Interpret Port Lockdown Settings to Self-IP F5CAB1 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   An administrator recently changed the port lockdown on a Self-IP to Allow Custom to tighten security. Now, a monitoring system that uses SNMP to poll the BIG-IP device is timing out. The administrator can still SSH to the device. What is the most likely cause of the SNMP polling failure?

   • AThe Self-IP address has been changed to a different VLAN.
   • BThe monitoring system is using the wrong SNMP community string.
   • CThe custom port lockdown does not include the SNMP service (UDP 161).
   • DThe SSH service is consuming all available management CPU resources.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   When configuring a custom port lockdown, what must you specify?

   • AThe VLANs that can access the Self-IP
   • BThe maximum number of concurrent connections
   • CThe list of allowed services and ports
   • DThe source IP addresses that are allowed
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the default port lockdown setting on a BIG-IP Self-IP?

   • AAllow Custom
   • BAllow All
   • CAllow None
   • DAllow Default
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A network administrator has just completed the initial configuration of a BIG-IP device using the console. The Self-IP address for the management VLAN is still at its default port lockdown setting. The administrator needs to access the Configuration utility from a workstation on the same network segment. Which action should the administrator take to ensure this access works while still limiting exposure?

   • AChange the Self-IP port lockdown to Allow Default.
   • BChange the port lockdown to Allow None.
   • CLeave the port lockdown at its default setting of Allow All.
   • DCreate a custom port lockdown that only permits ICMP.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   If a Self-IP has port lockdown set to 'Allow None', what is the impact on management connectivity?

   • AAll management services on that Self-IP are blocked, making it unreachable for management
   • BManagement connectivity is unaffected because port lockdown only applies to data traffic
   • COnly SSH is blocked, but HTTPS remains available
   • DManagement connectivity is limited to SNMP only
   Reveal Solution Discussion Select an answer first