Reading...
Play button
Play button
Use LEFT and RIGHT arrow keys to navigate between flashcards;
Use UP and DOWN arrow keys to flip the card;
H to show hint;
A reads text to speech;
20 Cards in this Set
- Front
- Back
|
A Dynamic Domain Name System (DDNS) enables name resolution for computers with dynamic Internet Protocol (IP) addresses – addresses that are assigned automatically through the Dynamic Host Configuration Protocol (DHCP). DHCP changes the assigned IP addresses periodically to update resource records in DNS, rather than having the administrator do this manually.
|
A Dynamic Domain Name System (DDNS) enables name resolution for computers with dynamic Internet Protocol (IP) addresses – addresses that are assigned automatically through the Dynamic Host Configuration Protocol (DHCP). DHCP changes the assigned IP addresses periodically to update resource records in DNS, rather than having the administrator do this manually.
|
|
|
SDDNS
|
Secure Dynamic Domain Name System
|
|
|
How does SDDNS help ?
|
SDDNS is used only for zones that are integrated into AD, where only members of the domain can dynamically update DNS records
|
|
|
NDDNS
|
Non-dynamic Domain Name System
|
|
|
NDDNS ?
|
database entries are static, and must be created and updated manually.
|
|
|
Dynamic DNS Updates Configuration option :
|
1. allow only secure dynamic updates
2. allow both non-secure and secure dynamic updates 3. do not allow dynamic updates |
|
|
"allow only secure dynamic updates" Dynamic DNS Updates Configuration option
|
You can set this only for AD-integrated zones.
|
|
|
"allow both non-secure and secure dynamic updates" Dynamic DNS Updates Configuration option
|
You can set this for AD-integrated or standard zones.
|
|
|
True or False: With AD-integrated DNS all DNS data is stored on a single DNS server
|
With AD-integrated DNS, DNS data is stored on different DNS servers and replicated across the network. This eliminates single points of failure.
|
|
|
True or False :DDNS entries take prcedence over NDDNS entries.
|
You can integrate the NDDNS with an existing DNS server, but the database entries made using the DDNS will take precedence over those defined manually using the NDDNS.
|
|
|
Primary DNS Zone ?
|
stored on the Master Server and hold copy of primary zone data. It can be integrated with AD DS or a local file can be used to save data
|
|
|
Secondary DNS Zone ?
|
Holds read Only copy of the primary zone data and is hosted on a separate server.
It provides load balancing and fault tolerance for the primary zone by answering queries for the zone. |
|
|
A secondary DNS zone cannot be stored in the AD DS.
|
A secondary DNS zone cannot be stored in the AD DS.
|
|
|
Stub Zone ?
|
A stub zone contains only resource records that are necessary to identify the authoritative DNS servers for a zone. It contains Name Server (NS), Start of Authority (SOA), and glue (A or AAAA) records.
|
|
|
Advantages of integrating AD DS and DNS include
|
automatic replication for new zones
streamlined administration faster and more efficient replication multi-master data replication enhanced security |
|
|
standard zone storage
|
a single authoritative DNS server is the primary source for DNS updates and so introduces a single point of failure for a zone.
|
|
|
ACL
|
Access Control List
|
|
|
t's important to secure any DNS server and the zone data it contains to prevent unauthorized or malicious users from
|
t's important to secure any DNS server and the zone data it contains to prevent unauthorized or malicious users from
* corrupting, changing, or invalidating the data on the DNS server * blocking the traffic between the computer that creates a DNS query and the computer that responds * shutting down or disabling the DNS server so that DNS information is unavailable to clients and other servers |
|
|
To secure standard or AD-integrated DNS zones, you can
|
allow only secure dynamic update
configure the Discretionary Access Control List (DACL) for a zone restrict zone transfers ensure secure zone delegation |
|
|
When a zone is created, a copy of the zone is added to the backup folder located in the %systemroot%/DNS folder.
|
When a zone is created, a copy of the zone is added to the backup folder located in the %systemroot%/DNS folder.
|
