F5CAB1 Lockdown Practice Questions
The free F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade questions that deal with lockdown, with answers and explanations. The full bank and the timed practice test cover every topic the exam asks about.
Question #4
The Port Lockdown feature prevents unwanted connection attempts to a Self IP. Which three types of connection attempts are unaffected by Port Lockdown settings?
Correct answer: C
Explanation
Port Lockdown only governs traffic destined to the self IP itself. Traffic matching a configured virtual server, ICMP, and CMI (TCP 4353 device trust/ConfigSync) traffic are not blocked by the setting, whereas SSH is restricted unless explicitly allowed.
Question #10
What will setting a Self IP to "Allow None" for Port Lockdown do?
Correct answer: A
Explanation
Allow None blocks all traffic to the self IP except CMI (TCP 4353) when it is the config sync address, so network failover (UDP 1026) and mirroring traffic between peers is dropped. Each device then sees its peer as offline and both go active.
Continue with F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
All F5CAB1: BIG-IP Administration Install, Initial Configuration, and Upgrade practice questions →