Interpret Port Lockdown Settings to Self-IP F5CAB4 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   A network administrator notices that a Self-IP is configured with port lockdown set to 'Allow None'. What is the immediate effect on that Self-IP?

   • AAll traffic, including data-plane traffic, is dropped at that IP address
   • BThe Self-IP becomes unreachable for all traffic, including ICMP
   • COnly SSH and HTTPS are allowed, all other services are blocked
   • DAll management services are blocked, but data-plane traffic still passes through virtual servers
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A BIG-IP Administrator is configuring a Self-IP for a VLAN that will be used for management traffic. The security team requires that only HTTPS is accessible from the management network, but the administrator also needs to be able to ping the Self-IP for monitoring. Which port lockdown setting should be used?

   • AAllow Default
   • BAllow Custom with HTTPS and ICMP
   • CAllow None
   • DAllow All
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A BIG-IP Administrator is troubleshooting a connectivity issue. A Self-IP is configured with port lockdown set to 'Allow Custom', and the custom list includes HTTPS and SSH. The administrator can access HTTPS but not SSH. What is the most likely cause?

   • AThe SSH service is not actually in the custom list
   • BThe port lockdown is set to 'Allow Default'
   • CThe Self-IP is on a different VLAN
   • DThe Self-IP is not assigned to a VLAN
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A BIG-IP Administrator is troubleshooting a connectivity issue. A Self-IP is configured with the default port lockdown setting, but the administrator cannot SSH to the Self-IP. The administrator can access the BIG-IP via HTTPS. What is the most likely cause?

   • AThe Self-IP is not assigned to a VLAN
   • BSSH is not included in the default port lockdown list
   • CThe port lockdown is set to 'Allow None'
   • DThe Self-IP is on a different VLAN
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   An administrator cannot SSH to a Self-IP from a management workstation. The port lockdown is set to 'Allow Custom' and only HTTPS is listed. What is the most likely cause?

   • AThe Self-IP is not assigned to any VLAN
   • BThe management workstation is on a different VLAN
   • CThe SSH service is not running on the BIG-IP
   • DThe port lockdown list does not include SSH (port 22)
   Reveal Solution Discussion Select an answer first