MCSE GUIDE TO DESIGNING A MICROSOFT WINDOWS SERVER 2003 ACTIVE DIRECTORY AND NETWORK INFRASTRUCTURE 1ST EDITION BY JAY ADAMSON - TEST BANK

MCSE GUIDE TO DESIGNING A MICROSOFT WINDOWS SERVER 2003 ACTIVE DIRECTORY AND NETWORK INFRASTRUCTURE 1ST EDITION BY JAY ADAMSON – TEST BANK

 

Instant Download – Complete Test Bank With Answers

 

 

Sample Questions Are Posted Below

 

Chapter 5: Name Resolution

 

TRUE/FALSE

 

1. By default, if during an update process WINS is presented with both a static and dynamic-type entry for the same name, the static entry will be preserved.

 

ANS:  T                    PTS:   1                    REF:   371

 

2. A caching-only name server periodically checks for changes made to the zone on its configured primary DNS server and performs full or incremental zone transfers as needed.

 

ANS:  F                    PTS:   1                    REF:   358

 

3. The best way to keep outsiders from gaining access to your internal DNS server is to configure your firewall to explicitly allow only UDP and TCP port 53 communications between the servers.

 

ANS:  T                    PTS:   1                    REF:   349

 

4. One key difference between a DNS server set for high-level security and one set for medium-level security is that a high-level configuration contains a domain controller as well as a DNS server, and the DNS zone information is stored within Active Directory.

 

ANS:  T                    PTS:   1                    REF:   351

 

5. Primary zones are read-only and are updated only through zone transfers.

 

ANS:  F                    PTS:   1                    REF:   344

 

MODIFIED TRUE/FALSE

 

1. A(n) external namespace is used for managing resources on a private network. _________________________

 

ANS:  F, internal namespace

 

PTS:   1                    REF:   320

 

2. BIND, version 5, provides the greatest degree of interoperability with Windows 2003 in a heterogeneous DNS environment. _________________________

 

ANS:  F, version 9

 

PTS:   1                    REF:   330

 

3. A standard primary zone is hosted on the master servers in a zone replication scheme. _________________________

 

ANS:  T                                                     PTS:   1                    REF:   330

 

4. The DACL for a particular zone can be viewed and managed through the DNS Management console under the Security tab of the zone properties. _________________________

 

ANS:  T                                                     PTS:   1                    REF:   348

 

5. The DNS system is a collection of zone files that are spread out throughout the Internet as well as private networks. _________________________

 

ANS:  T                                                     PTS:   1                    REF:   339

 

MULTIPLE CHOICE

 

1. A(n) _____ zone is an authoritative DNS zone that is used primarily to resolve IP addresses to network resource names.

a.	reverse lookup	c.	recursive
b.	stub	d.	transitive

 

 

ANS:  A                    PTS:   1                    REF:   331

 

2. A(n) _____ query is a request from a host to a resolver to find data on other name servers.

a.	reverse	c.	recursive
b.	stub	d.	zone

 

 

ANS:  C                    PTS:   1                    REF:   331

 

3. _____ are useful for reducing the number of DNS queries on a network, and consequently the resource consumption on the primary DNS servers for that particular namespace.

a.	Zone transfers	c.	Address records
b.	Incremental transfers	d.	Stub zones

 

 

ANS:  D                    PTS:   1                    REF:   331

 

4. _____ is the process of copying contents of the zone file on a primary DNS server to a secondary DNS server.

a.	DNSSEC	c.	DNS notify
b.	Zone transfer	d.	Reverse lookup

 

 

ANS:  B                    PTS:   1                    REF:   331

 

5. When using _____ zone transfers, the secondary server retrieves only resource records that have changed within a zone so that it remains synchronized with the primary DNS server.

a.	DNS notify	c.	recursive
b.	full	d.	incremental

 

 

ANS:  D                    PTS:   1                    REF:   332

 

6. _____ allows a primary DNS server to utilize a “push” mechanism for notifying secondary servers that it has been updated with records that need to be replicated.

a.	Incremental transfer	c.	Full transfer
b.	DNS notify	d.	Recursive transfer

 

 

ANS:  B                    PTS:   1                    REF:   332

 

7. A(n) _____ is part of DNS’ database structure that contains the name information for a particular host or zone.

a.	Resource Record	c.	BIND
b.	PTR	d.	CNAME

 

 

ANS:  A                    PTS:   1                    REF:   333

 

8. _____ resource records identify the name of the root of the zone and contain the name of the server that is the primary source for information about the zone.

a.	Canonical Name	c.	Address
b.	SOA	d.	Stub

 

 

ANS:  B                    PTS:   1                    REF:   338

 

9. _____ records are used for creating aliases for hosts.

a.	PTR	c.	Address
b.	SOA	d.	CNAME

 

 

ANS:  D                    PTS:   1                    REF:   339

 

10. _____ allow for the distribution of data and also for the management of localized DNS databases.

a.	SOAs	c.	Reverse lookups
b.	Zones	d.	Addresses

 

 

ANS:  B                    PTS:   1                    REF:   339

 

11. _____ is a set of extensions to DNS that adds the capability to authenticate resource records and was designed to protect the Internet from certain attacks.

a.	DNS notify	c.	Hub-and-Spoke topology
b.	DNSSEC	d.	Replication

 

 

ANS:  B                    PTS:   1                    REF:   354

 

12. _____ is the Microsoft implementation of a NetBIOS name server.

a.	BIND	c.	CNAME
b.	WINS	d.	DNSSEC

 

 

ANS:  B                    PTS:   1                    REF:   361

 

13. _____ is the process of copying updated data from a data store or file system on a source computer to a matching data store or file system on one or more destination computers to synchronize the data.

a.	DNS notify	c.	Replication
b.	Reverse lookup	d.	Zone transfer

 

 

ANS:  C                    PTS:   1                    REF:   364

 

14. A(n) _____ is a WINS component that requests replication of updated WINS database entries from its push partner.

a.	Hub-and-Spoke topology	c.	pull partner
b.	BIND	d.	PTR

 

 

ANS:  C                    PTS:   1                    REF:   365

 

15. The most important step in creating a DNS namespace is _____.

a.	choosing a name	c.	choosing the address
b.	choosing the zone	d.	choosing the pull partner

 

 

ANS:  A                    PTS:   1                    REF:   319

 

16. _____ zones contain the SOA resource record of the zone, the DNS resource records that list the zone’s authoritative servers, and the glue address resource records that are required for contacting the zone’s authoritative servers.

a.	Recursive	c.	Incremental
b.	Stub	d.	Transfer

 

 

ANS:  B                    PTS:   1                    REF:   331

 

YES/NO

 

1. If you are migrating to Windows Server 2003 or integrating Windows Server 2003 DNS with a third-party DNS infrastructure such as BIND or UNIX, do you need to change the namespace design used in your third-party DNS infrastructure?

 

ANS:  N                    PTS:   1                    REF:   327

 

2. Does Windows Server 2003 DNS interoperate with other implementations of DNS?

 

ANS:  Y                    PTS:   1                    REF:   328

 

3. Can dynamic DNS updates allow a computer on your network to register and update its DNS resource records whenever a change occurs?

 

ANS:  Y                    PTS:   1                    REF:   352

 

4. Can network topology influence your decision about replication frequency?

 

ANS:  Y                    PTS:   1                    REF:   364

 

5. Is the Hub-and-Spoke topology best suited for small networks?

 

ANS:  N                    PTS:   1                    REF:   365

 

COMPLETION

 

1. A(n) ____________________ is a set or group of names that are assigned according to some naming convention.

 

ANS:  namespace

 

PTS:   1                    REF:   319

 

2. For the actual DNS database, a(n) ____________________ is a contiguous portion of the domain tree that is administered as a single separate entity by a DNS server.

 

ANS:  zone

 

PTS:   1                    REF:   330

 

3. In the ____________________ topology, every WINS server is configured as a replication partner to every other WINS server.

 

ANS:

Fully Meshed

fully meshed

 

PTS:   1                    REF:   367

 

4. Active Directory-____________________ zones are the only type of zones that can use multi-master replication and Active Directory security features.

 

ANS:  integrated

 

PTS:   1                    REF:   331

 

5. There are two methods for populating entries in the WINS database: manually and ____________________.

 

ANS:  dynamically

 

PTS:   1                    REF:   370

 

MATCHING

 

Match each item with a statement below.

a.	Burst handling	f.	Multi-master replication model
b.	Zone transfers	g.	Primary DNS server
c.	DNS zones	h.	DNSSEC
d.	DNS forwarding	i.	Caching-only name server
e.	Conditional forwarders

 

 

1. Provides fault tolerance by synchronizing the zone file in a primary DNS server with the zone file in a secondary DNS server.

 

2. Used to divide the namespace and use servers to allocate resources and divide services.

 

3. Can be configured to forward DNS queries based on specific domain names.

 

4. Works by adding three additional record types into DNS – NXT, KEY, and SIG – that will be used for authentication.

 

5. The mechanism in which one DNS server passes on an unresolved query to another DNS server for resolution.

 

6. Removes the need for secondary zones when all zones are stored in Active Directory.

 

7. Hosts read-write copies of zone data, has a DNS database of resource records, and resolves queries.

 

8. Performs name resolution using forwarders or root hints.

 

9. Enables WINS to support high volumes of simultaneous WINS client name registration.

 

1. ANS:  B                    PTS:   1                    REF:   331

 

2. ANS:  C                    PTS:   1                    REF:   340

 

3. ANS:  E                    PTS:   1                    REF:   342

 

4. ANS:  H                    PTS:   1                    REF:   354

 

5. ANS:  D                    PTS:   1                    REF:   341

 

6. ANS:  F                    PTS:   1                    REF:   347

 

7. ANS:  G                    PTS:   1                    REF:   358

 

8. ANS:  I                     PTS:   1                    REF:   358

 

9. ANS:  A                    PTS:   1                    REF:   368

 

SHORT ANSWER

 

1. List eight features of Windows Server 2003.

 

ANS:

The features include:

 

Supports RFC 2782: A DNS Resource Record (RR) for specifying the location of services

Dynamic update

Secure dynamic update based on the GSS-Transaction signature (TSIG) algorithm

WINS and WINS-R records

Incremental zone transfer

UTF-8 character encoding

DNS MMC snap-in

Dnscmd.exe

Active Directory-integrated zones

Storage of zones in the DNS application directory partition

Aging and scavenging of obsolete records

Stub zones

Conditional forwarding

Per-record permissions or Access Control Lists

 

PTS:   1                    REF:   329

 

2. What are the benefits of Active Directory-integrated zones?

 

ANS:

The benefits are:

 

No zone files to manage

 

Use of multi-master replication for DNS zone transfer

 

Increased speed of Active Directory replication

 

Integrated management of Active Directory domains and DNS namespaces from the same management console

 

Automatic synchronization of zone data to domain controllers (DCs), regardless of whether the domain controller is also a DNS server

 

PTS:   1                    REF:   325

 

3. Describe the conditions under which pull partners and push partners should be used.

 

ANS:

Pull partners should be used if the following conditions exist:

 

You have slow WAN links or a congested LAN

You need to consolidate WINS database updates that consume bandwidth

You want to exercise control over when the WINS database is updated

 

Push partners should be used if the following conditions exist:

 

In a LAN or over high-speed WAN links

The bandwidth consumed by frequent WINS replication updates is not causing congestion

WINS databases need to be constantly updated

 

PTS:   1                    REF:   365

 

4. Describe the steps involved in a typical DNSSEC-enabled query.

 

ANS:

1. First, the resolver must query the root server using the root server’s public key (which is well known) to find out the DNS server that is authoritative for a particular zone as well as the public key for that zone.

 

2. The resolver then sends a DNS query to the authoritative server for the zone for which it had requested the public key in Step 1.

 

3. The DNS server receives the query and responds to the resolver with the requested information as well as the SIG records that corresponds to the DNS zone.

 

4. The resolver receives the resource record as well as the SIG record and authenticates the resource record using the known public key (which was obtained in Step 1).

 

5. If the resolver can authenticate the resource record and SIG, it will accept the resource record information. If it cannot authenticate the information, it will discard it.

 

PTS:   1                    REF:   355

 

5. What is the advantage and disadvantage of employing the Fully Meshed topology?

 

ANS:

The advantage to employing this design is the speed of replication. Interconnected WINS servers in a high-speed network can be kept up to date in almost real time. Replication intervals can be shortened to ensure that all changes are replicated very soon after they have been committed to the database.

 

The disadvantage is that this topology can become unmanageable very quickly if the organization grows. Because every WINS server is configured as a replication partner to every other WINS server, the number of relationships will increase exponentially as more servers are added. WINS replication could potentially saturate the network, and any inconsistencies in replication would be difficult to troubleshoot due to the sheer volume of replication partnerships that would need to be investigated.

 

PTS:   1                    REF:   367-368