F5 Networks 301a Exam - Topic 2 Question 135 Discussion

Question

An LTM Specialist has detected that a brute force login attack is occurring against the SSH service via a BIG-IP management interface. Login attempts are occurring from many IPs within the internal company network. BIG-IP SSH access restrictions are in place as follows:

The LTM Specialist has determined that SSH access should only occur from the 192.168.1.0/24 and 172.16.254.0/23 networks.

Which tmsh command should the LTM Specialist use to permit access from the desired networks only?

Wilda · Accepted Answer

C) modify/sys allow replace-all-with {''192.168.1.00/24'', ''192.16.254.0/23''}

Wilda · Answer

A) modify.sys sshd allow add {''192.168. 10/24 , '' ''172. 16 2540/23'')

Wilda · Answer

B) modify /sys sshd login disable (''10.0.00/8'', ''172 16.0 0/12'', ''192. 168.0.0/16'')

Wilda · Answer

D) modify/sys sshd login enable {''192.166.10/24'''' ''172.16 254 0/23