Exam Prep Questions
Question 1
What type of organizational structure is the domain name system?
-
Flat
-
Circular
-
Hierarchical
-
Round-robin
Answer C is correct. The DNS namespace is a hierarchical one. At the top of the hierarchy is the root (.). Under the root are top-level domains, such as .com and .net. Under these top-level domains are the second-level domains, such as microsoft and quepublishing, that are then represented as microsoft.com and quepublishing.com, respectively. Answers A, B, and D are all incorrect because they don't represent the type of organizational structure used by DNS.
Question 2
What would be the FQDN of a workstation named WKS042 located in the Sales subdomain of the West region domain of the bigcorp.net domain?
-
wks042.bigcorp.net
-
wks042.west.bigcorp.net
-
wks042.sales.bigcorp.net
-
wks042.sales.west.bigcorp.net
Answer D is correct. The FQDN (fully qualified domain name) would be wks042.sales.west.bigcorp.net. Answer A is missing the sales and west subdomains and is thus incorrect. Answer B is missing the sales subdomain and is thus incorrect. Answer C is missing the west subdomain and is thus incorrect.
Question 3
In the fully qualified domain name wks042.sales.west.bigcorp.net, what is the TLD?
-
wks042
-
bigcorp.net
-
.net
-
west.bigcorp.net
Answer C is correct. The TLD (top-level domain) in the FQDN wks042.sales.west.bigcorp.net is .NET. Other common TLDs include .COM, .EDU, .GOV, and .MIL. In addition, there are many country-specific TLDs, such as .US, .CA, .MX, .UK, .DE, .IN, and .JP. The wks042 portion of the FQDN represents the hostname, so answer A is incorrect. The bigcorp.net portion of the FQDN represents the second-level and top-level domains, so answer B is incorrect. The west.bigcorp.net portion of the FQDN represents the third-level, second-level, and top-level domains, so answer D is incorrect.
Question 4
You are currently planning the DNS namespace for a new Windows Server 2003 deployment. The namespace will be used only for the internal network. There will be a separate public network located in a DMZ with a different DNS namespace. Which of the following DNS namespaces would be acceptable on the internal network, but not on the public network? (Choose all that apply.)
-
bigcorp.com
-
bigcorp.corp
-
bigcorp.local
-
corp.bigcorp.com
Answers B and C are correct. The bigcorp.corp and bigcorp.local namespaces are not allowable public DNS namespaces, per RFC 1123. However, they are perfectly acceptable for an internal namespace. Answers A and D represent valid external (public) namespaces and could thus be used internally or externally. Only answers C and D represent namespaces that are valid only on an internal network.
Question 5
You are a network consultant who has been hired by Carmen's Clown College, Inc. You have been given the task of designing a delegated DNS namespace for Carmen's new Windows Server 2003 network. Carmen's already owns the clowncollege.com domain, and its ISP is hosting its Web site. Which of the following options represents a valid delegated DNS namespace?
-
clowncollege.net
-
corp.clowncollege.com
-
clowncollege.corp.com
-
clowncollege.com.corp
Answer B is correct. The corp.clowncollege.com namespace represents a delegated DNS namespace. corp.clowncollege.com would thus become the root of the Active Directory forest and domain structure. Internal network clients should be allowed to resolve both internal and external domain names; however, external (Internet) clients should not be allowed to resolve internal hostnames. The namespace clowncollege.net represents a unique namespace, so answer A is incorrect. The namespaces clowncollege.corp.com and clowncollege.com.corp are not delegated namespaces of the clowncollege.com namespace, so answers C and D are incorrect.
Question 6
You are interviewing Chris, a candidate for an assistant administrator position in your company. When you ask her what a standard secondary zone is, what answer should she tell you?
-
A zone that holds a writable copy of the zone data and that can transfer it to all configured servers
-
A zone that holds a read-only copy of the zone data
-
A zone that has its zone data held within Active Directory
-
A zone that contains only those resource records necessary to identify the authoritative DNS servers for a zone
Answer B is correct. A standard secondary zone holds a read-only copy of the zone information in standard text format. Secondary zones are created to increase performance and resilience of the DNS configuration. Information is transferred from the primary zone to the secondary zones. A master zone is one that holds the only writable copy of the zone data, so answer A is incorrect. An Active Directory-integrated zone operates in a multimaster mode, whereby all name servers can make changes to the zone data; thus, answer C is incorrect. A stub zone contains only those resource records necessary to identify the authoritative DNS servers for a zone, so answer D is incorrect.
Question 7
A client computer that makes a DNS query to a DNS server for name resolution of a remote host is referred to as what?
-
A recursive query
-
An iterative query
-
A DNS resolver
-
A DNS forwarder
Answer C is correct. A DNS resolver is any system that has been configured with the IP addresses of one or more DNS servers and that performs name-resolution queries against these servers. Recursive and iterative represent the type of name-resolution queries that are performed. A recursive query is a DNS query that is sent to a DNS server from a DNS resolver asking the DNS server to provide a complete answer to the query, or an error stating that it cannot provide the information; thus, answer A is incorrect. An iterative query is a DNS query that is sent by a DNS server to another DNS server in an effort to perform name resolution; thus, answer B is incorrect. A DNS forwarder is a DNS server that has received a forwarded name-resolution request from another DNS server.
Question 8
You are a senior consultant for Legacy Systems, Inc., a leading consultancy that helps organizations integrate their existing networks with newer technologies, such as Windows Server 2003. You are currently working on getting the existing BIND DNS implementation working with the newer Windows Server 2003 DNS service. Eventually, you will be able to migrate the existing BIND DNS zones to Windows Server 2003, but the customer wants this to occur over a six-month period, to prepare for any troubles. There are several different BIND servers, all of different versions. You are not sure what the version is on each of them. What setting can you change in the Windows Server 2003 DNS configuration to ensure that zone transfers succeed between the Windows Server 2003 DNS servers and the BIND servers?
-
BIND secondaries
-
Enable round-robin
-
Enable netmask ordering
-
Secure cache against pollution
Answer A is correct. By selecting the BIND Secondaries option, you will disable fast zone transfers and ensure that zone transfers are compatible and can succeed with older DNS implementations that do not support fast zone transfers. BIND versions 4.9.4 and later do support fast zone transfers. Selecting the Enable Round Robin option configures the DNS server to use a round-robin rotation to rotate and reorder resource records if multiple records exist; thus, answer A is incorrect. The Enable Netmask Ordering option configures the DNS server to reorder its host records in the response that it sends to a query based on the IP address of the DNS resolver that the query came from; thus, answer C is incorrect. The Secure Cache Against Pollution option configures the DNS server to prevent the addition of resource records that are unrelated to the original query; thus, answer D is incorrect.
Question 9
You are a senior consultant for Legacy Systems, Inc., a leading consultancy that helps organizations integrate their existing networks with newer technologies, such as Windows Server 2003. You are currently working on getting the existing BIND DNS implementation working with the newer Windows Server 2003 DNS service. Eventually, you will be able to migrate the existing BIND DNS zones to Windows Server 2003, but the customer wants this to occur over a six-month period, to prepare for any troubles. There are several different BIND servers, all of different versions. You are not sure what the version is on each of them. What is the minimum version of BIND that you will require on these BIND servers to ensure that they meet the DNS requirements of Active Directory?
-
4.9.4
-
4.9.6
-
8.1.2
-
8.2.1
Answer C is correct. BIND 8.1.2 meets all of the DNS requirements to support Active Directory by adding support for dynamic DNS. BIND 4.9.4 introduces support for fast zone transfers and does not meet the requirements for Active Directory; thus, answer A is incorrect. BIND 4.9.6 introduces support for SRV resource records but does not meet all of the requirements for Active Directory; thus, answer B is incorrect. BIND 8.2.1 introduces support for incremental zone transfersalthough this is not a requirement for Active Directory; thus, answer D is also incorrect.
Question 10
By default, what DNS servers will a Windows Server 2003 DNS server perform zone transfers with?
-
Only those servers listed on the Zone Transfers tab of the zone properties dialog box
-
Only those servers listed on the Name Servers tab of the zone properties dialog box
-
All servers listed on the Name Servers and Zone Transfers tabs of the zone properties dialog box
-
All servers not listed on the Name Servers and Zone Transfers tabs of the zone properties dialog box
Answer B is correct. By default, Windows Server 2003 DNS servers will perform zone transfers only with the DNS servers that are listed on the Name Servers tab of the zone properties dialog box; thus, answers A, C, and D are incorrect. All DNS servers that are considered to be authoritative for the DNS zone will be listed on the Name Servers tab. Although this is a fairly secure configuration, you can make it more secure by explicitly configuring DNS servers by IP address on the Zone Transfers tab that you want to allow zone transfers to occur with.