A company is deploying a BIG-IP VE in AWS for the first time. The security team requires that the management interface be accessible only from the corporate VPN CIDR block (10.10.0.0/16), while the data-plane interfaces must accept traffic from any source. The network team has already created a VPC with public and private subnets. What must the deployment engineer configure to meet these access requirements?

Create a single security group that allows inbound TCP/443 and TCP/22 from 0.0.0.0/0 and apply it to all interfaces of the BIG-IP VE.

Configure the BIG-IP VE's internal firewall to restrict management access, and rely on the VPC's network ACL to allow all traffic to the data-plane interfaces.

Attach a security group to the management interface that allows inbound TCP/443 and TCP/22 from 10.10.0.0/16, and attach a separate security group to the data-plane interfaces that allows the required application traffic from 0.0.0.0/0.

Place the management interface in a private subnet with no route to the internet, and place the data-plane interfaces in a public subnet with an internet gateway.

What is the primary purpose of setting up monitoring for F5 BIG-IP instances?

To automatically license the instances

To track performance metrics and detect issues early

To configure the virtual network

F5Certified Solution Expert, Cloud

Domain 4Objective 2

4.02 Apply the Key Concepts Required to Deploy F5 Instances on a Cloud Infrastructure 402 Practice Questions (Page 4)

Part of the Section 4 : CLOUD DEPLOYMENT domain, which makes up ~5% of our current practice bank. F5 does not publish an official question count, but from its 105-minute exam (~40–70 total, ~2–4 in this domain), expect 1–2 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)

19questions here

4free pages

7concepts

Questions 16–19

16foundation · easy
Which mechanism is used to automatically adjust the number of F5 instances based on demand?
Select an answer first
17application · medium
A company is deploying a BIG-IP VE in AWS for the first time. The security team requires that the management interface be accessible only from the corporate VPN CIDR block (10.10.0.0/16), while the data-plane interfaces must accept traffic from any source. The network team has already created a VPC with public and private subnets. What must the deployment engineer configure to meet these access requirements?
Select an answer first
18foundation · easy
What is the primary purpose of setting up monitoring for F5 BIG-IP instances?
Select an answer first
19foundation · easy
Which component is used to segment a cloud virtual network into smaller address spaces for F5 instance placement?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to 402

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “402” is a trademark of its owner, used for identification only.

4.02 Apply the Key Concepts Required to Deploy F5 Instances on a Cloud Infrastructure 402 Practice Questions (Page 4)

Questions 16–19

Which mechanism is used to automatically adjust the number of F5 instances based on demand?

What is the primary purpose of setting up monitoring for F5 BIG-IP instances?

Which component is used to segment a cloud virtual network into smaller address spaces for F5 instance placement?

Keep studying — Section 4 : CLOUD DEPLOYMENT