Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

F5 Networks F5CAB4 Exam - Topic 4 Question 10 Discussion

Which method is recommended for creating a new user from the CLI? (Choose one answer)
A) Run tmsh create auth user username prompt-for-password from bash
B) Edit bigip.conf to add the new user and the user's clear-text password
C) Run f5adduser 'username' then f5passwd username from bash or tmsh
D) Run useradd 'username' then passwd username from bash or tmsh

F5 Networks F5CAB4 Exam - Topic 4 Question 10 Discussion

Actual exam question for F5 Networks's F5CAB4 exam
Question #: 10
Topic #: 4
[All F5CAB4 Questions]

Which method is recommended for creating a new user from the CLI? (Choose one answer)

Show Suggested Answer Hide Answer
Suggested Answer: A

Comprehensive and Detailed Explanation From BIG-IP Administration Control Plane Administration documents:

The recommended and supported method for creating BIG-IP users from the CLI is through TMSH, using the authentication subsystem.

tmsh create auth user <username> prompt-for-password:

Properly creates the user within BIG-IP's AAA/authentication framework

Encrypts the password securely

Ensures the user is stored and managed correctly in the BIG-IP configuration database

Is fully supported and documented

Why the other options are incorrect:

B is unsafe and unsupported because editing bigip.conf directly and storing clear-text passwords violates security and configuration management best practices.

C (f5adduser / f5passwd) is deprecated and not recommended for modern BIG-IP versions.

D creates a Linux system user only, not a BIG-IP administrative user, and will not allow access to the Configuration Utility or TMSH roles.


Contribute your Thoughts:

0/2000 characters
Brock
1 month ago
I vaguely recall that f5adduser is a command we discussed, so maybe option C is correct?
upvoted 0 times
...
Bettina
1 month ago
I practiced a similar question, and I feel like editing bigip.conf is not the best approach. That might be option B, but it seems risky.
upvoted 0 times
...
Louvenia
1 month ago
I think I remember that using tmsh is the recommended way, but I'm not sure if it's option A or C.
upvoted 0 times
...

Save Cancel