A junior administrator is reviewing the configuration of a BIG-IP device and notices that the Self-IP for the management network has port lockdown set to the default value. Which statement accurately describes the current security posture of this Self-IP?

All TCP and UDP services and ports are accessible on this Self-IP.

Only the Configuration utility is accessible on this Self-IP.

Only SSH, HTTPS, and SNMP are accessible on this Self-IP.

No services are accessible on this Self-IP.

A security auditor is reviewing the BIG-IP configuration and asks the administrator to explain the purpose of the port lockdown setting on a Self-IP. Which explanation is accurate?

It controls the maximum number of concurrent connections to the BIG-IP device.

It controls which services and ports are accessible on that specific Self-IP address.

It controls which VLANs can route traffic through the BIG-IP device.

It controls which virtual servers can be accessed from the public network.

In the BIG-IP configuration utility, where would you typically configure a custom port lockdown for a Self-IP?

In the Virtual Server properties, under the Access Policy

In the Network > VLANs section, under VLAN properties

In the Self-IP properties, under the Port Lockdown setting

In the System > Platform section, under Management Port settings

Which port lockdown setting would allow SSH and HTTPS but block other services like SNMP?

Allow Custom with only SSH and HTTPS specified

F5Certified Administrator, BIG-IP

Domain 2Objective 2

Interpret Port Lockdown Settings to Self-IP F5CAB1 Practice Questions (Page 4)

Part of the Identify management connectivity configurations domain, which makes up ~19% of our current practice bank. F5 does not publish an official question count, but from its 30-minute exam (~10–20 total, ~2–4 in this domain), expect 1–1 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

7concepts

Questions 16–20

16application · easy
A junior administrator is reviewing the configuration of a BIG-IP device and notices that the Self-IP for the management network has port lockdown set to the default value. Which statement accurately describes the current security posture of this Self-IP?
Select an answer first
17foundation · easy
Which port lockdown option allows only the BIG-IP's default management services?
Select an answer first
18application · easy
A security auditor is reviewing the BIG-IP configuration and asks the administrator to explain the purpose of the port lockdown setting on a Self-IP. Which explanation is accurate?
Select an answer first
19foundation · easy
In the BIG-IP configuration utility, where would you typically configure a custom port lockdown for a Self-IP?
Select an answer first
20foundation · easy
Which port lockdown setting would allow SSH and HTTPS but block other services like SNMP?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to F5CAB1

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “F5CAB1” is a trademark of its owner, used for identification only.