Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

F5 Networks F5CAB4 Exam - Topic 4 Question 10 Discussion

Which method is recommended for creating a new user from the CLI? (Choose one answer)
A) Run tmsh create auth user username prompt-for-password from bash
B) Edit bigip.conf to add the new user and the user's clear-text password
C) Run f5adduser 'username' then f5passwd username from bash or tmsh
D) Run useradd 'username' then passwd username from bash or tmsh

F5 Networks F5CAB4 Exam - Topic 4 Question 10 Discussion

Actual exam question for F5 Networks's F5CAB4 exam
Question #: 10
Topic #: 4
[All F5CAB4 Questions]

Which method is recommended for creating a new user from the CLI? (Choose one answer)

Show Suggested Answer Hide Answer
Suggested Answer: A

Comprehensive and Detailed Explanation From BIG-IP Administration Control Plane Administration documents:

The recommended and supported method for creating BIG-IP users from the CLI is through TMSH, using the authentication subsystem.

tmsh create auth user <username> prompt-for-password:

Properly creates the user within BIG-IP's AAA/authentication framework

Encrypts the password securely

Ensures the user is stored and managed correctly in the BIG-IP configuration database

Is fully supported and documented

Why the other options are incorrect:

B is unsafe and unsupported because editing bigip.conf directly and storing clear-text passwords violates security and configuration management best practices.

C (f5adduser / f5passwd) is deprecated and not recommended for modern BIG-IP versions.

D creates a Linux system user only, not a BIG-IP administrative user, and will not allow access to the Configuration Utility or TMSH roles.


by Bernadine at May 01, 2026, 06:54 AM

Limited Time Offer

25%

Off

Get Premium F5CAB4 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Jillian
4 hours ago
I think option C is the best.
upvoted 0 times
...
Gilma
5 days ago
C is definitely the recommended way.
upvoted 0 times
...
Brianne
11 days ago
A could lead to mistakes, I prefer C.
upvoted 0 times
...
Merilyn
16 days ago
I feel confident with C, it's clear and easy.
upvoted 0 times
...
Deandrea
21 days ago
D is also valid, but C is more specific.
upvoted 0 times
...
Charlette
26 days ago
Editing bigip.conf? No way, too manual!
upvoted 0 times
...
Genevieve
1 month ago
Option A seems risky with prompt-for-password.
upvoted 0 times
...
Samira
1 month ago
I agree, f5adduser is straightforward.
upvoted 0 times
...
Laurel
1 month ago
I think option C is the best.
upvoted 0 times
...
Ciara
2 months ago
Totally agree with C, it's the most straightforward!
upvoted 0 times
...
Blair
2 months ago
Wait, can you really use D? That seems off.
upvoted 0 times
...
Allene
2 months ago
B sounds risky, editing config files directly?
upvoted 0 times
...
Margurite
2 months ago
I think A is better for security.
upvoted 0 times
...
Beckie
2 months ago
C is the way to go!
upvoted 0 times
...
Bobbye
2 months ago
I’m uncertain about useradd; I feel like that’s more of a Linux command, so it might not be the right choice here.
upvoted 0 times
...
Brock
4 months ago
I vaguely recall that f5adduser is a command we discussed, so maybe option C is correct?
upvoted 0 times
...
Bettina
4 months ago
I practiced a similar question, and I feel like editing bigip.conf is not the best approach. That might be option B, but it seems risky.
upvoted 0 times
...
Louvenia
4 months ago
I think I remember that using tmsh is the recommended way, but I'm not sure if it's option A or C.
upvoted 0 times
...

Save Cancel