SSHD ACLs F5CAB1 Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   An administrator is configuring SSHD ACLs and wants to ensure that only the 10.10.10.0/24 subnet can SSH to the BIG-IP. The administrator creates the following rules: Rule 1: deny 0.0.0.0/0; Rule 2: allow 10.10.10.0/24. What will be the result?

   • AAll SSH access will be denied, including from the 10.10.10.0/24 subnet.
   • BSSH access will be allowed from all sources because the allow rule overrides the deny rule.
   • CSSH access will be allowed from the 10.10.10.0/24 subnet and denied from all others.
   • DSSH access will be denied only from the 10.10.10.0/24 subnet.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which tmsh command context is used to manage SSHD ACL rules?

   • Atmsh list management sshd
   • Btmsh create net sshd
   • Ctmsh edit security sshd
   • Dtmsh modify sys sshd
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   An administrator is configuring SSHD ACLs using the BIG-IP Configuration utility. The requirement is to allow SSH access from the 192.168.1.0/24 subnet and deny all other sources. What should the administrator do?

   • AAdd only an allow rule for 192.168.1.0/24.
   • BAdd an allow rule for 192.168.1.0/24 and a deny rule for 0.0.0.0/0, ensuring the allow rule is listed first.
   • CAdd a deny rule for 0.0.0.0/0 and an allow rule for 192.168.1.0/24, ensuring the deny rule is listed first.
   • DAdd only a deny rule for 0.0.0.0/0.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   An administrator is locked out of SSH access after configuring an SSHD ACL. What is the most likely cause?

   • AThe SSH daemon was restarted during ACL configuration
   • BA deny rule was placed before an allow rule for the administrator's IP
   • CThe administrator's SSH key expired
   • DThe BIG-IP management IP address changed
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is a common troubleshooting step when an SSHD ACL rule is not working as expected?

   • AReboot the BIG-IP system
   • BVerify the rule order and source IP/netmask values
   • CChange the management port to a non-standard value
   • DDisable the SSH daemon and re-enable it
   Reveal Solution Discussion Select an answer first