New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

F5 Networks F5CAB3 Exam - Topic 2 Question 2 Discussion

Actual exam question for F5 Networks's F5CAB3 exam
Question #: 2
Topic #: 2
[All F5CAB3 Questions]

Refer to the exhibit.

DNS queries from two internal DNS servers are being load-balanced to external DNS servers via a virtual server on a BIG-IP device. The DNS queries originate from:

192.168.10.100

192.168.10.200

and target:

192.168.2.150

All DNS queries destined for the external DNS servers fail.

Which property change should the BIG-IP Administrator make in the Virtual Server to resolve this issue? (Choose one answer)

Show Suggested Answer Hide Answer
Suggested Answer: D

DNS traffic is primarily transported using UDP port 53. In the exhibit, the Virtual Server is configured with the Protocol set to TCP, which prevents standard DNS queries from being processed correctly. BIG-IP Virtual Servers must be configured with the correct Layer 4 protocol to match the application traffic they are handling.

According to the BIG-IP Administration: Data Plane Configuration documentation:

The Protocol setting on a Virtual Server defines whether traffic is processed as TCP, UDP, or another supported transport protocol.

Standard DNS queries and responses use UDP, while TCP is only required for DNS zone transfers (AXFR) or exceptionally large responses.

When a DNS Virtual Server is incorrectly configured with TCP, UDP-based DNS queries are dropped, causing all requests to fail.

Why the other options are incorrect:

A . Protocol profile (Client) to DNS_OPTIMIZED

A DNS profile enhances DNS functionality but does not correct an incorrect transport protocol configuration.

B . Type to Performance (HTTP)

Performance (HTTP) Virtual Servers are designed for HTTP traffic and are not suitable for DNS services.

C . Source Address to 192.168.10.0/24

The existing source IPs already fall within the allowed range, so this setting does not address the failure.

Correct Resolution:

Changing the Protocol to UDP aligns the Virtual Server with standard DNS transport requirements, allowing DNS queries to be successfully processed and load-balanced.


Contribute your Thoughts:

0/2000 characters
Laticia
6 days ago
I'm not entirely sure, but I feel like adjusting the source address could help if the BIG-IP isn't recognizing the internal servers properly.
upvoted 0 times
...
Laurel
11 days ago
I remember we discussed how DNS typically uses UDP, so I think changing the protocol to UDP might be the right move here.
upvoted 0 times
...
Colton
16 days ago
The question mentions a virtual server, so I'm thinking the Type setting might be the key here. If it's not set to the right type, that could be causing the problem with the DNS queries.
upvoted 0 times
...
Yun
21 days ago
I'm leaning towards the Protocol profile (Client) option. Since it's a BIG-IP device, there might be some specific DNS optimization settings that need to be configured in the profile.
upvoted 0 times
...
Paola
26 days ago
Okay, let's think this through. The virtual server is load-balancing the DNS queries, so the Source Address option might be worth looking into. If the source IPs are not configured correctly, that could be causing the issue.
upvoted 0 times
...
Louann
1 month ago
Hmm, the question says the DNS queries are failing, so I'm guessing the issue is with the virtual server configuration. I'd start by checking the protocol setting and make sure it's set to UDP.
upvoted 0 times
...
Dan
1 month ago
I'm a bit confused here. The question mentions DNS queries, so I'm thinking the protocol should be UDP, but it also mentions a virtual server on a BIG-IP device, which makes me wonder if there's more to it.
upvoted 0 times
...

Save Cancel