Interpret Port Lockdown Settings to Self-IP F5CAB1 Practice Questions (Page 5)

Questions 21–24

1. 21application · medium

   An administrator needs to allow a specific internal tool to connect to the BIG-IP Self-IP on TCP port 8443 for a custom management API. All other management services should remain blocked. Which port lockdown configuration should be used?

   • AAllow Custom and add TCP port 8443.
   • BAllow All and then block all other ports with a firewall rule.
   • CAllow None and then add TCP port 8443.
   • DAllow Default and add TCP port 8443.
   Reveal Solution Discussion Select an answer first
2. 22expert · medium

   An administrator is troubleshooting a BIG-IP device where the management Self-IP has port lockdown set to Allow Custom. The administrator can SSH to the device but cannot access the Configuration utility over HTTPS. The custom list includes TCP 22 but not TCP 443. What is the most likely cause of the HTTPS failure?

   • AThe HTTPS certificate has expired on the BIG-IP device.
   • BTCP port 443 is not included in the custom port lockdown list.
   • CThe SSH service is interfering with HTTPS traffic.
   • DThe Self-IP is not assigned to the management VLAN.
   Reveal Solution Discussion Select an answer first
4. 23expert · medium

   An administrator is configuring a BIG-IP Self-IP with port lockdown set to Allow Custom. The custom list currently includes TCP 22 (SSH) and TCP 443 (HTTPS). A new application requires access to the BIG-IP on TCP port 8080. The administrator adds TCP 8080 to the custom list. Which statement accurately describes the resulting behavior?

   • ATCP 8080 is accessible, but SSH and HTTPS are now blocked.
   • BAll TCP ports are now accessible because the custom list is additive.
   • CThe port lockdown setting automatically changes to Allow All when a new port is added.
   • DOnly TCP 22, TCP 443, and TCP 8080 are accessible; all other ports are blocked.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A BIG-IP administrator is configuring a new Self-IP for a management network. The security policy requires that only the Configuration utility be accessible, and all other services, including SSH and SNMP, must be blocked. Which port lockdown setting should be applied?

   • AAllow Default
   • BAllow Custom and add only TCP port 443.
   • CAllow All
   • DAllow None
   Reveal Solution Discussion Select an answer first