Exam F5CAB1 Topic 3 Question 27 Discussion
Actual exam question for F5's F5CAB1 exam
Question #: 27
Topic #: 3
Question #: 27
Topic #: 3
In order to configure allowed IP addresses for SSH access to a BIG-IP device, the BIG-IP Administrator has issued the commands shown in the exhibit.

Which IP addresses will have SSH access after issuing the shown commands?
(Choose two.)

Which IP addresses will have SSH access after issuing the shown commands?
(Choose two.)
Suggested Answer: A,B Vote an answer
From the exhibit, the administrator performs the following actions:
* Displays the current SSH allow configuration:
tmsh list sys sshd allow
allow { ALL }
* Replaces the existing SSH allow list with a specific subnet:
tmsh modify sys sshd allow replace-all-with { 10.0.0.0/24 }
* Confirms the updated configuration:
tmsh list sys sshd allow
allow { 10.0.0.0/24 }
This configuration restricts SSH access to only hosts that fall within the 10.0.0.0/24 network.
Evaluation of the options
A). 10.0.0.100
This address is within the 10.0.0.0/24 subnet and is a valid host address, so SSH access is permitted.
B). 10.0.0.254
This address is also within the 10.0.0.0/24 subnet and is a valid host address, so SSH access is permitted.
C). 10.0.0.256
This is not a valid IP address because an IPv4 octet cannot exceed 255.
D). 100.0.1.10
This address is outside the configured 10.0.0.0/24 subnet and will not be allowed.
E). 100.0.0.10
This address is also outside the configured subnet and will not be allowed.
* Displays the current SSH allow configuration:
tmsh list sys sshd allow
allow { ALL }
* Replaces the existing SSH allow list with a specific subnet:
tmsh modify sys sshd allow replace-all-with { 10.0.0.0/24 }
* Confirms the updated configuration:
tmsh list sys sshd allow
allow { 10.0.0.0/24 }
This configuration restricts SSH access to only hosts that fall within the 10.0.0.0/24 network.
Evaluation of the options
A). 10.0.0.100
This address is within the 10.0.0.0/24 subnet and is a valid host address, so SSH access is permitted.
B). 10.0.0.254
This address is also within the 10.0.0.0/24 subnet and is a valid host address, so SSH access is permitted.
C). 10.0.0.256
This is not a valid IP address because an IPv4 octet cannot exceed 255.
D). 100.0.1.10
This address is outside the configured 10.0.0.0/24 subnet and will not be allowed.
E). 100.0.0.10
This address is also outside the configured subnet and will not be allowed.
by Burton at May 25, 2026, 12:18 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).