Objective 3.02 Given a Scenario Determine What Is the Effect of Changing the Features Enabled in a DNS Profile 302 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company uses BIG-IP DNS to provide authoritative responses for its public domain. The DNS profile is configured to accept queries over both UDP and TCP. The security team wants to reduce the risk of UDP-based reflection attacks. Which change to the DNS profile would be most effective?

   • ASet the unhandled query action to 'forward'.
   • BDisable UDP and only accept DNS queries over TCP.
   • CEnable recursion to allow the BIG-IP to cache responses.
   • DDisable the DNS profile on the virtual server.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   A DNS profile has no matching zone, no forwarding rule, and recursion is disabled. What is the default action for a query that does not match any profile settings?

   • AThe query is answered with NXDOMAIN.
   • BThe query is forwarded to the root servers.
   • CThe query is answered with a referral to the appropriate top-level domain server.
   • DThe query is dropped or answered with a refusal (REFUSED).
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company wants to use BIG-IP DNS as a recursive resolver for its internal network. The DNS profile currently has recursion disabled, and the unhandled query action is set to 'drop'. What must be changed to allow internal clients to resolve external domains?

   • AEnable recursion in the DNS profile.
   • BDisable the DNS profile on the virtual server.
   • CSet the unhandled query action to 'forward'.
   • DCreate a DNS zone for the external domain.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A BIG-IP DNS administrator is troubleshooting why a GTM pool is not being used for DNS resolution. The DNS profile has BIND enabled, and the GTM pool is configured with BIND also enabled. What is the most likely effect of this configuration?

   • AThe DNS profile will ignore the GTM pool and use BIND for all queries.
   • BBIND may interfere with GTM's ability to respond to DNS queries, causing resolution failures.
   • CGTM will use BIND to resolve queries for the pool, improving performance.
   • DBIND will automatically disable GTM pools to prevent conflicts.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company runs BIG-IP DNS as the authoritative DNS server for its public domain. The DNS profile currently has recursion enabled, and the system has been observed forwarding queries for external domains to upstream resolvers, causing unexpected load. The administrator wants to ensure that only queries for the company's own zones are answered authoritatively, while all other queries are dropped. Which change to the DNS profile should be made?

   • AEnable recursion and configure a forwarder to a public resolver.
   • BSet the unhandled query action to 'forward'.
   • CDisable recursion in the DNS profile.
   • DDisable the DNS profile entirely on the virtual server.
   Reveal Solution Discussion Select an answer first