A security policy requires that only the Configuration utility (HTTPS) and SSH be accessible on the management Self-IP. SNMP and all other services must be blocked. Which port lockdown configuration should the administrator apply?

Select Allow Default and then remove SNMP from the service list.

Select Allow None and then add HTTPS and SSH.

Select Allow All and then create a firewall rule to block SNMP.

Select Allow Custom and add only TCP 443 and TCP 22.

What is the primary purpose of port lockdown on a BIG-IP Self-IP address?

To set the maximum bandwidth allowed through the Self-IP

To determine the default gateway for the BIG-IP system

To define the VLANs that can use the Self-IP for traffic forwarding

To restrict which services and ports are accessible on that Self-IP

After changing a Self-IP's port lockdown to 'Allow None', you lose HTTPS access to the BIG-IP management interface. What is the best immediate action?

Change the port lockdown back to a setting that allows HTTPS (e.g., Allow Default or Allow Custom)

Use a different Self-IP that has a more permissive port lockdown

Access the BIG-IP via the serial console and disable port lockdown entirely

An administrator is troubleshooting a BIG-IP device where the management Self-IP has port lockdown set to Allow Default. A new security tool needs to connect to the device on TCP port 5555, but the connection is timing out. The administrator confirms the tool is reaching the network and the Self-IP is correct. What is the most likely reason for the failure?

The BIG-IP device is overloaded and dropping packets.

The Self-IP is not assigned to the correct VLAN.

The tool is using UDP instead of TCP.

Port 5555 is not in the Allow Default service list.

F5Certified Administrator, BIG-IP

Domain 2Objective 2

Interpret Port Lockdown Settings to Self-IP F5CAB1 Practice Questions (Page 2)

Part of the Identify management connectivity configurations domain, which makes up ~19% of our current practice bank. F5 does not publish an official question count, but from its 30-minute exam (~10–20 total, ~2–4 in this domain), expect 1–1 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

7concepts

Questions 6–10

6application · medium
A security policy requires that only the Configuration utility (HTTPS) and SSH be accessible on the management Self-IP. SNMP and all other services must be blocked. Which port lockdown configuration should the administrator apply?
Select an answer first
7foundation · easy
What is the primary purpose of port lockdown on a BIG-IP Self-IP address?
Select an answer first
8foundation · easy
After changing a Self-IP's port lockdown to 'Allow None', you lose HTTPS access to the BIG-IP management interface. What is the best immediate action?
Select an answer first
9expert · medium
An administrator is troubleshooting a BIG-IP device where the management Self-IP has port lockdown set to Allow Default. A new security tool needs to connect to the device on TCP port 5555, but the connection is timing out. The administrator confirms the tool is reaching the network and the Self-IP is correct. What is the most likely reason for the failure?
Select an answer first
10foundation · easy
Which BIG-IP component is directly associated with the port lockdown setting?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to F5CAB1

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “F5CAB1” is a trademark of its owner, used for identification only.

Interpret Port Lockdown Settings to Self-IP F5CAB1 Practice Questions (Page 2)

Questions 6–10

A security policy requires that only the Configuration utility (HTTPS) and SSH be accessible on the management Self-IP. SNMP and all other services must be blocked. Which port lockdown configuration should the administrator apply?

What is the primary purpose of port lockdown on a BIG-IP Self-IP address?

After changing a Self-IP's port lockdown to 'Allow None', you lose HTTPS access to the BIG-IP management interface. What is the best immediate action?

Which BIG-IP component is directly associated with the port lockdown setting?

Keep studying — Identify management connectivity configurations