Firewall Rules for Self-IPs F5CAB1 Practice Questions (Page 4)

Questions 16–17

1. 16foundation · easy

   After adding a firewall rule to a Self-IP, what is the most direct way to confirm the rule is active and functioning?

   • ACheck the rule's hit count in the firewall rule statistics
   • BCheck the virtual server's availability
   • CReview the SNAT configuration
   • DReboot the BIG-IP device
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   A BIG-IP has a Self-IP with no custom firewall rules. Which statement best describes how traffic to that Self-IP is handled?

   • AManagement traffic such as HTTPS and SSH is allowed, while other traffic is denied
   • BAll traffic is dropped because there are no rules
   • CAll traffic is allowed because Self-IPs are trusted
   • DOnly traffic that matches an explicit allow rule is permitted
   Reveal Solution Discussion Select an answer first