Exam F5CAB4 Topic 4 Question 68 Discussion

Actual exam question for F5's F5CAB4 exam
Question #: 68
Topic #: 4
The BIG-IP Administrator suspects unauthorized SSH login attempts on the BIG-IP system.
Which log file would contain details of these attempts? (Choose one answer)

Suggested Answer: B Vote an answer

Comprehensive and Detailed Explanation From BIG-IP Administration Control Plane Administration documents:
On BIG-IP systems, authentication and authorization events are logged in /var/log/secure. This includes:
Successful and failed SSH login attempts
Invalid user authentication attempts
PAM (Pluggable Authentication Module) authentication failures
Access denials related to secure services
Why the other options are incorrect:
/var/log/messages contains general system messages and service events, not detailed authentication failures.
/var/log/audit records administrative configuration changes (who changed what and when), not login attempts.
/var/log/ltm logs traffic-management (TMM) and application-related events.
Therefore, the correct log file for investigating unauthorized SSH login attempts is /var/log/secure.

by Brandon at Jun 08, 2026, 10:19 AM

Limited Time Offer

15%

Off

Get Premium F5CAB4 Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10