A BIG-IP DNS administrator does not have advanced shell access to the GTM (DNS) module. They need to verify the current DNS configuration and check for any syntax errors. Which method should they use?

Use iQuery to query the DNS configuration from another device.

Use SSH to run 'grep' on the named.conf file.

Use the serial console to run 'tmsh list sys dns'.

Use the TMUI to navigate to DNS > GSLB and review the configuration.

A security team wants to restrict iQuery access so that only specific BIG-IP devices can communicate with each other. They implement an access control list (ACL) on the network that allows iQuery (TCP 4353) only between the two DNS devices. After implementation, the DNS sync-failover group works, but the DNS resolution from external clients fails. What is the most likely cause?

The ACL is also blocking DNS query traffic (UDP/TCP 53) from external clients.

The DNS service is not listening on the external interface.

The ACL is blocking iQuery traffic, which is needed for DNS resolution.

The ACL is blocking the management GUI, preventing DNS configuration.

What is the primary role of iQuery in a BIG-IP DNS environment?

To filter DNS queries based on source IP

To enable communication between BIG-IP devices for sync and failover

To manage the BIG-IP web interface

To provide encrypted DNS resolution to external clients

What is a limitation of not having advanced shell access on a GTM device?

The device cannot be managed via the web UI

iQuery communication will be blocked

Administrators cannot use low-level troubleshooting commands

An administrator applies a packet filter to a BIG-IP DNS device that drops all UDP traffic on port 53 from external sources. What is the most likely operational effect?

DNS queries from external clients will fail

Management access will be restricted to HTTPS

DNS resolution will continue but with lower performance

iQuery communication will be encrypted

F5Certified Technology Specialist, BIG-IP DNS

Domain 3Objective 8

Objective 3.08 Explain the Effects and Implications of Securing/hardening with Respect to Normal Operation, iQuery and Resolution 302 Practice Questions (Page 1)

Part of the Section 3: Operations and Troubleshooting domain, which makes up ~24% of our current practice bank.

24questions here

5free pages

7concepts

Questions 1–5

1application · medium
A BIG-IP DNS administrator does not have advanced shell access to the GTM (DNS) module. They need to verify the current DNS configuration and check for any syntax errors. Which method should they use?
Select an answer first
2application · hard
A security team wants to restrict iQuery access so that only specific BIG-IP devices can communicate with each other. They implement an access control list (ACL) on the network that allows iQuery (TCP 4353) only between the two DNS devices. After implementation, the DNS sync-failover group works, but the DNS resolution from external clients fails. What is the most likely cause?
Select an answer first
3foundation · easy
What is the primary role of iQuery in a BIG-IP DNS environment?
Select an answer first
4foundation · easy
What is a limitation of not having advanced shell access on a GTM device?
Select an answer first
5foundation · easy
An administrator applies a packet filter to a BIG-IP DNS device that drops all UDP traffic on port 53 from external sources. What is the most likely operational effect?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 302

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “302” is a trademark of its owner, used for identification only.