Objective 2.02 Explain How to Configure GTM Sync Groups and iQuery 302 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   An organization has two BIG-IP DNS systems in a sync group. The administrator wants to ensure that only these two specific systems can synchronize with each other and that no other device can join the group or intercept the data. Which combination of settings provides the strongest security for this requirement?

   • AEnable iQuery encryption only.
   • BUse a non-default iQuery port and restrict access via the network firewall.
   • CEnable iQuery authentication with a shared secret and iQuery encryption.
   • DDisable iQuery and use a VPN tunnel between the systems.
   Reveal Solution Discussion Select an answer first
2. 17expert · medium

   A large enterprise has a GTM sync group with systems in multiple regions. Recently, a new firewall policy was implemented that restricts traffic between regions. The administrator is now seeing that configuration changes made on the primary system in the US are not propagating to the secondary system in Europe. The administrator has confirmed that the secondary system is still a member of the sync group and that the iQuery service is running. What is the most likely cause of the synchronization failure?

   • AThe secondary system has been rebooted.
   • BThe primary system's DNS zone has expired.
   • CThe new firewall policy is blocking the iQuery port between the regions.
   • DThe secondary system in Europe has a different time zone.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A security audit has revealed that the iQuery traffic between BIG-IP DNS systems in a sync group is being transmitted in plaintext. The administrator must remediate this to ensure the confidentiality of the configuration data. What is the most direct configuration change to address this finding?

   • ADisable iQuery and use SSH for synchronization.
   • BRestrict iQuery traffic to the management network.
   • CEnable iQuery encryption on all systems in the sync group.
   • DChange the iQuery port from the default to a non-standard port.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A global company has three BIG-IP DNS systems: one in New York, one in London, and one in Singapore. The administrator wants to create a sync group that includes all three systems. The administrator is concerned about the security of the synchronization traffic, especially over the WAN links. Which configuration step is essential to ensure secure communication between all members?

   • AEnable iQuery encryption and authentication on all three systems.
   • BEnsure all three systems are on the same subnet to reduce latency.
   • CConfigure a unique iQuery port on each system to avoid conflicts.
   • DCreate three separate sync groups, one for each pair of systems.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A security team has mandated that all communication between BIG-IP DNS systems must be authenticated to prevent rogue devices from joining the sync group. The administrator needs to configure this. What should the administrator enable?

   • ADNSsec on the DNS service.
   • BA firewall rule that only allows the known IP addresses.
   • CiQuery encryption only.
   • DiQuery authentication with a shared secret.
   Reveal Solution Discussion Select an answer first