Objective 3.03 Explain How to Renew Device Certificates and Update Them in the Sync Group 302 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   A BIG-IP DNS device fails to renew its device certificate. Which common issue could cause this failure?

   • AThe DNS service is not running on the device.
   • BThe certificate signing request (CSR) was not generated with the correct key length.
   • CThe sync group has too many devices.
   • DThe device's time zone is set incorrectly.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Why is it important to synchronize configuration changes, such as certificate updates, across a sync group?

   • ATo ensure all devices have the same configuration and can trust each other.
   • BTo reduce the need for individual device backups.
   • CTo allow devices to be managed by different administrators.
   • DTo enable load balancing of DNS queries.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   An administrator is planning to renew the device certificate on a BIG-IP DNS device that is part of a sync group. The administrator wants to ensure that the renewal does not disrupt DNS resolution. What should the administrator do?

   • ARenew the certificate and immediately perform a config sync.
   • BSchedule the renewal during a maintenance window and notify users.
   • CRenew the certificate on all devices simultaneously to avoid sync delays.
   • DUse a certificate with a longer validity period to avoid frequent renewals.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A BIG-IP DNS administrator needs to renew the device certificate on one of the three devices in a sync group. The administrator generates a new certificate and key on the device. What is the next step to ensure the other devices in the sync group trust the renewed certificate?

   • AManually copy the new certificate and key to each device and import them.
   • BRun 'tmsh save sys config' on the device to save the new certificate locally.
   • CPerform a config sync to push the updated certificate and key to the other devices in the sync group.
   • DRestart the DNS service on all devices to force certificate reload.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A sync group contains multiple BIG-IP DNS devices. The administrator renews the device certificate on one device and syncs the configuration. Later, the administrator notices that the certificate is not being used for DNS over TLS connections. What is the most likely cause?

   • AThe DNS service needs to be restarted to apply the new certificate.
   • BThe new certificate was not saved to the configuration.
   • CThe new certificate is not trusted by the clients.
   • DThe DNS over TLS profile still references the old certificate.
   Reveal Solution Discussion Select an answer first