Refer to the exhibit.A BIG-IP Administrator needs to deploy an application on the BIG-IP system to perform SSL offload and re-encrypt the traffic to pool members. During testing, users are unable to connect to the application.What must the BIG-IP Administrator do to resolve the issue? (Choose one answer)
Answer(s): D
To successfully perform SSL offload and re-encryption on a BIG-IP system, the virtual server must be configured with both a Client SSL profile and a Server SSL profile. The Client SSL profile enables BIG-IP to decrypt inbound HTTPS traffic from clients, while the Server SSL profile is required to re-encrypt traffic before forwarding it to the pool members.From the exhibit, the virtual server has a Client SSL profile configured, which allows BIG-IP to accept HTTPS connections from clients. However, there is no Server SSL profile attached, meaning BIG-IP attempts to send unencrypted HTTP traffic to pool members listening on HTTPS (port 443). This protocol mismatch causes the server-side SSL handshake to fail, resulting in users being unable to connect to the application.This behavior is well documented in BIG-IP SSL troubleshooting guides: when backend servers expect HTTPS, a Server SSL profile is mandatory to establish a secure connection from BIG-IP to the pool members.The other options are incorrect:Removing the Client SSL profile (Option A) would break client-side HTTPS.The server-side TCP profile (Option B) is unrelated to SSL encryption.Forward Proxy (Option C) is only used for outbound SSL inspection scenarios.Therefore, configuring an SSL Profile (Server) is the correct and required solution.
A BIG-IP Administrator notices that one of the servers that runs an application is NOT receiving any traffic. The BIG-IP Administrator examines the configuration status of the application and observes the displayed monitor configuration and affected pool member status.What is the possible cause of this issue? (Choose one answer)
Answer(s): A
The key clue in the exhibit is the pool member's availability showing "Offline (Enabled) Parent down". In BIG-IP terminology, a pool member inherits the status of its parent node. If the node is marked down (for example, by a node-level monitor or a default "node is down" condition), then all pool members using that node IP will also be marked down and will not receive any traffic, even if the application service on the member port might be healthy.While the HTTPS monitor configuration (send/receive strings) is displayed, the status specifically indicates a node (parent) failure, not a service-level failure. If the problem were the application not matching the receive string, you would typically see the member down due to the member's monitor failing (and the status would reflect monitor failure details), rather than "parent down."Option D is too broad; BIG-IP can generally reach the subnet (other servers work), and this symptom points to a specific node condition. Option C is incorrect because HTTP/1.1 is commonly used for monitoring and is valid when properly formatted (especially with a Host header). Therefore, the most likely cause is that the node health monitor is not responding, causing the node--and consequently the member--to be marked down.
Which menu should you use on the BIG-IP Configuration Utility to generate a QKView support file?(Choose one answer)
Answer(s): C
A QKView is the primary diagnostic file used by F5 Support to analyze BIG-IP system health, configuration, performance, and logs. It collects a wide range of data, including running configuration, license details, module provisioning, hardware status, logs, statistics, and diagnostic command output. Generating a QKView is a standard first step when troubleshooting issues or opening a support case with F5.In the BIG-IP Configuration Utility (GUI), the correct location to generate a QKView is System > Support (Option C). This menu is specifically designed for support and troubleshooting activities. From this section, administrators can create QKView files, upload them directly to F5 iHealth, or download them locally for later analysis or submission to F5 Support.The other options are incorrect:System > Configuration (Option A) is used for system-wide settings such as device name, NTP, and DNS.System > Archive (Option B) is used to create UCS backups, not diagnostic QKViews.System > Logs (Option D) is used to view and manage log files, not to generate support bundles.This workflow is clearly documented in BIG-IP Administration and Support guides and is considered a best practice for efficient troubleshooting and support engagement.
A device group is currently in the Changes Pending sync status. How can the BIG-IP Administrator determine which member of the device group has the most recent configuration? (Choose one answer)
When a BIG-IP device group shows a Changes Pending status, it indicates that one or more devices in the group have configuration changes that have not yet been synchronized to the other members. To identify which device has the most recent (authoritative) configuration, the administrator must view the detailed synchronization status at the device group level.The correct location is Device Management > Device Groups (Option D). Within this menu, the BIG-IP Configuration Utility displays each device group along with its synchronization status and provides details about which device has pending changes. From this view, the administrator can clearly see which device is marked as having changes pending, making it the source device that should be used to initiate a Sync to Group operation.The other options do not provide the required level of detail:Device Management > Overview (Option A) shows general HA status but not configuration ownership.Device Management > Devices (Option B) lists devices but does not clearly identify which one holds unsynchronized changes.System > High Availability (Option C) focuses on failover and traffic groups, not configuration sync state.This workflow aligns with BIG-IP best practices for configuration synchronization and ensures changes are propagated correctly without overwriting newer configurations.
A BIG-IP Administrator suspects that one of the BIG-IP device power supplies is experiencing power outages.Which log file should the BIG-IP Administrator check to verify the suspicion? (Choose one answer)
According to official F5 documentation (K52015891 Troubleshooting BIG-IP power supply issues), hardware-related alerts for power supplies, fans, and chassis components are logged in /var/log/ltm.When a BIG-IP device experiences a power supply issue--such as failure, intermittent outages, or fan-related faults--the system generates alerts through internal platform monitoring services. These alerts are written to the /var/log/ltm file and often appear with messages similar to:Chassis power supply 2 has experienced an issue. Status is as follows: FAN=bad; STATUS=bad.This makes /var/log/ltm the authoritative log file for identifying and verifying power supply and chassis-related problems on BIG-IP systems.The other log files are not appropriate for this purpose:/var/log/daemon.log contains general daemon messages but is not the primary source for chassis hardware alerts./var/log/kern.log logs kernel-level events, not platform power status./var/log/audit records administrative actions and configuration changes.Conclusion:Per F5-supported guidance, when suspecting power supply outages or chassis hardware issues, the BIG-IP Administrator should always check /var/log/ltm first.
Refer to the exhibit.The image shows the status of a virtual server named application_vs in the BIG-IP Configuration Utility.What is the cause of the status shown? (Choose two answers)
Answer(s): A,C
The exhibit shows the virtual server application_vs with a status indicating it is offline but enabled. In BIG-IP terminology, this status means the virtual server itself is administratively enabled, but it is unable to pass traffic because no usable pool members are available.Two common and documented causes for this condition are:Pool member(s) administratively disabled (Option A):When all pool members are administratively disabled, BIG-IP removes them from load-balancing decisions. Even though the virtual server remains enabled, it has no available pool members to send traffic to, resulting in an offline status.Node(s) administratively disabled (Option C):Pool members inherit the status of their parent nodes. If a node is administratively disabled, all associated pool members are also marked unavailable. This condition causes the virtual server to show as offline, even though the virtual server configuration itself is correct.The other options are incorrect:Forced offline pool members (Option B) result in a different operational intent and are explicitly set for maintenance scenarios.Virtual server administratively disabled (Option D) would show the virtual server as disabled, not enabled/offline.This behavior is consistent with BIG-IP traffic management logic and is commonly verified by reviewing pool and node availability states when diagnosing virtual server availability issues.
Which menu should you use on the BIG-IP Configuration Utility to generate a QKView support file? (Choose one answer)
Comprehensive and Detailed 150 to 250 Words Explanation From BIG-IP Administration, Support, and Troubleshooting Documents:A QKView file is the primary diagnostic support bundle used by F5 Support to troubleshoot BIG-IP system issues. It contains comprehensive system information, including running configuration, licensing details, module provisioning, hardware status, software versions, log files, statistics, and the output of numerous diagnostic commands. Generating a QKView is a standard and recommended first step when investigating performance problems, configuration issues, or when opening a support case with F5.In the BIG-IP Configuration Utility (GUI), the correct and supported location to generate a QKView is System > Support. This menu is specifically designed for support and troubleshooting operations. From this section, administrators can generate a QKView file, monitor its creation progress,download it locally, or upload it directly to F5 iHealth for automated analysis. This workflow is clearly documented in BIG-IP Administration and Support guides and aligns with F5 best practices.The other menu options are not appropriate:System > Configuration is used for system-wide settings such as DNS, NTP, and device identity.System > Archive is used to create UCS backup files, which are configuration backups, not diagnostic bundles.System > Logs is used only for viewing system logs, not generating support files.Therefore, System > Support is the correct and only valid answer.
A BIG-IP Administrator observes the following messages in the /var/log/ltm log:warning tmm[pid]: 011e0002: sweeper_segment_cb_any: Aggressive mode /Common/default- eviction-policy activated (0) (global memory) (345209/690176 pages)warning tmm[pid]: 011e0003: Aggressive mode sweeper /Common/default-eviction-policy (0) (global memory) 1 connections killed warning tmm[pid]: 011e0003: Aggressive mode sweeper /Common/default-eviction-policy (0) (global memory) 1 connections killed warning tmm[pid]: 011e0003: Aggressive mode sweeper /Common/default-eviction-policy (0) (global memory) 1 connections killedWhat is happening when the BIG-IP Administrator sees the messages displayed above? (Choose two answers)
Comprehensive and Detailed 150 to 250 Words Explanation From BIG-IP Administration, Support, and Troubleshooting Documents:These log messages indicate that the BIG-IP system's Traffic Management Microkernel (TMM) has entered aggressive eviction mode due to high global memory utilization. When TMM memory consumption reaches critical thresholds, BIG-IP activates the default eviction policy to protect system stability and prevent a full traffic processing failure. This condition directly corresponds to Option A, where the global eviction policy is triggered because TMM memory resources are nearing exhaustion.Once aggressive mode is activated, BIG-IP begins using the connection sweeper mechanism, which selectively terminates existing connections to free memory. The repeated log entries stating "1 connections killed" confirm that the system is reaping some connections, not all connections. This behavior matches Option C. The eviction process is incremental and controlled, targeting idle, low- priority, or least-recently-used connections first to minimize impact on active traffic.Option B is incorrect because BIG-IP does not drop all connections during aggressive mode; it only removes enough connections to relieve memory pressure. Option D is also incorrect because TMM eviction is based on TMM global memory usage, not swap memory utilization. TMM does not rely on swap space in the same way the host Linux system does.These messages are a critical warning sign that the system is under memory stress and may require traffic optimization, connection limits, or hardware scaling.
Share your comments for F5 F5CAB5 exam with other users:
can you upload the cis - cpg dumps
q6 = 1. download odt application 2. create a configuration file (xml) 3. setup.exe /download to download the installation files 4. setup.exe /configure to deploy the application
great material
could you please upload sap c_arsor_2302 questions? it will be very much helpful.
vraag 20c: rsa veilig voor symmtrische cryptografie? antwoord c is toch fout. rsa is voor asymmetrische cryptogafie??
so far good
question 31 has obviously wrong answers. tls and ssl are used to encrypt data at transit, not at rest.
pls provide dump for 1z0-1080-23 planning exams
could you please upload the exam?
please upload this
good material
lets see if this is good stuff...
useful information
intéressant
thank you for making the interactive questions
questions are accurate
i need questions/dumps for this exam.
i need this exam, when will it be uploaded
i need the dumps !
very helpful
good source
my 3rd test and passed on first try. hats off to this brain dumps site.
please upload it
does anybody know if are these real exam questions?
are these questions similar to actual questions in the exam? because they seem to be too easy
i have a lot of experience but what comes in the exam is totally different from the practical day to day tasks. so i thought i would rather rely on these brain dumps rather failing the exam.
good questions
valied exam dumps. they were very helpful and i got a pretty good score. i am very grateful for this service and exam questions
will it help?
very useful to verify knowledge before exam
good stuffs
question 17 : responses arent b and c ?
just passed the exam on my first try using these dumps.
Keeping this site free takes real effort. We constantly battle automated scraping and unauthorized content copying. A quick account helps us protect the community and keep the site free.
To continue studying for your F5CAB5, please sign in or create a free account.