TestOut LabSim

10/25/23, 9 : 50 AM Page 1 of 21 https://labsimapp.testout.com/v6_0_574/exam-engine.html/5fcb4bcb…n/30567909/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us 5.2.7 Practice Questions Candidate: Kelsey Dusnmore (Kdusnmore) Date: 10/25/2023 9:46:53 am • Time Spent: 07:03 Score: 78% Passing Score: 80%  Question 1:  Incorrect Drag the DNS term on the left to the appropriate de fi nition on the right. (Each term may be used once, more than once, or not at all.) Uses the °P address to fi nd the host name (or FQDN). Recursion Reverse lookup Client computers submit a DNS request to the DNS server and wait for a complete response. Reverse lookup Recursion The process by which a DNS server or host uses root name servers and subsequent servers to perform name resolution. Recursion Uses the hostname (or the FQDN) to fi nd the °P address. Forward lookup Keyboard Instructions Explanation

10/25/23, 9 : 50 AM Page 2 of 21 https://labsimapp.testout.com/v6_0_574/exam-engine.html/5fcb4bcb…/30567909/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us Forward lookup : uses the hostname (or the FQDN) to fi nd the °P address. Reverse lookup : uses the °P address to fi nd the hostname (or FQDN). Recursion : the process by which a DNS server or host uses root name servers and subsequent servers to perform name resolution. Most client computers do not perform recursion; instead, they submit a DNS request to the DNS server and wait for a complete response. Many DNS servers will perform recursion. Delegation : the process by which a DNS server hands responsibility for the request to another DNS server. References  5.1.1 DNS - Record Types  5.1.2 DNS Facts  5.1.3 Con " gure DNS  5.1.4 Con " gure DNS Addresses  5.1.5 Create Standard DNS Zones  5.1.6 Create Host Records  5.1.7 Create CNAME Records  5.1.8 Troubleshoot DNS Records  5.1.9 Con " gure DNS Server Properties  5.1.10 DNS Server Properties Facts  5.2.4 Name Resolution Facts  5.2.6 Create a Root Zone  5.3.2 Standard DNS Zones  5.3.3 Active Directory-Integrated Zones  5.3.4 Create a New Zone  5.3.5 Con " gure Zone Properties 

10/25/23, 9 : 50 AM Page 4 of 21 https://labsimapp.testout.com/v6_0_574/exam-engine.html/5fcb4bcb…/30567909/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us Con fi gure a conditional forwarder to forward requests to the root servers. Explanation °n this scenario, DC1 has been con fi gured with a root zone. The root zone is named . (dot). When the server has a root zone, it will not (and cannot) use root hints because it thinks that it is a root server. Deleting the root zone allows you to con fi gure the root hints option. You will not be able to con fi gure a stub zone or conditional forwarders for the root zone because the server has a primary copy of the root zone. References  5.1.1 DNS - Record Types  5.1.2 DNS Facts  5.1.3 Con " gure DNS  5.1.4 Con " gure DNS Addresses  5.1.5 Create Standard DNS Zones  5.1.6 Create Host Records  5.1.7 Create CNAME Records  5.1.8 Troubleshoot DNS Records  5.1.9 Con " gure DNS Server Properties  5.1.10 DNS Server Properties Facts  5.2.4 Name Resolution Facts  5.2.6 Create a Root Zone  5.3.2 Standard DNS Zones  5.3.3 Active Directory-Integrated Zones  5.3.4 Create a New Zone 

10/25/23, 9 : 50 AM Page 5 of 21 https://labsimapp.testout.com/v6_0_574/exam-engine.html/5fcb4bcb…/30567909/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us  5.3.5 Con " gure Zone Properties  5.3.6 Zone Management Facts  5.3.7 Create an Active Directory-Integrated Zone  5.3.8 Convert a Zone to Active Directory-integrated  5.4.1 DNS Troubleshooting  5.4.2 DNS Troubleshooting Facts  5.4.3 Examine DNS Attacks  5.4.4 Use nslookup  5.4.5 Explore nslookup  6.1.4 DNS Con " guration Issues q_name_resolution_delete_zone_01_shc5.question.fex  Question 3:  Correct Your company's internet namespace is westsim.com, and your company's internal namespace is internal.westsim.com. Your network has two DNS servers, DNS1 and DNS2. DNS1 is con fi gured with a root zone and is authoritative for the internal.westsim.com domain. DNS2 is authoritative for the westsim.com domain. All client computers are members of the internal.westsim.com domain and are con fi gured to use DNS1 as the primary DNS server. Client computers on your internal network cannot resolve internet DNS names. You verify that client computers can resolve internal DNS names successfully. You also verify that the internal DNS server is con fi gured to forward all unresolvable DNS names to the company's internet DNS server. You must keep your internal network as secure as possible while making sure that all client computers can resolve internet DNS names successfully. What should you do? On DNS2, copy the Cache.dns fi le from the DNS\Backup folder to the DNS folder.

10/25/23, 9 : 50 AM Page 7 of 21 https://labsimapp.testout.com/v6_0_574/exam-engine.html/5fcb4bcb…/30567909/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us  5.1.10 DNS Server Properties Facts  5.2.4 Name Resolution Facts  5.2.6 Create a Root Zone  5.3.2 Standard DNS Zones  5.3.3 Active Directory-Integrated Zones  5.3.4 Create a New Zone  5.3.5 Con " gure Zone Properties  5.3.6 Zone Management Facts  5.3.7 Create an Active Directory-Integrated Zone  5.3.8 Convert a Zone to Active Directory-integrated  5.4.1 DNS Troubleshooting  5.4.2 DNS Troubleshooting Facts  5.4.3 Examine DNS Attacks  5.4.4 Use nslookup  5.4.5 Explore nslookup  6.1.4 DNS Con " guration Issues q_name_resolution_delete_zone_02_shc5.question.fex  Question 4:  Correct

10/25/23, 9 : 50 AM Page 8 of 21 https://labsimapp.testout.com/v6_0_574/exam-engine.html/5fcb4bcb…/30567909/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us Your Active Directory network uses the internal DNS namespace private.westsim.com. Several other Active Directory domains also exist, which are children of the private.westsim.com domain. On the internet, your company uses westsim.com for its public domain name. Your company manages its own DNS servers that are authoritative for the westsim.com zone. The private.westsim.com zone has been delegated to your company's Active Directory domain controllers, which are also DNS servers. Computers that are members of the private.westsim.com domain and all child domains must be able to resolve DNS names of internet resources. However, to help secure your network, DNS queries for resources in the private.westsim.com domain and all child domains must never be sent to internet DNS servers. Queries for internet names must go fi rst to your public DNS server that is authoritative for the westsim.com domain. You need to con fi gure your company's DNS servers to meet these requirements. What should you do? (Select two. Each correct choice is part of the solution.) Delete root hints to internet DNS servers on all DNS servers that are authoritative for the westsim.com zone. Create a forwarders list on all DNS servers that are authoritative for the westsim.com zone or any child zone. Forward to DNS servers that are authoritative for the child zone. Con fi gure root hints to internet DNS servers on all DNS servers that are authoritative for the private.westsim.com zone or any child zone. Create a forwarders list on all DNS servers that are authoritative for the private.westsim.com zone or any child zone. Forward to DNS servers that are authoritative for the parent zone. Delete root hints to internet DNS servers on all DNS servers that are authoritative for the private.westsim.com zone or any child zone.

10/25/23, 9 : 50 AM Page 10 of 21 https://labsimapp.testout.com/v6_0_574/exam-engine.html/5fcb4bc…/30567909/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us You are the systems administrator for WestSim Corporation. You have been assigned to set up a new branch o ffi ce in Tulsa. The branch will be represented by a single domain. You install a single DNS server called TulsaDNS and con fi gure a primary zone for the branch o ffi ce domain. You test name resolution and fi nd that hosts can only resolve names for hosts within the domain. You need to enable clients in the Tulsa location to resolve names for hosts in other domains within your private network. You would like to minimize tra ffi c across the WAN link between the sites. What should you do? Con fi gure TulsaDNS to use forwarders. Con fi gure TulsaDNS as a caching-only server. Con fi gure network clients to use a DNS server located on the rest of the network. Con fi gure TulsaDNS with root hints. Explanation Con fi gure TulsaDNS to use forwarders. When TulsaDNS receives a request for a hostname on another domain, it forwards the request to another DNS server. The TulsaDNS server submits a recursive request so that only the single request and response travel across the WAN link. Con fi guring TulsaDNS with root hints pointing to root servers on the rest of the network would enable name resolution. However, TulsaDNS would refer to the root zone servers and perform iterative queries to resolve all hostnames outside of its own domain. This would result in multiple requests crossing the WAN link to resolve a single hostname. Con fi guring TulsaDNS as a caching-only server would increase WAN link tra ffi c, as the domain for the Tulsa location would need to be placed on the other side of the WAN link. Name resolution requests for hosts within the domain in Tulsa would need to cross the WAN link once for each host until the server cached the hostnames of all other hosts. References  5.1.1 DNS - Record Types 

10/25/23, 9 : 50 AM Page 11 of 21 https://labsimapp.testout.com/v6_0_574/exam-engine.html/5fcb4bcb…/30567909/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us  5.1.2 DNS Facts  5.1.10 DNS Server Properties Facts  5.2.1 Conditional Forwarders and Stub Zones  5.2.4 Name Resolution Facts  5.2.5 Con " gure Forwarders  5.3.1 Forward and Reverse Lookup Zones q_name_resolution_forward_02_shc5.question.fex  Question 6:  Correct Your company has an internet domain of westsim.com. Your internal network has three Active Directory domains named westsim.local, support.westsim.local, and research.westsim.local. You install a server named SL-SRV1 as a member of the westsim.local domain. You con fi gure SL-SRV1 with a static °P address of 192.168.0.23. You con fi gure the server to dynamically register its DNS name. Clients in the support.westsim.local domain need to access the SL-SRV1 server. Some users in the support.westsim.local domain are accustomed to using the support.westsim.local su ffi x when accessing network resources. To accommodate these users, you want to dynamically register the name SL-SRV1.support.westsim.local in addition to the SL-SRV1.westsim.local name in DNS. What should you do? On the SL-SRV1 server, edit the advanced TCP/°P properties of the server's local area connection. Add a connection-speci fi c su ffi x of support.westsim.local. Apply the changes and then run ipcon fi g /registerdns .

10/25/23, 9 : 50 AM Page 13 of 21 https://labsimapp.testout.com/v6_0_574/exam-engine.html/5fcb4bc…/30567909/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us References  5.1.1 DNS - Record Types  5.1.2 DNS Facts  5.1.3 Con " gure DNS  5.1.4 Con " gure DNS Addresses  5.1.5 Create Standard DNS Zones  5.1.6 Create Host Records  5.1.7 Create CNAME Records  5.1.8 Troubleshoot DNS Records  5.1.9 Con " gure DNS Server Properties  5.1.10 DNS Server Properties Facts  5.2.4 Name Resolution Facts  5.2.6 Create a Root Zone  5.3.2 Standard DNS Zones  5.3.3 Active Directory-Integrated Zones  5.3.4 Create a New Zone  5.3.5 Con " gure Zone Properties  5.3.6 Zone Management Facts  5.3.7 Create an Active Directory-Integrated Zone  5.3.8 Convert a Zone to Active Directory-integrated  5.4.1 DNS Troubleshooting  5.4.2 DNS Troubleshooting Facts  5.4.3 Examine DNS Attacks  5.4.4 Use nslookup 

10/25/23, 9 : 50 AM Page 14 of 21 https://labsimapp.testout.com/v6_0_574/exam-engine.html/5fcb4bc…/30567909/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us  5.4.5 Explore nslookup  6.1.4 DNS Con " guration Issues q_name_resolution_registerdns_shc5.question.fex  Question 7:  Correct Your company's internal namespace is westsim.local. This domain has two additional child domains named support.westsim.local and research.westsim.local. Due to security concerns, your company's internal network is not connected to the internet. Following are the DNS servers that you manage for your company: Dns1, authoritative for . and westsim.local, °P address = 192.168.1.1 Dns2, authoritative for support.westsim.local, °P address = 192.168.2.1 Dns3, authoritative for research.westsim.local, °P address = 192.168.3.1 All internal DNS domains are Active Directory-integrated domains. You have con fi gured Dns1 with appropriate delegation records for the child zones. How should you con fi gure root hints for Dns2 and Dns3? Copy the Cache.dns fi le from Dns1 to Dns2 and Dns3. °n DNS Manager, edit the properties for Dns2 and Dns3. On the Root Hints tab, remove all default root hints entries and then add an entry for Dns1. °n DNS Manager, edit the properties for Dns2 and Dns3. On the Root Hints tab, select the Copy from server option and specify 192.168.1.1 as the server to copy from. Edit the Cache.dns fi le on Dns1. Delete all entries in the fi le. Explanation

10/25/23, 9 : 50 AM Page 16 of 21 https://labsimapp.testout.com/v6_0_574/exam-engine.html/5fcb4bc…/30567909/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us You are the administrator for the corp.westsim.com domain. The network has two child domains, acct.corp.westsim.com, and sales.corp.westsim.com. You need to con fi gure DNS name resolution properties on the Srv2.sales.corp.westsim.com server. When an unquali fi ed name is submitted for name resolution, you want the server to search using the following su ffi xes: sales.corp.westsim.com corp.westsim.com westsim.com You want to con fi gure the solution with the least e ff ort possible. What should you do? On the DNS tab, select Append parent su ffi xes of the primary DNS su ffi x. On the DNS tab, con fi gure a connection- speci fi c DNS su ffi x of sales.corp.westsim.com. Select Append parent su ffi xes of the primary and connection-speci fi c DNS su ffi xes. On the DNS tab, con fi gure custom DNS su ffi xes for corp.westsim.com and westsim.com. On the DNS tab, con fi gure custom search su ffi xes of sales.corp.westsim.com, corp.westsim.com, and westsim.com. Explanation

10/25/23, 9 : 50 AM Page 17 of 21 https://labsimapp.testout.com/v6_0_574/exam-engine.html/5fcb4bcb…/30567909/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us All that is required in this situation is to select the Append parent su ffi xes of the primary DNS su ffi x option. The primary su ffi x for the computer is sales.corp.westsim.com. By enabling parent su ffi xes, the computer will search all parent domains of the primary su ffi x in order (removing a domain for each subsequent search). Con fi guring custom search su ffi xes for sales.corp.westsim.com, corp.westsim.com, and westsim.com would work but would require more e ff ort than just enabling the parent su ffi xes. Con fi guring custom su ffi xes for corp.westsim.com and westsim.com would not work because when custom su ffi xes are used, neither the primary nor the connection-speci fi c su ffi x is used. This would mean that sales.corp.westsim.com would never get searched. Con fi guring a connection su ffi x for sales.corp.westsim.com and enabling parent su ffi xes would work but involves an unnecessary step because the computer already uses sales.corp.westsim.com as the primary su ffi x. References  5.1.1 DNS - Record Types  5.1.2 DNS Facts  5.1.3 Con " gure DNS  5.1.4 Con " gure DNS Addresses  5.1.5 Create Standard DNS Zones  5.1.6 Create Host Records  5.1.7 Create CNAME Records  5.1.8 Troubleshoot DNS Records  5.1.9 Con " gure DNS Server Properties  5.1.10 DNS Server Properties Facts  5.2.4 Name Resolution Facts  5.2.6 Create a Root Zone  5.3.2 Standard DNS Zones  5.3.3 Active Directory-Integrated Zones 

10/25/23, 9 : 50 AM Page 19 of 21 https://labsimapp.testout.com/v6_0_574/exam-engine.html/5fcb4bc…/30567909/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us On the DNS tab, enable Append parent su ffi xes of the primary DNS su ffi x. Con fi gure an additional custom su ffi x of acct.corp.westsim.com. Edit the DNS su ffi x search list policy to con fi gure the custom search su ffi xes of acct.corp.westsim.com, corp.westsim.com, and westsim.com. On the DNS tab, con fi gure a connection- speci fi c su ffi x of acct.corp.westsim.com. Edit the DNS su ffi x search list policy to con fi gure the custom search su ffi xes of sales.corp.westsim.com, acct.corp.westsim.com, corp.westsim.com, and westsim.com. Explanation °n this scenario, you will need to edit the DNS su ffi x search list policy to con fi gure custom su ffi xes for sales.corp.westsim.com, acct.corp.westsim.com, corp.westsim.com, and westsim.com. When you con fi gure custom DNS su ffi xes, the primary and connection-speci fi c su ffi xes are ignored. For this reason, con fi guring only acct.corp.westsim.com, corp.westsim.com, and westsim.com as su ffi xes will be insu ffi cient to meet the requirements. Con fi guring only acct.corp.westsim.com as a custom su ffi x would mean that only that domain is searched. Con fi guring acct.corp.westsim.com as a connection-speci fi c su ffi x would work only if you also enabled the Append parent su ffi xes of the primary DNS su ffi x option. References  5.1.1 DNS - Record Types  5.1.2 DNS Facts  5.1.3 Con " gure DNS 

10/25/23, 9 : 50 AM Page 20 of 21 https://labsimapp.testout.com/v6_0_574/exam-engine.html/5fcb4bc…/30567909/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us  5.1.4 Con " gure DNS Addresses  5.1.5 Create Standard DNS Zones  5.1.6 Create Host Records  5.1.7 Create CNAME Records  5.1.8 Troubleshoot DNS Records  5.1.9 Con " gure DNS Server Properties  5.1.10 DNS Server Properties Facts  5.2.4 Name Resolution Facts  5.2.6 Create a Root Zone  5.3.2 Standard DNS Zones  5.3.3 Active Directory-Integrated Zones  5.3.4 Create a New Zone  5.3.5 Con " gure Zone Properties  5.3.6 Zone Management Facts  5.3.7 Create an Active Directory-Integrated Zone  5.3.8 Convert a Zone to Active Directory-integrated  5.4.1 DNS Troubleshooting  5.4.2 DNS Troubleshooting Facts  5.4.3 Examine DNS Attacks  5.4.4 Use nslookup  5.4.5 Explore nslookup  6.1.4 DNS Con " guration Issues q_name_resolution_su ffi x_02_shc5.question.fex