After configuring an HTTP access list that allows 10.0.0.0/8, an admin from 10.1.2.3 can access the web UI, but an admin from 172.16.0.5 cannot. What does this confirm?

The management IP is only reachable from 10.0.0.0/8 due to routing.

The web UI is down for 172.16.0.5 due to a service failure.

The HTTP access list is correctly enforcing the 10.0.0.0/8 allow rule.

The SSH access list is also allowing 10.0.0.0/8.

A BIG-IP has management IP 10.0.0.1. The HTTP access list allows 192.168.1.0/24, and the SSH access list allows 10.0.0.0/8. An admin from 192.168.1.10 can access the web UI but cannot SSH. An admin from 10.0.0.50 can SSH but cannot access the web UI. What is the most accurate conclusion?

The management IP is unreachable from 192.168.1.10 due to routing.

The SSH access list is misconfigured because 192.168.1.10 cannot SSH.

Both access lists are correctly configured and enforced.

The HTTP access list is misconfigured because 10.0.0.50 cannot access the web UI.

After configuring an HTTP access list on the BIG-IP management interface, how can an administrator verify that it is enforced?

Verify the virtual server availability

Review the SNAT translation logs

Attempt to access the web UI from an allowed and a denied source address

Check the data plane packet statistics

An admin configured an HTTP access list allowing 192.0.2.10 and an SSH access list allowing 192.0.2.20. From 192.0.2.10, HTTPS to the management IP works, but SSH times out. From 192.0.2.20, SSH works, but HTTPS is refused. What does this indicate?

Both access lists are correctly enforced.

The SSH access list is misconfigured because SSH is working from 192.0.2.20.

The management IP is not reachable from either source.

The HTTP access list is misconfigured because HTTPS is working.

F5Certified Administrator, BIG-IP

Domain 2Objective 5

Identify HTTP/SSH Access List to management-IP Address F5CAB4 Practice Questions (Page 1)

Part of the Identify management connectivity configurations domain, which makes up ~13% of our current practice bank. F5 does not publish an official question count, but from its 30-minute exam (~10–20 total, ~1–3 in this domain), expect 1–1 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)

19questions here

4free pages

4concepts

Questions 1–5

1application · medium
After configuring an HTTP access list that allows 10.0.0.0/8, an admin from 10.1.2.3 can access the web UI, but an admin from 172.16.0.5 cannot. What does this confirm?
Select an answer first
2expert · medium
A BIG-IP has management IP 10.0.0.1. The HTTP access list allows 192.168.1.0/24, and the SSH access list allows 10.0.0.0/8. An admin from 192.168.1.10 can access the web UI but cannot SSH. An admin from 10.0.0.50 can SSH but cannot access the web UI. What is the most accurate conclusion?
Select an answer first
3foundation · easy
After configuring an HTTP access list on the BIG-IP management interface, how can an administrator verify that it is enforced?
Select an answer first
4foundation · easy
An administrator wants to allow only a specific set of source IP addresses to SSH into the BIG-IP management interface. Which configuration object should be used?
Select an answer first
5application · medium
An admin configured an HTTP access list allowing 192.0.2.10 and an SSH access list allowing 192.0.2.20. From 192.0.2.10, HTTPS to the management IP works, but SSH times out. From 192.0.2.20, SSH works, but HTTPS is refused. What does this indicate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to F5CAB4

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “F5CAB4” is a trademark of its owner, used for identification only.