Career upgrade: Learn practical AI skills for better jobs and higher pay.
Level up
All Practice Exams

100+ Free F5CABR (BIG-IP Recert) Practice Questions

Pass your F5 Certified Administrator, BIG-IP Recertification (F5CABR) exam on the first try — instant access, no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately
F5 does not publicly report F5CABR pass rates Pass Rate
100+ Questions
100% Free
1 / 100
Question 1
Score: 0/0

An iRule needs to add a custom persistence record so subsequent requests from the same session go to the same pool member. Which command applies?

A
B
C
D
to track
2026 Statistics

Key Facts: F5CABR (BIG-IP Recert) Exam

30

Exam Questions

F5 official

30 min

Time Limit

Pearson VUE / Certiverse

245/350

Passing Score

F5 scaled scoring

$50

Exam Fee

F5 official

Recert only

Exam Path

Existing/expired F5-CA holders

100

Free Practice Questions

OpenExamPrep

F5CABR is the F5 Certified Administrator, BIG-IP Recertification exam: 30 multiple-choice questions in 30 minutes, $50 USD, with a 245/350 scaled passing score, delivered through Pearson VUE or Certiverse. It is a recertification-only path for existing or recently expired F5-CA, BIG-IP credential holders — new candidates should follow the F5CAB1 through F5CAB5 series instead. The single content domain is day-to-day BIG-IP administration of Application Delivery Networks (ADNs), covering TMSH, virtual servers, pools, monitors, persistence, iRules, HA, upgrades, backups, licensing, troubleshooting, and SSL profiles. Plan a focused 20-40 hour review of current TMOS 17.x admin practices and F5 documentation before sitting the exam.

Sample F5CABR (BIG-IP Recert) Practice Questions

Try these sample questions to test your F5CABR (BIG-IP Recert) exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1An administrator needs to verify the running BIG-IP version and hotfix level from the CLI. Which TMSH command provides this information?
A.tmsh show /sys version
B.tmsh list /sys global-settings
C.tmsh show /sys hardware
D.tmsh show /cm device
Explanation: `tmsh show /sys version` displays the BIG-IP product, base version (for example 17.1.1), build, edition, and hotfix designation, which is exactly what is needed to confirm the patch level on a managed device.
2Which TMSH module is used to configure self IPs, VLANs, and trunks on BIG-IP?
A./cm
B./ltm
C./net
D./sys
Explanation: Networking objects such as VLANs, trunks, self IPs, routes, and route domains are configured under the `/net` module in TMSH. Commands like `tmsh create /net self ...` and `tmsh list /net vlan` operate here.
3Which file format does a UCS archive use, and what does it contain?
A.A plain text SCF script with only LTM configuration
B.A compressed tar archive containing the full system configuration, certificates, license, and SSL keys
C.An XML file with only the running configuration
D.A binary database snapshot of the connection table
Explanation: A UCS (User Configuration Set) is a compressed tar archive that captures full system configuration, including bigip.conf, bigip_base.conf, certificates and keys, license, user accounts, and (optionally) saved configuration that allows full restoration to the same or compatible platform.
4An administrator wants to migrate only the LTM configuration text from one BIG-IP to another, omitting the license and certificates. Which artifact is most appropriate?
A.UCS archive
B.qkview
C.SCF (Single Configuration File)
D.iHealth report
Explanation: An SCF is a single text file that exports configuration without binary data such as licenses, certificates, or keys. It is the recommended artifact when migrating configuration text to a different system.
5Which BIG-IP utility is used to collect a diagnostic snapshot for analysis by F5 Support?
A.qkview
B.tcpdump
C.iControl REST
D.sosreport
Explanation: `qkview` collects logs, configuration, hardware information, and runtime stats into a single archive that can be uploaded to iHealth (ihealth.f5.com) or attached to an F5 Support case for analysis.
6Where can an administrator upload a qkview to receive automated diagnostic analysis?
A.F5 DevCentral
B.F5 iHealth
C.F5 University
D.F5 BIG-IQ
Explanation: iHealth (ihealth.f5.com) parses an uploaded qkview against a database of known issues and best-practice heuristics, returning a list of diagnostic findings, software lifecycle warnings, and recommended actions.
7Which directory contains the LTM-related log file `ltm` on a BIG-IP system?
A./var/log/
B./var/local/ucs/
C./config/
D./shared/log/
Explanation: BIG-IP system logs, including /var/log/ltm, /var/log/audit, /var/log/messages, /var/log/apm, and /var/log/asm, are stored under /var/log/. The `ltm` log captures pool member up/down events, monitor failures, and LTM-related daemons.
8Which log file on BIG-IP records every TMSH and Configuration Utility change made by users?
A./var/log/ltm
B./var/log/audit
C./var/log/messages
D./var/log/secure
Explanation: /var/log/audit records every administrative change: TMSH commands, GUI configuration changes, and authentication for management actions, including the user who issued them. This is the primary log for change auditing.
9A virtual server has type Standard. Which characteristic is true?
A.BIG-IP forwards packets without inspecting Layer 7 content
B.BIG-IP terminates the client connection and proxies to the pool member as a full proxy
C.BIG-IP rewrites only Layer 2 headers
D.BIG-IP responds with TCP RST to all incoming traffic
Explanation: A Standard virtual server is a full proxy. BIG-IP terminates the client TCP connection on the client side (TMM client-side flow), then opens a separate connection to the selected pool member on the server side, which is required for SSL offload, HTTP profile, OneConnect, persistence, and iRules.
10Which virtual server type uses the FastL4 profile and the ePVA hardware acceleration where available?
A.Standard
B.Performance (Layer 4)
C.Performance (HTTP)
D.Forwarding (IP)
Explanation: A Performance (Layer 4) virtual server uses the FastL4 profile, which can offload connection state to the embedded Packet Velocity Acceleration (ePVA) chip on supported hardware. It accelerates simple Layer 4 load balancing where Layer 7 features are not needed.

About the F5CABR (BIG-IP Recert) Exam

The F5 Certified Administrator, BIG-IP Recertification (F5CABR) is a recertification-only path for current and recently expired F5-CA, BIG-IP credential holders. It covers day-to-day administration of Application Delivery Networks (ADNs) on BIG-IP, including TMSH and iControl REST, virtual servers, pools and pool members, monitors, persistence, iRules basics and traffic policies, high availability and ConfigSync, software upgrades and boot locations, UCS/SCF backups, licensing and BIG-IQ, qkview/iHealth troubleshooting, Client/Server SSL profiles, OneConnect, partitions, and route domains.

Assessment

30 multiple-choice questions covering day-to-day BIG-IP administration of Application Delivery Networks (ADNs)

Time Limit

30 minutes

Passing Score

245/350 scaled

Exam Fee

$50 (F5 / Pearson VUE / Certiverse)

F5CABR (BIG-IP Recert) Exam Content Outline

100%

Day-to-Day BIG-IP Administration (Application Delivery Networks)

Single-domain coverage: TMSH and iControl REST; virtual server types (Standard, Performance L4, Performance HTTP, Forwarding IP/L2, Stateless, Reject, Internal, DHCP); pools and pool members (states, monitors, priority group activation); load balancing methods (Round Robin, Ratio, Least Connections, Observed, Predictive, Dynamic Ratio, Fastest, Weighted Least Connections, Ratio Least Connections); monitor types (HTTP/HTTPS, TCP, ICMP, TCP Half Open, External, FTP, MSSQL, MYSQL, Oracle); persistence (cookie insert/rewrite/passive/hash, source-address, SSL, universal, SIP, MSRDP); iRules basics (HTTP_REQUEST, HTTP_RESPONSE, CLIENT_ACCEPTED, SERVER_CONNECTED, CLIENTSSL_HANDSHAKE; HTTP::host, HTTP::uri, HTTP::respond, HTTP::redirect, pool, persist add, log) and Traffic Policies; high availability (Sync-Failover device groups, Sync-Only, traffic groups, Active-Standby vs Active-Active, ConfigSync auto/manual, sync status, connection mirroring, DSC up to 8 devices); upgrades (image install, boot locations/volumes, hotfixes); UCS vs SCF backups; licensing (base, add-ons, BIG-IQ Smart License pools); troubleshooting (qkview/iHealth, /var/log/ltm, /var/log/audit, /var/log/messages, tcpdump with 0.0:nnn noise filter, tmsh show /sys hardware/connection/performance); SSL/TLS (Client SSL vs Server SSL, SSL bridging, SNI, mTLS, OCSP stapling, certificate storage under /config/ssl); HTTP profile (compression, OneConnect), TCP/UDP/FastL4 profiles; management interface and self-IP port lockdown; authentication (Local DB, RADIUS, TACACS+, LDAP/AD) and RBAC roles (Administrator, Resource Administrator, Manager, Auditor); partitions/folders and route domains for multi-tenancy

How to Pass the F5CABR (BIG-IP Recert) Exam

What You Need to Know

  • Passing score: 245/350 scaled
  • Assessment: 30 multiple-choice questions covering day-to-day BIG-IP administration of Application Delivery Networks (ADNs)
  • Time limit: 30 minutes
  • Exam fee: $50

Keys to Passing

  • Complete 500+ practice questions
  • Score 80%+ consistently before scheduling
  • Focus on highest-weighted sections
  • Use our AI tutor for tough concepts

F5CABR (BIG-IP Recert) Study Tips from Top Performers

1Memorize the virtual server types: Standard, Performance L4 (FastL4 + ePVA), Performance HTTP, Forwarding IP/L2, Stateless, Reject, Internal, and DHCP — and which features each supports
2Review monitor math: F5 best practice is Timeout = (3 × Interval) + 1, and learn the difference between TCP, TCP Half Open, HTTP, HTTPS, and External monitors
3Refresh DSC concepts: Sync-Failover vs Sync-Only device groups, traffic groups for Active-Standby vs Active-Active, and how floating self IPs follow traffic group ownership
4Re-practice TMSH paths — /sys, /ltm, /cm, /net — and know where common items live (NTP under /sys, virtual servers under /ltm, device groups under /cm, self IPs under /net)
5Be fluent with diagnostics: qkview to iHealth, /var/log/ltm and /var/log/audit, and tcpdump with the 0.0:nnn noise filter to capture both client- and server-side TMM flows
6Confirm SSL fundamentals: Client SSL terminates inbound TLS, Server SSL re-encrypts to pool, SNI selects the right Client SSL profile, and OCSP stapling improves handshake performance

Frequently Asked Questions

What is the F5CABR exam?

F5CABR is the F5 Certified Administrator, BIG-IP Recertification exam. It is a 30-question, 30-minute multiple-choice exam delivered by Pearson VUE or Certiverse with a 245/350 scaled passing score and a $50 fee. It validates ongoing day-to-day BIG-IP administration skills for Application Delivery Networks (ADNs).

Is F5CABR for new candidates or for recertification?

F5CABR is a recertification-only path. It is intended for candidates who currently hold — or recently held — the F5-CA, BIG-IP credential and need to renew it. New candidates seeking the F5 Certified Administrator BIG-IP credential for the first time should pursue the F5CAB1 through F5CAB5 series instead.

How many questions are on the F5CABR exam and how long is it?

F5CABR contains 30 multiple-choice questions and the time limit is 30 minutes. The passing score is 245 out of 350 on the scaled scoring system. Because the question count and timer are tight, recert candidates should be confident with day-to-day administrative tasks rather than relying on slow lookups during the exam.

How much does the F5CABR exam cost?

The F5CABR exam fee is $50 USD. It can be scheduled through Pearson VUE for in-person testing at a Pearson test center or through Certiverse for online proctored delivery. Always confirm current pricing on the F5 certification page in case fees change.

What does the F5CABR exam cover?

F5CABR is a single-domain exam focused on day-to-day administration of Application Delivery Networks on BIG-IP. Expect questions on TMSH and iControl REST, virtual servers, pools and pool members, monitors, persistence, iRules basics and Traffic Policies, high availability with Sync-Failover device groups and traffic groups, software upgrades, UCS/SCF backups, licensing, qkview/iHealth troubleshooting, Client/Server SSL profiles, OneConnect, partitions, and route domains.

How long is the F5CABR (and the F5-CA, BIG-IP credential) valid?

F5 credentials are typically valid for 2 years from the issue date. To stay certified, candidates can pass F5CABR before expiration or earn a higher-level F5 credential within the path. Allowing the credential to lapse can require additional steps to recover, so plan recertification several weeks before the expiration date.

How should I prepare for F5CABR?

Most active administrators succeed with 20-40 hours of focused review. Re-walk the F5 University ADM-201 modules, run lab scenarios on a BIG-IP VE, work through the official exam blueprint, and complete this 100-question practice set. Focus on virtual server type selection, monitor tuning (Timeout = 3 × Interval + 1), HA traffic groups, UCS vs SCF, and tcpdump 0.0:nnn troubleshooting.