SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
MCTS: Configuring A DNS Zone Infrastructure
Start Test
Study First
Subjects
:
certifications
,
mcts
,
it-skills
Instructions:
Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. The Zone Transfers tab also allows you to configure ______ to secondary servers whenever a change occurs at the primary zone.
primary
notification
request DNSSEC validation for specific queries
To All DNS Servers In This Domain
2. The value you configure in the ______ text box determines how long a secondary DNS server waits before querying the master server for a zone renewal. The default value for this setting is 15 minutes.
CNAME resource records
Retry Interval
Host (A or AAAA) - Alias (CNAME) - Mail exchanger (MX) - Pointer (PTR) - Service location (SRV)
Refresh Interval
3. To create a custom application directory partition - type the following command:
parent zone to a child zone
NRPT
dnscmd servername /createdirectorypartition FQDN
delegate
4. The no-refresh interval is the period after a time stamp during which a zone or server rejects a ______ refresh. The default no-refresh interval is 7 days.
the cache life of a resource record
time stamp
disabled
notification
5. Consequently - when aging is enabled - dynamically registered resource records can be scavenged after ___ days by default.
CNAME resource records
14
Service location (SRV)
dnscmd . /config /enableglobalnamessupport 1
6. ______ in DNS refers to the process of using time stamps to track the age of dynamically registered resource records.
Transfer From Master
Aging
To All Domain Controllers In This Domain
CNAME resource records
7. To enlist other DNS servers in the partition - type the following command:
Expires After
dnscmd servername /enlistdirectorypartition FQDN
The Zone Aging/Scavenging Properties
Scavenging
8. Increasing the refresh interval ______ zone transfer traffic.
will not
CNAME resource records
dnscmd servername /createdirectorypartition FQDN
decreases
9. ______ resource records are used to specify the location of specific services in a domain.
Notify
trust anchor
To All DNS Servers In This Domain
Service location (SRV)
10. The ______ option stores the new zone in the Domain-DnsZones partition. Every DC in the local domain and on which the DNS Server role is installed will receive a copy of the zone.
DomainDnsZones
stub
To All DNS Servers In This Domain
Service location (SRV)
11. For a delegation to be implemented - the parent zone must contain a _____ and an _____ (called a glue record) pointing to each authoritative server of the delegated domain.
public key
NS record and an associated A record
Retry Interval
A DS record
12. When you create a new zone - two types of records required for the zone are automatically created. List them.
Transfer New Copy Of Zone From Master
dnscmd servername /enlistdirectorypartition FQDN
The DNS server needs to be a domain controller.
1. Start of Authority (SOA) record that defines basic properties for the zone. 2. NS record signifying the name of the server or servers authoritative for the zone.
13. ______ are public keys from other zones that are used to validate digitally signed records originating from those zones and from delegated subdomains that are also DNSSEC-compatible.
To All Domain Controllers Specified In The Scope Of This Directory Partition
AD Zone Replication Scope page
Trust anchors
NS record and an associated A record
14. The ______ partition is replicated among all DCs that are also DNS servers in a particular domain
decreases
DomainDnsZones
%systemroot%System32Dns
asymmetric encryption
15. What are the server requirements for storing a zone in AD?
the cache life of a resource record
The DNS server needs to be a domain controller.
request DNSSEC validation for specific queries
Scavenging
16. DNSSEC in Win Server 2008 R2 allows a ______ to validate DNS data on behalf of its Win 7 clients.
To All Domain Controllers Specified In The Scope Of This Directory Partition
Transfer From Master
DNS server
Enterprise Admins
17. For a DC to fall within the scope of such a directory partition - you must ______ that DC in the partition.
Notify
stub
NS record and an associated A record
manually enlist
18. When you create a new zone - two types of records required for the zone are automatically created: ______
Service location (SRV)
ForestDnsZones
1. A SOA record 2. At least one NS record.
%systemroot%System32Dns
19. The ______ service uses SRV records to locate DCs in a domain by searching the domain for the LDAP service.
aging
Netlogon
Notify
delegate
20. This operation reloads the secondary zone from the local storage.
stub
dnscmd /ZoneExport <zone name> <zone file name>
%systemroot%System32Dns
Reload
21. The ______ partition is replicated among all DCs that are also DNS servers in every domain in an AD forest.
Name Servers
Remove stale
stub
ForestDnsZones
22. Alias resource records are sometimes called canonical names (CNAME). These records allow you to ______ a single host.
DNS server
trust anchor
parent and child AD DS domains
use more than one name to point to
23. The ______ option stores the zone in the user-created application directory partition specified in the associated drop-down list box.
Enterprise Admins
Netlogon
Scavenging
To All Domain Controllers Specified In The Scope Of This Directory Partition
24. A ______ is a database containing records that associate names with addresses for a defined portion of a DNS namespace.
To All Domain Controllers Specified In The Scope Of This Directory Partition
GlobalNames zone
trust anchor
DNS zone
25. When scavenging is not enabled - you can perform manual scavenging in zones by right-clicking the server icon in the DNS Manager console tree and then choosing ______.
digitally sign
1. A SOA record 2. At least one NS record.
dnscmd /ZoneExport <zone name> <zone file name>
Scavenge Stale Resource Records
26. To enable aging for a particular zone - you have to enable this feature both at the ______ level.
A DS record
Enterprise Admins
enable zone transfers
server level and at the zone level
27. A ______ zone is similar to a secondary zone - but it contains only those resource records necessary to identify the authoritative DNS servers for the master zone.
To All Domain Controllers In This Domain
stub
Remove stale
dnscmd /ZoneExport <zone name> <zone file name>
28. If either of the default application directory partitions is deleted or damaged - you can re-create them in DNS Manager by right-clicking the server node and choosing ______.
Create Default Application Directory Partitions
dnscmd servername /createdirectorypartition FQDN
%systemroot%System32Dns
Reload
29. DNS delegations are automatically used to separate ______ in a single forest.
parent and child AD DS domains
standard
dnscmd servername /enlistdirectorypartition FQDN
DNS zone
30. You must be a member of the ______ group to create an application directory partition.
A DS record
partition
manually enlist
Enterprise Admins
31. When the zone is stored in a file instead of AD - by default the primary zone file is named zone_name.dns - and this file is located in the ______ folder on the server.
Remove stale
parent zone to a child zone
DomainDnsZones
%systemroot%System32Dns
32. To enable GlobalNames zone support - At an elevated command prompt - type the following: ______.
dnscmd . /config /enableglobalnamessupport 1
Service location (SRV)
Reload
parent and child AD DS domains
33. Public key cryptography provides ______ - which means that separate keys are used to encrypt and decrypt data.
delegate
asymmetric encryption
The Zone Aging/Scavenging Properties
disabled
34. There are three basic steps in _______________: 1. Enable GlobalNames zone support. 2. Create the GlobalNames zone. 3. Populate the GlobalNames zone.
%systemroot%System32Dns
deploying a GlobalNames zone
Create Default Application Directory Partitions
public key
35. A ______ zone provides original read-write source data that allows the local DNS server to answer DNS queries authoritatively about a portion of a DNS namespace.
1. A SOA record 2. At least one NS record.
Group Policy
aging
primary
36. A secondary zone will not be recognized as a valid name server until it contains a valid copy of zone data. For the secondary zone to obtain this data - you must first ______ to that server.
enable zone transfers
parent and child AD DS domains
1. DomainDnsZones and - 2. ForestDnsZones
Trust anchors
37. The first step in preparing a zone for DNSSEC is to back up the current zone data. To back up a zone - type the following command at an elevated command prompt: _______.
NS record and an associated A record
AD Zone Replication Scope page
dnscmd /ZoneExport <zone name> <zone file name>
Netlogon
38. A ______ is a data structure in AD that distinguishes data for different replication purposes.
1. A SOA record 2. At least one NS record.
NS record and an associated A record
partition
1. DomainDnsZones and - 2. ForestDnsZones
39. In this way - digital signatures use ______ cryptography to prove that information is unspoofed and unchanged.
the cache life of a resource record
The Zone Aging/Scavenging Properties
To All DNS Servers In This Forest
public key
40. During this operation - the server hosting the local secondary zone determines whether the serial number in the secondary zone's SOA resource record has expired and then pulls a zone transfer from the master server.
Service location (SRV)
primary
dnscmd servername /createdirectorypartition FQDN
Transfer From Master
41. What kind of zones do not automatically perform time stamping on dynamically created resource records?
Standard zones
Expires After
1. Start of Authority (SOA) record that defines basic properties for the zone. 2. NS record signifying the name of the server or servers authoritative for the zone.
request DNSSEC validation for specific queries
42. The ___________________ dialog box enables you to modify two key settings related to aging and scavenging: 1. the no-refresh interval 2. and the refresh interval
trigger zone transfers on secondary zones
delegate
The Zone Aging/Scavenging Properties
asymmetric encryption
43. Win 7 clients can be configured to request DNSSEC through the Name Resolution Policy Table (NRPT) in ______.
The DNS server needs to be a domain controller.
ForestDnsZones
Group Policy
1. DomainDnsZones and - 2. ForestDnsZones
44. Active Directory-integrated zones perform time stamping for dynamically registered records by default - even before aging and scavenging are enabled. However - primary standard zones place time stamps on dynamically registered records in the zone onl
aging
server level and at the zone level
public key
dnscmd servername /enlistdirectorypartition FQDN
45. ______ refers to the process of deleting outdated resource records on which time stamps have been placed.
server level and at the zone level
Reload
14
Scavenging
46. The most common resource records you need to create manually include the following:
disabled
AD Zone Replication Scope page
DNS zone
Host (A or AAAA) - Alias (CNAME) - Mail exchanger (MX) - Pointer (PTR) - Service location (SRV)
47. To ______ a zone is to create a new zone for a subdomain within a DNS namespace and relinquish authority of that new zone.
deploying a GlobalNames zone
A DS record
digitally sign
delegate
48. You can perform a delegation only from a ________________.
1. Start of Authority (SOA) record that defines basic properties for the zone. 2. NS record signifying the name of the server or servers authoritative for the zone.
parent zone to a child zone
DomainDnsZones
time stamp
49. Any of three events can ________________: When the refresh interval of the primary zone's SOA resource record expires - When a server hosting a secondary zone boots up - When a change occurs in the configuration of the primary zone and this primary
will not
trigger zone transfers on secondary zones
server level and at the zone level
parent and child AD DS domains
50. The GlobalNames zone is compatible only with DNS servers running ______. Therefore - it cannot replicate to servers running earlier versions of Windows Server.
Aging
aging
time stamp
Win Srvr 2008 and Win Srvr 2008 R2