70-410 Dns

Front 1

Who assigns top-level domains?

Back 1

ICANN

Front 2

What are the three types of DNS queries?

Back 2

Recursive, iterative, and inverse

Front 3

What is an iterative query?

Back 3

A DNS query where the DNS server is expected to return the best answer based on information in its own database

Front 4

What is a recursive query?

Back 4

A DNS query where the DNS server is expected to return either the answer or an error, even if it has to query other DNS servers to find the answer

Front 5

What are the three options for DDNS secure updating?

Back 5

none, nonsecure and secure, secure only

Front 6

What is nonsecure DNS updating?

Back 6

Where any computer can update a DNS table

Front 7

What is secure DNS updating?

Back 7

DNS queries AD to verify that an updater has a valid computer account

Front 8

What is an inverse query?

Back 8

A DNS query using PTR records to look up a hostname based on the IP address

Front 9

What type of record does an inverse query use?

Back 9

PTR records

Front 10

What domain is used for inverse queries?

Back 10

in.addr.arpa

Front 11

How is in.addr.arpa arranged?

Back 11

by IP address in reverse octet order

Front 12

What does TTL specify?

Back 12

How long a record may be cached

Front 13

What is a negative cache TTL?

Back 13

the amount of time to cache the fact that a record doesn't exist

Front 14

What type of DNS query looks up hostnames based on IP address?

Back 14

an inverse query

Front 15

What filename extension do primary DNS zone files have?

Back 15

.dns

Front 16

What are two advantages of secondary DNS zones?

Back 16

fault tolerance and load reduction

Front 17

When choosing a DNS zone type, how do you specify an Active Directory-integrated zone?

Back 17

check "Store the Zone in Active Directory" on the Zone Type screen

Front 18

What server requirements exist for creating an AD-integrated zone?

Back 18

The DNS server must be a writable DC

Front 19

What do stub zones do?

Back 19

Identify the authoritative DNS server for a zone

Front 20

What three types of records can a stub zone contain?

Back 20

Name Server (NS), Start of Authority (SOA), and glue Host (A) records

Front 21

What do GlobalName Zones do?

Back 21

map single-label names (CNAME) to FQDN's

Front 22

Are GlobalName Zones dynamic?

Back 22

no

Front 23

What are the 2 types of zone transfers?

Back 23

full zone transfers (AFXR) and incremental zone transfers (IXFR)

Front 24

When do secondary DNS zones initiate incremental zone transfers?

Back 24

When the refresh interval expires or the server reboots

Front 25

What is DNS Notify?

Back 25

the mechanism for notifying secondary DNS servers that a change has occurred

Front 26

What does Background Zone Loading do?

Back 26

loads AD zone data immediately when a DNS server restarts

Front 27

What zone type was implemented to support using RODC's as DNS servers?

Back 27

Primary Read-Only zones

Front 28

What do DNS socket pools do?

Back 28

allow source port randomization to protect against DNS cache poisoning

Front 29

What technology was created to help prevent DNS cache poisoning?

Back 29

DNS socket pools

Front 30

What is DNS cache locking?

Back 30

design that prevents cached records from being overwritten for a percentage of the record's TTL (default 100%)

Front 31

What does DNSSEC do?

Back 31

uses zone signing to secure resource records

Front 32

Does DNSSEC sign entire zones, or individual records?

Back 32

individual records

Front 33

What are the digital signatures produced by DNSSEC called?

Back 33

RRSIGs

Front 34

What are trust anchors?

Back 34

preconfigured public keys linked to a DNS zone

Front 35

Where are trust anchors stored in an AD-integrated DNS zone?

Back 35

in the directory partition of the forest

Front 36

Where are trust anchors stored on a standalone DNS server?

Back 36

in TrustAnchors.dns

Front 37

What powershell command will retrieve trust anchors?

Back 37

get-dnsservertrustanchor

Front 38

What OS's can act as DNSSEC clients?

Back 38

Windows 7 and above

Front 39

What is DNS devolution?

Back 39

DNS clients don't need to provide the full FQDN to search the parent namespace

Front 40

What system is netmask ordering a part of?

Back 40

round robin

Front 41

What does netmask ordering do?

Back 41

returns the host address on the same subnet as the resolver for a service

Front 42

What does an SOA do?

Back 42

identifies the general parameters of a DNS zone, including authoritative server

Front 43

How is round robin configured in DNS?

Back 43

add multiple A records with same hostname but different IP addresses

Front 44

What is WINS forward lookup?

Back 44

DNS passes queries it can't resolve to WINS for resolution

Front 45

How are delegated zones configured?

Back 45

place a delegation record in other zones for each delegated zone pointing to the authoritative server

Front 46

What are the 2 types of DNS forwarding?

Back 46

external and conditional

Front 47

When are dynamic DNS records removed by the DNS client?

Back 47

When the client shuts down cleanly

Front 48

What determines if a DNS record is considered stale?

Back 48

The scavenging interval

Front 49

What determines when stale records are removed?

Back 49

the cleanup interval

Front 50

What DNS server tab has tools to test DNS?

Back 50

Monitoring

Front 51

What tab can be used to monitor inbound/outbound DNS traffic?

Back 51

Debug Logging

Front 52

What should you do if a simple query fails?

Back 52

check to make sure zone 1.0.0.127.in-addr.arpa exists

Front 53

What should you do if a recursive query fails?

Back 53

check root hints and root servers

Front 54

What are the two modes for nslookup?

Back 54

standalone (single command) and interactive (multiple commands)

Front 55

What does DNSLint /d do?

Back 55

diagnoses "lame delegation"

Front 56

What does DNSLint /ql do?

Back 56

verifies a user-defined set of DNS records on multiple servers

Front 57

What does DNSLint /ad do?

Back 57

Verifies DNS records related to AD replication

Front 58

What needs to be done to allow a zone transfer to a BIND DNS server?

Back 58

enable BIND Secondaries on the Microsoft DNS server

Front 59

What file are root hints stored in?

Back 59

Cache.dns in %systemroot%/system32/dns

Front 60

If dns not ad integrated then where is the zone data held?

Back 60

%sustemroot%/system32/dns folder file called .dns

Front 61

If you want to ensure users cannot access the Internet what can you do?

Back 61

Create a new dns zone called . By creating this blank root zone it is considered authoritative for all top level domains.

Front 62

Conditional forwarders

Back 62

A conditional forwarder is a DNS server on a network that is used to forward DNS queries according to the DNS domain name in the query. For example, a DNS server can be configured to forward all the queries it receives for names ending with widgets.example.com to the IP address of a specific DNS server or to the IP addresses of multiple DNS servers.

Front 63

DNS Forwarder (External)

Back 63

A forwarder is a Domain Name System (DNS) server on a network that forwards DNS queries for external DNS names to DNS servers outside that network.By using a forwarder, you can manage name resolution for names outside your network, such as names on the Internet, and improve the efficiency of name resolution for the computers in your network

Front 64

DNScmd A command-line interface for managing DNS servers. This utility is useful in scripting batch files to help automate routine DNS management tasks, or to perform simple unattended setup and configuration of new DNS servers on your network

Back 64

dnscmd /name dnssvr1.contoso.com /recordadd test ptr 0.0.10.in-addr.arpa

dnscmd dnssvr1.contoso.com /recordadd test A 10.0.0.5

dnscmd /recordadd test.contoso.com test MX 10 mailserver.test.contoso.com