F5 Networks BIG-IP Administration Control Plane Administration F5CAB4 Exam Questions

Page: 1 / 14
Total 53 questions
Question 1

A BIG-IP Administrator finds the following log entry: tnm tmm[7141]: 011e0002:4: sweeper_update: aggressive mode activated. Which action should the BIG-IP Administrator take to mitigate this memory issue?



Answer : D

Comprehensive and Detailed Explanation From BIG-IP Administration Control Plane Administration documents: This log message indicates that the system is low on memory and has activated 'Aggressive Mode' to reclaim resources by closing old connections37. In an HA environment, one way to ensure state stability during memory pressure is to manage how connection data is handled38. While the document suggests D, procedural mitigation for 'Aggressive Mode' often involves reviewing resource provisioning or optimizing connection idle timeouts to reduce memory footprint39.


Question 2

A BIG-IP Administrator needs to update the list of configured NTP servers. In which area of the Configuration Utility should the BIG-IP Administrator perform this update?



Answer : A

Comprehensive and Detailed Explanation From BIG-IP Administration Control Plane Administration documents: NTP (Network Time Protocol) is vital for management connectivity and HA state synchronization. Correct time is required for log timestamping and device trust group communication46. To manage these settings, the administrator navigates to System > Configuration, where general system-level services like NTP and DNS are defined to ensure the Control Plane remains synchronized with the network environment.


Question 3

A BIG-IP Administrator needs to find which modules have been licensed for use on the BIG-IP system. In which section of the Configuration Utility can the BIG-IP Administrator find this information?



Answer : B

Comprehensive and Detailed Explanation From BIG-IP Administration Control Plane Administration documents: Identifying the current device status includes knowing which software modules (such as LTM, ASM, or APM) are active and how much hardware resource (CPU/Memory) is allocated to them40404040. The System > Resource Provisioning screen displays the licensing status and allows the administrator to set the provisioning level (Nominal, Dedicated, or Minimum) for each module.


Question 4

A BIG-IP Administrator needs to check the memory utilization on a BIG-IP system. Which two methods can the BIG-IP Administrator use? (Choose two.)



Answer : A, D

Comprehensive and Detailed Explanation From BIG-IP Administration Control Plane Administration documents: Reporting device status includes monitoring physical resource exhaustion, such as memory48. The Control Plane provides both a command-line method via TMSH (show /sys memory) and a graphical method under Statistics > Module Statistics > Memory to report on how memory is allocated across TMM and the Linux host494949494949494949. This is essential for identifying potential 'Aggressive Mode' triggers or hardware performance bottlenecks50.


Question 5

Users report that traffic is negatively affected every time a BIG-IP device fails over. The traffic becomes stabilized after a few minutes. What should the BIG-IP Administrator do to reduce the impact of future failovers?



Answer : C

Comprehensive and Detailed Explanation From BIG-IP Administration Control Plane Administration documents: When a failover occurs, the newly active device must inform the surrounding network that it now 'owns' the shared IP addresses. Without MAC Masquerade, the new device uses its own hardware MAC, requiring upstream routers to update their ARP tables (which causes a delay). MAC Masquerading allows the HA pair to share a 'floating' MAC address, ensuring the Control Plane transition is transparent to the network layer


Question 6

A BIG-IP Administrator needs to fall over the active device. The administrator logs into the Configuration Utility and navigates to Device Management > Traffic Group. However, "Force to Standby" is greyed out. What is causing this issue?



Answer : B

Comprehensive and Detailed Explanation From BIG-IP Administration Control Plane Administration documents: In a High Availability pair, the 'Force to Standby' action is a Control Plane command used to trigger a manual failover. This option is only logical and available on the device that is currently in the Active state. If the button is greyed out, it indicates that the administrator is already logged into the Standby unit, which has no active traffic groups to relinquish.


Question 7

Which command will provide the BIG-IP Administrator with the current device HA status? (Choose one answer)



Answer : C

Comprehensive and Detailed Explanation From BIG-IP Administration Control Plane Administration documents:

To determine the current failover (HA) status of a BIG-IP system using tmsh, F5 documentation explicitly states that the administrator should use the following command:

show /cm failover-status

This command displays:

The current failover state (active, standby, or offline)

Detailed failover status information

The operational HA condition of the device within a device group

According to F5 Knowledge Base Article K08452454, the documented procedure for checking failover status is:

Log in to the TMOS Shell (tmsh)

Run show /cm failover-status

Why the other options are incorrect:

A . list /cm failover shows configuration settings, not operational HA status.

B . show /sys failover is not the documented command for checking current failover status and does not align with F5's recommended procedure.


Page:    1 / 14   
Total 53 questions