3. Configure DNS

Which of the following DNS command line utilities performs query testing of the DNS domain namespace?

nslookup

Which of the following is used to map one domain name to another and provides help in running multiple services?

CNAME

Which of the following is a DNS server on a network that is used to forward DNS queries according to the DNS domain name in the query?

Conditional forwarder

You are the network administrator for a large company that has one main site and one branch office. Your company has a single Active Directory forest, ABC.com. You have a single domain controller (ServerA) in the main site that has the DNS role installed. ServerA is configured as a primary DNS zone. You have decided to place a domain controller (ServerB) in the remote site and implement the DNS role on that server. You want to configure DNS so that if the WAN link fails, users in both sites can still update records and resolve any DNS queries. How should you configure the DNS servers?

Configure ServerB as an Active Directory Integrated zone and convert ServerA to an Active Directory Integrated zone.

Which of the following returns a 128-bit IPv6 address that is used to map hostnames to an IP address of the host?

AAAA

Which of the following zone types contains the master copy of the zone database?

Primary zone

Which of the following operations is not supported by Active Directory?

Publishing applications to computers

Which of the following elements of DNS generates DNS queries and sends them to a DNS server for fulfillment?

Resolver

Which of the following is used to rotate all resource record (RR) types specified in a query answer if multiple RRs are given?

Round robin

You have been given a server that contains three HBAs. Each card can access the storage over a separate path. The application that runs on the server can exceed the usage of a single path. Which of the following MPIO options should be selected to provide the needed bandwidth as well as minimal redundancy?

Round robin

Your IT team has been informed by the compliance team that they need copies of the DNS Active Directory Integrated zones for security reasons. You need to give the Compliance department a copy of the DNS zone. How should you accomplish this goal?

Run dnscmd /zoneexport.

Which of the following features is used to map the name of a service to the DNS computer name of a server?

SRV record

Which of the following is used for mapping a DNS domain name to an IP address used by a computer?

A

You are the network administrator for Stellacon Corporation. Stellacon has two trees in its Active Directory forest, stellacon.com and abc.com. Company policy does not allow DNS zone transfers between the two trees. You need to make sure that when anyone in abc.com tries to access the stellacon.com domain, all names are resolved from the stellacon.com DNS server. What should you do?

Configure conditional forwarding on the abc.com DNS server for stellacon.com.

Which of the following is a system used for naming computers and network services that are organized into a hierarchy of domains?

DNS

Which of the following servers is used to convert host names into IP addresses?

DNS server

Which of the following functions enables a DNS server to use source port randomization when issuing DNS queries?

DNS socket pool

Which of the following features adds security to the DNS protocol by providing the ability for DNS servers to validate DNS responses?

DNSSEC

You are the network administrator for the ABC Company. Your network consists of two DNS servers named DNS1 and DNS2. The users who are configured to use DNS2 complain because they are unable to connect to Internet websites. The following table shows the configuration of both servers: The users who are connected to DNS2 need to be able to access the Internet. What needs to be done?

Delete the .(root) zone from DNS2 and configure conditional forwarding on DNS2.

You are the network administrator for a small company with two DNS servers: DNS1 and DNS2. Both DNS servers reside on domain controllers. DNS1 is set up as a standard primary zone, and DNS2 is set up as a secondary zone. A new security policy was written stating that all DNS zone transfers must be encrypted. How can you implement the new security policy?

Delete the secondary zone on DNS2. Convert both DNS servers to use Active Directory Integrated zones.

Your company consists of a single Active Directory forest. You have a Windows Server 2012 R2 domain controller that also has the DNS role installed. You also have a Unix-based DNS server at the same location. You need to configure your Windows DNS server to allow zone transfers to the Unix-based DNS server. What should you do?

Enable BIND Secondaries.

You are the network administrator for your organization. A new company policy states that all inbound DNS queries need to be recorded. What can you do to verify that the IT department is compliant with this new policy?

Enable DNS debug logging.

What is the function of the mail exchanger resource record?

Identifies a system that directs email traffic sent to an address in the domain to the individual recipient, a mail gateway, or another mail server

You are responsible for DNS in your organization. You look at the DNS database and see a large number of older records on the server. These records are no longer valid. What should you do?

In the zone properties, enable Zone Aging and Scavenging.

Which of the following is true about the time to live (TTL) attached to a DNS record?

It is used to determine how long to cache retrieved results.

Which of the following requests immediately responds with the best information it possesses at the time?

Iterative query

Which of the following is used to map a reverse DNS domain name on the basis of the IP address of a computer that points to the forward DNS domain name of that computer?

PTR

Which of the following is a zone that stores a master copy of zone data in a local file or in AD DS?

Primary

You are the network administrator for a midsize computer company. You have a single Active Directory forest, and your DNS servers are configured as Active Directory Integrated zones. When you look at the DNS records in Active Directory, you notice that there are many records for computers that do not exist on your domain. You want to make sure that only domain computers register with your DNS servers. What should you do to resolve this issue?

Set dynamic updates to Secure Only.

Which of the following tabs contains the minimum TTL setting that controls DNS name caching for the zone?

Start of Authority tab

Which of the following keeps delegated zone information current and improves name resolution?

Stub

You are the network administrator for a Windows Server 2012 R2 network. You have multiple remote locations connected to your main office by slow satellite links. You want to install DNS into these offices so that clients can locate authoritative DNS servers in the main location. What type of DNS servers should be installed in the remote locations?

Stub zones

To test whether a DNS server is answering queries properly, you can use which of the following tools?

The nslookup tool

Which of the following is used by name servers and some DNS clients to find out the amount of time that a name must be cached?

Time to Live

Which of the following is an authoritative source of information about each DNS domain name?

Zone

Which of the following features of the Domain Name System (DNS) can be used to improve performance? (Choose all that apply.)

Zone delegation Caching-only servers DNS forwarding Secondary servers