DNS & Name Resolution for Active Directory Flashcards

What is a conditional forwarder in DNS?

Answer: A DNS server that forwards queries for a specific domain to designated servers

A conditional forwarder directs queries for a specific DNS namespace to particular DNS servers instead of using the standard forwarder.

In Windows Server 2008 DNS, what does enabling 'dynamic updates' set to 'Secure only' enforce?

Answer: Only domain-joined computers authenticated via Kerberos can update their DNS records

Secure dynamic updates restrict DNS record registration to authenticated domain members, preventing rogue machines from poisoning the zone.

Which application partition stores DNS zone data replicated only to domain controllers within the same domain?

Answer: DomainDNSZones

The DomainDNSZones application partition replicates DNS data to all DNS-enabled domain controllers within the same AD domain.

What happens when a DNS server cannot resolve a query and no forwarder is configured?

Answer: The DNS server uses root hints to contact authoritative servers on the Internet

Without a forwarder, the DNS server falls back to iterative resolution using root hints to find authoritative name servers.

Which DNS record maps an IPv4 address back to a hostname in reverse lookup zones?

Answer: PTR record

PTR (pointer) records exist in reverse lookup zones and map IP addresses to fully qualified domain names for reverse DNS resolution.

When configuring DNS on a new Windows Server 2008 domain controller, which zone should be created to support AD DS?

Answer: A forward lookup zone for the AD domain

A forward lookup zone for the Active Directory domain name is essential so clients and DCs can resolve domain names to IP addresses and locate AD services.