Network Services Flashcards

1
Q

What does DNS use to partition the domain landscape?

A

Zone files

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Zone files contain what? Give example

A

Resource records like A records and MX records.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is the IPv6 equivalent of A-resource records?

A

AAAA record

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What do TXT records allow?

A

To add arbitrary information relating to the DNS in text form and for this to be queries. An example would be showing proof of ownership for a domain name by way of adding the name of the business or person and their address details to the TXT record.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

How does Sender Policy Framework record work

A

It tells the internet which email servers a domain uses to send mail. When mail is received at another domain, it will check the SPF record and compare the sending email servers, if they don’t match the mail will be rejected.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is DKIM and what does it enable?

A

Domain Key’s Identified Mail. Similar to SPF, it allows for authentication of email messages but it uses a cryptographic key stored in the TXT record.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What are SRV records used for?

A

Service (SRV) locator records are used for locating services such as LDAP or SIP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What type of DNS record assists mail servers in identifying the mail server for your domain?

A

MX record

*if you want to receive mail from other domains, you need this record set

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What must you publish if you want to receive mail from other mail servers?

A

an MX record

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

If you wanted a host to have more than one FQDN, how would you accomplish this?

A

By using a CNAME record to specify the alternative FQDN name and map it to the FQDN in the A record

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What type of record maps an IP to an FQDN?

A

PTR (Pointer Records)

*this is known as a reverse lookup

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Which type of DNS record contains all the servers responsible for a particular zone file?

A
NS record (Name Server).
note - you can't perform a zone transfer without them
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

what does the SOA record do?

A

The Start Of Authority record defines parameters in the zone file like what is the primary DNS server, the TTL and refresh intervals to update secondary DNS servers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the split-brain DNS model?

A

Whereby DNS is split so that one DNS handles internet/public host resolution and another is based internally to manage private host name resolution.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is the risk of using a public DNS to resolve hosts on a private network?

A

If the same DNS was used to resolve both external and internal, a hacker would be able to find out internal names easily.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

When might you use cloud-hosted DNS?

A

If the number of records/maintenance of your external DNS is large.

17
Q

What is the job of the primary DNS server?

A

To host a domain’s zone file (editable copy)

18
Q

How can external DNS traffic be cut down?

A

By using a forwarding/DNS caching server to save results

19
Q

What is MAC reservation

A

a feature of DHCP whereby a MAC address can be assigned the same IP address each time it requests an IP from the DHCP

20
Q

Besides IP address and subnet mask, what are the most important DHCP options?

A

1) Router option (default gateway)
2) DNS Server IP address
3) DNS suffix

21
Q

What type of packet is used to renew a DHCP lease? At what point during the lease cycle is this done?

A

DHCP Request packet

It is sent when 50% of the lease cycle duration has passed

22
Q

How can you get a DHCP server to respond to DHCP Discover broadcast packets from hosts on different subnets?

A

By enabling IP HELPER on a router router to forward them directly to the DHCP server.
Or using DHCP Relay server to forward them if the router doesn’t support IP helper.

23
Q

What uses stratums? What are they?

A

NTP uses stratums. A stratum represents a level in a hierarchy of precision clocks. stratum 0 is the highest and is generally an atomic clock. Stratum 1 is a host system that derives it’s clock from stratum 0 and so on.

24
Q

What can happen to system time across virtual machines and how can this problem be rememdied?

A

The system clocks can drift out of synch. NTP can be used to prevent this.

25
Q

What service allows an admin to keep track of and manage IP addresses?

A

IP Address Management

*IPAM allows centralized management of DHCP and DNS

26
Q

If aDHCP server doesn’t respond to a DHCP Request, at what point in the lease cycle duration will the host try contacting ALL LISTENING SERVERS BEFORE GIVING UP THE ADDRESS?

A

at 7/8 of the lease period.

27
Q

List the steps in the DORA process

A

1) DISCOVER - client requests DHCP Discover message (broadcast)
2) OFFER - DHCP responds with a DHCP Offer message (unicast)
3) REQUEST - client sends DHCP Request message to server (broadcast)
4) ACKNOWLEDGE - server responds with DHCP Acknowledge (unicast)

28
Q

What do DHCP, BOOTP and RARP have in common?

A

They can all allocate IP addresses

  • for RARP, a computer sends a request to a RARP server requesting it’s IP address.
  • *DHCP/BOOTP has largely replaced RARP
29
Q

What can DHCP do that BOOTP can’t?

A

Allocate IP addresses DYNAMICALLY (as opposed to AUTOMATICALLY, which both can do)

30
Q

Where would you place your external DNS server?

A

In the DMZ

31
Q

Dynamic DNS, along with DHCP, allows hosts to automatically update which two DNS resource records?

A

the A record and PTR record

32
Q

Active Directory integrated zones protect what?

A

It adds protection when the host updates the A and PTR records so that only the host can modify or delete them

33
Q

List the steps in a typical DNS recursive query

A

1) The resolver (service running on the host/client) will check the DNS cache first
2) If the answer isn’t in the DNS cache, the resolver points the request to the configured DNS server
4) if the internal DNS server cannot resolve the answer, it will forward the request to the ISP DNS servers (If the internal DNS server cannot resolve the answer, it may query the external DNS servers directly)
4) If the ISP DNS servers are unable to resolve the query they will query the Internet DNS servers

34
Q

what’s the difference between a recursive DNS query and an iterative one?

A

1) in a recursive query the DNS server does the entire job of fetching an answer for your query
2) in an iterative one, it will refer the host to servers where it may have the answer