Objective 3.08 Explain the Effects and Implications of Securing/hardening with Respect to Normal Operation, iQuery and Resolution 302 Practice Questions (Page 5)

Questions 21–24

1. 21foundation · easy

   What is a primary effect of enabling appliance mode on a BIG-IP LTM device?

   • AIt hides the underlying file system from administrators
   • BIt disables all DNS services
   • CIt restricts management access to the web UI only
   • DIt enables advanced shell access for troubleshooting
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A BIG-IP DNS device has port lockdown enabled on its self IPs, allowing only DNS (UDP/TCP 53) and iQuery (TCP 4353). The administrator needs to use the TMUI to manage the device from a workstation on the same network. What must be done to allow TMUI access?

   • AAdd TCP 443 to the port lockdown allow list on the self IP.
   • BUse SSH to access the TMUI.
   • CUse a different workstation that is on the management network.
   • DDisable port lockdown temporarily to access the TMUI.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A security audit requires that all iQuery traffic between BIG-IP DNS devices be encrypted. The administrator enables iQuery encryption on all devices in the sync-failover group. After the change, the devices fail to synchronize. What is the most likely cause?

   • AThe iQuery port was changed to a non-standard port, and the firewall was not updated.
   • BThe DNS service was restarted, and the listeners did not come back up.
   • CThe iQuery encryption certificates were not exchanged or trusted between the devices.
   • DThe packet filter is blocking the encrypted iQuery traffic because it inspects payloads.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   When securing a BIG-IP DNS system with packet filters, what is a key consideration regarding iQuery traffic?

   • AiQuery is only used for DNS resolution and not for management
   • BiQuery uses UDP port 53 and must be allowed for DNS resolution
   • CiQuery traffic must be permitted between BIG-IP devices for sync and failover
   • DPacket filters cannot affect iQuery because it is encrypted
   Reveal Solution Discussion Select an answer first