• Shuffle
    Toggle On
    Toggle Off
  • Alphabetize
    Toggle On
    Toggle Off
  • Front First
    Toggle On
    Toggle Off
  • Both Sides
    Toggle On
    Toggle Off
  • Read
    Toggle On
    Toggle Off
Reading...
Front

Card Range To Study

through

image

Play button

image

Play button

image

Progress

1/52

Click to flip

Use LEFT and RIGHT arrow keys to navigate between flashcards;

Use UP and DOWN arrow keys to flip the card;

H to show hint;

A reads text to speech;

52 Cards in this Set

  • Front
  • Back
Zones
Zones are the databases in which DNS data is stored
dnscmd /clearcache
clears the server cache;
dnscmd /enumdirectorypartitions
shows the application directory partitions
available on the local server
dnscmd /info
provides a basic overview of
the DNS server confguration
dcdiag /test:replications
Test replication in the AD
repadmin /showrepl
Show replication partners
Primary Zone
A primary zone provides original read-write source data that allows the local DNS server to answer DNS queries authoritatively
zone is stored in a file instead of Active Directory
the primary zone file is named zone_name.dns

located in the %systemroot%\System32\Dns folder on the server.
Secondary Zones
A secondary zone provides an authoritative, read-only copy of a primary zone or another secondary zone
masters
The source zones from which secondary zones acquire their information
Stub Zones
A stub zone is similar to a secondary zone, but it contains only those resource records necessary to identify the authoritative DNS servers for the master zone

keep an updated list of the name servers available in a delegated child zone
Advante of the Active Directory Zone
data is automatically replicated through Active Directory in a manner determined by the settings
you choose on the Active Directory Zone Replication Scope page
standard zone stores
a standard zone stores its data in a text
fle on the local DNS server
forward lookup
In forward lookup zones, DNS servers map fully qualifed domain names (FQDNs) to
IP addresses.
What are the server requirements for storing a zone in Active Directory?
The DNS server needs to be a domain controller
When you create a new zone, two types of records required for the zone
Start of Authority (SOA)

NS record signifying the name
of the server or servers authoritative for the zone.
Start of Authority (SOA) Records
When a DNS server loads a zone, it uses the SOA resource record to determine basic and
authoritative properties for the zone. These settings also determine how often zone transfers
The Serial Number text box on the Start Of Authority
This number increases each time a resource
record changes
SOA query
the secondary servers query the master server intermittently for the serial number of the
zone.
Refresh Interval
The value you confgure in the Refresh Interval text box determines
how long a secondary DNS server waits before querying the master server for a zone
renewal
Retry Interval
The value you confgure in the Retry Interval text box determines
how long a secondary server waits before retrying a failed zone transfer.
Expires After
The value you confgure in the Expires After text box determines the
length of time that a secondary server, without any contact with its master server, continues to answer queries from DNS clients.
minimum (Default) TTL
The value you confgure in the Minimum (Default) TTL text
box determines the default Time to Live (TTL) that is applied to all resource records in
the zone.
TTL For This Record
The value you confgure in this text box determines the TTL of
the present SOA resource record.
Name Server Records
A name server (NS) record specifes a server that is authoritative for a given zone.
The mail exchanger (MX) resource record
The mail exchanger (MX) resource record is used by SMTP (mail) agents to locate other SMTP
servers in a remote domain, typically for the purpose of routing mail to that domain.
refresh interval
The refresh interval is the time after the no-refresh
interval during which time stamp refreshes are accepted and resource records are not
scavenged. After the no-refresh and refresh intervals expire, records can be scavenged
from the zone.
What kind of zones do not automatically perform time stamping on dynamically
created resource records?
Standard zones
GlobalNames Zone
a new feature that enables all DNS
clients in an Active Directory forest to use single-label name tags such as “Mail” to connect to
specifc server resources located anywhere in the forest
Deploying a globalNames Zone
he GlobalNames zone is compatible only with DNS servers running Windows Server 2008
and Windows Server 2008 R2.
Enable GlobalNames zone support
dnscmd . /confi g /enablegl obal namessupport 1
Why would you use a globalNames zone?
To facilitate the resolution of single-label computer names in a large network.
Partition in dns
A partition is a data structure in Active Directory that distinguishes data for different replication
purposes.
To All Dns servers In This Forest
This option stores the new zone in the ForestDnsZones
partition. Every domain controller in the entire forest and on which the DNS Server role
is installed will receive a copy of the zone.
To All Dns servers In This Domain
This option stores the new zone in the DomainDnsZones partition. Every domain controller in the local domain and on which the DNS
Server role is installed will receive a copy of the zone.
To All Domain Controllers In This Domain
This option stores the zone in the domain
partition. Every domain controller in the local domain will receive a copy of the zone,
regardless of whether the DNS Server role is installed on that domain controller.
To All Domain Controllers specifed In The scope of This Directory Partition
This
option stores the zone in the user-created application directory partition specifed in the
associated drop-down list box. For a domain controller to fall within the scope of such a
directory partition, you must manually enlist that domain controller in the partition.
RE-CREATIng DomAInDnsZonEs AnD FoREsTDnsZonEs
If either of the default application directory partitions is deleted or damaged, you can
re-create them in DNS Manager by right-clicking the server node and choosing Create Default Application Directory Partitions.
Creating Custom Application Directory Partitions
dnscmd servername /createdirectorypartition FQDN

dnscmd servername /enlistdirectorypartition FQDN
Creating Custom Application Directory Partitions
dnscmd server1 /createdi rectorypartiti on DNSpartitionA.contoso. com

dnscmd server2 /enl istdi rectorypartiti on DNSpartitionA.contoso. com
Zone Transfer Initiation
When the refresh interval of the primary zone’s SOA resource record expires

When a server hosting a secondary zone boots up

When a change occurs in the confguration of the primary zone and this primary zone
is confgured to notify a secondary zone of zone updates
Manually updating a Secondary Zone
Reload

Transfer from Master

Transfer new copy of zone from Master
To delegate a zone
To delegate a zone is to create a new zone for a subdomain within a DNS namespace and
relinquish authority of that new zone.
When to Delegate Zones
DNS delegations are automatically used to separate parent and child AD DS domains
in a single forest.
stub zone
stub zone is a copy of a zone that contains only the most basic records
in the master zone. The purpose of a stub zone is to enable the local DNS server to forward
queries to the name servers authoritative for the master zone
You can use stub zones to do the following:
Keep delegated zone information current

Improve name resolution
True or False: you can perform a delegation only from a parent zone to a child zone.
True
Why does a stub zone improve name resolution when it is implemented across domains in a large forest or other DNS namespace?
A stub zone provides a DNS server with the names of servers that are authoritative
for a given zone.
Trust anchors
Trust anchors are used with DNSSEC to establish trust relationships between DNS servers.
What is the name of the record that contains a hash of the public key in a
delegated subdomain?
A DS record
key rollover
This process of updating keys and digital signatures is also called key rollover
The following two methods can be used for key rollover:
Prepublished rollover

Double signature rollover