SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
MCTS: Configuring A DNS Zone Infrastructure
Start Test
Study First
Subjects
:
certifications
,
mcts
,
it-skills
Instructions:
Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. You must be a member of the ______ group to create an application directory partition.
NRPT
Enterprise Admins
parent zone to a child zone
Secondary
2. A ______ is a public key for a remote DNS server that is trusted and able to provide DNSSEC responses.
digitally sign
asymmetric encryption
trust anchor
DNS zone
3. The first step in preparing a zone for DNSSEC is to back up the current zone data. To back up a zone - type the following command at an elevated command prompt: _______.
accepted
dnscmd /ZoneExport <zone name> <zone file name>
dnscmd servername /enlistdirectorypartition FQDN
Service location (SRV)
4. Also recommended for use in the following scenarios: When a host specified in an A resource record in the same zone needs to be renamed - When a generic name for a well-known server such as www needs to resolve to a group of individual computers tha
To All Domain Controllers Specified In The Scope Of This Directory Partition
Notify
Aging
CNAME resource records
5. The ______ partition is replicated among all DCs that are also DNS servers in every domain in an AD forest.
ForestDnsZones
server level and at the zone level
accepted
parent zone to a child zone
6. To add an NS record - double-click any existing NS record in DNS Manager and add the server data to the ______ tab.
To All Domain Controllers In This Domain
will not
Name Servers
use more than one name to point to
7. A secondary zone will not be recognized as a valid name server until it contains a valid copy of zone data. For the secondary zone to obtain this data - you must first ______ to that server.
Name Servers
enable zone transfers
Reload - Transfer From Master - Transfer New Copy Of Zone From Master
Netlogon
8. By right-clicking a secondary zone in the DNS Manager console tree - you can use the shortcut menu to perform the following secondary zone update operations:
Reload - Transfer From Master - Transfer New Copy Of Zone From Master
Host (A or AAAA) - Alias (CNAME) - Mail exchanger (MX) - Pointer (PTR) - Service location (SRV)
Expires After
Scavenging
9. You use Group Policy to configure DNS clients to _________________.
request DNSSEC validation for specific queries
Scavenge Stale Resource Records
Reload
%systemroot%System32Dns
10. By default - zone transfers are ______ from any zone.
disabled
decreases
Netlogon
request DNSSEC validation for specific queries
11. To enlist other DNS servers in the partition - type the following command:
dnscmd servername /enlistdirectorypartition FQDN
To All DNS Servers In This Domain
dnscmd servername /createdirectorypartition FQDN
disabled
12. The GlobalNames zone is compatible only with DNS servers running ______. Therefore - it cannot replicate to servers running earlier versions of Windows Server.
Scavenging
Notify
Win Srvr 2008 and Win Srvr 2008 R2
To All DNS Servers In This Forest
13. A ______ zone is similar to a secondary zone - but it contains only those resource records necessary to identify the authoritative DNS servers for the master zone.
notification
DNS zone
stub
Trust anchors
14. To enable GlobalNames zone support - At an elevated command prompt - type the following: ______.
AD Zone Replication Scope page
Scavenging
dnscmd /ZoneExport <zone name> <zone file name>
dnscmd . /config /enableglobalnamessupport 1
15. You can perform a delegation only from a ________________.
delegate
parent zone to a child zone
The Zone Aging/Scavenging Properties
stub
16. The most common resource records you need to create manually include the following:
dnscmd /ZoneExport <zone name> <zone file name>
Host (A or AAAA) - Alias (CNAME) - Mail exchanger (MX) - Pointer (PTR) - Service location (SRV)
Scavenge Stale Resource Records
delegate
17. By default - DCs include two application directory partitions reserved for DNS data: ______.
parent and child AD DS domains
1. DomainDnsZones and - 2. ForestDnsZones
Win Srvr 2008 and Win Srvr 2008 R2
DNS zone
18. If either of the default application directory partitions is deleted or damaged - you can re-create them in DNS Manager by right-clicking the server node and choosing ______.
request DNSSEC validation for specific queries
time stamp
Create Default Application Directory Partitions
1. A SOA record 2. At least one NS record.
19. The value you configure in the ______ text box determines how long a secondary server waits before retrying a failed zone transfer. Normally - this time is less than the refresh interval. The default value is 10 minutes.
AD Zone Replication Scope page
CNAME resource records
Retry Interval
Create Default Application Directory Partitions
20. Manually created resource records for all zone types are assigned a time stamp of 0; this value indicates that they ______ be aged.
primary
Service location (SRV)
will not
dnscmd servername /createdirectorypartition FQDN
21. The value you configure in the ______ text box determines the default Time to Live (TTL) that is applied to all resource records in the zone. The default value is one hour.
Minimum (Default) TTL
Notify
asymmetric encryption
1. DomainDnsZones and - 2. ForestDnsZones
22. The no-refresh interval is the period after a time stamp during which a zone or server rejects a ______ refresh. The default no-refresh interval is 7 days.
NRPT
time stamp
The Zone Aging/Scavenging Properties
A DS record
23. During this operation - the server hosting the local secondary zone determines whether the serial number in the secondary zone's SOA resource record has expired and then pulls a zone transfer from the master server.
Transfer From Master
Retry Interval
AD Zone Replication Scope page
Name Servers
24. Win 7 clients can be configured to request DNSSEC through the Name Resolution Policy Table (NRPT) in ______.
notification
Scavenging
14
Group Policy
25. Active Directory-integrated zones perform time stamping for dynamically registered records by default - even before aging and scavenging are enabled. However - primary standard zones place time stamps on dynamically registered records in the zone onl
1. Start of Authority (SOA) record that defines basic properties for the zone. 2. NS record signifying the name of the server or servers authoritative for the zone.
aging
CNAME resource records
parent and child AD DS domains
26. The ______ option stores the new zone in the ForestDnsZones partition. Every DC in the entire forest and on which the DNS Server role is installed will receive a copy of the zone.
To All DNS Servers In This Forest
Netlogon
stub
Enterprise Admins
27. The _____ option stores the zone in the domain partition. Every DC in the local domain will receive a copy of the zone - regardless of whether the DNS Server role is installed on that DC.
To All Domain Controllers In This Domain
Transfer From Master
Reload - Transfer From Master - Transfer New Copy Of Zone From Master
DomainDnsZones
28. What are the server requirements for storing a zone in AD?
CNAME resource records
Win Srvr 2008 and Win Srvr 2008 R2
Scavenging
The DNS server needs to be a domain controller.
29. When you do not store a zone in AD - the zone is called a ______ zone - and zone data is stored in text files on the DNS server.
standard
Notify
parent zone to a child zone
notification
30. When you create a new zone - two types of records required for the zone are automatically created. List them.
Remove stale
use more than one name to point to
A DS record
1. Start of Authority (SOA) record that defines basic properties for the zone. 2. NS record signifying the name of the server or servers authoritative for the zone.
31. Scavenging can occur only when ______ is enabled.
aging
Notify
accepted
Transfer New Copy Of Zone From Master
32. A ______ zone provides original read-write source data that allows the local DNS server to answer DNS queries authoritatively about a portion of a DNS namespace.
parent zone to a child zone
primary
%systemroot%System32Dns
CNAME resource records
33. ______ are public keys from other zones that are used to validate digitally signed records originating from those zones and from delegated subdomains that are also DNSSEC-compatible.
primary
manually enlist
Trust anchors
To All Domain Controllers Specified In The Scope Of This Directory Partition
34. A ______ is a database containing records that associate names with addresses for a defined portion of a DNS namespace.
DNS zone
stub
server level and at the zone level
time stamp
35. To ______ a zone is to create a new zone for a subdomain within a DNS namespace and relinquish authority of that new zone.
Remove stale
parent and child AD DS domains
Minimum (Default) TTL
delegate
36. When scavenging is not enabled - you can perform manual scavenging in zones by right-clicking the server icon in the DNS Manager console tree and then choosing ______.
Refresh Interval
Scavenge Stale Resource Records
1. A SOA record 2. At least one NS record.
dnscmd servername /enlistdirectorypartition FQDN
37. This operation performs a zone transfer from the secondary zone's master server regardless of the serial number in the secondary zone's SOA resource record.
partition
Scavenge Stale Resource Records
Win Srvr 2008 and Win Srvr 2008 R2
Transfer New Copy Of Zone From Master
38. The ______ service uses SRV records to locate DCs in a domain by searching the domain for the LDAP service.
Netlogon
Service location (SRV)
dnscmd /ZoneExport <zone name> <zone file name>
standard
39. The source zones from which secondary zones acquire their info are called ______ - and the data copy procedures through which this info is regularly updated are called zone transfers.
stub
dnscmd servername /createdirectorypartition FQDN
partition
masters
40. The ______ allows you to specify the DNS query suffixes - prefixes - FQDNs - or reverse lookup subnets for which a Win 7 or Win Server 2008 R2 client will request DNSSEC.
Service location (SRV)
NRPT
Reload
DNS zone
41. ______ resource records are used to specify the location of specific services in a domain.
1. A SOA record 2. At least one NS record.
Service location (SRV)
Name Servers
To All Domain Controllers Specified In The Scope Of This Directory Partition
42. When you create a new zone - two types of records required for the zone are automatically created: ______
ForestDnsZones
The Zone Aging/Scavenging Properties
To All DNS Servers In This Domain
1. A SOA record 2. At least one NS record.
43. DNSSEC enables a DNS server to ______ the resource records in its zones.
The Zone Aging/Scavenging Properties
digitally sign
accepted
Host (A or AAAA) - Alias (CNAME) - Mail exchanger (MX) - Pointer (PTR) - Service location (SRV)
44. The ______ partition is replicated among all DCs that are also DNS servers in a particular domain
deploying a GlobalNames zone
delegate
enable zone transfers
DomainDnsZones
45. To create a custom application directory partition - type the following command:
Expires After
Aging
dnscmd servername /createdirectorypartition FQDN
Remove stale
46. Any of three events can ________________: When the refresh interval of the primary zone's SOA resource record expires - When a server hosting a secondary zone boots up - When a change occurs in the configuration of the primary zone and this primary
Name Servers
notification
Trust anchors
trigger zone transfers on secondary zones
47. The ______ option stores the new zone in the Domain-DnsZones partition. Every DC in the local domain and on which the DNS Server role is installed will receive a copy of the zone.
dnscmd . /config /enableglobalnamessupport 1
To All DNS Servers In This Domain
dnscmd /ZoneExport <zone name> <zone file name>
Create Default Application Directory Partitions
48. ______ in DNS refers to the process of using time stamps to track the age of dynamically registered resource records.
use more than one name to point to
Aging
To All DNS Servers In This Domain
DNS zone
49. What kind of zones do not automatically perform time stamping on dynamically created resource records?
Standard zones
NS record and an associated A record
14
Reload - Transfer From Master - Transfer New Copy Of Zone From Master
50. To enable aging for a particular zone - you have to enable this feature both at the ______ level.
Minimum (Default) TTL
Service location (SRV)
server level and at the zone level
Trust anchors