Port Lockdown F5CAB1 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which type of traffic is directly affected by port lockdown settings on a BIG-IP?

   • ATraffic destined to the self-IP address itself
   • BTraffic originating from the BIG-IP to external servers
   • CTraffic from the management interface only
   • DTraffic forwarded between VLANs
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which port lockdown mode allows all TCP and UDP traffic to a self-IP?

   • AAllow Default
   • BAllow None
   • CAllow Custom
   • DAllow All
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the default port lockdown mode for a new self-IP on a BIG-IP system?

   • AAllow Default
   • BAllow Custom
   • CAllow None
   • DAllow All
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   An administrator is configuring port lockdown on a self-IP using the CLI. The administrator wants to allow HTTPS and a custom service on TCP port 9443, but block all other traffic. The administrator has entered the following commands: 'tmsh modify net self self-ip port-lockdown allow-none' and 'tmsh modify net self self-ip port-lockdown add { 443 { protocol tcp } }'. What is missing from this configuration?

   • AThe command to apply the configuration changes
   • BThe command to add port 9443 to the allowed list
   • CThe command to enable ICMP on the self-IP
   • DThe command to set the port lockdown mode to allow-custom
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the primary purpose of port lockdown on a BIG-IP system?

   • ATo encrypt management traffic to the BIG-IP
   • BTo control traffic passing through the BIG-IP between two networks
   • CTo restrict which services are accessible on a self-IP address
   • DTo block all traffic from the public internet
   Reveal Solution Discussion Select an answer first