Discuss F5 Networks F5CAB4 Exam Topic 4 Question 10

Which method is recommended for creating a new user from the CLI? (Choose one answer)

ARun tmsh create auth user username prompt-for-password from bash

BEdit bigip.conf to add the new user and the user's clear-text password

CRun f5adduser 'username' then f5passwd username from bash or tmsh

DRun useradd 'username' then passwd username from bash or tmsh

Suggested Answer: A

Comprehensive and Detailed Explanation From BIG-IP Administration Control Plane Administration documents:

The recommended and supported method for creating BIG-IP users from the CLI is through TMSH, using the authentication subsystem.

tmsh create auth user <username> prompt-for-password:

Properly creates the user within BIG-IP's AAA/authentication framework

Encrypts the password securely

Ensures the user is stored and managed correctly in the BIG-IP configuration database

Is fully supported and documented

Why the other options are incorrect:

B is unsafe and unsupported because editing bigip.conf directly and storing clear-text passwords violates security and configuration management best practices.

C (f5adduser / f5passwd) is deprecated and not recommended for modern BIG-IP versions.

D creates a Linux system user only, not a BIG-IP administrative user, and will not allow access to the Configuration Utility or TMSH roles.

Get Premium F5CAB4 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

26 comments · newest first

Timothy 5 days ago

C is the recommended way in the docs.

Marcos 10 days ago

A could lead to mistakes, I prefer C.

Zona 15 days ago

I feel confident with C too.

Brandon 20 days ago

C has clear steps, easy to follow.

Benton 25 days ago

D is too generic, not specific to F5.

Phyliss 1 month ago

Editing bigip.conf is not safe, so B is out.

Alecia 1 month ago

Option A seems risky with prompt-for-password.

Oretha 1 month ago

I agree, f5adduser is straightforward.

Jillian 2 months ago

I think option C is the best.

Gilma 2 months ago

C is definitely the recommended way.

Brianne 2 months ago

A could lead to mistakes, I prefer C.

Merilyn 2 months ago

I feel confident with C, it's clear and easy.

Deandrea 2 months ago

D is also valid, but C is more specific.

Charlette 2 months ago

Editing bigip.conf? No way, too manual!

Genevieve 3 months ago

Option A seems risky with prompt-for-password.

Samira 3 months ago

I agree, f5adduser is straightforward.

Laurel 3 months ago

I think option C is the best.

Ciara 3 months ago

Totally agree with C, it's the most straightforward!

Blair 3 months ago

Wait, can you really use D? That seems off.

Allene 3 months ago

B sounds risky, editing config files directly?

Margurite 4 months ago

I think A is better for security.

Beckie 4 months ago

C is the way to go!

Bobbye 4 months ago

I’m uncertain about useradd; I feel like that’s more of a Linux command, so it might not be the right choice here.

Brock 6 months ago

I vaguely recall that f5adduser is a command we discussed, so maybe option C is correct?

Bettina 6 months ago

I practiced a similar question, and I feel like editing bigip.conf is not the best approach. That might be option B, but it seems risky.

Louvenia 6 months ago

I think I remember that using tmsh is the recommended way, but I'm not sure if it's option A or C.

F5 Networks F5CAB4 Exam - Topic 4 Question 10 Discussion