Interpret Port Lockdown Settings to Self-IP F5CAB4 Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A BIG-IP Administrator is configuring a Self-IP with a custom port lockdown list. The administrator wants to allow HTTPS and SSH, but after applying the configuration, SSH is not accessible. What is the most likely cause?

   • AThe SSH service was not added to the custom list
   • BThe Self-IP is on a different VLAN
   • CThe port lockdown is set to 'Allow Default'
   • DThe Self-IP is not assigned to a VLAN
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A BIG-IP Administrator needs to allow HTTPS and SSH on a Self-IP while blocking all other services. The administrator has selected 'Allow Custom' in the port lockdown settings. What is the next step to complete this configuration?

   • ASet the port lockdown to 'Allow Default'
   • BDisable the port lockdown feature
   • CAdd the HTTPS and SSH services to the allowed list
   • DChange the Self-IP to a different VLAN
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A BIG-IP Administrator is troubleshooting a connectivity issue. A Self-IP is configured with port lockdown set to 'Allow Default', but the administrator cannot SSH to the Self-IP. What is the most likely cause?

   • AThe Self-IP is not assigned to a VLAN
   • BThe SSH service is not included in the default port lockdown list
   • CThe Self-IP is on a different VLAN
   • DThe port lockdown is set to 'Allow None'
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A BIG-IP Administrator is configuring a Self-IP for a VLAN that will be used for both management and application traffic. The security policy requires that only HTTPS and SNMP are accessible from the management network, but the application traffic must be able to reach the Self-IP on port 8080. Which port lockdown setting should be used?

   • AAllow All
   • BAllow None
   • CAllow Custom with HTTPS, SNMP, and port 8080
   • DAllow Default
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   How does port lockdown affect traffic that is destined to a virtual server's IP address rather than the Self-IP?

   • AIt allows all traffic to virtual server IPs regardless of the lockdown setting
   • BIt filters the traffic based on the same rules as the Self-IP
   • CIt blocks all traffic to virtual server IPs unless explicitly allowed
   • DIt has no effect because port lockdown only applies to Self-IP addresses
   Reveal Solution Discussion Select an answer first