Exam F5CAB1 Topic 4 Question 19 Discussion
Actual exam question for F5's F5CAB1 exam
Question #: 19
Topic #: 4
Question #: 19
Topic #: 4
The BIG-IP Administrator wants to manage the newly built F5 system through an in-band Self-IP.
The administrator has configured a VLAN and Self-IP and can ping the IP from their workstation, but cannot access the system via SSH or HTTPS.
What port lockdown settings should the BIG-IP Administrator use to allow management access on the Self-IP? (Choose two.)
The administrator has configured a VLAN and Self-IP and can ping the IP from their workstation, but cannot access the system via SSH or HTTPS.
What port lockdown settings should the BIG-IP Administrator use to allow management access on the Self-IP? (Choose two.)
Suggested Answer: C,D Vote an answer
Self-IPs include a security feature called Port Lockdown, which restricts which services respond on that Self-IP.
By default, Self-IPs block management access (SSH and HTTPS/TMUI), meaning an administrator cannot manage the device through in-band Self-IPs unless explicitly allowed.
Allow Mgmt / Allow Management
These settings enable only the management services required for administrative access, specifically:
SSH (22)
HTTPS/TMUI (443)
These options allow secure administration without opening unnecessary ports.
Why these are correct:
They provide only the essential access for management.
They follow F5 security best practices when using in-band admin access.
They do not expose all services, reducing the attack surface.
By default, Self-IPs block management access (SSH and HTTPS/TMUI), meaning an administrator cannot manage the device through in-band Self-IPs unless explicitly allowed.
Allow Mgmt / Allow Management
These settings enable only the management services required for administrative access, specifically:
SSH (22)
HTTPS/TMUI (443)
These options allow secure administration without opening unnecessary ports.
Why these are correct:
They provide only the essential access for management.
They follow F5 security best practices when using in-band admin access.
They do not expose all services, reducing the attack surface.
by Luther at Sep 15, 2026, 03:17 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).