MCTS 70-640 DNS & Name Resolution for Active Directory 2 — Questions and Answers
Question 1: What is a conditional forwarder in DNS?
- A forwarder that only works during business hours
- A DNS server that forwards queries for a specific domain to designated servers (Correct answer)
- A secondary zone that forwards updates to the primary
- A forwarder that strips DNSSEC signatures
Correct answer: A DNS server that forwards queries for a specific domain to designated servers
A conditional forwarder directs queries for a specific DNS namespace to particular DNS servers instead of using the standard forwarder.
Question 2: In Windows Server 2008 DNS, what does enabling 'dynamic updates' set to 'Secure only' enforce?
- Only administrators can update DNS records
- Only domain-joined computers authenticated via Kerberos can update their DNS records (Correct answer)
- Only IPv6 records can be dynamically updated
- Only DCs can register DNS records
Correct answer: Only domain-joined computers authenticated via Kerberos can update their DNS records
Secure dynamic updates restrict DNS record registration to authenticated domain members, preventing rogue machines from poisoning the zone.
Question 3: Which application partition stores DNS zone data replicated only to domain controllers within the same domain?
- ForestDNSZones
- DomainDNSZones (Correct answer)
- Schema partition
- Configuration partition
Correct answer: DomainDNSZones
The DomainDNSZones application partition replicates DNS data to all DNS-enabled domain controllers within the same AD domain.
Question 4: What happens when a DNS server cannot resolve a query and no forwarder is configured?
- The query is dropped silently
- The DNS server uses root hints to contact authoritative servers on the Internet (Correct answer)
- The client retries indefinitely
- An error is logged and no response is sent
Correct answer: The DNS server uses root hints to contact authoritative servers on the Internet
Without a forwarder, the DNS server falls back to iterative resolution using root hints to find authoritative name servers.
Question 5: Which DNS record maps an IPv4 address back to a hostname in reverse lookup zones?
- A record
- AAAA record
- PTR record (Correct answer)
- CNAME record
Correct answer: PTR record
PTR (pointer) records exist in reverse lookup zones and map IP addresses to fully qualified domain names for reverse DNS resolution.
Question 6: When configuring DNS on a new Windows Server 2008 domain controller, which zone should be created to support AD DS?
- A forward lookup zone for the AD domain (Correct answer)
- A reverse lookup zone only
- An MX-only zone
- A secondary zone pointing to the PDC
Correct answer: A forward lookup zone for the AD domain
A forward lookup zone for the Active Directory domain name is essential so clients and DCs can resolve domain names to IP addresses and locate AD services.
MCTS 70-640 DNS & Name Resolution for Active Directory 2
What is a conditional forwarder in DNS?