What is the primary purpose of configuring port lockdown on a BIG-IP DNS self IP?

To enable high availability failover

To increase DNS query resolution speed

To restrict which services can access the self IP

A BIG-IP LTM device with DNS services is placed in appliance mode. The DNS administrator needs to verify the DNS service is running and check the version. Which of the following is the most appropriate method?

Use the TMUI to check the DNS service status and version under DNS > Settings.

Use the serial console to run 'tmsh show sys service'.

Use iQuery to query the service status from another device.

Use SSH to run 'bigstart status dns'.

A BIG-IP DNS administrator enables port lockdown on a self IP address. Which traffic is most directly affected by this action?

Management traffic to the management port

SNMP polling from network monitors

DNS queries arriving on that self IP

iQuery traffic between BIG-IP devices

An administrator has changed the SSH port on a BIG-IP DNS device from 22 to 2222 to reduce automated attacks. Later, they need to troubleshoot a DNS issue and want to use SSH to access the device. What must the administrator do?

Use iQuery to access the device remotely.

Use the TMUI instead, since SSH is no longer available.

Revert the SSH port to 22 to troubleshoot.

Use the new port 2222 when connecting via SSH.

A BIG-IP DNS administrator has disabled SSH access to all BIG-IP devices to comply with a security policy that mandates no direct shell access. A week later, a DNS resolution issue occurs, and the administrator needs to run a tcpdump to capture DNS traffic for troubleshooting. What is the most appropriate way to perform this task?

Use iQuery to run tcpdump on the remote device.

Use the TMUI to access the packet capture feature under Network > Packet Capture.

Use the serial console to run tcpdump.

Re-enable SSH temporarily, run tcpdump, then disable SSH again.

F5Certified Technology Specialist, BIG-IP DNS

Domain 3Objective 8

Objective 3.08 Explain the Effects and Implications of Securing/hardening with Respect to Normal Operation, iQuery and Resolution 302 Practice Questions (Page 3)

Part of the Section 3: Operations and Troubleshooting domain, which makes up ~24% of our current practice bank.

24questions here

5free pages

7concepts

Questions 11–15

11foundation · easy
What is the primary purpose of configuring port lockdown on a BIG-IP DNS self IP?
Select an answer first
12application · medium
A BIG-IP LTM device with DNS services is placed in appliance mode. The DNS administrator needs to verify the DNS service is running and check the version. Which of the following is the most appropriate method?
Select an answer first
13foundation · easy
A BIG-IP DNS administrator enables port lockdown on a self IP address. Which traffic is most directly affected by this action?
Select an answer first
14application · medium
An administrator has changed the SSH port on a BIG-IP DNS device from 22 to 2222 to reduce automated attacks. Later, they need to troubleshoot a DNS issue and want to use SSH to access the device. What must the administrator do?
Select an answer first
15application · medium
A BIG-IP DNS administrator has disabled SSH access to all BIG-IP devices to comply with a security policy that mandates no direct shell access. A week later, a DNS resolution issue occurs, and the administrator needs to run a tcpdump to capture DNS traffic for troubleshooting. What is the most appropriate way to perform this task?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 302

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “302” is a trademark of its owner, used for identification only.