302 Sample Questions & Answers
DNSSEC-aware record and zone types make up the largest share of concepts tested, alongside sync-group and iQuery setup for GTM, choosing load-balancing methods, and troubleshooting profile changes, software updates, and device certificates.
Launch the full 302 simulator →Showing 6 of 12 free samples.
- Question 1Intermediate
Concepts · Given a DNS hierarchical diagram determine what source IP the GTM will receive the query from
An administrator is configuring topology-based load balancing on a BIG-IP DNS system. They need to route traffic based on the geographic location of the client making the request. Based on standard DNS architecture, which source IP address will the BIG-IP DNS evaluate against its topology records when it receives the query?
graph TD Client[Client IP: 203.0.113.5] --> LDNS[LDNS IP: 198.51.100.10] LDNS --> Root[Root Servers] LDNS --> GTM[BIG-IP DNS Listener: 201.10.10.1]Show answer & explanation
Correct answer: B
In a traditional DNS hierarchy, the client sends a recursive query to its Local DNS (LDNS). The LDNS then performs the iterative query to the BIG-IP DNS. Therefore, the source IP packet arriving at the BIG-IP DNS belongs to the LDNS, not the client. Topology records will evaluate the LDNS IP (unless EDNS0 Client Subnet is specifically implemented and utilized).
- Question 2Beginner
Concepts · Distinguish IPv4 versus IPv6 query including differentiating IPv4/6 transport versus IPv4/6 query type
A network engineer is configuring a BIG-IP DNS listener to support an environment transitioning to IPv6. The organization currently only has IPv4 routing configured to the BIG-IP DNS appliance, but clients are requesting IPv6 addresses for backend web servers. Which statement accurately describes how BIG-IP DNS handles this scenario?
Show answer & explanation
Correct answer: B
DNS transport (IPv4 vs IPv6) is independent of the DNS query type (A vs AAAA). A client or LDNS can easily connect to an IPv4 listener on the BIG-IP DNS (IPv4 transport) and ask for an AAAA record (IPv6 query type). The BIG-IP DNS will successfully return the IPv6 address inside the payload of the IPv4 UDP/TCP packet.
- Question 3Beginner
Concepts · Describe data center, server/virtual server, and object monitoring including explanation of resulting object statuses
When defining GTM objects, what is the primary purpose of configuring a 'Prober Pool' in BIG-IP DNS?
Show answer & explanation
Correct answer: B
A prober pool is used to dictate exactly which BIG-IP systems (LTMs or GTMs running big3d) are responsible for sending health monitor probes to generic host servers or non-F5 devices. This allows administrators to control from which data center or network path the monitoring traffic originates.
- Question 4Intermediate
Concepts · Define the GTM load balancing methods and when to use them [dynamic, static]
An organization wants to distribute traffic across two global data centers based on real-time network performance. They want BIG-IP DNS to select the virtual server that has the fastest response time from the perspective of the client's Local DNS (LDNS). Which dynamic load balancing method should be selected at the pool level?
Show answer & explanation
Correct answer: B
Round Trip Time (RTT) is a dynamic load balancing method that selects the virtual server with the lowest measured round-trip time between the data center and the client's LDNS, ensuring the fastest network path is chosen.
- Question 5Intermediate
Concepts · Identify applicable iRules events including application to WideIP versus Listener
A developer is writing an iRule to intercept DNS queries and modify the response based on the queried hostname. They want the iRule to trigger as soon as the query is parsed but before load balancing decisions are made for a specific application. At which object level and using which event should this iRule be applied in BIG-IP DNS?
Show answer & explanation
Correct answer: B
To affect a specific application (hostname) before GTM load balancing occurs, the iRule should be applied to the Wide IP associated with that application, utilizing the DNS_REQUEST event. Listener iRules affect all traffic hitting the listener IP.
- Question 6Intermediate
Concepts · Identify the purpose of GTM tools and when to use them [checkcert, iqdump, etc.]
During a troubleshooting session, an administrator suspects that the F5 iQuery communication between a BIG-IP DNS and a BIG-IP LTM is failing due to SSL certificate issues. Which command-line tool is specifically designed to verify the SSL certificate exchange and test the iQuery connection between two BIG-IP devices?
Show answer & explanation
Correct answer: C
The 'iqdump' utility is used to troubleshoot iQuery communication. It initiates an SSL connection to the big3d agent on a target BIG-IP device (port 4353), dumping the XML-formatted iQuery responses to standard output, making it ideal for verifying SSL handshakes and data exchange.
Ready for the real thing?
The full 302 simulator has every exam-style question, timed mode, and instant scoring.