Server 2 - Exam 1

A broadcast is a packet addressed to specifically assigned computers on the network.

False

What command displays the route packets take between two computers?

tracert

What command can be used to send test queries to a target DNS server?

nslookup

Which of the following best describes when a packet is addressed so that more than one destination can receive it and the first octet is in the range 224 to 239?

multicasting

Which of the following is the Physical-layer address that is an integral part of a network interface card?

MAC address

The Intra-Site Automatic Tunnel Addressing Protocol is used to transmit IPv6 packets between dual IP layer hosts across an IPv4 network.

True

How many usable host addresses exist within a network with a CIDR prefix of /23?

510

On which UDP port do DHCP servers listen for DHCP client messages?

67

The binary number 11000000 represents what number below in decimal?

192

Which of the following is not a standard component of Teredo tunneling?

Teredo proxy

What specific server configuration is connected to different IP networks using two or more NICs?

multihomed

What formatted unit of data has an error-checking code called the frame check sequence and is ready to be transferred to the network medium?

Frame

What protocol in the TCP/IP suite provides reliable data transfer between applications at the transport-layer?

TCP

What command line utility can be used to display the default route, as well as all routing table entries?

route

A zone id is used to distinguish which interface an IPv6 unique local IPv6 address is bound to.

False

Which prefix is used by all Teredo related addresses?

2001::/32

In a ping response packet, what does the TTL field indicate?

How many hops the packet can go through before the packet is expired and discarded.

The IP address 129.53.82.20 falls under what IP address class?

Class B

How can an administrator retrieve the IP address settings of a computer using PowerShell?

Get-NetIPConfiguration

Which of the following allows the reallocation of bits from the network portion of an IP address to the host portion, combining subnets?

supernetting

An administrator working on a Windows Server 2016 Server Core installation needs to disable DHCP all interfaces on the server. What PowerShell command should be used?

Set-NetIPInterface

What protocol resolves a computer's IPv4 address to its physical, or Media Access Control (MAC) address?

Address Resolution Protocol (ARP)

ICMP is a Network-layer protocol the ping program uses to test whether a computer can communicate with another computer.

True

What technique is used by computers to determine the network ID of an IP address?

logical AND operation

Routing packets is the key responsibility of the TCP protocol.

False

What ipconfig command line option can be used to delete cached DNS information from memory?

/flushdns

TCP is a Transport-layer protocol used to communicate between applications, but it’s a lightweight Transport-layer protocol, meaning it lacks many of the reliability and flow control features of UDP.

False

The decimal number 168 can be represented using what series of binary digits below?

10101000

Which of the following is a valid IPv6 address?

2001::1

An IPv4 octet represents how many binary bits?

8

What DNS record type is used for an IPv6 host record?

AAAA

Which of the following DNS record types specifies a hostname and port number for servers that supply specific services?

Service Location

What specific record type is found in every zone and contains information that identifies the server primarily responsible for the zone as well as some operational properties for the zone?

Start of Authority Records

The .com, .net, and .edu are all examples of what level of the DNS naming hierarchy?

Top-level domain names

The default setting for a secondary zone's refresh interval is how many minutes?

15 minutes

Which DNS zone category contains PTR records that map IP addresses to names and is named after the IP network address of the computers whose records it contains?

Reverse lookup zone

DNS audit events track changes to a DNS server such as when zone or resource changes are made.

True

Resource records are a grouping of DNS information that belongs to a contiguous portion of the DNS namespace.

False

The responsible person section of an SOA record contains what information?

The email address of the responsible person

What type of DNS record is used to contain an alias for another record, allowing for the use of different names for the same host?

CNAME record

When data within a zone changes, what information in the SOA record changes to reflect that the zone information should be replicated?

Serial number

How should an administrator test the functionality of DNS operation on a domain controller, as well as troubleshoot issues with DNS forwarders, delegation, dynamic updates, and record registration?

Using dcdiag /test:dns

What DNS record type is used to resolve a known IP address to a hostname?

Pointer Record

A zone that is not integrated into Active Directory is referred to as a standard zone, and the zone data is stored in a text file.

True

The use of WINS forward lookup is enabled by default.

False

Which Windows command line utility below can be used to check for resource records on a server, verify delegations, verify resource records needed for AD replication, and perform e-mail connectivity tests?

dnslint

The MX record type is used to designate mail exchangers or mail servers for e-mail.

True

When a dynamic DNS record is created, what is the TTL value used for?

To specify how long the record should remain in the DNS database

What type of DNS server is a DNS server to which other DNS servers send requests they can’t resolve themselves?

Forwarder server

The FQDN of a name server that has authority over a domain is noted in what type of DNS record?

NS

What PowerShell cmdlet can be used to create a new Active Directory integrated primary zone?

Add-DnsServerPrimaryZone

What RFC defines the DNS resource record types?

RFC 1183

An iterative query instructs the DNS server to process the query until it responds with an address that satisfies the query or with an “I don’t know” message.

False

When serious DNS debugging is warranted, you can enable debug logging in the server’s Advanced dialog box.

False

What specific term is best used to describe a computer making a DNS query?

DNS resolver

Which of the following options can an administrator enable to improve DNS security?

Do not allow dynamic updates

A valid reverse lookup zone consists of the network ID's octets in reverse order, with what at the end of the name?

in-addr.arpa

Which of the following specifies how often a secondary DNS server attempts to renew its zone information?

Refresh interval

DNS clients maintain a text file called Hosts that can contain static DNS entries, within what Windows directory is this file stored?

%systemroot%\System32\drivers\etc

What type of DNS query causes a DNS server to respond with the best information it currently has in its local database?

Iterative query

If a stub zone is a standard zone, what records will be updated through zone transfers? (Choose all that apply.)

• A. MX

• B. NS

• C. CNAME

• D. SOA

B & D

A Resource Record Signature (RRSIG) key contains the signature for a single resource record, such as an A or an MX record.

True

When a subdomain has been delegated to a zone on another server, the DNS server hosting the parent zone maintains only an NS record pointing to the DNS server hosting the delegated zone.

True

Zone queries show zone transfers between primary and secondary zone servers.

False

What feature in Windows Server 2016 is used to provide information about the certification authority (CA) used by your domain when a client is requesting DNS information for your domain?

DANE

The zone replication scope determines which of the following? (Choose all that apply.)

• A. The Active Directory permissions that are replicated

• B. The Domain Controllers the zone information is replicated to

• C. The Active Directory partition the zone is stored in

• D. The Domain Controller's security updates

B & C

Which PowerShell cmdlet allows you to see the default values and the status of Response Rate Limiting (RRL)?

Get-DNSServerRRL

A zone transfer report specifies whether a zone transfer is allowed.

False

What do DNS resolvers use to verify the digital signature in Resource Record Signature records?

DNSKEY

Scavenging parameters set at the zone level override those set at the server level.

True

What port is used by DNS servers to issue queries?

UDP 53

Which of the following is a subset of a zone where a zone can contain multiple zone scopes and each zone scope has its own set of resource records?

zone scope

The default scavenging value is set to what value by default?

7 days

Which of the following is true about the DnsAdmins group? (Choose all that apply.)

• A. It has no members by default

• B. It is a domain local group

• C. It is a global group

• D. Server Operators and Administrators are members

A & B

What specific type of DNS attack uses public DNS servers to overwhelm a target with DNS responses by sending DNS queries with spoofed IP addresses ?

DNS amplification attack

What option can be used by a system administrator to ensure that dynamic updates are made only by known clients when you have a standard primary zone?

Change the zone to an Active Directory–integrated zone

What process is taking place when one DNS server transfers zone changes to another DNS server?

zone replication

What DNS policy specifies how DNS queries are handled by the DNS server?

query resolution policy

Which PowerShell cmdlet below creates a stub zone?

Add-DnsServerStubZone

Which of the following is a suite of features and protocols for validating DNS server responses?

DNSSEC

Which feature is used to protect against DNS cache poisoning?

Socket pool

Which of the following are advantages that an Active Directory–integrated zone has over a standard zone? (Choose all that apply.)

• A. manual replication

• B. Secure updates

• C. Multimaster replication and update

• D. synchronized replication

B & C

Zone control is the transfer of authority for a subdomain to a new zone.

False

DNSSEC provides confidentiality of data through the use of encryption.

False

Which PowerShell cmdlet displays the records in the DNS server cache, including the name, record type, timestamp, TTL, and record data?

Show-DnsServerCache

Which of the following are methods provided by DNSSEC to ensure the data DNS clients receive from DNS queries is accurate and secure? (Choose all that apply.)

• A. Authenticated denial of existence

• B. Origin authentication of DNS data

• C. Data integrity

• D. Authorized zone signing

A, B, & C