F5CAB4 Exam Dumps : BIG-IP Administration Control Plane Administration (F5CAB4) exam

In a BIG-IP Device Service Cluster (DSC) , manual configuration synchronization is performed using the ConfigSync framework. The supported and documented command to manually push the local configuration to a specific device group is:

tmsh run cm config-sync to-group < device_group >

This command:

Initiates a one-time manual ConfigSync

Pushes the local device’s configuration to all members of the specified device group

Is commonly used when auto-sync is disabled or when the administrator wants explicit control over synchronization timing

Why the other options are incorrect:

A is not a valid TMSH command for ConfigSync.

B enables auto-sync but does not perform an immediate synchronization.

D is not a valid or supported TMSH command for device group configuration synchronization.

Therefore, the correct command to manually synchronize configuration to a device group is C .

===========

BIG-IP supports remote authentication by integrating with centralized authentication services through its AAA framework. The supported and commonly used remote authentication servers include:

LDAP (A) Used to authenticate users against directory services such as Active Directory or other LDAP-compliant directories.

RADIUS (C) Commonly used for centralized authentication, authorization, and accounting, especially in network and security environments.

Why the other options are incorrect:

OAUTH (B) is an authorization framework, not supported as a direct administrative authentication backend for BIG-IP management access.

SAML (D) is primarily used for single sign-on (SSO) in application authentication scenarios, not for BIG-IP administrative login authentication.

Thus, the correct remote authentication server types are LDAP and RADIUS .

Comprehensive and Detailed Explanation From BIG-IP Administration Control Plane Administration do38cuments: While HA state is managed under " Device Management, " the specific failover behavior of a traffic object is linked to its configuration. A Virtual Address must be associated with a " Traffic Group " (usually traffic-group-1) to fail over. This association and the resulting floating status can be verified by viewing the Virtual Server or Virtual Address list under Local Traffic > Virtual Servers.