Interpret Port Lockdown Settings to Self-IP F5CAB4 Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A BIG-IP Administrator is configuring a Self-IP for a management VLAN. The security team requires that only SSH and HTTPS are accessible from the management network, but the administrator also needs to be able to ping the Self-IP for monitoring. Which port lockdown setting should be used?

   • AAllow All
   • BAllow None
   • CAllow Custom with SSH, HTTPS, and ICMP
   • DAllow Default
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary purpose of port lockdown on a BIG-IP Self-IP address?

   • ATo limit the number of concurrent connections that can traverse a virtual server
   • BTo control which services and ports are accessible on the Self-IP for management and administrative traffic
   • CTo encrypt all traffic destined to the management IP address
   • DTo restrict which external networks can route traffic to the BIG-IP system
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   When configuring a custom port lockdown list on a Self-IP, which of the following must be specified for each entry?

   • AThe source IP address of the management station
   • BThe destination VLAN and interface
   • CThe protocol (TCP or UDP) and the port number
   • DThe maximum connection rate for that service
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following services is typically permitted by the 'Allow Default' port lockdown setting on a Self-IP?

   • AFTP (port 21)
   • BMySQL (port 3306)
   • CHTTPS (port 443)
   • DTelnet (port 23)
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the default port lockdown setting applied to a Self-IP when it is first created on a BIG-IP system?

   • AAllow Custom
   • BAllow Default
   • CAllow All
   • DAllow None
   Reveal Solution Discussion Select an answer first