Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

MCSA 70-411 - Global Knowledge > Configuring and Troubleshooting DNS > Flashcards

Configuring and Troubleshooting DNS Flashcards

1
Q

How do you install DNS using PowerShell?

A

Install-WindowsFeature -Name DNSServer -IncludeManagementTools

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q
  1. Iterative Query
  2. Recursive Query
A
  1. Iterative Query - Server returns the best answer, it never sends out an additional query. It may refer you to another server through a referral
  2. Recursive Query - client asks server to respond either with the requested answer or with an error
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is the difference between a Forwarder and a Conditional Forwarder?

A
  • Forwarder: If the name query cannot be resolved using its local zone data or cache, then it will forward the query to the DNS server designated as a forwarder
  • Conditional Forwarder: Conditional forwarders are DNS servers that only forward queries for specific domain names
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

How do you configure a DNS forwarder?

A
  • Open DNS Manager
  • Right-Click the Server, and select Properties
  • Select the Forwarders tab
  • Select Edit
  • Add the IP Address or DNS Name
  • Add the number of seconds before the forward query times out
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

How do you configure a conditional forward?

A
  1. Open DNS Manager
  2. Expand the Server
  3. Right-Click Conditional Forwarders, Select New Conditional Forwarder
  4. Add the IP Address
  5. Select if you want to store the conditional forwarder in AD
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the following DNS record?

SOA

A

Start of Authority Record

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is the following DNS record?

A

A

Host Address Record (IPv4)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the following DNS record?

CNAME

A

Alias Record

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the following DNS record?

MX

A

Mail Exchanger Record

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the following DNS record?

SRV

A

Service Locator Record

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the following DNS record?

NS

A

Name Server Record

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is the following DNS record?

AAAA

A

IPv6 host address record

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the following DNS record?

PTR

A

Pointer resource record

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How would you create a DNS Record in PowerShell?

  1. A
  2. AAAA
  3. CName
  4. MX
  5. PTR
  6. How would you create an other type of record?
A
  1. Add-DnsServerResourceRecordA
  2. Add-DnsServerResourceRecordAAAA
  3. Add-DnsServerResourceRecordCName
  4. Add-DnsServerResourceRecordMX
  5. Add-DnsServerResourceRecordPtr
  6. Add-DnsServerResourceRecord
    • Follow-up Question: Can it create the records mentioned before and how?
      • Answer: Yes, just append a dash record type to the cmdlet
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the following types of zones?

  1. Primary
  2. Secondary
  3. Stub
  4. Active-Direcotry integrated
A
  1. Read/Write copy of a DNS Database
  2. Read-Only copy of a DNS database
  3. Copy of a zone that contains only records used to locate name servers
  4. Zone data is storead in AD rather than in Zone Files
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Where would you configure Zone Transfers?

What are your options?

A
  • The Zone Properties and the Zone Transfer Tab
    • Options:
      • Any Server
      • Name Server
      • Only the following Servers:
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

How would you configure Zone Tranfers via PowerShell?

A

Set-DnsServerPrimaryZone -Name <zone> -SecureSecondaries </zone>

  • NoTransfer - No transfers are allowed for this zone from this server.
  • TransferAnyServer - Any server can request a zone transfer, including servers that you know nothing about and don’t manage or control.
  • TransferToZoneNameServer - Only servers in the NS records for this zone are allowed to request transfers.
  • TransferToSecureServers - Only servers specified with the -SecondaryServers
    parameter are allowed to request a zone transfer.
    • ex. Set-DnsServerPrimaryZone -Name <zone> -SecureSecondaries -SecondaryServers <ipv4></ipv4></zone>
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Where would you configure notifications so that Name Servers are up to date?

What are the options?

A

The Zone Properties, Zone Transfers Tab, select the Notify Button

  • Servers listed on the name servers tab
  • The Following Servers
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

How would you configure notification settings via PowerShell?

What are the three options?

How do you use them?

A

Set-DnsServerPrimaryZone -Notify

The equivalent Set-DnsServerPrimaryZone parameter is the -Notify parameter, which accepts the following strings:

  1. NoNotify - No notifications are sent, and secondary servers need to manually request a zone transfer or update.
    • Set-DnsServerPrimaryZone -Name <zone> -Notify NoNotify</zone>
  2. Notify - All servers for whom there are NS records in the zone are automatically notified whenever a change is made to the zone.
    • Set-DnsServerPrimaryZone -Name <zone> -Notify Notify</zone>
  3. NotifyServers - Only servers specified by the -NotifyServers parameter are automatically notified of changes to the domain. Any other servers that are allowed to request zone transfers must request the transfer manually.
    • Set-DnsServerPrimaryZone -Name <zone> -Notify NotifyServers -NotifyServers <ipv4></ipv4></zone>
20
Q

How would you have a DNS Server re-regester all services?

A

net stop netlogon

net start netlogon

21
Q

What Zones can be stored in Active Directory?

A
  • Primary
  • Stub
22
Q

When would you want to set up a Stub Zone?

A

When you want to set up a dynamic link between two companies. (Partner Companies)

This would allow clients to use the stub zone to find the server to resolve the DNS request to. Contains only Start Of Authority and Name Servers

23
Q

When would you use a conditional fowarder?

24
Q

How do you configure zone delegation via GUI?

PowerShell?

A
  1. Open DNS Manager:
    1. Select the Zone
    2. Right-Click, New Delgation
    3. Enter the Delegated Domain
    4. Add the IP Address for the Name Server
  2. Add-DnsServerZoneDelegation -Name “<parent>" -ChildZoneName "<child>" -NameServer "<name>" -IPAddress <ip></ip></name></child></parent>
25
Q

If you create an Active Directory Integrated Primary Zone, what are the different replication options and what do they mean?

A
  • Forest Wide - All DNS Servers in the forest get a copy of the zone
  • Domain Wide - All DNS Servers in the Domain get a copy of the zone
26
Q

What is a conditional forwarder?

A

Sends a query to a name server based on domain name

27
Q

What is a server level forwarder?

A

Short Answer: a recursive query to another DNS Server that is used to get either a positive or negative response but not a referal.

Long Answer: Forwarders, on the other hand, use recursive queries. If forwarders are configured, when the local DNS server can’t resolve a query, it sends a recursive query to one of the forwarders in its list. This type of query tells the forwarder that the local server will accept either a positive or negative response, but not a referral. Essentially, the forwarder does the work of tracking down the record in the query, which may involve the referral process above, and the local server simply waits for the response, which it then sends to the querying client.

28
Q

What is DNS Round Robin?

Is it fault tolerant if a server drops?

A

It switches which resource record is being given (ie for a website).

This is not fault tolerance

29
Q

What is the SOA record responsible for?

What is it for?

A

It is for every forward look up zone created

  • Incrementing the Serial Number
  • Identifying the primary Server - Identify the DNS server that is authoritative for all information within the domain.
  • Identifying the Responsible person - List the email address of the person in charge of the domain.
  • The refresh interval - Control how often secondary servers check for changes to the zone file.
  • The retry interval - Control how often secondary servers will retry to check for changes to the zone file if it fails.
  • The Expires after - Control how long secondary servers keep the zone file active when the primary server cannot be contacted.
  • The default TTL - Control how long a negative response is cached by a DNS resolver (but for some DNS servers, this is also how long a DNS resolver should cache any response).
  • TTL for SOA

The purpose of the SOA record is:

  • Control how long a negative response is cached by a DNS resolver (but for some DNS servers, this is also how long a DNS resolver should cache any response).
30
Q

What is a NS record responsible for?

A

List all the name servers for the zone

31
Q

How do you create a Reverse Lookup Zone?

A
  1. Open DNS Manager
  2. Expand the Server
  3. Select Reverse Lookup Zone, Right-Click select New Zone
    1. Select a Primary, Secondary, Stub, or Primary AD-integrated
  4. Select Replication Scope
    1. Forest, Domain
  5. Select Address type - IPv4 or IPv6
  6. Enter the network ID - IP Subnet
  7. Dynamic Update
    1. Secure (AD only)
    2. Nonsecure and Secure
    3. Do not allow updates
      8.
32
Q

How do you store Conditional Forwarder’s in Active Directory?

A

When creating them check the box to store the conditional forwarder in AD. You can also specify the number of seconds before forward queries time out

33
Q

How would you change a single DNS Records TTL?

A

Edit the Record on the Time to Live.

To view this you will have to:

  1. Click View
  2. Select Advanced
34
Q

How would you change the default TTL for all new records?

A

Open the Start of Authority (SOA) record and change the minimum (default) TTL

35
Q

If a record is…

  1. Created by Hand
  2. Created by Dynamic DNS

What is the default TTL?

A
  1. 1 hour
  2. 20 minutes
36
Q

How do you configure DNS Round Robin?

A

You create resource records (A or AAAA) witht he same name pointing to each server in the round robin.

Note: It is turned on by default in Windows Server 2012R2

37
Q
  1. How might you speed up the turn over of returned records in a DNS Round robin?
  2. How might you return better random returns in a DNS Round robin?
A
  1. Reduce the TTL for the Records
  2. Turn off netmasking ordering
38
Q

When configuring a DNS records priority which will be returned more?

A

The one with the lowest number

39
Q

When configuring a DNS Records weight, given that the servers have the same priority which will be returned more?

A

The one with the higher value

40
Q

Please indicate what the numbers in the photo refer to?

A
  1. Priority
  2. Weight
  3. Port Number
41
Q

How would you change the Weight for a record using powershell?

A
  1. $Variable = $Variable2 = Get-DnsServerResourceRecord -Name <record> -ZoneName <zone> -RRType <record></record></zone></record>
  2. $Variable .RecordData.Weight = 20
  3. Set-DnsServerResourceRecord -NewInputObject $Variable -OldInputObject $Variable2 -ZoneName <zone></zone>

Example:

  1. $NewRRObj = $OrigRRObj = Get-DnsServerResourceRecord -Name trey-wds-11 -ZoneName TreyResearch.net -RRType A
  2. $NewRRObj.RecordData.Weight = 20
  3. Set-DnsServerResourceRecord -NewInputObject $NewRRObj -OldInputObject $OrigRRObj -ZoneName treyresearch.net
42
Q

How would you change the TTL for a record using powershell?

A
  1. $Variable = $Variable2 = Get-DnsServerResourceRecord -Name <record> -ZoneName <zone> -RRType <record></record></zone></record>
  2. $Variable.TimeToLive = [System.TimeSpan]::FromHours(2)
  3. Set-DnsServerResourceRecord -NewInputObject $Variable -OldInputObject $Variable2 -ZoneName <zone></zone>

Example:

  1. $NewRRObj = $OrigRRObj = Get-DnsServerResourceRecord -Name trey-wds-11 -ZoneName TreyResearch.net -RRType A
  2. $NewRRObj.TimeToLive = [System.TimeSpan]::FromHours(2)
  3. Set-DnsServerResourceRecord -NewInputObject $NewRRObj -OldInputObject $OrigRRObj -ZoneName treyresearch.net
43
Q

What are the requirements for Secure Updates?

How do you configure secure dynamic updates?

A
  1. The zone must be AD Integrated
  2. Do the following:
    1. Expand the Server
    2. Expand the Forward lookup Zones
    3. Select and Right-Click on the Zone
    4. Select Properties
    5. On the General Tab select Dynamic Updates: Secure only
44
Q

Can you convert a file-base zone to an AD integrated zone by using PowerShell?

A

Yes using:

ConvertTo-DnsServerPrimaryZone -Name <name> -ReplicationScope <domain> -Force</domain></name>

45
Q
  1. How would you configure all Zones to use scavenging?
  2. How would you configure just one Zones to use scavenging?
A
  1. The following Steps:
    1. Right Click the Server, Select Set Aging/Scavening for All Zones
      • Check Scavenge stale resource records, Click ok
      • Check Apply These Settings To The Existing Active Directory-Integrated Zones
    2. Right-Click the Server, Select Properties
      • Click the Advanced Tab
      • Select Enable Automatic Scavenging of stale records
  2. The following Steps:
    1. Right Click the Server, Select Set Aging/Scavening for All Zones
      1. Check Scavenge stale resource records, Click ok
      2. Click Ok
    2. Right Click the Zone, Select Properties
      1. On the General Tab, select Aging
      2. Check Scavenge stale resource records

MCSA 70-411 - Global Knowledge (15 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions