Port Lockdown F5CAB1 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   An administrator has set port lockdown to Allow Custom on a self-IP and added a rule to allow HTTPS. After saving the configuration, the administrator wants to verify that the rule is effective. Which command or action should be used to confirm the port lockdown is working?

   • AAttempt to connect to the self-IP on port 443 from an external host
   • BRun 'tmsh list net self' to view the port lockdown configuration
   • CCheck the BIG-IP system log for port lockdown errors
   • DRestart the BIG-IP to apply the port lockdown changes
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which CLI command is used to modify the port lockdown setting on an existing self-IP?

   • Atmsh edit net self <self-ip> lockdown <mode>
   • Btmsh create net self <self-ip> port-lockdown <mode>
   • Ctmsh set net self <self-ip> port-lockdown <mode>
   • Dtmsh modify net self <self-ip> port-lockdown <mode>
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   After configuring port lockdown, what is a common method to test that only intended services are accessible?

   • AUse a port scanner from an external host to scan the self-IP
   • BCheck the BIG-IP system log for errors
   • CReview the virtual server list
   • DPing the self-IP from a local host
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   When creating a custom port lockdown rule, what must you specify to allow a specific service?

   • AThe source IP address of the client
   • BThe service name and the IP protocol (TCP or UDP)
   • COnly the port number
   • DThe destination VLAN
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which command can you use to verify the current port lockdown configuration on a self-IP?

   • Atmsh display net self <self-ip>
   • Btmsh show net self <self-ip>
   • Ctmsh status net self <self-ip>
   • Dtmsh list net self <self-ip>
   Reveal Solution Discussion Select an answer first