539

pdf

School

Los Rios Colleges *

*We aren’t endorsed by this school

Course

Subject

Information Systems

Date

Oct 30, 2023

Type

pdf

Pages

Uploaded by klccc

10/25/23, 9 : 58 AM Page 1 of 20 https://labsimapp.testout.com/v6_0_574/exam-engine.html/2e7d1e54…/30568763/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us 5.3.9 Practice Questions Candidate: Kelsey Dusnmore (Kdusnmore) Date: 10/25/2023 9:56:57 am • Time Spent: 02:52 Score: 60% Passing Score: 80%  Question 1:  Correct Which of the following is true regarding Active Directory-integrated (AD° ) zone data? Only members of the domain can update records. Zone data is the only writeable copy of the zone. Zone data is stored as clear text. Zone data is a read-only copy of the zone. Explanation Active Directory-integrated zones support secure dynamic updates. Only members of the domain can update records. Dynamic updates allow DNS clients to contact the server and update their records when their °P address changes. The client who created the DNS record becomes its owner. With primary or secondary zones, the zone data is stored as clear text. You should use °PSec to secure the zone transfer. A secondary zone is a read-only copy of the zone. The primary zone is the only writeable copy of the zone. References 

10/25/23, 9 : 58 AM Page 2 of 20 https://labsimapp.testout.com/v6_0_574/exam-engine.html/2e7d1e54…/30568763/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us  5.2.4 Name Resolution Facts  5.3.3 Active Directory-Integrated Zones  5.3.7 Create an Active Directory-Integrated Zone  5.3.8 Convert a Zone to Active Directory-integrated  5.5.3 Con " gure DNS Socket Pooling q_dns_zones_adi_shc5.question.fex  Question 2:  Incorrect Match each zone type on the left with the corresponding characteristics on the right. Each zone type may be used once, more than once, or not at all. Multiple servers hold read-write copies of the zone data Active Directory-integrated The only writeable copy of the zone database Primary A read-only copy of the zone database Secondary °nitates zone transfers Primary Secondary The replication scope speci fi es domain controllers that can receive a copy of zone data Secondary Active Directory-integrated

10/25/23, 9 : 58 AM Page 3 of 20 https://labsimapp.testout.com/v6_0_574/exam-engine.html/2e7d1e54…/30568763/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us Keyboard Instructions Explanation A primary zone contains the master copy of a zone database. The primary zone is the only writeable copy of the zone database. Changes to the zone can be made only to the primary zone database. The server that holds the primary zone is called a primary server. A secondary zone is a read-only copy of the zone database. Changes cannot be made to the records in a secondary zone. A server that holds a secondary zone is called a secondary server. Zone transfers are always initiated by the secondary zone. An Active Directory-integrated zone holds zone data in Active Directory. Active Directory-integrated zones are multi-master zones, meaning that changes to the zone information can be made by multiple servers. Multiple servers hold read-write copies of the zone data. Replication of zone data occurs during Active Directory replication. Active Directory-integrated replication scopes allow you to specify the domain controllers that will have a copy of the zone data. References  5.1.1 DNS - Record Types  5.1.2 DNS Facts  5.1.3 Con " gure DNS  5.1.4 Con " gure DNS Addresses  5.1.5 Create Standard DNS Zones  5.1.6 Create Host Records  5.1.7 Create CNAME Records  5.1.8 Troubleshoot DNS Records  5.1.9 Con " gure DNS Server Properties  5.1.10 DNS Server Properties Facts 

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

10/25/23, 9 : 58 AM Page 4 of 20 https://labsimapp.testout.com/v6_0_574/exam-engine.html/2e7d1e54…/30568763/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us  5.2.4 Name Resolution Facts  5.2.6 Create a Root Zone  5.3.2 Standard DNS Zones  5.3.3 Active Directory-Integrated Zones  5.3.4 Create a New Zone  5.3.5 Con " gure Zone Properties  5.3.6 Zone Management Facts  5.3.7 Create an Active Directory-Integrated Zone  5.3.8 Convert a Zone to Active Directory-integrated  5.4.1 DNS Troubleshooting  5.4.2 DNS Troubleshooting Facts  5.4.3 Examine DNS Attacks  5.4.4 Use nslookup  5.4.5 Explore nslookup  6.1.4 DNS Con " guration Issues q_dns_zones_def_shc5.question.fex  Question 3:  Correct You are setting up a new network in a single location with a single domain named eastsim.com. You install a DHCP server and con fi gure it with a scope for the single subnet. You install a DNS server with a primary zone for the domain. What should you do to use dynamic updates to update DNS records in the zone automatically?

10/25/23, 9 : 58 AM Page 5 of 20 https://labsimapp.testout.com/v6_0_574/exam-engine.html/2e7d1e54…/30568763/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us Enable dynamic updates on the eastsim.com zone. Con fi gure the DHCP server to update DNS records for all clients. Enable dynamic updates on all client computers. Convert the eastsim.com zone to an Active Directory-integrated zone. Explanation By default, primary zones are con fi gured to accept dynamic updates. You need to modify the zone properties to allow dynamic updates. After you con fi gure the zone for dynamic updates, the default con fi guration of the clients and the DHCP server will allow them to happen. The default con fi guration for dynamic updates is: Primary zones are not con fi gured for dynamic updates. Active Directory-integrated zones are con fi gured to allow only secure updates. However, converting an existing zone retains the dynamic update settings of the zone. Windows clients are con fi gured for dynamic updates. DHCP servers are con fi gured to submit reverse lookup information for hosts to which it assigns addresses. DHCP servers are con fi gured to update hostname records only if the client requests it. References  5.1.1 DNS - Record Types  5.1.2 DNS Facts  5.1.3 Con " gure DNS  5.1.4 Con " gure DNS Addresses  5.1.5 Create Standard DNS Zones  5.1.6 Create Host Records 

10/25/23, 9 : 58 AM Page 6 of 20 https://labsimapp.testout.com/v6_0_574/exam-engine.html/2e7d1e54…/30568763/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us  5.1.7 Create CNAME Records  5.1.8 Troubleshoot DNS Records  5.1.9 Con " gure DNS Server Properties  5.1.10 DNS Server Properties Facts  5.2.4 Name Resolution Facts  5.2.6 Create a Root Zone  5.3.2 Standard DNS Zones  5.3.3 Active Directory-Integrated Zones  5.3.4 Create a New Zone  5.3.5 Con " gure Zone Properties  5.3.6 Zone Management Facts  5.3.7 Create an Active Directory-Integrated Zone  5.3.8 Convert a Zone to Active Directory-integrated  5.4.1 DNS Troubleshooting  5.4.2 DNS Troubleshooting Facts  5.4.3 Examine DNS Attacks  5.4.4 Use nslookup  5.4.5 Explore nslookup  6.1.4 DNS Con " guration Issues q_dns_zones_dynamic_shc5.question.fex  Question 4:  Incorrect

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

10/25/23, 9 : 58 AM Page 7 of 20 https://labsimapp.testout.com/v6_0_574/exam-engine.html/2e7d1e54…/30568763/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us Your network has a single domain named southsim.com. DNS data for the domain is stored on the following servers: DNS1 holds the primary zone for southsim.com. DNS2 and DNS3 hold secondary zones for southsim.com. All three DNS servers are located on domain controllers. The DNS zone for the domain is con fi gured to allow dynamic updates. You want to allow client computers to send DNS updates to any of the three servers and allow any of the three servers to update DNS records in the zone. What should you do? On the primary zone, change the settings so that the two secondary servers are noti fi ed when the zone is updated. On the primary zone, change the settings to allow zone transfer to only the two secondary servers. On the primary zone, change the Dynamic Update option to allow only secure updates. On all three servers, change the zone type of the DNS zone to Active Directory-integrated. Explanation °n the current con fi guration, only the DNS1 server has a writeable copy of the zone database. To allow any DNS server to accept updates and make changes, convert all zones to Active Directory-integrated zones. Active Directory-integrated zones support multi- master updates (updates originating at any domain controller in the domain). Notifying secondary servers of zone changes reduces the time delay in updating the copy of the zone fi le stored on the secondary servers. Allowing zone transfers to only listed servers improves security by preventing unidenti fi ed servers from getting a copy of the zone information. Allowing only secure updates is only possible on an Active Directory- integrated zone. None of these options by themselves allow multiple servers to update the zone database.

10/25/23, 9 : 58 AM Page 8 of 20 https://labsimapp.testout.com/v6_0_574/exam-engine.html/2e7d1e54…/30568763/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us References  5.2.4 Name Resolution Facts  5.3.3 Active Directory-Integrated Zones  5.3.7 Create an Active Directory-Integrated Zone  5.3.8 Convert a Zone to Active Directory-integrated  5.5.3 Con " gure DNS Socket Pooling q_dns_zones_integrate_shc5.question.fex  Question 5:  Correct Which of the following is true regarding the primary zone? Zone transfers are secure. Permission is required to get a copy of the zone. Changes cannot be made to the records. °t receives copies of zone data from other servers using zone transfer. Explanation The primary zone requires permission to get a copy of the zone. The permission should be set in the primary zone. Changes cannot be made to the records in a secondary zone. Secondary servers receive copies of zone data from other servers using zone transfer. Zone transfers are secure because the Active Directory replication process is encrypted. References 

10/25/23, 9 : 58 AM Page 9 of 20 https://labsimapp.testout.com/v6_0_574/exam-engine.html/2e7d1e54…/30568763/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us  5.1.1 DNS - Record Types  5.1.2 DNS Facts  5.1.3 Con " gure DNS  5.1.4 Con " gure DNS Addresses  5.1.5 Create Standard DNS Zones  5.1.6 Create Host Records  5.1.7 Create CNAME Records  5.1.8 Troubleshoot DNS Records  5.1.9 Con " gure DNS Server Properties  5.1.10 DNS Server Properties Facts  5.2.4 Name Resolution Facts  5.2.6 Create a Root Zone  5.3.2 Standard DNS Zones  5.3.3 Active Directory-Integrated Zones  5.3.4 Create a New Zone  5.3.5 Con " gure Zone Properties  5.3.6 Zone Management Facts  5.3.7 Create an Active Directory-Integrated Zone  5.3.8 Convert a Zone to Active Directory-integrated  5.4.1 DNS Troubleshooting  5.4.2 DNS Troubleshooting Facts  5.4.3 Examine DNS Attacks  5.4.4 Use nslookup  5.4.5 Explore nslookup 

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

10/25/23, 9 : 58 AM Page 10 of 20 https://labsimapp.testout.com/v6_0_574/exam-engine.html/2e7d1e5…/30568763/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us  6.1.4 DNS Con " guration Issues q_dns_zones_primary_01_shc5.question.fex  Question 6:  Correct Which zone contains authoritative DNS records that can be changed and copied to other zones? Primary zone Standard secondary zone Standard zone Active Directory-°ntegrated (AD° ) zone Explanation The primary zone is a zone that contains original, authoritative DNS records that can be changed and copied to other zones, such as standard secondary zones. The standard zone is a DNS zone that stores records in text fi les. The standard secondary zone is a read-only copy of a primary zone that is stored on a secondary DNS server for fault tolerance and load balancing. The Active Directory-°ntegrated (AD° ) zone is a DNS zone that stores records in a Microsoft Active Directory database. References  5.1.1 DNS - Record Types  5.1.2 DNS Facts  5.1.3 Con " gure DNS  5.1.4 Con " gure DNS Addresses 

10/25/23, 9 : 58 AM Page 11 of 20 https://labsimapp.testout.com/v6_0_574/exam-engine.html/2e7d1e5…/30568763/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us  5.1.5 Create Standard DNS Zones  5.1.6 Create Host Records  5.1.7 Create CNAME Records  5.1.8 Troubleshoot DNS Records  5.1.9 Con " gure DNS Server Properties  5.1.10 DNS Server Properties Facts  5.2.4 Name Resolution Facts  5.2.6 Create a Root Zone  5.3.2 Standard DNS Zones  5.3.3 Active Directory-Integrated Zones  5.3.4 Create a New Zone  5.3.5 Con " gure Zone Properties  5.3.6 Zone Management Facts  5.3.7 Create an Active Directory-Integrated Zone  5.3.8 Convert a Zone to Active Directory-integrated  5.4.1 DNS Troubleshooting  5.4.2 DNS Troubleshooting Facts  5.4.3 Examine DNS Attacks  5.4.4 Use nslookup  5.4.5 Explore nslookup  6.1.4 DNS Con " guration Issues q_dns_zones_primary_02_shc5.question.fex

10/25/23, 9 : 58 AM Page 12 of 20 https://labsimapp.testout.com/v6_0_574/exam-engine.html/2e7d1e5…/30568763/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us  Question 7:  Correct You are a systems administrator for WestSim Corporation. As part of a new security initiative, the °T department has developed a custom application that reports the hostname of all clients that try to access three sensitive servers in the accounting department. The application has been working for the last three months. The company expands and adds a new building with a LAN connection to the rest of the network. This building has its own subnet, 192.168.5.0. You create a scope on an existing DHCP server for this subnet. During a random check of the reporting software, you discover that the application reports the °P address but not the hostname for clients on the new subnet. Everything works as designed for hosts on other subnets. You check the DNS database and fi nd that none of the hosts on that subnet have an associated PTR record. What should you do? Add a HOSTS fi le to the server running the reporting software. Create a secondary reverse lookup zone for subnet 192.168.5.0. Create a primary reverse lookup zone for subnet 192.168.5.0. Manually create PTR records for each host on the subnet. Explanation You need to create a primary reverse lookup zone for the new subnet. The custom application uses the reverse lookup zone to fi nd the hostname for a given °P address. By default, Windows clients register their A (host) record while the DHCP server registers the PTR (pointer) record. However, the reverse lookup zone must exist in the DNS database before the DNS server can create the PTR record. References 

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

10/25/23, 9 : 58 AM Page 13 of 20 https://labsimapp.testout.com/v6_0_574/exam-engine.html/2e7d1e5…/30568763/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us  5.1.1 DNS - Record Types  5.1.2 DNS Facts  5.1.3 Con " gure DNS  5.1.4 Con " gure DNS Addresses  5.1.5 Create Standard DNS Zones  5.1.6 Create Host Records  5.1.7 Create CNAME Records  5.1.8 Troubleshoot DNS Records  5.1.9 Con " gure DNS Server Properties  5.1.10 DNS Server Properties Facts  5.2.4 Name Resolution Facts  5.2.6 Create a Root Zone  5.3.2 Standard DNS Zones  5.3.3 Active Directory-Integrated Zones  5.3.4 Create a New Zone  5.3.5 Con " gure Zone Properties  5.3.6 Zone Management Facts  5.3.7 Create an Active Directory-Integrated Zone  5.3.8 Convert a Zone to Active Directory-integrated  5.4.1 DNS Troubleshooting  5.4.2 DNS Troubleshooting Facts  5.4.3 Examine DNS Attacks  5.4.4 Use nslookup  5.4.5 Explore nslookup 

10/25/23, 9 : 58 AM Page 14 of 20 https://labsimapp.testout.com/v6_0_574/exam-engine.html/2e7d1e5…/30568763/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us  6.1.4 DNS Con " guration Issues q_dns_zones_reverse_01_shc5.question.fex  Question 8:  Correct You are the network manager for the westsim.private domain. The SRV1 server runs all fi le and print services for the network. The DNS database has an A record that maps srv1.westsim.private to the °P address of 192.168.16.10. You want to create a PTR record that maps the °P address to the hostname. Which zone should you create the record in? westsim.private 16.168.192.in-addr.arpa 16.168.192.ip4.arpa 192.168.16.in-addr.arpa 192.168.16.ip4.arpa Explanation To create a PTR record that maps an °P address to a hostname, create the PTR record in the corresponding reverse lookup zone. For °Pv4 addresses, the zone name will be the reverse of the subnet portion of the address (in this example, 16.168.192.in-addr.arpa). A records that map hostnames to °P addresses are created in the forward lookup zone (in this example, westsim.private). °Pv6 pointer records are created in zones that end in ip6.arpa. References  5.1.1 DNS - Record Types  5.1.2 DNS Facts 

10/25/23, 9 : 58 AM Page 15 of 20 https://labsimapp.testout.com/v6_0_574/exam-engine.html/2e7d1e5…/30568763/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us  5.1.3 Con " gure DNS  5.1.4 Con " gure DNS Addresses  5.1.5 Create Standard DNS Zones  5.1.6 Create Host Records  5.1.7 Create CNAME Records  5.1.8 Troubleshoot DNS Records  5.1.9 Con " gure DNS Server Properties  5.1.10 DNS Server Properties Facts  5.2.4 Name Resolution Facts  5.2.6 Create a Root Zone  5.3.2 Standard DNS Zones  5.3.3 Active Directory-Integrated Zones  5.3.4 Create a New Zone  5.3.5 Con " gure Zone Properties  5.3.6 Zone Management Facts  5.3.7 Create an Active Directory-Integrated Zone  5.3.8 Convert a Zone to Active Directory-integrated  5.4.1 DNS Troubleshooting  5.4.2 DNS Troubleshooting Facts  5.4.3 Examine DNS Attacks  5.4.4 Use nslookup  5.4.5 Explore nslookup  6.1.4 DNS Con " guration Issues q_dns_zones_reverse_02_shc5.question.fex

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

10/25/23, 9 : 58 AM Page 16 of 20 https://labsimapp.testout.com/v6_0_574/exam-engine.html/2e7d1e5…/30568763/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us  Question 9:  Incorrect You are the network administrator for a single domain with three subnets. Two subnets have all Windows 10 computers. The conference room uses the third subnet. Traveling salesmen come to the conference room and plug in their laptops to gain network access. You have con fi gured a DHCP server to deliver con fi guration information to hosts on this subnet. DNS is con fi gured for dynamic updates. Over time, you notice that the size of the DNS database continues to grow. °t is beginning to have an adverse e ff ect on DNS server performance. What should you do? Enable scavenging of stale resource records on the DNS server. Enable scavenging of stale resource records on the zone and the DNS server. Enable scavenging of stale resource records on the zone. Clear the DNS cache on the server. Compact the DNS zone fi le. Explanation

10/25/23, 9 : 58 AM Page 17 of 20 https://labsimapp.testout.com/v6_0_574/exam-engine.html/2e7d1e5…/30568763/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us °f hosts who register their host name with DNS using dynamic updates do not shut down normally, the corresponding host record might not get removed from the DNS database. This particularly happens when the network has a large number of mobile computers. To remove old records, enable scavenging of stale records on the zone properties and on the DNS server properties. Clearing the cache only removes temporary records, not dynamically-created records. Decreasing the TTL makes records eligible for removal sooner, but scavenging would still be necessary to actually remove the records. References  5.1.1 DNS - Record Types  5.1.2 DNS Facts  5.1.3 Con " gure DNS  5.1.4 Con " gure DNS Addresses  5.1.5 Create Standard DNS Zones  5.1.6 Create Host Records  5.1.7 Create CNAME Records  5.1.8 Troubleshoot DNS Records  5.1.9 Con " gure DNS Server Properties  5.1.10 DNS Server Properties Facts  5.2.4 Name Resolution Facts  5.2.6 Create a Root Zone  5.3.2 Standard DNS Zones  5.3.3 Active Directory-Integrated Zones  5.3.4 Create a New Zone  5.3.5 Con " gure Zone Properties 

10/25/23, 9 : 58 AM Page 18 of 20 https://labsimapp.testout.com/v6_0_574/exam-engine.html/2e7d1e5…/30568763/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us  5.3.6 Zone Management Facts  5.3.7 Create an Active Directory-Integrated Zone  5.3.8 Convert a Zone to Active Directory-integrated  5.4.1 DNS Troubleshooting  5.4.2 DNS Troubleshooting Facts  5.4.3 Examine DNS Attacks  5.4.4 Use nslookup  5.4.5 Explore nslookup  6.1.4 DNS Con " guration Issues q_dns_zones_scavenging_shc5.question.fex  Question 10:  Incorrect Which of the following is true regarding the secondary zone? Always initiates the zone transfer. Contains the master copy of a zone. °s the only writeable copy of the zone. Zone transfers are secure. Explanation Zone transfers are always initiated by the secondary zone. The primary zone contains the master copy of a zone. The primary zone is the only writeable copy of the zone. Zone transfers are secure because the Active Directory replication process is encrypted.

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

10/25/23, 9 : 58 AM Page 19 of 20 https://labsimapp.testout.com/v6_0_574/exam-engine.html/2e7d1e5…/30568763/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us References  5.1.1 DNS - Record Types  5.1.2 DNS Facts  5.1.3 Con " gure DNS  5.1.4 Con " gure DNS Addresses  5.1.5 Create Standard DNS Zones  5.1.6 Create Host Records  5.1.7 Create CNAME Records  5.1.8 Troubleshoot DNS Records  5.1.9 Con " gure DNS Server Properties  5.1.10 DNS Server Properties Facts  5.2.4 Name Resolution Facts  5.2.6 Create a Root Zone  5.3.2 Standard DNS Zones  5.3.3 Active Directory-Integrated Zones  5.3.4 Create a New Zone  5.3.5 Con " gure Zone Properties  5.3.6 Zone Management Facts  5.3.7 Create an Active Directory-Integrated Zone  5.3.8 Convert a Zone to Active Directory-integrated  5.4.1 DNS Troubleshooting  5.4.2 DNS Troubleshooting Facts  5.4.3 Examine DNS Attacks  5.4.4 Use nslookup 

10/25/23, 9 : 58 AM Page 20 of 20 https://labsimapp.testout.com/v6_0_574/exam-engine.html/2e7d1e5…/30568763/da093e27-1fdf-4233-b328-414405d86bc9/end ? locale=en-us  5.4.5 Explore nslookup  6.1.4 DNS Con " guration Issues q_dns_zones_secondary_shc5.question.fex Copyright © 2023 TestOut Corporation All rights reserved.