M31-Ch5-Mid1

• You are the network manager for the westsim.private domain. The SRV1 server runs all file and print services for the network. In the DNS database, it has an A record that maps srv1.westsim.private to the IP address of 192.168.16.10. You want to create a PTR record that maps the IP address to the hostname. In which zone should you create the record?

16.168.192.in-addr.arpa

• You manage the intranet servers for EastSim Corp. The company network has three domains: eastsim.com, asiapac.eastsim.com, and emea.eastsim.com. The main company Web site runs on the web1.eastsim.com server with a public IP address of 101.12.155.99. A host record for the server already exists in the eastsim.com zone. You want Internet users to be able to use the URL http://www.eastsim.com to reach the Web site. What type of DNS record should you create?

CNAME.

• You administer a branch office connected to the main headquarters with WAN link. Servers in the branch office provide DNS and DHCP services. The company network has multiple domains, with a single domain representing the branch office. A DNS server called DC1 at the branch office holds the primary zone for the branch domain but holds no other zone files. DNS servers at headquarters provide name resolution for hosts in other domains. One day, you come to work to find a number of customer service complaints. They all report something similar—client can resolve local host names, but cannot resolve host names for other domains on the network. You contact the enterprise administrator and are told that the IP address for the DNS server that was being used previously as a forwarder for the branch office has been assigned to 10.155.11.15. What should you do to fix the problem?

Configure DC1 to forward name resolution request to 10.155.11.15.

• You are the system administrator for WestSim Corp. You have been assigned to set up a new branch office in Tulsa. The branch will be represented by a single domain. You install a single DNS server called TulsaDNS and configure a primary zone for the branch office domain. You test name resolution and find that hosts can only resolve names for hosts within the domain. You need to enable clients in the Tulsa location to resolve names for hosts in other domains within your private network. You would like to minimize traffic across the WAN link between the sites. What should you do?

Configure TulsaDNS to use forwarders.

You manage a single private domain called westsim.private. All DNS servers run Windows Server 2012 R2. Client computers run Windows 8, and are members of the westsim.private domain. Client. Computers have NetBT disabled, and use only DNS for name resolution. You have a group of computers that use only NetBIOS names and do not use DNS. Your network does not have a WINS server. You need to enable all Vista client computers to resolve host names for the NetBIOS computers. What should you do?

Configure a GlobalNames zone. Create records in the zone for all NetBIOS computers.

• You are a system administrator for WestSim Corp. As part of new security initiative, the IT department has developed a custom application that reports the host name of all clients that try to access three sensitive servers in the Accounting department. The application has been working fine for the last three months. The company expands and adds a new building with a LAN connection to the rest of the network. This building has its own subnet, 192.168.5.0. You create a scope on an existing DHCP server for this subnet. During a random check of the reporting software, you discover that the application reports only the IP address but not the host name of clients on the new subnet. Everything works as designed for hosts on other subnets. You check the DNS database and find that none of the hosts on that subnet have an associated PTR record. What should you do?

Create a primary reverse lookup zone for subnet 192.168.5.0.

• You are the network administrator for a company that has just implemented Windows Server 2012 R2. To provide Internet access for your corporate office, you have decided to use a firewall that provides NAT. On the private network, you install and configured DNS on a Windows Server 2012 R2 server to provide name resolution. After you finish the configuration, you realize that no one is able to access the Internet, but they are able to contact internal server by their FQDN. A ping test using the IP address of Internet hosts is successful. You decide to check the forwarders setting on the DNS server, but the option to configure forwarders is grayed out. What should you do?

Delete the root forward lookup zone on the internal DNS server.

• Your company uses westsim.com as its public Internet domain name. Your private network has a single Active Directory domain named westsim.local. All westsim.local authoritative DNS server are configured to forward DNS requests across a firewall to external westsim.com authoritative DNS servers. Based on your security policy, the westsim.local authoritative DNS server are not to contact to other computers across the firewall. You manage all DNS server that are authoritative for the westsim.com and westsim.local DNS domains. All client are members of the westsim.local Active Directory domain, and are configured to use westsim.local authoritative DNS servers. Currently, all DNS servers have a root zone. Also, all DNS servers have the default configured cache.dns file in their %systemroot%\dns folder. Client computers on your network must resolve names in the Internet namespace and names in the westsim.local domain. You need to configure your company's DNS servers to meet these requirements. What should you do? (Choose three.)

Delete the rootzone on all westsim.local authoritative DNS servers, Delete the root zone on all westsim.com authoritative DNS servers, Delete the cache.dns file on all westsim.local authoritative DNS servers.

• You manage the DNS servers for the eastsim.com domain. You have a domain controller named DC1 that holds an Active Directory-integrated zone for the eastsim.com zone. You would like to configure DC1 to use forwarders and root name servers to resolve all DNS name request for unknown zones. You edit the DNS server properties for DC1. On the forwarders tab, you find that the Use root hints if no forwarders are available option is disabled. You also find that the entire root is disabled, and you are unable to add any root hint servers. You need to configure the server to use the Internet root name servers for name resolution. What should you do?

Delete the zone named . on DC1.

You manage a company network with a single Active Directory domain running on two domain controllers. The two domain controllers are also DNS servers, and hold an Active Directory integrated copy of the zone used on the private network. The network has five subnets, with DHCP servers delivering IP address and other configuration to host computers. All host computers run Windows 7. You want to ensure that all client computers use the DNS server for DNS hostname resolution. Hosts should not be able to automatically discover DNS hostnames, even for computers on their own subnet. What should you do?

Edit the default domain group policy object (GPO). Enable the Turn off Multicast Name Resolution policy.

• The image shows the current scavenging settings for the eastsim.com domain. As you check records in the zone, you find several records that have not been updated for 16 days or longer. You need to make sure that records are automatically removed if they have not been updated in the last 14 days. What should you do?

Enable automatic scavenging zone.

• You are setting up a new network in a single location with a single domain named eastsim.com. All servers run Windows Server 2012 R2, and all clients run Windows 8. You install a DHCP server and configure it with a scope for the single subnet. You install a DNS server with a primary zone for the domain. You want to use dynamic updates DNS records in the zone automatically. What should you do?

Enable dynamic updates on the eastsim.com zone.

• You manage the DNS server for the eastsim.com domain. You have a domain controller named DNS1 that holds a standard primary zone for the eastsim.com zone. You would like to configure DNS1 to use forwarders for all unknown zones. You edit the DNS server for DNS1. On the forwarders tab, you find that the Use root hints if not forwarders are available option is disabled. You also find you are unable to edit the forwarders list. What should you do?

Enable recursion on DNS1.

• You are the network administrator for a single domain with three subnets. Two subnets have all Windows 8 computers. The conference room uses the third subnet. Traveling salesman come to the conference room and plug in their laptops to gain network access. You have configured a DHCP server to deliver configuration information to hosts on this subnet. DNS is configured for dynamic updates. Overtime, you notice that the size of the DNS database continues to grow. It is beginning to have an adverse effect on DNS server performance. What should you do?

Enable scavenging of stale resource records on the zone.

• Listed below are several DNS record types.

Identify a domain controller - SRV Identify a mail server - MX Map host name to an IPv4 address - A Map an IPv4 address to a host name - PTR

• Your company's internal namespace is westsim.local. this domain has two additional child domains named support.westsim.local and research.westsim.local. Due to security concerns, your company's internal network is not connected to the Internet. ff. are the DNS servers that you manage for your company: o Dns1, authoritative for. and westsim.local, IP address = 192.168.1.1 o Dns2, authoritative for support.westsim.local, IP address = 192.168.2.1 o Dns3, authoritative for research.westsim.local, IP address = 192.168.3.1 All internal DNS domains are Active Directory integrated domains. You configured Dns1 with appropriate delegation records for the child zones. You need to configure root hints for Dn2 and Dns3. What should you do?

In DNS Manager, edit the properties for Dns2 and Dns3. On the Root Hints tab, remove all entries, and then add an entry for Dns1.

• You manage the intranet servers for EastSim Corp. The company network has three domains: eastsim.com, asiapac.eastsim.com, and emea.eastsim.com. The main company Website runs on the web1.eastsim.com server with a public IP address of 101.12.155.99. A host record for the server already exists in the eastsim.com zone. You want Internet users to be able to use the URL http://eastsim.com to react the Website. What should you do?

In the eastsim.com domain, create a CNAME record with a blank name pointing to server web1.eastsim.com.

• Mary is in charge of DNS administrator for her network. The private network consists of a single Active Directory domain called private.westsim.com. DNS data is stored in an Active Directory-integrated zone. The Sales department has just installed a Web server called SalesWeb. This server will host an intranet site for use by the Sales Team. They want this server to be accessible by using the URL sales.westsim.com. What should Mary do?

In the westsim.com domain, create a CNAME record called sales. Identify SalesWeb.private.westim.com as the target.

• The image shows the current scavenging settings for eastsim.com domain. Host (A) records within the zone are configured to refresh themselves every 7 days. You notice that sometimes a host record will be removed from the database, even though the host still exists on the network. You need to make sure that records are only removed when the host no longer exists. What should you do?

Increase the refresh interval setting.

• The serial number contained within the Start of Authority (SOA) record for a DNS zone on the primary server has been incremented. What condition does this indicate?

Information within the DNS zone has been changed and secondary servers should initiate a zone transfer.

• Emma is a system administrator for WestSim Corporation. The network has multiple domains with DNS and DHCP services configured in each domain. All servers are running Windows Seerver 2012 R2 and all clients are running Windows 8. All hosts are members of the acct.westsim.com domain, the records of which are stored in a primary zone. As part of a new security initiative, The IT department has developed a custom application that reports the host name of each client tries to access three sensitive servers in the Accounting department. Emma has been asked to test the new application. During a random test, she finds that the program is not reporting the host names for some clients, even though it properly records their IP addresses. Emma realized that the custom application submits reverse lookup request to the DNS server to discover the host name for the specified IP address. She also realizes that clients whose host names could not be notified have manually configured static IP addresses on subnet 192.168.3.0, using a default subnet mask. What should you do?

Manually create a PTR record in the 3.168.192.in-addr.arpa zone for each host.

• You are the network administrator for your company's network. Your network consists of 8 Windows Server 2012 R2 computers, 500 Windows 7 client computers, and 5 Unix servers. One of your Windows 2012 R2 computers is your DNS server. The DNS zone is configured as an Active Directory-integrated zone. The DNS zone is also configured to allow dynamic updates. Users report that although they can access the Windows 7 computer by host name, they cannot access the UNIX servers by host name. What should you do?

Manually enter A (host) records for the UNIX servers in the zone database.

• Matching each zone type on left with corresponding characteristics on the right.

Multiple servers hold read-write copies of the zone data - Active Directory-integrated The only writeable copy of the zone database - Primary A read-only copy of the zone database - Secondary Initiates zone transfers - Secondary The replication scope specifies domain controllers that can received a copy of zone data - Active Directory-intergrated

• Your company's Internet namespace is westsim.com, and your company's internal namespace is internal.westsim.com. Your network has two Windows Server 2012 R2 DNS servers: DNS1 and DNS2. DNS1 is configured with a root zone and is authoritative for the internal.westsim.com domain. DNS2 is authoritative for the westsim.com domain. All client computers are members of the internal.westsim.com domain and are configured to use DNS1 as the primary DNS server. Client computers on your internal network cannot resolve Internet DNS names. You verify that client computers can resolve internal DNS names successfully. You also verify that the internal DNS server is configured to forward all unresolvable DNS names to the company's Internet DNS server. You must keep your internal network as secure as possible while making sure that all client computers can resolve Internet DNS names successfully. What should you do?

On DNS1, delete the . zone.

• Your network has a single domain named southsim.com. All client computers run Windows 7 or Windows 8. DNS data for the domain is stored on the ff. servers: o DNS1 holds the primary zone for soutsim.com o DNS2 and DNS3 hold secondary zones for southsim.com All three DNS servers are located on domain controllers. The DNS zone for the domain is configured to allow dynamic updates. You want to allow client computers to send DNS updates to any of these servers, and allow any of three servers to update DNS records in the zone. What should you do?

On all three servers, change the zone type of the DNS zone to Active Directory integrated.

• Your Active Directory network uses an internal DNS namespace of private.westsim.com. Several other active directory domains also exist, which are children to the private.westsim.com domain. On the Internet, your company uses westsim.com for its public domain name. Your company managers its own DNS servers that are authoritative for the westsim.com zone. The private.westsim.com zone has been delegated to your company's Active Directory domain controllers, which are also DNS servers. Computers that are members of the private.westsim.com domain and all child domains must be able to resolve DNS names of Internet resources. However, to help secure your network, DNS queries for resources in the private.westsim.com domain and all child domains must never be sent to Internet DNS severs. Queries for Internet names must go first to your public DNS server that is authoritative for the westsim.com domain. You need to configure your company's DNS server to meet these requirements. What should you do? (Choose two.)

On all DNS servers that are authoritative for the private.westsim.com zone or any child zone, create a forwarders list. Forward to DNS server that are authoritative for the parent zone, Delete root hints to Internet DNS servers on all DNS servers that are authoritative for the private.westsim.com zone or any child zone.

You manage the branch office for your company network. The branch office has a single Active Directory domain, branch1.westsim.private. All computers in the branch office are members of the domain. All client computers run Windows 7, and run only IPv6. The branch office consists of two subnets and 50 host computers. Each subnet has its own DHCP server, while a single server on Subnet2 is both the domain controller and DNS server. Dynamic updates are enabled on the DNS zone. You want to make sure that all hosts on Subnet1 can continue to connect to the shared printer by name, even if the DNS server is unavailable. What should you do?

On each client on Subnet1, make sure that LLMNR is enabled.

• You are the DNS manager for the soutsim.com domain. You want to configure your single DNS server so that it never uses forwarders for name resolution. What should you do?

On the DNS server, disable recursion.

• You are the DNS manager for the eastsim.com domain. You have a domain controller named DC1 that holds an Active Directory-integrated zone for the eastsim.com zone. Users have complained about multiple DNS name resolution errors. You have examined the configuration, but can't see anything wrong. To help identify the problem, you would like to track the DNS packets sent and received by the server, as well as filter by IP address. What should you do?

On the DNS server, enable debug logging.

You are the administrator for the corp.westsim.com domain. The network has two child domains, acct.corp.westsim.com and sales.corp.westsim.com. You need to configure DNS name resolution properties on the Srv2.sales.corp.westsim.com server. When an unqualified name is submitted for name resolution, you want the server to search using the ff. suffixes: o sales.corp.westsim.com o acct.corp.westsim.com o corp.westsim.com o westsim.com What should you do?

On the DNS tab, configure search suffixes of sales.corp.westsim.com, acct.corp.westsim.com, corp.westsim.com, and westsim.com.

You are the administrator for the corp.westsim.com domain. The network has two child domains, acct.westsim.com and sales.westsim.com. You need to configure DNS name resolution properties on the Srv2.sales.corp.westsim.com server. When an unqualified name is submitted for name resolution, you want the server to search using the ff. suffixes: o sales.corp.westsim.com o corp.westsim.com o westsim.com You want to configure the solution with the least amount of effort possible. What should you do?

On the DNS tab, select Append parent suffixes of the primary DNS suffix.

• Your company has an Internet domain of westsim.com Your internal network has three Active Directory named westsim.local, support.westsim.local and research.westsim.local. You install a server named SL-SRV1 as a member of the westsim.local domain. You configure SL-SRV1 with a static IP address of 192.168.0.23. You configure the server to dynamically register its DNS name. Clients in the support.westsim.local domain need to access the SL-SRV1 server. Some users in the support.westsim.local domain are accustomed to using the support.westsim.local suffix when accessing network resouces. To accommodate these users, you want to dynamically register the name SL-SRV1.support.westsim.local name in addition to the SL-SRV1.westsim.local name in DNS. What should you do?

On the SL-SRV1 server, edit the advanced TCP/IP properties of the server's local area connection. Add a connection-specific suffix of support.westsim.local. Apply the changes, then run Ipconfig /registerdns.

• You are a network engineer for your company. Your private network uses the namespace private.westsim.com. All servers run Window Server 2012 R2. All client computers run Windows 8.1. You manage the DNS servers that are authoritative for the private.westsim.com zone. Two servers are authoritative for the zone: DNS1 hosts the primary DNS zone, and DNS2 holds a secondary copy of the zone. You use the DNS consol to manually create an A resource record for a new Web server on your network that is configured with a static IP address. From your workstation, you open a browser and try to connect to the new Web server. You get an error message stating that the Web site is not found. You run ipconfig /all and find that your workstation is configured to use the DNS1 server as its preferred DNS server. As you continue to troubleshoot the problem, you discover that you incorrectly typed the server's IP address while creating its resource record. You correct the IP address in the A record in the DNS console and retry connecting to the Web site. However, you get the same error on your workstation. What should you do?

On your computer, run ipconfig /flushdns.

• You have a computer that runs Windows 7 connected to a domain network. After reconfiguring the static address of an internal Web server named WEB3, your computer can no longer connect to WEB3. However, other users are still able to connect to the same Web server. You need to be able to connect to the website on the WEB3 server. What should you do?

Run ipconfig /flushdns.

• The image shows the current scavenging settings for the eastsim.com zone. Automatic scavenging has been configured on the zone to run every hour. You want to modify the existing settings so that DNS records are deleted within 10 days after they have not been refreshed. What should you do?

Set the refresh interval to 3.

You manage the branch office for your company network. The branch office has a single Active Directory domain, branch1.westsim.private. All computers in the branch office are members of the domain. All client computers run Windows 7, and run only IPv6. The branch office consists of two subnets and 50 host computers. Each subnet has its own DHCP server, while a single server on Subnet2 is both the domain controller and DNS server. Dynamic updates are enabled on the DNS zone. You want to make sure that all hosts on Subnet1 can continue to connect to the shared printer by name, even if the DNS server is unavailable. You need to accomplish this with the least amount of effort as possible. What should you do?

Use LLMNR for clients on Subnet1, and a static HOSTS file entry for clients on Subnet2.