Objective 2.04 Given a Scenario Select the Appropriate Deployment Type: Screening Mode, DNS Delegation, Caching Resolver, and DNS 6 to 4 302 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which statement accurately describes a characteristic of BIG-IP DNS screening mode?

   • AIt provides a local cache of DNS responses to reduce load on upstream servers.
   • BIt requires the BIG-IP DNS system to be the authoritative server for the zone.
   • CIt requires clients to be configured with the BIG-IP DNS as their recursive resolver.
   • DIt is used only for IPv6-to-IPv4 translation of DNS queries.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary role of a caching resolver in a BIG-IP DNS deployment?

   • ATo provide authoritative answers for a company's internal domains.
   • BTo resolve DNS queries on behalf of clients and cache the results.
   • CTo translate IPv6 addresses to IPv4 for DNS queries.
   • DTo act as a front-end for existing DNS servers and forward queries.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the purpose of the DNS 6 to 4 deployment type in BIG-IP DNS?

   • ATo screen DNS traffic from IPv6 attackers.
   • BTo allow IPv6-only clients to resolve IPv4-only DNS records.
   • CTo delegate authority for IPv6 zones to BIG-IP DNS.
   • DTo provide a caching resolver for IPv6 clients.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A service provider operates a large DNS infrastructure for multiple customers. They are deploying BIG-IP DNS in a new PoP to provide GSLB for their customers' domains. However, the PoP has limited upstream bandwidth, and the provider wants to reduce the number of queries forwarded to the authoritative servers. The BIG-IP DNS will be authoritative for some customer zones and will also need to resolve external domains for internal tools. Which deployment type should be used to meet both requirements?

   • ADNS delegation only
   • BDNS delegation for customer zones and caching resolver for external domains
   • CScreening mode only
   • DCaching resolver only
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A large enterprise is deploying BIG-IP DNS for GSLB across multiple data centers. The security policy mandates that the existing external DNS provider remains authoritative for the public zone 'example.com' to preserve existing DNSSEC signing and compliance controls. The BIG-IP DNS must still receive all DNS queries for 'example.com' and return GSLB-optimized answers. The DNS team also wants to use ZoneRunner to manage the GSLB-related records on BIG-IP DNS. Which deployment type and record-management approach satisfies all requirements?

   • AScreening mode with ZoneRunner for local GSLB records
   • BDNS 6 to 4 with ZoneRunner for translation records
   • CDNS delegation with ZoneRunner for the delegated subdomain
   • DCaching resolver with ZoneRunner for cache entries
   Reveal Solution Discussion Select an answer first