F5 F5-302 Practice Test

F5-302 practice test: what's covered

• DNS Protocol
• Wide IPs & Pools
• GSLB Load Balancing
• iQuery & Monitoring
• DNS Express, DNSSEC & Security
• Troubleshooting

Free F5-302 sample questions

1. A client queries www.example.com and receives an answer from a server that is not authoritative for the zone but holds the record from a previous lookup. Which response characteristic identifies this situation?

   • A. The response contains an SOA record in the answer section by default
   • B. The response always carries an rcode of SERVFAIL for cached entries
   • C. The response includes a delegation to the parent zone name servers
   • D. The authoritative answer flag is not set and a decreasing TTL is returned
   Show answer

   Correct: D. A cached answer comes from a resolver rather than the zone authority, so the authoritative answer flag is clear and the remaining TTL counts down from the original value. An SOA in the answer section indicates a negative response, SERVFAIL signals failure rather than caching, and a delegation response is a referral rather than a cached answer.

2. An engineer must delegate the subdomain gslb.example.com to a BIG-IP DNS system so that it answers those queries. Which record must the parent zone contain?

   • A. CNAME records for gslb.example.com pointing at the wide IP name
   • B. MX records for gslb.example.com pointing at the BIG-IP self IP addresses
   • C. NS records for gslb.example.com pointing at the BIG-IP DNS listeners
   • D. A records for gslb.example.com pointing at the application virtual servers
   Show answer

   Correct: C. Delegation is expressed with NS records in the parent zone naming the servers authoritative for the child zone, which here are the BIG-IP DNS listeners. A records would answer the name directly rather than delegate, CNAMEs alias a single name rather than a zone, and MX records describe mail routing.

3. An engineer is configuring a BIG-IP DNS listener. Select the TWO statements that correctly describe listener behaviour. (Choose TWO)

   • A. A listener performs zone transfers to all secondary name servers on a schedule
   • B. A listener must be configured on the management interface to answer client queries
   • C. The listener defines the address and port on which the system accepts DNS queries
   • D. A listener can be configured for both UDP and TCP so large responses succeed
   • E. A listener automatically creates the wide IPs for every zone it receives queries for
   Show answer

   Correct: C and D. The listener is the DNS service endpoint defined by address and port, and configuring both transports matters because responses exceeding the UDP limit fall back to TCP. Listeners do not create wide IPs, zone transfer is a separate zone configuration, and answering client queries from the management interface is not the supported design.

4. A resolver receives a response whose size exceeds 512 bytes over UDP without EDNS0 support. What behaviour should the engineer expect?

   • A. The response is truncated and the resolver retries the query over TCP
   • B. The response is silently discarded and no retry is attempted by the resolver
   • C. The server splits the response into multiple UDP datagrams automatically
   • D. The server returns NXDOMAIN because the answer cannot be delivered
   Show answer

   Correct: A. Classic DNS sets the truncation flag when a response will not fit, and a conforming resolver retries over TCP to receive the full answer. Responses are not silently dropped, DNS does not fragment answers across datagrams at the application layer, and NXDOMAIN means the name does not exist rather than that the answer is oversized.

5. An engineer must ensure clients are directed to a regional site while keeping a single published hostname. Which BIG-IP DNS object represents that published hostname?

   • A. The data center, which groups servers and links by physical location
   • B. The prober pool, which determines which systems perform health checks
   • C. The topology region, which groups countries for topology load balancing
   • D. The wide IP, which maps a fully qualified domain name to one or more pools
   Show answer

   Correct: D. The wide IP is the DNS name clients resolve, and it references pools whose members are the candidate virtual servers. Data centers describe location, prober pools describe who performs monitoring, and topology regions are matching constructs used by a load balancing method rather than the published name itself.

Last updated: 2026-09-23

F5-302 practice test FAQ

Related practice tests

• F5 F5101 practice test
• F5 F5201 practice test
• F5 F5301 practice test
• F5 F5-303 practice test
• F5 F5-304 practice test