the latest version anytime.

Last updated May 3, 2026 at 10:09 PM

Topic filter
Retired questions
Question sort

QuestionQ1

List which log files could be used to find events and/or hardware issues

Question Image

A BIG-IP Administrator is investigating disk utilization on a BIG-IP device.

What should the BIG-IP Administrator check next?

  • A Results from the EUD test
  • B Large files on the / file system
  • C Results from the platform diagnostics test
  • D Large files on /usr file system
Explanation

The root filesystem mounted at / has no free space and is at 100% utilization. Checking for large files on / identifies the files responsible for the immediate disk-capacity condition.

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ2

Identify management connectivity configurations

A BIG-IP Administrator cannot connect to the management interface over HTTPS.

What could be a reason for this problem?

  • A The IP address of the device used to access the management interface is NOT included in the "IP Allow" list in the Configuration Utility.
  • B The port lockdown setting is configured to Allow None.
  • C An incorrect management route is specified.
  • D The IP address of the device used to access the management interface is NOT included in the "httpd Allow" list in the CLI.
Explanation

The BIG-IP sys httpd allow setting is the access-control list for clients from which the HTTP daemon accepts requests. Because the Configuration utility is served by httpd over HTTPS, a management client whose source IP address is absent from this list is denied access.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ3

Explain config sync

Refer to the output below.

Question Image

Which TMSH command produced this output?

  • A tmsh show /sys sync-status
  • B tmsh list /sys sync-status
  • C tmsh list /cm sync-status
  • D tmsh show /cm sync-status
Explanation

cm sync-status displays the local device’s configuration-synchronization status, including device-group consistency and peer connectivity. Its documented display operation is show, so the fully qualified command is tmsh show /cm sync-status.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ4

Identify and report current device status

The BIG-IP Administrator executes netstat -an | grep :443 and observes this output: tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN.

What does this output show about the service on port 443?

  • A The service is actively listening on all interfaces for HTTPS traffic.
  • B The service is actively listening only on the loopback interface.
  • C The service is in a standby state and unable to accept connections.
  • D The service indicates no connections to the LISTEN port
Explanation

0.0.0.0:443 is an IPv4 wildcard bind, so the TCP service is bound to port 443 on all IPv4 interfaces. LISTEN means it is ready to accept incoming connections; port 443 is the standard HTTPS port.

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ5

List which log files could be used to find events and/or hardware issues

Which log file should a BIG-IP Administrator review to find out whether a particular user attempted to sign in to the BIG-IP Configuration Utility?

  • A /var/log/ltm
  • B /var/log/pam/tallylog
  • C /var/log/httpd
  • D /var/log/secure
Explanation

/var/log/secure records BIG-IP security and authentication-related events, including those associated with attempted access to the Configuration Utility. F5’s management-interface guidance uses this log to verify Configuration Utility access attempts.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

That's the end of the preview

It's free

100% of the questions are free for all users.
No strings attached.

Topics covered
Apply procedural concepts required to manage the state of a high availability pairIdentify management connectivity configurationsIdentify and report current device statusList which log files could be used to find events and/or hardware issuesApply procedural concepts required to create, manage, and restore a UCS archiveExplain authentication methodsIdentify configured system servicesExplain config syncGiven a scenario, determine device upgrade eligibilityGiven a scenario, interpret Service status
Know a question that should be here? Contribute to this exam
Back home