Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Book 2 > Chapter 1 > Flashcards

Chapter 1 Flashcards

1
Q

What is the length limit of a host name?

A

255 characters

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What kinds of characters can a host name contain?

A

Letters, numbers, periods, and hyphens

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is the length limit of a NetBIOS name?

A

16 characters

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are the requirements to install the DNS server role?

A

You must be signed in as an administrator, and the server must have a static IP address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

How do you install the DNS server role using PowerShell?

A

Add-WindowsFeature DNS -IncludeManagementTools

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

How do you install the DNS server role as part of a Nano Server deployment?

A

New-NanoServerImage Packages Microsoft-NanoServer-DNS-Package

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How do you enable the DNS server role on Nano Server using PowerShell?

A

Enable-WindowsOptionalFeature -Online -FeatureName DNS-Server-Full-Role

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What type of DNS integration is not supported by Nano Server?

A

Active Directory

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What DNS function enables a server to redirect requests it is unable to resolve?

A

Forwarding

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What DNS function enables a server to redirect requests for certain domain names to designated servers?

A

Conditional forwarding

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What DNS function helps DNS servers resolve domains for which they do not have authoritative information?

A

Root hints

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Where are root hints stored on a DNS server?

A

%systemroot%\System32\dns\CACHE.DNS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What PowerShell commands can be used to view and modify DNS root hints?

A

Add, Remove, Set, Get, and Import-DnsServerRootHint

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What DNS function enables a server to perform DNS queries on a client’s behalf?

A

Recursion

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

For security reasons, what DNS feature should be disabled on DNS servers and how can it be disabled?

A

Recursion should be disabled (if not needed) to prevent DoS attacks
From DNS Manager, right-click server > Properties > Advanced tab > Server options list > Select “Disable Recursion” > Click OK

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What DNS server feature allows for recursion to be performed more securely?

A

Recursion scopes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Which PowerShell cmdlets are used to create DNS recursion scopes?

A

Add-DnsServerRecursionScope to create scope

Add-DnsServerQueryResolutionPolicy to send certain queries to scope

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What DNS function allows clients to verify they are communicating with a genuine DNS server?

A

DNSSEC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

From where does a DNSSEC client obtain a public key to validate a DNS server’s signature?

A

Trust anchors

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What must be created on a DNS server to use DNSSEC?

A

TrustAnchors zone to store public keys

Name Resolution Policy Table (NRPT) to provide clients with DNSSEC rules

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

How are NRPTs usually distributed?

A

Through a GPO

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What DNS function enables a server to use a random source port when issuing DNS queries?

A

DNS socket pool

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is the size range of a socket pool?

A

0 - 10,000

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is the default size of a socket pool?

A

2,500

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What command is used to resize the DNS socket pool?

A 
dnscmd /config /socketpoolsize 
# The DNS server must be restarted after this
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What DNS function helps a server prevent attackers from poisoning the DNS cache?

A

Cache locking

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Which PowerShell cmdlet is used to configure DNS cache locking?

A

Set-DnsServerCache -LockingPercent

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What DNS function helps servers prevent DoS attacks on other DNS servers?

A

Response rate limiting

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

How can response rate limiting be enabled on DNS servers?

A

Set-DnsServerResponseRateLimiting

30
Q

What DNS function helps prevent man-in-the-middle attacks?

A

DNS-Based Authentication of Named Entities (DANE)

31
Q

How are DNS resource records with multiple IP addresses stored?

A

In multiple zone scopes

32
Q

How can DNS be configured to respond with different results based a client’s location?

A

Add clients to a client subnet, then create a query resolution policy pointing their requests to a particular zone scope

33
Q

What three groups have administrative access to DNS servers?

A

Domain Admins: Full permissions in home domain
Enterprise Admins: Full permissions in forest
DnsAdmins: View/modify in home domain

34
Q

What DNS server objects can have delegated administrative permissions?

A

Servers and zones

35
Q

What is the name for a general DNS query to translate a hostname to an IP address, and how are these queries resolved?

A

Forward lookup queries, resolved by referencing forward lookup zones

36
Q

What is the name for a DNS query to translate an IP address to a hostname, and how are these queries resolved?

A

Reverse lookup queries, resolved by referencing reverse lookup zones

37
Q

What type of records do reverse lookup zones contain?

A

Pointer (PTR) records

38
Q

What is a primary zone?

A

A copy of a zone that can be updated directly on a server

39
Q

What info is contained in the Start of Authority (SOA) record?

A 
Primary server
Responsible person 
Refresh interval
Retry interval 
Expires after 
TTL
40
Q

What is a secondary zone?

A

A read-only copy of a zone

41
Q

What DNS feature allows for delegating authority over part of a domain to another server?

A

DNS delegation

42
Q

What features are provided by AD DS-integrated zones?

A

Multimaster updates
Replication
Secure dynamic updates
Security through ACLs

43
Q

What AD DS feature allows clients to update their own DNS records?

A

Secure dynamic updates

44
Q

What are two ways to redirect query traffic to designated DNS servers?

A

Conditional forwarding and stub zones

45
Q

What is the primary difference between a stub zone and conditional forwarding?

A

A stub zone contains the complete list of DNS servers in the other domain that is updated automatically, while conditional forwarding allows for pointing to a specific DNS server

46
Q

What zone can be used as an alternative to running a WINS server for legacy clients?

A

GlobalNames zone

47
Q

What DNS records contain IPv4 addresses?

A

Host A records

48
Q

What DNS records contain IPv6 addresses?

A

Host AAAA records

49
Q

What DNS record is created automatically with every primary zone?

A

A start of authority (SOA) record

50
Q

What DNS record identifies authoritative name servers in a zone, along with delegated zones?

A

Name server (NS) records

51
Q

What are SRV records?

A

Specify by service, protocol, and domain name which servers host a partiuclar service, so clients can find them using A or AAAA records

52
Q

What is the format of a SRV record?

A

_Service.Proto.Name TTL Class SRV Priority Weight Port Target
I.e. http._tcp.Contoso.com. IN SRV 0 0 80 www.Contoso.com

53
Q

What DNS record is an alias for a host?

A

CNAME records

54
Q

What DNS record identifies mail servers for SMTP?

A

MX records

55
Q

How can MX records be used to distribute load across mail servers?

A

Use multiple MX records with different priorities

56
Q

What DNS records are likely to be updated dynamically?

A

A, AAAA, PTR, and SRV records

57
Q

Which PowerShell cmdlet is used to create DNS records?

A

Add-DnsServerResourceRecord

58
Q

What DNS feature allows for outdated DNS records to be periodically removed?

A

Zone aging/scavenging

59
Q

What two parameters determine scavenging behavior?

A

No-refresh interval: Period of time record is not eligible to be refreshed, default 7 days
Refresh interval: Time between earliest moments when record can be refreshed and scavenged, default 7 days

60
Q

In what order does DNS choose between different servers in a zone?

A

It finds the record with the lowest priority value. If the priorities are the same, it decides based on the proportion of weight values. If there are MX records, it looks for the one with the lowest preference value.

61
Q

What value determines how long a record can reside in the DNS cache of a client or server?

A

Time to Live (TTL)

62
Q

How do you add unknown records to DNS via PowerShell?

A

Use Add-DnsServerResourceRecord with the -Unknown parameter

63
Q

How do you implement DNS round robin?

A

Used the Advanced server settings dialog to add multiple IP addresses to the same record

64
Q

What is a form of DNS round robin that allows clients to receive a result based on their subnet?

A

Netmask ordering

65
Q

What are the two kinds of DNS scopes?

A

Zone scopes: collections of resource records

Recursion scopes: collection of settings that define recursion behavior in a zone

66
Q

What is the relationship between zones, scopes, and records?

A

Zones can contain multiple scopes, scopes contain records, but records can exist across multiple scopes using different IP addresses

67
Q

Which PowerShell cmdlet is used to create DNS client subnets?

A

Add-DnsServerClientSubnet

68
Q

Which PowerShell cmdlet is used to create zone scopes in DNS?

A

Add-DnsServerZoneScope

69
Q

How do you place resource records into a particular zone scope?

A

Use the Add-DnsServerResourceRecord cmdlet with the -ZoneScope option

70
Q

What type of events log every time a DNS server, zone, or resource record is changed?

A

DNS Audit Events

71
Q

What type of events log every time a DNS server sends or receives DNS information?

A

DNS Analytic Events

72
Q

How do you view zone level statistics of a DNS server?

A

Use the Get-DnsServerStatistics cmdlet with the -ZoneName option

Book 2 (4 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions