Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

Book 2 > Chapter 1 > Flashcards

Chapter 1 Flashcards

(72 cards)

Start Studying
1
Q

What is the length limit of a host name?

A

255 characters

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What kinds of characters can a host name contain?

A

Letters, numbers, periods, and hyphens

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is the length limit of a NetBIOS name?

A

16 characters

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are the requirements to install the DNS server role?

A

You must be signed in as an administrator, and the server must have a static IP address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

How do you install the DNS server role using PowerShell?

A

Add-WindowsFeature DNS -IncludeManagementTools

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

How do you install the DNS server role as part of a Nano Server deployment?

A

New-NanoServerImage Packages Microsoft-NanoServer-DNS-Package

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How do you enable the DNS server role on Nano Server using PowerShell?

A

Enable-WindowsOptionalFeature -Online -FeatureName DNS-Server-Full-Role

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What type of DNS integration is not supported by Nano Server?

A

Active Directory

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What DNS function enables a server to redirect requests it is unable to resolve?

A

Forwarding

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What DNS function enables a server to redirect requests for certain domain names to designated servers?

A

Conditional forwarding

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What DNS function helps DNS servers resolve domains for which they do not have authoritative information?

A

Root hints

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Where are root hints stored on a DNS server?

A

%systemroot%\System32\dns\CACHE.DNS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What PowerShell commands can be used to view and modify DNS root hints?

A

Add, Remove, Set, Get, and Import-DnsServerRootHint

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What DNS function enables a server to perform DNS queries on a client’s behalf?

A

Recursion

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

For security reasons, what DNS feature should be disabled on DNS servers and how can it be disabled?

A

Recursion should be disabled (if not needed) to prevent DoS attacks
From DNS Manager, right-click server > Properties > Advanced tab > Server options list > Select “Disable Recursion” > Click OK

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What DNS server feature allows for recursion to be performed more securely?

A

Recursion scopes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Which PowerShell cmdlets are used to create DNS recursion scopes?

A

Add-DnsServerRecursionScope to create scope

Add-DnsServerQueryResolutionPolicy to send certain queries to scope

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What DNS function allows clients to verify they are communicating with a genuine DNS server?

A

DNSSEC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

From where does a DNSSEC client obtain a public key to validate a DNS server’s signature?

A

Trust anchors

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What must be created on a DNS server to use DNSSEC?

A

TrustAnchors zone to store public keys

Name Resolution Policy Table (NRPT) to provide clients with DNSSEC rules

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

How are NRPTs usually distributed?

A

Through a GPO

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What DNS function enables a server to use a random source port when issuing DNS queries?

A

DNS socket pool

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is the size range of a socket pool?

A

0 - 10,000

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is the default size of a socket pool?

A

2,500

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
What command is used to resize the DNS socket pool?
``` dnscmd /config /socketpoolsize # The DNS server must be restarted after this ```
26
What DNS function helps a server prevent attackers from poisoning the DNS cache?
Cache locking
27
Which PowerShell cmdlet is used to configure DNS cache locking?
Set-DnsServerCache -LockingPercent
28
What DNS function helps servers prevent DoS attacks on other DNS servers?
Response rate limiting
29
How can response rate limiting be enabled on DNS servers?
Set-DnsServerResponseRateLimiting
30
What DNS function helps prevent man-in-the-middle attacks?
DNS-Based Authentication of Named Entities (DANE)
31
How are DNS resource records with multiple IP addresses stored?
In multiple zone scopes
32
How can DNS be configured to respond with different results based a client's location?
Add clients to a client subnet, then create a query resolution policy pointing their requests to a particular zone scope
33
What three groups have administrative access to DNS servers?
Domain Admins: Full permissions in home domain Enterprise Admins: Full permissions in forest DnsAdmins: View/modify in home domain
34
What DNS server objects can have delegated administrative permissions?
Servers and zones
35
What is the name for a general DNS query to translate a hostname to an IP address, and how are these queries resolved?
Forward lookup queries, resolved by referencing forward lookup zones
36
What is the name for a DNS query to translate an IP address to a hostname, and how are these queries resolved?
Reverse lookup queries, resolved by referencing reverse lookup zones
37
What type of records do reverse lookup zones contain?
Pointer (PTR) records
38
What is a primary zone?
A copy of a zone that can be updated directly on a server
39
What info is contained in the Start of Authority (SOA) record?
``` Primary server Responsible person Refresh interval Retry interval Expires after TTL ```
40
What is a secondary zone?
A read-only copy of a zone
41
What DNS feature allows for delegating authority over part of a domain to another server?
DNS delegation
42
What features are provided by AD DS-integrated zones?
Multimaster updates Replication Secure dynamic updates Security through ACLs
43
What AD DS feature allows clients to update their own DNS records?
Secure dynamic updates
44
What are two ways to redirect query traffic to designated DNS servers?
Conditional forwarding and stub zones
45
What is the primary difference between a stub zone and conditional forwarding?
A stub zone contains the complete list of DNS servers in the other domain that is updated automatically, while conditional forwarding allows for pointing to a specific DNS server
46
What zone can be used as an alternative to running a WINS server for legacy clients?
GlobalNames zone
47
What DNS records contain IPv4 addresses?
Host A records
48
What DNS records contain IPv6 addresses?
Host AAAA records
49
What DNS record is created automatically with every primary zone?
A start of authority (SOA) record
50
What DNS record identifies authoritative name servers in a zone, along with delegated zones?
Name server (NS) records
51
What are SRV records?
Specify by service, protocol, and domain name which servers host a partiuclar service, so clients can find them using A or AAAA records
52
What is the format of a SRV record?
_Service.Proto.Name TTL Class SRV Priority Weight Port Target I.e. http._tcp.Contoso.com. IN SRV 0 0 80 www.Contoso.com
53
What DNS record is an alias for a host?
CNAME records
54
What DNS record identifies mail servers for SMTP?
MX records
55
How can MX records be used to distribute load across mail servers?
Use multiple MX records with different priorities
56
What DNS records are likely to be updated dynamically?
A, AAAA, PTR, and SRV records
57
Which PowerShell cmdlet is used to create DNS records?
Add-DnsServerResourceRecord
58
What DNS feature allows for outdated DNS records to be periodically removed?
Zone aging/scavenging
59
What two parameters determine scavenging behavior?
No-refresh interval: Period of time record is not eligible to be refreshed, default 7 days Refresh interval: Time between earliest moments when record can be refreshed and scavenged, default 7 days
60
In what order does DNS choose between different servers in a zone?
It finds the record with the lowest priority value. If the priorities are the same, it decides based on the proportion of weight values. If there are MX records, it looks for the one with the lowest preference value.
61
What value determines how long a record can reside in the DNS cache of a client or server?
Time to Live (TTL)
62
How do you add unknown records to DNS via PowerShell?
Use Add-DnsServerResourceRecord with the -Unknown parameter
63
How do you implement DNS round robin?
Used the Advanced server settings dialog to add multiple IP addresses to the same record
64
What is a form of DNS round robin that allows clients to receive a result based on their subnet?
Netmask ordering
65
What are the two kinds of DNS scopes?
Zone scopes: collections of resource records | Recursion scopes: collection of settings that define recursion behavior in a zone
66
What is the relationship between zones, scopes, and records?
Zones can contain multiple scopes, scopes contain records, but records can exist across multiple scopes using different IP addresses
67
Which PowerShell cmdlet is used to create DNS client subnets?
Add-DnsServerClientSubnet
68
Which PowerShell cmdlet is used to create zone scopes in DNS?
Add-DnsServerZoneScope
69
How do you place resource records into a particular zone scope?
Use the Add-DnsServerResourceRecord cmdlet with the -ZoneScope option
70
What type of events log every time a DNS server, zone, or resource record is changed?
DNS Audit Events
71
What type of events log every time a DNS server sends or receives DNS information?
DNS Analytic Events
72
How do you view zone level statistics of a DNS server?
Use the Get-DnsServerStatistics cmdlet with the -ZoneName option

Book 2 (4 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions