An Overview of DNS - CompTIA Network+ N10-009 - 3.4 Flashcards
What does DNS do
Translate FQDNs into computer readable IP addresses. Expand on this.
How many root dns server clusters
13 (over 1000 actual servers)
gTLDs
hundreds of generic top level domain - .com, .org, .net
ccTLD
over 275 Country code top level domains - .us, .ca, .uk
DNS is a service used where?
internet, AD and application access
How many DNS servers in an organization
Usually two. Very important there’s redundancy.
What are the two main DNS servers
Primary - Contains all of the zone info for domain
changes and updates are made to primary server
Secondary - Zone info is read only. Zone transfers are pushed from the primary DNS server. Anything we get from this server was first configured on primary DNS server.
Local Name Resolution
Stores a name info an IP address within the local network. No Need to access the production server. Stored on host file
Forward Lookup
Provide server with name and it returns and IP address. (one of the most common uses of DNS server)
Reverse DNS
Provide the DNS server a IP address and it returns a name. (works on DIG command. can tell you address of where your DNS server is on in the world.
usually when you preform a DNS look up it’s not from the authotitaive DNS server. How do you access the authoriative server?
Find the server with nslookup, then you can talk to it
When a DNS resolver retrieves a response from a non-authoritative DNS server, what does this indicate about the information provided in the response?non-authoritate server.
The information is a cached copy retrieved from another authoritative source.
TTL on a dns server
how long the authive server will maintane the casche of IP addresses
how to use dig to see how long a server will keep it cahce
dig jessebuerhaus.com
returns:
jessebuerhaus.com 300 134.323.34.121
300 ( second )is the amount of time.
Recursive DNS queries
Recursive query
what populates and cache local DNS server
By storing DNS query results retrieved from authoritative or upstream DNS serversRecursive DNS queries.
Recursive DNS query
If we can’t resolve an IP by looking at local name server, we go to the root server, if it doesn’t know it sends you to .com or .org server.
DNS is transmitted i
in the clear no built in encryption
DNSSEC
Domain Name System Security Extensions
Digitally signed DNS responses. That verifies that the info we are getting is coming from a trusted source.
DNS over TLS (DOT)
Sends DNS traffic over TCP/853, encrypts it with TLS/SSL
DNS over HTTPS (DoH)
Sends DNS over HTTPS packet, using https TCP/443. Some broswers use DoH by default.
In which scenario would a client receive a non-authoritative answer from a DNS server?
b) When the DNS server has the requested record cached but is not the authoritative server for the domain