201 · Question #215
A user needs to determine known security vulnerabilities on an existing BIG-IP appliance and how to remediate these vulnerabilities. Which action should the BIG-IP Administrator recommend?
The correct answer is D. Generate a view and upload to Heath. To determine and remediate known security vulnerabilities on an F5 BIG-IP appliance, the administrator should generate a QKView and upload it to F5 Health.
Question
A user needs to determine known security vulnerabilities on an existing BIG-IP appliance and how to remediate these vulnerabilities. Which action should the BIG-IP Administrator recommend?
Options
- AVerify the TMOS version and review the release notes
- BCreate a UCS archive and upload to Health
- CCreate a UCS archive and open an F5 Support request
- DGenerate a view and upload to Heath
How the community answered
(62 responses)- A2% (1)
- B3% (2)
- C2% (1)
- D94% (58)
Why each option
To determine and remediate known security vulnerabilities on an F5 BIG-IP appliance, the administrator should generate a QKView and upload it to F5 Health.
Verifying the TMOS version and reviewing release notes can identify vulnerabilities fixed in later versions but does not provide an automated, comprehensive scan of the specific instance's configuration against all known issues.
A UCS archive is a backup of the BIG-IP configuration; while it contains data, it is not designed for automated diagnostic vulnerability scanning by F5 Health in the same manner as a QKView.
While opening an F5 Support request with a UCS archive might be necessary for specific, complex issues, generating a QKView and using F5 Health provides a proactive, automated self-service method for vulnerability assessment.
A QKView file captures a comprehensive snapshot of the BIG-IP system's configuration and operational data. Uploading this QKView to F5 Health (iHealth) allows the service to automatically analyze the system against known security vulnerabilities (CVEs), configuration issues, and best practices, providing specific remediation recommendations.
Concept tested: F5 BIG-IP QKView and F5 Health for vulnerability assessment
Source: https://techdocs.f5.com/en-us/bigip-15-1-0/big-ip-system-administration/diagnosing-big-ip-system-issues.html
Topics
Community Discussion
No community discussion yet for this question.