Which task would be most difficult to perform without advanced shell access on a GTM device?

Configuring a DNS listener via the web UI

Checking the status of the DNS service via the web UI

Viewing DNS statistics in the web UI

Running tcpdump to capture DNS traffic

A BIG-IP DNS administrator has restricted SSH access to only the management network (10.0.0.0/24). They need to troubleshoot a DNS issue from a workstation on the internal network (192.168.1.0/24). What is the most appropriate way to access the device?

Use the TMUI from the workstation, since it is accessible from the internal network.

Use the serial console from the workstation.

Use SSH from the workstation, since SSH is still available on the device.

Use iQuery from the workstation to access the device.

What is a common reason to restrict SSH access on a BIG-IP DNS device?

To allow more concurrent DNS queries

To reduce the attack surface for administrative access

To increase DNS query performance

How does enabling appliance mode on LTM affect DNS services on the same device?

DNS resolution is limited to internal clients

DNS services continue to operate normally

How does securing iQuery with encryption affect normal BIG-IP DNS operation?

It blocks all management traffic to the device

It prevents DNS queries from being resolved

It requires additional CPU resources for encrypting and decrypting traffic

It changes the port used for DNS resolution

F5Certified Technology Specialist, BIG-IP DNS

Domain 3Objective 8

Objective 3.08 Explain the Effects and Implications of Securing/hardening with Respect to Normal Operation, iQuery and Resolution 302 Practice Questions (Page 2)

Part of the Section 3: Operations and Troubleshooting domain, which makes up ~24% of our current practice bank.

24questions here

5free pages

7concepts

Questions 6–10

6foundation · easy
Which task would be most difficult to perform without advanced shell access on a GTM device?
Select an answer first
7application · medium
A BIG-IP DNS administrator has restricted SSH access to only the management network (10.0.0.0/24). They need to troubleshoot a DNS issue from a workstation on the internal network (192.168.1.0/24). What is the most appropriate way to access the device?
Select an answer first
8foundation · easy
What is a common reason to restrict SSH access on a BIG-IP DNS device?
Select an answer first
9foundation · easy
How does enabling appliance mode on LTM affect DNS services on the same device?
Select an answer first
10foundation · easy
How does securing iQuery with encryption affect normal BIG-IP DNS operation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 302

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “302” is a trademark of its owner, used for identification only.