Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

MCSA 70-741 > DNS 4 > Flashcards

DNS 4 Flashcards

1
Q

What command can be used to view all the scopes within a zone (example.com)

A

Get-DnsServerZoneScope -ZoneName “example.com”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What two commands can be used to query a DNS server for name resolution even if the information is locally cached on the client?

A

nslookup and Resolve-DnsName.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What command can be used to add DNS server policies?

A

Add-DnsServerQueryResolutinPolicy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

The processing order of the policy determines when it will be checked, compared to the other existing policies. True or False?

A

True.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which policy action would cause a client to time-out waiting for a DNS response?

A

Ignore.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What tab in the DNS Server properties contains the option for configuring automatic testing of the DNS Server?

A

Monitoring.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What tab in the DNS Server properties contains the option for configuring recursion?

A

Advanced.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What tab in the DNS Server properties contains the option for configuring which events are to be logged?

A

Event Logging.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the most probable reason why we would NOT want to leave debugging on all the time?

A

Overhead on the server.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

When analyzing the DNS server, what two resources are priotritized first for any bottlenecks/issues?

A

Memory and CPU usage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What sequence is used to highlight a counter in Performance Monitor?

A

Ctrl+h.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Server Manager can be used to both set and see alarm thresholds for DNS server’s memory and CPU. True or False?

A

True.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is DNS Scavenging?

A

When properly configured, DNS Scavenging automically removes records that haven’t been updated in a while.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Which tab of the zone properties is used to set the aging/scavenging properties for a zone?

A

General.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is the default No-refresh interval?

A

7 days.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Only at the end of the “Refresh interval”, does a record become eligible for scavenging. True or False?

A

True.

17
Q

How do you enable scavenging to take place automatically?

A
  1. R-click on the zone/server > Properties > Advanced tab

2. Check the box that says, “Enable automatic scavenging of stale records”.

18
Q

Computers, by default, are looking to see if a certificate is signed by a “specific” Certification Authority from their list of trusted CAs. True or False?

A

False. Computers are looking to see if the certificate is signed by ANY CAs on their trusted list.

19
Q

What is DANE?

A

The DNS-based Authentication of Named Entities provides an extra step of association by using a TLSA record to provide information to DNS clients that state what CA they should expect a certificate from for your domain name. This prevents man-in-the-middle attacks where someone might corrupt the DNS cache to point to their own website, and provide a certificate they issued from a different CA.

20
Q

What are the three fields found in a TLSA record?

A

The certificate usage field, selector field, and matching type field.

21
Q

What are the different values that can be found in the certificate usage field of a TLSA record?

A

0 = PKIX-TA (Certificate Authority Constraint; Only accept defined certificate authorities)

1 = PKIX-EE (Service Certificate Contraint; Only accept defined certificates)

2 = DANE-TA (Trust Anchor Assertion; Only use validated trust anchors)

3 = DANE-EE (Domain Issued Certificate;Disables trust hierarchy inspection so that the client only has to trust the referenced certificate in the TLSA record)

22
Q

What are the different values that can be found in the selector field of a TLSA record?

A 
0 = Certificate
1 = SPKI (Public Key)
23
Q

What are the different values that can be found in the matching type field of a TLSA record?

A 
0 = Full (exact match)
1 = SHA2 256
2 = SHA2 512
24
Q

In what field is the hash of a TLSA record located in?

A

The Certificate Association Data field.

25
Q

A TLSA record can be created in both DNS Manager and in PowerShell. True or False?

A

False. TLSA records can be created in PowerShell but not DNS Manager.

26
Q

When a TLSA record has been created, an associated DNSSEC record will also be created. True or False?

A

True.

27
Q

What is the record type associated with a TLSA record?

A

Type 52.

28
Q

What command is used to view the statistics of the DNS server?

A

Get-DnsServerStatistics

29
Q

What groups, by default, have permissions to manage DNS?

A
  1. Domain Admins
  2. Enterprise Admins
  3. DNS Admins
30
Q

DNS permissions may be granted at either the server or zone level. True or False?

A

True.

31
Q

The option of “-ReplicationScope Domain” when creating a primary zone implies DNS integration with AD. True or False?

A

True.

32
Q

When using PowerShell to create an A record, what option creates an additional record in the corresponding reverse lookup zone?

A

-CreatePtr

33
Q

Regarding the Preference value of an MX record, the lower the number is, the higher the priority is. True or False?

A

True.

34
Q

Scavenging can be set and activated for a zone via PowerShell commands. True or False?

A

True

MCSA 70-741 (21 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions