A BIG-IP DNS device certificate is about to expire in two weeks. The administrator wants to renew it without causing an iQuery outage. What is the recommended approach?

Generate a new certificate and install it on the device, then update the peer's trust store before the old certificate expires.

Disable iQuery temporarily, renew the certificate, and re-enable iQuery.

Renew the certificate only on the primary device; the secondary will automatically use the new certificate.

Wait until the certificate expires, then renew it to avoid any disruption.

Which statement accurately describes how device certificates are used in iQuery between BIG-IP DNS devices?

Each device presents its certificate to the peer, and the peer validates it against a trusted certificate authority

Device certificates are optional; iQuery can operate without them if the network is considered secure

The certificates are used only to encrypt the iQuery traffic; authentication is handled by shared secrets

The certificates are used to encrypt DNS queries between the BIG-IP and external DNS servers

Which SSL component is used to encrypt data sent by the BIG-IP device during iQuery communication?

A symmetric session key negotiated during the TLS handshake

F5Certified Technology Specialist, BIG-IP DNS

Domain 2Objective 12

Objective 2.12 Explain the Use of Device Certificates in iQuery [SSL Components, Expiration, 3rd Party Certs] 302 Practice Questions (Page 4)

Part of the Section 2: Deployment domain, which makes up ~30% of our current practice bank.

19questions here

4free pages

5concepts

Questions 16–19

16application · medium
A BIG-IP DNS device certificate is about to expire in two weeks. The administrator wants to renew it without causing an iQuery outage. What is the recommended approach?
Select an answer first
17foundation · easy
Which statement accurately describes how device certificates are used in iQuery between BIG-IP DNS devices?
Select an answer first
18foundation · easy
Which SSL component is used to encrypt data sent by the BIG-IP device during iQuery communication?
Select an answer first
19foundation · easy
Which of the following is NOT a typical SSL component of a device certificate used for iQuery?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to 302

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “302” is a trademark of its owner, used for identification only.

Objective 2.12 Explain the Use of Device Certificates in iQuery [SSL Components, Expiration, 3rd Party Certs] 302 Practice Questions (Page 4)

Questions 16–19

A BIG-IP DNS device certificate is about to expire in two weeks. The administrator wants to renew it without causing an iQuery outage. What is the recommended approach?

Which statement accurately describes how device certificates are used in iQuery between BIG-IP DNS devices?

Which SSL component is used to encrypt data sent by the BIG-IP device during iQuery communication?

Which of the following is NOT a typical SSL component of a device certificate used for iQuery?

Keep studying — Section 2: Deployment