What is the function of port translation in a firewall policy?

To block all traffic on a specific port

To prioritize traffic on certain ports

To change the source or destination port number of packets

To encrypt traffic on a specific port

Which of the following is an example of a context that can be used to filter a firewall rule listing in F5 BIG-IP?

Administrator who created the rule

What is the purpose of network address translation (NAT) in the context of firewall policies on F5 BIG-IP?

To modify the source or destination IP address of packets

To encrypt the payload of packets

To filter packets based on application layer data

To log all traffic that passes through the firewall

A company has a BIG-IP device with a firewall policy applied to a VLAN. The policy contains a rule that denies all traffic from the 10.0.0.0/8 network to the 192.168.1.0/24 network. A new rule is added at the bottom of the policy that allows HTTP traffic from 10.1.1.0/24 to 192.168.1.0/24. Users from 10.1.1.0/24 report that they cannot reach the web server at 192.168.1.10. What is the most likely cause?

The firewall policy needs to be re-applied to the VLAN after adding the new rule.

The new rule is below the deny rule, so the deny rule is evaluated first and the traffic is dropped.

The new rule uses the wrong service (HTTP) and should use HTTPS to match the web server.

The source address in the new rule is incorrect; it should be 10.0.0.0/8 to match the deny rule's source.

In an F5 BIG-IP firewall policy, how are rules evaluated?

Based on the rule's creation timestamp

In the order they appear in the policy, from top to bottom

In parallel, and the most specific rule wins

F5Certified Solution Expert, Security

Domain 3Objective 5

3.05 Apply Procedural Concepts to Configure Network Firewall Protection 401 Practice Questions (Page 3)

Part of the OPERATION AND IMPLEMENTATION domain, which makes up ~38% of our current practice bank. F5 does not publish an official question count, but from its 105-minute exam (~40–70 total, ~15–27 in this domain), expect 2–4 from this objective — we provide 16 practice questions to prepare you well beyond it. (estimate)

16questions here

4free pages

6concepts

Questions 11–15

11foundation · easy
What is the function of port translation in a firewall policy?
Select an answer first
12foundation · easy
Which of the following is an example of a context that can be used to filter a firewall rule listing in F5 BIG-IP?
Select an answer first
13foundation · easy
What is the purpose of network address translation (NAT) in the context of firewall policies on F5 BIG-IP?
Select an answer first
14application · medium
A company has a BIG-IP device with a firewall policy applied to a VLAN. The policy contains a rule that denies all traffic from the 10.0.0.0/8 network to the 192.168.1.0/24 network. A new rule is added at the bottom of the policy that allows HTTP traffic from 10.1.1.0/24 to 192.168.1.0/24. Users from 10.1.1.0/24 report that they cannot reach the web server at 192.168.1.10. What is the most likely cause?
Select an answer first
15foundation · easy
In an F5 BIG-IP firewall policy, how are rules evaluated?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 401

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “401” is a trademark of its owner, used for identification only.