Interpret Port Lockdown Settings to Self-IP F5CAB1 Practice Questions (Page 1)

Questions 1–5

1. 1application · easy

   A BIG-IP administrator is comparing the port lockdown options for a Self-IP. Which statement correctly contrasts the Allow Default and Allow Custom options?

   • AAllow Default blocks all services, while Allow Custom permits all services.
   • BAllow Default permits a fixed set of services, while Allow Custom permits only the services the administrator specifies.
   • CAllow Default permits all services, while Allow Custom permits only SSH.
   • DAllow Default is the most secure option, while Allow Custom is the least secure.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which port is typically allowed under the 'Allow Default' port lockdown option for web-based management?

   • A443 (HTTPS)
   • B8443 (HTTPS alternate)
   • C8080 (HTTP alternate)
   • D80 (HTTP)
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which of the following services is typically allowed under the 'Allow Default' port lockdown option?

   • ATelnet (port 23)
   • BHTTP (port 80)
   • CSSH (port 22)
   • DFTP (port 21)
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is a security implication of leaving a Self-IP with the default port lockdown setting?

   • AOnly SNMP is accessible, restricting monitoring capabilities
   • BOnly SSH and HTTPS are accessible, limiting remote administration
   • CNo services are accessible, preventing all management access
   • DAll services and ports on that Self-IP are accessible, potentially exposing management services
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which port lockdown option would you choose to block all services on a Self-IP?

   • AAllow None
   • BAllow All
   • CAllow Default
   • DAllow Custom
   Reveal Solution Discussion Select an answer first