nerdexam
F5

201 · Question #227

A BIG-IP Administrator has configured a BIG-IP cluster with remote user authentication against dcOl f5trn.com. Only local users can successfully log into the system. Configsync is also failing. Which

The correct answer is A. ntpq C. passwd. When remote user authentication and ConfigSync both fail on a BIG-IP cluster, the administrator should investigate time synchronization issues using ntpq and DNS resolution problems using dig.

Section 5: Troubleshoot a BIG-IP System

Question

A BIG-IP Administrator has configured a BIG-IP cluster with remote user authentication against dcOl f5trn.com. Only local users can successfully log into the system. Configsync is also failing. Which two tools should the 8IG-IP Administrator use to further investigate these issues? (Choose two)

Options

  • Antpq
  • Bpam_timestamp_check
  • Cpasswd
  • Dpwck
  • Edig

How the community answered

(20 responses)
  • A
    60% (12)
  • B
    5% (1)
  • D
    25% (5)
  • E
    10% (2)

Why each option

When remote user authentication and ConfigSync both fail on a BIG-IP cluster, the administrator should investigate time synchronization issues using `ntpq` and DNS resolution problems using `dig`.

AntpqCorrect

`ntpq` is used to query NTP (Network Time Protocol) servers and check the clock synchronization status of the BIG-IP device. Incorrect time synchronization can cause authentication failures (especially with directory services) and ConfigSync issues. E: `dig` is a command-line tool for querying DNS name servers to verify name resolution. If remote authentication against a domain controller is failing, a DNS resolution issue preventing the BIG-IP from locating the domain controller is a primary suspect.

Bpam_timestamp_check

`pam_timestamp_check` relates to the validity of PAM timestamps, which is less likely to be the direct cause of both remote authentication and ConfigSync failures compared to fundamental network services.

CpasswdCorrect
Dpwck

`pwck` checks the integrity of the /etc/passwd file, which is relevant for local user accounts but not directly for remote authentication failures or ConfigSync.

Edig

Concept tested: Troubleshooting BIG-IP authentication and ConfigSync

Source: https://support.f5.com/csp/article/K5920

Topics

#remote authentication#configsync#NTP#time synchronization#troubleshooting

Community Discussion

No community discussion yet for this question.

Full 201 Practice