101 · Question #516
What is used to establish trust relationships between BIG-IP devices?
The correct answer is C. certificate-based authentication. F5 BIG-IP devices use certificate-based authentication to establish device trust, enabling secure communication between members of a device group for configuration sync and failover.
Question
What is used to establish trust relationships between BIG-IP devices?
Options
- Atrust ID
- Bdevice group identification
- Ccertificate-based authentication
- Dunit IDs
How the community answered
(39 responses)- A5% (2)
- B3% (1)
- C92% (36)
Why each option
F5 BIG-IP devices use certificate-based authentication to establish device trust, enabling secure communication between members of a device group for configuration sync and failover.
Trust ID is not a standard F5 BIG-IP construct used to establish device trust - it does not exist as a named authentication mechanism in DSC.
Device group identification names and organizes devices after trust is established, but it does not itself provide the authentication mechanism needed to create the trust.
BIG-IP Device Service Clustering (DSC) requires each device to exchange SSL certificates to authenticate peer devices before they can form a trust relationship. This certificate exchange is performed via the device trust configuration, where devices validate each other's certificates before allowing synchronization or failover communication.
Unit IDs are used in VRRP-based high-availability configurations to differentiate traffic, not to authenticate or establish trust between BIG-IP peer devices.
Concept tested: F5 BIG-IP device trust establishment via certificates
Source: https://techdocs.f5.com/en-us/bigip-14-1-0/big-ip-device-service-clustering-administration/establishing-device-trust.html
Topics
Community Discussion
No community discussion yet for this question.