VendorsExamsEnterprise
Support
Request an ExamContact UsFAQ

BIG-IP DNS Specialist Free Sample Questions

Description

Covers DNS resource record and zone types including DNSSEC, deploying GTM sync groups and load balancing methods, and troubleshooting DNS profiles, updates, and device certificates.

12 free sample questions160 in the full practice test

Try simulator

302 Sample Questions

  1. Question 1

    Intermediate

    Concepts · Explain the dataflow of the DNS query process [iterative, recursive, lame delegation, host file, and resolvers]

    A financial enterprise is migrating its global application delivery infrastructure to F5 BIG-IP DNS. The architecture team needs to understand how DNS queries will flow from end users to the BIG-IP DNS listeners to ensure proper security and routing configurations.

    The enterprise currently uses a mix of internal caching resolvers and external public DNS services. The security team has mandated that BIG-IP DNS must not perform recursive lookups for external domains to prevent potential DNS amplification attacks.

    In a standard DNS query dataflow where a client queries a public domain hosted on the BIG-IP DNS, how does the BIG-IP DNS handle the resolution process, and what is the primary difference between iterative and recursive queries in this context?

    Answer and explanation

    Correct answer: B

    In a standard DNS flow, the client asks its Local DNS (LDNS) to resolve a name recursively. The LDNS then performs iterative queries to the Root, TLD, and eventually the authoritative nameserver (the BIG-IP DNS). The BIG-IP DNS answers the iterative query authoritatively. It does not perform recursion for the client unless explicitly configured as a caching resolver.

  2. Question 2

    IntermediateMultiple answers

    Concepts · Identify resource record types and their purpose including DNSSEC record types

    A government agency requires all public-facing DNS zones to be secured using DNSSEC to prevent DNS spoofing and cache poisoning. When configuring BIG-IP DNS to sign these zones, which TWO of the following resource record types are automatically generated and used to establish the chain of trust and verify the authenticity of the response? (Select TWO)

    Answer and explanation

    Correct answers: A, C

    RRSIG (Resource Record Signature) contains the cryptographic signature for a resource record set (RRset). It is generated during DNSSEC signing to prove authenticity.

    DNSKEY holds the public key that resolvers use to verify the RRSIG signatures. Both RRSIG and DNSKEY are fundamental DNSSEC record types used in BIG-IP DNS implementations.

  3. Question 3

    Beginner

    Concepts · Identify the different zone types and their purpose

    True or False: In BIG-IP DNS ZoneRunner, a 'Stub' zone contains only the SOA, NS, and A records necessary to identify the authoritative servers for that zone, whereas a 'Hint' zone is used to find the root servers of the DNS namespace.

    Answer and explanation

    Correct answer: A

    This is True. A stub zone is a copy of a zone that contains only those resource records necessary to identify the authoritative DNS servers for that zone (SOA, NS, and glue A records). A hint zone (often called the root hints file) contains the IP addresses of the root DNS servers used to bootstrap resolution.

  4. Question 4

    Intermediate

    Concepts · Given a DNS hierarchical diagram determine what source IP the GTM will receive the query from

    An administrator is configuring topology-based load balancing on a BIG-IP DNS system. They need to route traffic based on the geographic location of the client making the request. Based on standard DNS architecture, which source IP address will the BIG-IP DNS evaluate against its topology records when it receives the query?

    graph TD Client[Client IP: 203.0.113.5] --> LDNS[LDNS IP: 198.51.100.10] LDNS --> Root[Root Servers] LDNS --> GTM[BIG-IP DNS Listener: 201.10.10.1]
    Answer and explanation

    Correct answer: B

    In a traditional DNS hierarchy, the client sends a recursive query to its Local DNS (LDNS). The LDNS then performs the iterative query to the BIG-IP DNS. Therefore, the source IP packet arriving at the BIG-IP DNS belongs to the LDNS, not the client. Topology records will evaluate the LDNS IP (unless EDNS0 Client Subnet is specifically implemented and utilized).

  5. Question 5

    Beginner

    Concepts · Distinguish IPv4 versus IPv6 query including differentiating IPv4/6 transport versus IPv4/6 query type

    A network engineer is configuring a BIG-IP DNS listener to support an environment transitioning to IPv6. The organization currently only has IPv4 routing configured to the BIG-IP DNS appliance, but clients are requesting IPv6 addresses for backend web servers. Which statement accurately describes how BIG-IP DNS handles this scenario?

    Answer and explanation

    Correct answer: B

    DNS transport (IPv4 vs IPv6) is independent of the DNS query type (A vs AAAA). A client or LDNS can easily connect to an IPv4 listener on the BIG-IP DNS (IPv4 transport) and ask for an AAAA record (IPv6 query type). The BIG-IP DNS will successfully return the IPv6 address inside the payload of the IPv4 UDP/TCP packet.

  6. Question 6

    Beginner

    Concepts · Describe data center, server/virtual server, and object monitoring including explanation of resulting object statuses

    When defining GTM objects, what is the primary purpose of configuring a 'Prober Pool' in BIG-IP DNS?

    Answer and explanation

    Correct answer: B

    A prober pool is used to dictate exactly which BIG-IP systems (LTMs or GTMs running big3d) are responsible for sending health monitor probes to generic host servers or non-F5 devices. This allows administrators to control from which data center or network path the monitoring traffic originates.

Register free for 6 more questions

Or unlock all 160 302 questions with explanations, timed mode and flashcards.

Related practice tests

All F5 practice exams