Exam F5CAB1 Topic 3 Question 20 Discussion

Actual exam question for F5's F5CAB1 exam
Question #: 20
Topic #: 3
The Configuration Utility of a BIG-IP device is currently accessible via its management IP
10.53.1.245 from all VLANs.
The BIG-IP Administrator needs to restrict access so only hosts from the 10.0.0.0/24 subnet can access the Configuration Utility.
Which TMSH command accomplishes this?

Suggested Answer: D Vote an answer

BIG-IP controls access to the web-based Configuration Utility (TMUI) through the /sys httpd allow list. This parameter specifies which client IPs or subnets may initiate HTTP/HTTPS connections to the management interface.
To restrict TMUI access to only the 10.0.0.0/24 subnet:
The correct method is to modify the HTTPD allow list so that it contains only this subnet.
This requires replacing the entire current list with the new subnet using:
modify /sys httpd allow replace-all-with {10.0.0.0/24}
This ensures that only clients within 10.0.0.0/24 can reach the Configuration Utility.

by Samantha at Oct 11, 2026, 12:16 PM

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

0
0
0
10