CIT 416

Réussis tes devoirs et examens dès maintenant avec Quizwiz!

What type of DNS record is used by mail services to find the mail server for a domain?

MX record

The FQDN of a name server that has authority over a domain is noted in what type of DNS record?

NS

What DNSSEC record is returned when the requested resource record doesn't exist and is used to fulfill the authenticated denial of existence security feature of DNSSEC?

Next Secure (NSEC)

What option in the Zone Aging/Scavenging Properties dialog box will prevent DNS record time stamps from being updated too often?

No-refresh interval

What RFC defines the DNS resource record types?

RFC 1183

Which of the following specifies how often a secondary DNS server attempts to renew its zone information?

Refresh interval

Which DNS zone category contains PTR records that map IP addresses to names and is named after the IP network address of the computers whose records it contains?

Reverse lookup zone

When data within a zone changes, what information in the SOA record changes to reflect that the zone information should be replicated?

Serial number

Which of the following DNS record types specifies a hostname and port number for servers that supply specific services?

Service Location

An administrator working on a Windows Server 2016 Server Core installation needs to disable DHCP all interfaces on the server. What PowerShell command should be used?

Set-NetIPInterface

Which PowerShell cmdlet displays the records in the DNS server cache, including the name, record type, timestamp, TTL, and record data?

Show-DnsServerCache

Which feature is used to protect against DNS cache poisoning?

Socket pool

What specific record type is found in every zone and contains information that identifies the server primarily responsible for the zone as well as some operational properties for the zone?

Start of Authority Records

What type of zone contains only an SOA record, one or more NS records, and the necessary glue A records to resolve NS records?

Stub zone

What protocol in the TCP/IP suite provides reliable data transfer between applications at the transport-layer?

TCP

What does a NS record specify?

The FQDNs and IP addresses of authoritative servers for a zone

On a server hosting secondary zones, how can an administrator request records from the entire zone?

Use nslookup command in interactive mode. Change the server to the primary DNS server for the zone server servername command, use ls -d domain (subbing in the name of the zone you want to verify for "domain")

How does DNS resolve an NS record to an IP address?

Using a glue A record

How should an administrator test the functionality of DNS operation on a domain controller, as well as troubleshoot issues with DNS forwarders, delegation, dynamic updates, and record registration?

Using dcdiag /test:dns

How many bits make up an IPv4 address, versus an IPv6 address?

32;128

The 169.254.78.9 IP address is an example of what type of IP address?

Automatic Private IP Addressing (APIPA)

What type of DNS record is used to contain an alias for another record, allowing for the use of different names for the same host?

CNAME record

Which feature allows you to prevent DNS records from being overwritten until the TTL is expired by a specified percentage?

Cache locking

What type of DNS servers field DNS queries, send iterative queries to upstream DNS servers, or send requests to forwarders and then store the results?

Caching-only server

What option can be used by a system administrator to ensure that dynamic updates are made only by known clients when you have a standard primary zone?

Change the zone to an Active Directory-integrated zone

In a ping response packet, what does the TTL field indicate?

How many hops the packet can go through before the packet is expired and discarded

What type of DNS query causes a DNS server to respond with the best information it currently has in its local database?

Iterative query

Why are SRV records critical to the operation of an Active Directory domain?

Without the necessary SRV records, client computers couldn't find a domain controller or global catalog server to sign in or join a domain

What formatted unit of data has an error-checking code called the frame check sequence and is ready to be transferred to the network medium?

frame

A valid reverse lookup zone consists of the network ID's octets in reverse order, with what at the end of the name?

in-addr.arpa

What technique is used by computers to determine the network ID of an IP address?

logical and operation

What specific server configuration is connected to different IP networks using two or more NICs?

multihomed

What command can be used to send test queries to a target DNS server?

nslookup

What DNS policy specifies how DNS queries are handled by the DNS server?

query resolution policy

What command line utility can be used to display the default route, as well as all routing table entries?

route

What contains the destination and source port numbers used to identify Application-layer protocols, and is the Transport-layer data unit?

segment

Which of the following is a DNS record that is no longer valid either because the resource is offline for an extended period or permanently or because the resource's name or address has changed?

stale resource record

Which of the following allows the reallocation of bits from the network portion of an IP address to the host portion, combining subnets?

supernetting

What command displays the route packets take between two computers?

tracert

What type of IPv6 address specifies a single interface on a device?

unicast

Select the feature in Windows Server 2016 that has the ability to support resource records of a type unknown to the DNS server on Windows Server 2016.

unknown record support

What process is taking place when one DNS server transfers zone changes to another DNS server?

zone repetition

Which of the following is a subset of a zone where a zone can contain multiple zone scopes and each zone scope has its own set of resource records?

zone scope

DNS audit events track changes to a DNS server such as when zone or resource changes are made.

True

The MX record type is used to designate mail exchangers or mail servers for e-mail.

True

The entire DNS tree is called the DNS namespace

True

You can configure an internal DNS server as a root server by creating an FLZ with the "." name.

True

What port is used by DNS servers to issue queries?

UDP 53

Why might an organization want a single DNS server to make all external queries?

Great response time for authoritative nameservers

DNS clients maintain a text file called Hosts that can contain static DNS entries, within what Windows directory is this file stored?

%systemroot%\System32\drivers\etc

In CIDR notation, the subnet mask 255.255.255.0 is represented by what prefix?

/24

What command option for the dnscmd command lists all zones on the server?

/enumzones

What ipconfig command line option can be used to delete cached DNS information from memory?

/flushdns

When DNS forwarders or conditional forwarders are configured, what order will a Windows DNS server use to attempt to resolve DNS queries?

1. From locally stored zone resource records; 2. From the DNS cache; 3. From conditional forwarders (if condigured and the domain name matches); 4. From traditional forwarders (if configured); 5. Recursively by using root hints (only if no traditional forwarder is configured).

The decimal number 168 can be represented using what series of binary digits below?

10101000

The default setting for a secondary zone's refresh interval is how many minutes?

15 minutes

The binary number 11000000 represents what number below in decimal?

192

How many usable host addresses exist within a network with a CIDR prefix of /23?

510

On which UDP port do DHCP servers listen for DHCP client messages?

67

The default scavenging value is set to what value by default?

7 days

An IPv4 octet represents how many binary bits?

8

What DNS record type is used for an IPv6 host record?

AAAA

Which PowerShell cmdlet below creates a stub zone?

Add-DNSServerStubZone

What PowerShell cmdlet can be used to create a new Active Directory integrated primary zone?

Add-DnsServerPrimaryZone

What protocol resolves a computer's IPv4 address to its physical, or Media Access Control (MAC) address?

Address Resolution Protocol (ARP)

How does the GlobalNames zone (GNZ) feature work?

Allows administrators to add single-label names to DNS. This gives client computers the ability to resolve the names without including a DNS suffix in the query. It can also make mobile users' access to necessary servers more convenient.

What is a conditional forwarder?

Allows queries for particular domains to particular name servers and all other unresolved queries to a different server

The IP address 129.53.82.20 falls under what IP address class?

Class B

What specific parameter will allow you to base a recursion policy on the subnet address of the clients?

ClientSubnet

What feature in Windows Server 2016 is used to provide information about the certification authority (CA) used by your domain when a client is requesting DNS information for your domain?

DANE

What specific protocol provides automatic IP address configuration and operates at the Application layer?

DHCP

What specific type of DNS attack uses public DNS servers to overwhelm a target with DNS responses by sending DNS queries with spoofed IP addresses ?

DNS aplification attack

How can a master server be configured to make a secondary server request zone transfers immediately after a zone change?

DNS notify

What specific term is best used to describe a computer making a DNS query?

DNS resolver

What do DNS resolvers use to verify the digital signature in Resource Record Signature records?

DNSKEY

Which of the following is a suite of features and protocols for validating DNS server responses?

DNSSEC

A Resource Record Signature (RRSIG) key contains the signature for a single resource record, such as an A or an MX record.

True

A zone that is not integrated into Active Directory is referred to as a standard zone, and the zone data is stored in a text file.

True

Which of the following options can an administrator enable to improve DNS security?

Do not allow dynamic updates

Which type of resource record addition allows computers to register or update their own DNS records, or DHCP can update DNS on behalf of the clients when the clients lease a new IP address?

Dynamic DNS

A major advantage of using Active Directory-integrated zones is the ability to limit manual updates to only verified domain members.

False

An iterative query instructs the DNS server to process the query until it responds with an address that satisfies the query or with an "I don't know" message.

False

Resource records are a grouping of DNS information that belongs to a contiguous portion of the DNS namespace.

False

The use of WINS forward lookup is enabled by default.

False

When serious DNS debugging is warranted, you can enable debug logging in the server's Advanced dialog box.

False

What type of DNS server is a DNS server to which other DNS servers send requests they can't resolve themselves?

Forwarder server

Which PowerShell cmdlet allows you to see the default values and the status of Response Rate Limiting (RRL)?

Get-DNSServerRRL

How can an administrator retrieve the IP address settings of a computer using PowerShell?

Get-NetIPConfiguration

Who is responsible for the management of the Internet root servers?

Internet Assigned Numbers Authority (IANA)

An authoritative server for a domain holds a partial copy of a zone's resource records.

True

What DNS record type is used to resolve a known IP address to a hostname?

Pointer Record

Which DNS zone type contains a read/write master copy of all resource records for the zone?

Primary zone

In a zone's Properties dialog box, what option is unavailable under Dynamic updates for only standard zones?

The Secure only option

The responsible person section of an SOA record contains what information?

The email address of the responsible person

What option is available on a Host A record to tell the system how long the record should remain in the database after it was created or last updated?

Time to live

Why might an administrator want to disable the recursive query functionality when they have a public DNS server containing resource records for their publicly available servers?

To improve performance

When a dynamic DNS record is created, what is the TTL value used for?

To specify how long the record should remain in the DNS database

The .com, .net, and .edu are all examples of what level of the DNS naming hierarchy?

Top-level domain names

What DNSSEC record is returned when the requested resource record doesn't exist and is used to fulfill the authenticated denial of existence security feature of DNSSEC?

_msdcs

Which Windows command line utility below can be used to check for resource records on a server, verify delegations, verify resource records needed for AD replication, and perform e-mail connectivity tests?

dnslint


Ensembles d'études connexes

Chapter 7 Study Guide Photosynthesis

View Set

Cardiovascular, Hematologic, and Lymphatic Systems

View Set

Chapter 17 Lecture Module Questions

View Set

Algebra II: Expressions, Equations, and Inequalities Unit Test

View Set