F5CAB4 Control Plane Administration Practice Question
A BIG-IP administrator is configuring a new device and needs to set up the control plane to allow remote management via SSH and HTTPS. The administrator wants to ensure that only secure protocols are used and that access is restricted to specific management IP addresses. Which two actions should the administrator take? (Choose two.)
⚠ Common exam trap
The trap here is focusing only on connectivity (like management IP and routes) while neglecting the security controls that restrict access and enforce secure protocols.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable SSH and disable Telnet access on the management interface.
To secure remote management, the administrator should enable SSH and disable Telnet, and configure a management port lockdown to restrict access to specific IP addresses. These actions ensure that only secure protocols are used and that access is limited to authorized addresses, meeting the security requirements.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable HTTP access and disable HTTPS access to improve performance.
Why it's wrong here
Enabling HTTP and disabling HTTPS would reduce security because HTTP is not encrypted. The requirement is to use only secure protocols, so HTTPS should be enabled, not disabled. This action would violate the security policy and is therefore incorrect. It is important to always use HTTPS for management access to protect credentials and data.
- ✗
Configure the management IP address and management route using tmsh.
Why it's wrong here
Configuring the management IP address and management route is necessary for remote access, but it does not restrict access to specific IP addresses or ensure that only secure protocols are used. This step is about connectivity, not security. While important, it does not fulfill the requirement to restrict access to specific management IP addresses.
- ✓
Enable SSH and disable Telnet access on the management interface.
Why this is correct
Enabling SSH and disabling Telnet ensures that remote management uses a secure protocol. Telnet transmits data in clear text, which is insecure. SSH provides encrypted communication. This action directly addresses the requirement to use only secure protocols for remote management. It is a fundamental security best practice for control plane administration.
- ✓
Configure a management port lockdown to restrict access to specific IP addresses.
Why this is correct
The management port lockdown feature allows the administrator to specify which IP addresses or networks can access the management interface. By configuring a lockdown, access is restricted to only the allowed addresses, satisfying the requirement to limit access to specific management IP addresses. This is a key control plane security measure.
- ✗
Set up a default route for the management interface.
Why it's wrong here
Setting up a default route for the management interface is part of basic network configuration, but it does not restrict access to specific IP addresses or enforce secure protocols. A default route simply directs traffic, and without proper access controls, it could expose the management interface to unauthorized networks. This action alone does not meet the security requirements.
About these practice questions
Courseiva writes every F5CAB4 question from scratch — 40 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official F5 exam blueprint
This F5CAB4 practice question is part of Courseiva's free F5 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the F5CAB4 exam.