In an SSHD ACL rule, what does the netmask define?

The destination network for SSH traffic

The maximum number of connections from a single IP

The encryption strength of the SSH session

The range of source IP addresses the rule applies to

An administrator has just applied a new SSHD ACL configuration to a BIG-IP device. The rules are: Rule 1: deny 0.0.0.0/0; Rule 2: allow 192.168.10.0/24. The administrator is now unable to SSH to the management interface from their workstation at 192.168.10.50. What is the most likely cause?

The administrator's workstation is not on the allowed subnet.

The deny-all rule matches first, blocking all SSH traffic before the allow rule is evaluated.

The allow rule is misconfigured and does not include the correct netmask.

The SSH service on the BIG-IP is not running.

An administrator removes all SSHD ACL rules from a BIG-IP. What is the resulting SSH access state?

SSH access is limited to the last configured source

SSH access requires a special administrative token

SSH access is permitted from all sources

SSH access is denied from all sources

A security auditor is reviewing the BIG-IP configuration and asks the administrator to explain the purpose of SSHD ACLs. The administrator should explain that SSHD ACLs are used to:

Limit the number of concurrent SSH sessions to the BIG-IP.

Encrypt all SSH traffic between the client and the BIG-IP.

Restrict which source IP addresses can SSH to the BIG-IP management interface.

Define which users can log in via SSH to the BIG-IP.

What is the primary purpose of configuring SSHD ACLs on a BIG-IP system?

To encrypt all SSH traffic between the BIG-IP and its management clients

To limit the number of concurrent SSH sessions allowed on the BIG-IP

To authenticate users attempting to access the BIG-IP management interface

To restrict which source IP addresses can establish SSH sessions to the BIG-IP management interface

F5Certified Administrator, BIG-IP

Domain 1Objective 6

SSHD ACLs F5CAB1 Practice Questions (Page 1)

Part of the Securing BIG-IP domain, which makes up ~29% of our current practice bank. F5 does not publish an official question count, but from its 30-minute exam (~10–20 total, ~3–6 in this domain), expect 1–1 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

7concepts

Questions 1–5

1foundation · easy
In an SSHD ACL rule, what does the netmask define?
Select an answer first
2expert · hard
An administrator has just applied a new SSHD ACL configuration to a BIG-IP device. The rules are: Rule 1: deny 0.0.0.0/0; Rule 2: allow 192.168.10.0/24. The administrator is now unable to SSH to the management interface from their workstation at 192.168.10.50. What is the most likely cause?
Select an answer first
3foundation · easy
An administrator removes all SSHD ACL rules from a BIG-IP. What is the resulting SSH access state?
Select an answer first
4application · medium
A security auditor is reviewing the BIG-IP configuration and asks the administrator to explain the purpose of SSHD ACLs. The administrator should explain that SSHD ACLs are used to:
Select an answer first
5foundation · easy
What is the primary purpose of configuring SSHD ACLs on a BIG-IP system?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to F5CAB1

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “F5CAB1” is a trademark of its owner, used for identification only.