Identify HTTP/SSH Access List to management-IP Address F5CAB4 Practice Questions (Page 3)

Questions 11–15

1. 11expert · medium

   An admin needs to allow SSH to the management IP from a specific contractor's IP 203.0.113.9, but the contractor's IP changes weekly. The admin also needs to allow the internal admin subnet 10.1.0.0/16. What is the best approach?

   • AAdd the contractor's IP to the HTTP access list instead.
   • BAdd only 10.1.0.0/16 to the SSH access list and have the contractor use a VPN.
   • CAdd 0.0.0.0/0 to the SSH access list to allow the contractor from any IP.
   • DAdd both 203.0.113.9 and 10.1.0.0/16 to the SSH access list, and update the contractor IP as it changes.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which IP address is used to access the BIG-IP management web UI and SSH for administrative purposes?

   • AVirtual server IP address
   • BSelf IP address
   • CFloating IP address
   • DManagement IP address
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   An admin is configuring access lists and needs to know which IP to use as the destination for the rules. The BIG-IP has a management IP of 192.168.1.1 and several self-IPs. Which IP should be used in the access list configuration?

   • AThe default gateway IP
   • BThe floating self-IP used for failover
   • C192.168.1.1, the management IP
   • DThe first self-IP on the internal VLAN
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   An administrator configured an SSH access list on the management interface to allow only 203.0.113.5. Now, a different administrator from 203.0.113.6 cannot SSH to the management IP. What is the most likely reason?

   • AThe SSH access list is correctly denying 203.0.113.6 because it is not the allowed source.
   • BThe management IP is down because the data plane is overloaded.
   • CThe HTTP access list is also blocking SSH traffic.
   • DThe SSH service is not enabled on the BIG-IP.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A network administrator needs to restrict access to the BIG-IP management web UI so that only the corporate jump host at 10.10.10.50 can reach it. The BIG-IP management IP is 192.168.1.10/24. Which configuration change will accomplish this?

   • ACreate an SSH access list on the management interface allowing 10.10.10.50 and deny all others.
   • BModify the default gateway on the management interface to route 10.10.10.50 traffic to the web UI.
   • CCreate a data-plane self-IP access list allowing 10.10.10.50 to reach 192.168.1.10.
   • DCreate an HTTP access list on the management interface allowing 10.10.10.50 and deny all others.
   Reveal Solution Discussion Select an answer first