F5-CA flashcards
F5-CA · Build recall with a focused review session.
32 cards. Read the term and the definition here. The deck at the top of this page is optional.
- Administrative partition
- A logical container on a BIG-IP that separates configuration objects so that users scoped to that partition see only its objects, plus objects shared from the common partition.
- Traffic group
- A collection of floating virtual addresses that move together between high-availability devices. The device that currently holds the traffic group is active for those addresses.
- Device group
- A set of BIG-IP devices that share and synchronize configuration. Membership defines which devices receive configuration changes during a config-sync operation.
- UCS archive
- A full backup file containing the stored configuration, certificates and keys, and licensing information. Loading a UCS archive replaces the device configuration entirely.
- tmsh save sys config
- The tmsh command that writes the running configuration from memory into the stored configuration files on disk, preserving changes across a restart.
- Auditor role
- A BIG-IP user role granting read-only access to configuration and logs. It cannot modify objects, manage users, or change partitions.
- Economic buyer
- The person who controls the budget and can approve the purchase. Deals without an identified economic buyer typically stall or slip in the forecast.
- Cost per application
- Total cost of ownership for the ADC and security estate divided by the number of applications served. It normalizes comparisons across portfolios of different sizes.
- Compelling event
- A dated business trigger, such as a hardware refresh, audit finding, or application launch, that forces a decision. It drives the timeline of the sales cycle.
- Subscription licensing
- A recurring payment model bundling hardware, software, and support for a fixed term. Compared with perpetual purchase, it lowers upfront cash but commits the customer for the term.
- Proof of value
- A structured trial with success criteria agreed in advance and a named sign-off authority, used to validate measurable outcomes before a purchase decision.
- Support renewal risk
- The exposure created when a support contract lapses: the customer loses software updates and vendor assistance, and the renewal conversation restarts from a weaker position.
- Local Traffic Manager
- The core BIG-IP module providing full-proxy load balancing through virtual servers, pools, monitors, persistence profiles, and programmable iRules logic.
- Application Security Manager
- The BIG-IP web application firewall module. It enforces a security policy using a positive model, learned or manual, and can run transparent or blocking.
- Access Policy Manager
- The BIG-IP module providing identity-aware access control: authentication, authorization, endpoint posture checks, and client-based or clientless remote access.
- Wide IP
- A DNS module object representing a fully qualified domain name load balanced across multiple data centers, using methods such as global availability, ratio, or topology.
- Advanced Firewall Manager
- The BIG-IP network-layer firewall and DDoS protection module. It inspects flows and addresses rather than application payloads, unlike the web application firewall.
- SSL Orchestrator
- A BIG-IP module that centrally decrypts TLS traffic and steers it through service chains of inspection devices, then re-encrypts it before delivery.
- iRules event model
- iRules are TCL scripts triggered by connection and HTTP events such as CLIENT_ACCEPTED or HTTP_REQUEST, allowing inspection and modification of traffic at that point.
- Health monitor
- A probe that determines whether a pool member is available. It marks the member down after consecutive failures and up after consecutive successes.
- Cookie persistence
- A persistence method that inserts or inspects an HTTP cookie so that a client's subsequent requests return to the same pool member for the persistence duration.
- Forwarding virtual server
- A virtual server type that forwards IP packets without terminating connections. Because it does not proxy, layer 7 profiles and iRules HTTP events do not apply.
- AS3 declaration
- A JSON document describing desired application services such as virtual servers and pools. The platform reconciles actual configuration to match the declared state.
- Declarative Onboarding
- A configuration interface that accepts a declaration for device-level settings such as networking, licensing, and clustering, applied idempotently to a BIG-IP.
- BIG-IQ
- A centralized management platform for discovering devices, backing up configuration, managing licenses, and deploying application templates across many BIG-IP instances.
- Telemetry Streaming
- A configuration-driven mechanism that exports statistics and events from BIG-IP to analytics and monitoring endpoints, separate from request logging profiles.
- Anomaly detection
- A web application firewall capability that learns normal traffic patterns and flags deviations, reducing the manual tuning needed to maintain a security policy.
- TLS decryption point
- The single location where encrypted traffic is decrypted for inspection and then re-encrypted, preventing repeated decryption at every downstream security tool.
- Zero trust access
- An access model that authorizes each request based on user identity and device posture rather than network location, enforced at the application edge.
- Cloud failover pattern
- In public cloud, resilience is typically achieved with health-checked DNS or cloud load balancers across availability zones, since floating IP failover is often unavailable.
- Service mesh
- An infrastructure layer handling service-to-service, east-west traffic with mutual TLS, retries, and observability, complementing ingress control for north-south traffic.
- Data residency constraint
- A regulatory requirement that data remain within a jurisdiction. It determines whether traffic inspection can be handed to a SaaS service or must run locally.