Configure DNS zones Flashcards

1
Q

DNS

A

Domain Name System

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

DNS Servers AKA

A

Name Servers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Location of hosts file on Windows

A

Windows\System32\Drivers\etc\hosts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which port does DNS communicate over?

A

TCP and UDP

port 53

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

FQDN

A

Fully qualified domain name

describes the exact relationship between a host and its DNS domain. For example, computer1.sales.microsoft.com represents an FQDN; the computer1 host is located in the sales domain, which is located in the Microsoft second-level domain, which is located in the .com top-level domain.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

root zone

A

the top of the heirarchical tree of domain names

above the TLDs: .net, .com, .edu etc

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

The DNS tree can be divided into ______, each served by a DNS server.

A

Zones

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Each zone can contain one or more ____

A

Domains

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Resource Record (RR)

A

Each node, or leaf, on the DNS tree. Within zones. The domain names or subdomain names or server names of a DNS zone.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Top level domains

A
.com
.org
.edu
.gov
.net
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

.com is intended for

A

commercial sites

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

.net is intended for

A

Internet-related sites

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

.org is intended for

A

organization (nonprofts)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

.edu is intended for

A

educational institutions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

.gov is intended for

A

US gov. entities

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Second level domains

A

Domains registered to individuals or organizations.

Like microsoft.com

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

host

A

a specific computer or other network device in a domain

example: computer1.domain.com
computer1. sales.domain.com (computer1 on the sales subdomain)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

DNS client AKA

A

DNS resolver

This is any machine, PC or server, that attempts to resolve an address with a DNS server.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

iterative query

A

When a DNS server does not forward requests (for which is has no answer) To another DNS server. Instead of figures it out by:

  1. Contacting the TLD DNS server for the IPs of the DNS server for the address’s TLD
  2. Contacts the address’s TLD DNS for DNS of the secondary domain.
  3. Contacts the secondary domain’s DNS for the proper address
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Two types of zones

A

Primary Zone

Secondary Zone

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Primary Zone

A

provides an authoritative, read-write copy of the zone.

Make changes here. They replicate to secondary zones.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Secondary Zone

A

provides an authoritative, read-only copy of the primary zone.

Changes to the primary zone replicate to secondary zone.

this is for a backup DNS server

23
Q

primary name server

A

a server that hosts records for a primary zone

24
Q

secondary name servers

A

a server that hosts records for a secondary zone

25
Q

Two types of lookup zones

A

forward lookup

reverse lookup

26
Q

forward lookup

A

contains resource records for a domain, mapping domain names to IPs

27
Q

reverse lookup

A

used to resolved IP addresses from host names

28
Q

Active Directory-integrated zones

A

Store DNS info in Active directory so that each DC can be a DNS. There is no primary and secondary then. It’s multi-master.

This configuration integrates multiple DNS servers setting them both to read/write, or primary name servers.

This adds redundancy.

Both servers replicate with each other

29
Q

Replication scopes available for AD integrated zones

A

To all domain controllers

All domain controllers that are DNS servers in local domain

All domain controllers that are DNS servers in the entire forest

30
Q

subdomain

A

child domain that is part of a parent domain and has the same domain suffix as the parent domain

31
Q

delegated DNS zones

A

Adding subdomains to your domain, but delegating DNS to another server.

***ONLY PERFORMED WITHIN CONTIGUOUS NAMESPACE **

(Meaning they only happen to subdomains of a second level domain, or subdomains of a subdomain of a second level…etc)

32
Q

stub zone

A

copy of a zone that contains only necessary resource records (Start of Authority (SOA), Name Server (NS), and Address/Host (A) record) in the master zone and acts as a pointer to the authoritative name server. The stub zone allows the server to forward queries to the name server that is authoritative for the master zone without going up to the root name servers and working its way down to the server.

33
Q

caching-only dns server

A

A caching-only server does not host any zones and is not authoritative for any domain. Instead, it receives client requests, and as the DNS servers fulfill DNS queries, the server adds the information to its cache.

34
Q

zone transfers

A

complete or partial transfer of DNS data from a zone on a DNS server to another DNS server.

35
Q

3 types of zone transfers

A

full transfer
incremental transfer
dns notify

36
Q

full zone transfer (AXFR)

A

copies the entire zone, is used when you first add a new DNS secondary server for an existing zone. With large zones, AXFRs can be time-consuming and resource-intensive.

37
Q

incremental zone transfer (IXFR)

A

retrieves only resource records that have changed within a zone.

38
Q

dns notify

A

DNS Notify method allows the primary DNS server to use a “push” mechanism to notify secondary servers that it has been updated and that the resource records need to be transferred. The DNS is not a mechanism for transferring data. Instead, it is used with AXFR and IXFR to notify a secondary server that new records are available for transfer.

39
Q

First step for every client to authenticate to AD DS

A

Make a DNS request for the network domain controller

40
Q

Location of the text-based files for every zone hosted on a given DNS server

A

C:\Windows\System32\DNS

Unless you implement
Active Directory-integrated zones

41
Q

What’s in the AD SysVol?

A

Logon scripts and GPOs

42
Q

What’s in the AD application database?

A

Data for Active Directory-integrated zones, among other things.

43
Q

How to integrate AD DNS with the world’s DNS?

A

Add forwarders.

If your DNS server doesn’t know the answer, your DNS server will make a recursive reuqest to the DNS servers you list as forwarders. That forwarder will make an iterative request.

44
Q

Recursive request

A

Making a single request and accepting whatever answer it recieves

45
Q

Generic Forwarder

A

DNS servers listed in your forwarding config for your internal DNS server are who are asked, no matter what the request is.

As opposed to a conditional forwarder.

46
Q

Conditional Forwarder

A

Set up forwarding to a DNS server for specific AD forest / DNS zones. This is perfect for mergers. Saves you time, if you already know the name server for a particular zone.

47
Q

stub zone versus delegation

A

delegations are use whenever the namespace is contiguous from parent to child.

corp.com delegates child.corp.com

if corp.com buys sam.com. Sam.com is not contiguous. You can’t delegate. Create a stub zone

48
Q

Stub zone

A

Contains records for a non-contiguous domain that you also own. Records are:

NS
Host Record
SOA record

49
Q

SOA record

A

Start of authority record

Sets TTL
Sets serial number

50
Q

TTL

A

Time to live

51
Q

SOA Serial number

A

Update sequence numbers

Tracks changes / allows sequencing so DNS servers can tell which records are more recent in the event of a conflict.

52
Q

split tunneling

A

internet requests don’t go through the VPN.

53
Q

force tunneling

A

all requests go through the VPN

54
Q

NRPT

A

Name resolution policy table
Configured via group policy

Tells the client which names (server UNC, domain names) are ‘internet names’ (should go out internet connection) and which are for the non-VPN connection for direct access