Study Guide Server
What command option for the dnscmd command lists all zones on the server?
/enumzones
What three-digit DHCP option defines the DNS domain name that will be configured on DHCP clients?
015
What predefined option within DHCP may be necessary for some configurations of Windows Deployment Server?
060 PXEClient
When using WDS, what two DHCP server options must be configured if the DHCP server is on a different server or different subnet from the WDS server?
066 and 067
What is the absolute minimum value the DHCP lease duration can be set to?
1 minute
The default setting for a secondary zone's refresh interval is how many minutes?
15 minutes
What do DNS resolvers use to verify the digital signature in Resource Record Signature records?
DNSKEY
Which of the following is a suite of features and protocols for validating DNS server responses?
DNSSEC
Which PowerShell cmdlet allows you to see the default values and the status of Response Rate Limiting (RRL)?
Get-DNSServerRRL
What RFC defines the DNS resource record types?
RFC 1183
Which of the following specifies how often a secondary DNS server attempts to renew its zone information?
Refresh interval
What DNS policy specifies how DNS queries are handled by the DNS server?
query resolution policy
A valid reverse lookup zone consists of the network ID's octets in reverse order, with what at the end of the name?
in-addr.arpa
Select the feature in Windows Server 2016 that has the ability to support resource records of a type unknown to the DNS server on Windows Server 2016.
unknown record support
What process is taking place when one DNS server transfers zone changes to another DNS server?
zone repetition
Which of the following is a subset of a zone where a zone can contain multiple zone scopes and each zone scope has its own set of resource records?
zone scope
What option can be used by a system administrator to ensure that dynamic updates are made only by known clients when you have a standard primary zone?
Change the zone to an Active Directory-integrated zone
What specific parameter will allow you to base a recursion policy on the subnet address of the clients?
ClientSubnet
Zone control is the transfer of authority for a subdomain to a new zone.
False
Zone queries show zone transfers between primary and secondary zone servers.
False
The DHCP server service can be configured to automatically discard A and PTR records when a lease is deleted.
True
The MX record type is used to designate mail exchangers or mail servers for e-mail.
True
The Windows Server DHCP relay agent function is configured as part of the Routing role service of the Remote Access server role.
True
The entire DNS tree is called the DNS namespace.
True
When a subdomain has been delegated to a zone on another server, the DNS server hosting the parent zone maintains only an NS record pointing to the DNS server hosting the delegated zone.
True
When the ipconfig /release command is run, the DHCP client on the computer sends a DHCPRELEASE message out.
True
You can configure an internal DNS server as a root server by creating an FLZ with the "." name.
True
Where are DHCP database backups stored by default?
%systemroot%\System32\dhcp\backup\DhcpCfg
DNS clients maintain a text file called Hosts that can contain static DNS entries, within what Windows directory is this file stored?
%systemroot%\System32\drivers\etc
A DHCPINFORM request sent by a client will receive what message number from a DHCP server as an acknowledgment?
5
A DHCP server sends information back to a client on what UDP port?
68
The default scavenging value is set to what value by default?
7 days
If a DHCP server does not respond to a client's first renewal request, how long will the client keep its current address until initiating the next lease renewal request?
87.5% of lease interval expired
What DNS record type is used for an IPv6 host record?
AAAA
What PowerShell cmdlet can be used to create a new Active Directory integrated primary zone?
Add-DnsServerPrimaryZone
Which PowerShell cmdlet below creates a stub zone?
Add-DnsServerStubZone
What type of DNS record is used to contain an alias for another record, allowing for the use of different names for the same host?
CNAME record
Which feature allows you to prevent DNS records from being overwritten until the TTL is expired by a specified percentage?
Cache locking
What type of DNS servers field DNS queries, send iterative queries to upstream DNS servers, or send requests to forwarders and then store the results?
Caching-only server
What feature in Windows Server 2016 is used to provide information about the certification authority (CA) used by your domain when a client is requesting DNS information for your domain?
DANE
What type of DHCP packet first initiates the IP address request sequence?
DHCPDISCOVER
What specific type of DNS attack uses public DNS servers to overwhelm a target with DNS responses by sending DNS queries with spoofed IP addresses ?
DNS amplification attack
What specific term is best used to describe a computer making a DNS query?
DNS resolver
Which of the following options can an administrator enable to improve DNS security?
Do not allow dynamic updates
Which type of resource record addition allows computers to register or update their own DNS records, or DHCP can update DNS on behalf of the clients when the clients lease a new IP address?
Dynamic DNS
What type of DNS server is a DNS server to which other DNS servers send requests they can't resolve themselves?
Forwarder server
A DHCPDISCOVER message is sent as a unicast packet.
False
A major advantage of using Active Directory-integrated zones is the ability to limit manual updates to only verified domain members.
False
A stub zone is authoritative for the zone.
False
A superscope is a special type of scope that allows a DHCP server to service multiple IPv4 subnets on multiple physical networks, using IPv4 or IPv6.
False
A zone transfer report specifies whether a zone transfer is allowed.
False
An administrative scope is composed of multicast addresses intended to be used in a public network.
False
An iterative query instructs the DNS server to process the query until it responds with an address that satisfies the query or with an "I don't know" message.
False
DNSSEC provides confidentiality of data through the use of encryption.
False
Options configured at the server level affect all scopes and cannot be overridden by a scope option.
False
Resource records are a grouping of DNS information that belongs to a contiguous portion of the DNS namespace.
False
The use of WINS forward lookup is enabled by default.
False
When serious DNS debugging is warranted, you can enable debug logging in the server's Advanced dialog box.
False
When using load-balancing mode, one server is assigned as the active server that provides DHCP services to clients while the other server is placed in standby mode.
False
With stateful autoconfiguration, the node listens for router advertisement messages from a local router.
False
Who is responsible for the management of the Internet root servers?
Internet Assigned Numbers Authority (IANA)
Which of the following is true about the DnsAdmins group? (Choose all that apply.)
It has no members by default, It is a domain local group
What type of DNS query causes a DNS server to respond with the best information it currently has in its local database?
Iterative query
An IP address reservation is made by creating an association between an IP address and what type of client identifier?
MAC address
The FQDN of a name server that has authority over a domain is noted in what type of DNS record?
NS
What DNSSEC record is returned when the requested resource record doesn't exist and is used to fulfill the authenticated denial of existence security feature of DNSSEC?
Next Secure (NSEC)
What option in the Zone Aging/Scavenging Properties dialog box will prevent DNS record time stamps from being updated too often?
No-refresh interval
What DHCP option within the DHCPREQUEST packet contains a client's FQDN?
Option 81
What DNS record type is used to resolve a known IP address to a hostname?
Pointer Record
Which DNS zone type contains a read/write master copy of all resource records for the zone?
Primary zone
Which of the following DNS record types specifies a hostname and port number for servers that supply specific services?
Service Location
Which DNS zone category contains PTR records that map IP addresses to names and is named after the IP network address of the computers whose records it contains?
Reverse lookup zone
If a stub zone is a standard zone, what records will be updated through zone transfers? (Choose all that apply.)
SOA, NS
When data within a zone changes, what information in the SOA record changes to reflect that the zone information should be replicated?
Serial number
Which PowerShell cmdlet displays the records in the DNS server cache, including the name, record type, timestamp, TTL, and record data?
Show-DnsServerCache
Which feature is used to protect against DNS cache poisoning?
Socket pool
What specific record type is found in every zone and contains information that identifies the server primarily responsible for the zone as well as some operational properties for the zone?
Start of Authority Records
What type of zone contains only an SOA record, one or more NS records, and the necessary glue A records to resolve NS records?
Stub zone
In a zone's Properties dialog box, what option is unavailable under Dynamic updates for only standard zones?
The Secure only option
The responsible person section of an SOA record contains what information?
The email address of the responsible person
What must be done before a Windows DHCP server, with a scope already defined, can begin providing services?
The server must be authorized
How does a DHCP server respond to an IP request that can not be renewed?
The server sends a DHCPNACK
What option is available on a Host A record to tell the system how long the record should remain in the database after it was created or last updated?
Time to live
When a dynamic DNS record is created, what is the TTL value used for?
To specify how long the record should remain in the DNS database
The .com, .net, and .edu are all examples of what level of the DNS naming hierarchy?
Top-level domain names
A Resource Record Signature (RRSIG) key contains the signature for a single resource record, such as an A or an MX record.
True
A zone that is not integrated into Active Directory is referred to as a standard zone, and the zone data is stored in a text file.
True
An Active Directory partition is a special file that Active Directory uses to store domain information.
True
An authoritative server for a domain holds a partial copy of a zone's resource records.
True
DHCPv6 uses a DHCP Unique Identifier to lease an address and create reservations.
True
DNS audit events track changes to a DNS server such as when zone or resource changes are made.
True
Scavenging parameters set at the zone level override those set at the server level.
True
What port is used by DNS servers to issue queries?
UDP 53
How does DNS resolve an NS record to an IP address?
Using a glue A record
How should an administrator test the functionality of DNS operation on a domain controller, as well as troubleshoot issues with DNS forwarders, delegation, dynamic updates, and record registration?
Using dcdiag /test:dns
At what point does a client send a unicast packet to the DHCP server to request a lease renewal for its current IP address?
When the lease is 50% expired
Which of the following is a DNS zone level statistic available for each authoritative zone on a DNS server? (Choose all that apply.)
Zone queries, Zone transfers
What automatically created subdomain holds all the SRV records for Microsoft-hosted services, such as the global catalog, LDAP, and Kerberos?
_msdcs
Which Windows command line utility below can be used to check for resource records on a server, verify delegations, verify resource records needed for AD replication, and perform e-mail connectivity tests?
dnslint
Which of the following is a DNS record that is no longer valid either because the resource is offline for an extended period or permanently or because the resource's name or address has changed?
stale resource record
