CHAPTER 3

1. Which two methods of name resolution are available on a Microsoft Windows Server 2003 network?
a. WINS
b. TCP/IP
c. DNS
d. DHCP
2. Host name resolution on a Microsoft Windows Server 2003 network uses DNS to map which two items to one
another?
a. Host name to IP address
b. FQDN to MAC address
c. Host name to MAC address
d. FQDN to IP address
3. Which are four key benefits of using DNS for name resolution?
a. Scalability
b. Constancy
c. Fault tolerance
d. Ease of use
e. Simplicity
4. Internet namespace has a hierarchical structure with the root domain located at the top of the structure. What is used to
represent the root domain?
a. .com
b. .edu
c. .net
d. dot (.)
5. True or false: When you install Microsoft Windows Server 2003, DNS is installed automatically?
6. There are two types of DNS zones. One type is used to look up FQDNs, and the other is used to look up IP addresses.
What are the two types of zones?
a. Forward lookup zones
b. Reverse lookup zones
c. Standard lookup zones
d. Secondary lookup zones
7. What are the four types of standard DNS zones?
a. Standard primary
b. Stub
c. Standard secondary
d. Active Directory–integrated
e. in-addr.arpa
8. A host must communicate with a server on the same network. The host has the IP address of the server. What process
will DNS use to obtain the name of the server?
a. Standard lookup
b. Forward lookup
c. Reverse lookup
d. Inverse lookup
9. Your Microsoft Windows Server 2003 network is running DNS. The network has a DNS server with a standard
primary zone and two DNS servers hosting standard secondary zones. You must make a manual entry in the DNS
database, and you would like this entry to replicate to all other DNS servers on the network. You must make the entry
on which DNS server?
a. You can make the entry on any of the DNS servers.
b. You can make the entry on one of the servers that hosts a standard secondary DNS zone.
c. You can make the entry on only the server that hosts the primary DNS zone.
d. The update must be made on both secondary servers.
10. You are the administrator of a Microsoft Windows Server 2003 domain. Your domain has three DNS servers, which
are located on domain controllers. Currently, you can create updates on only one of the DNS servers. You would like
to be able to make changes to the DNS database on any of the three DNS servers, and you want these changes to
replicate to all other DNS servers in your domain. You should make which configuration change?
a. Convert all DNS servers to primary DNS servers.
b. Convert all DNS server zones to Active Directory–integrated zones.
c. This cannot be accomplished.
d. Create forwarding entries on the DNS servers with secondary zone files.
11. Microsoft Windows Server 2003 has three options for Active Directory–integrated zone replication. Which of the
following is not available as a replication option in Windows Server 2003?
a. Replicate to all DNS servers in the forest.
b. Replicate to all domain controllers in the domain.
c. Replicate to all domain controllers that are DNS servers in the same domain.
d. Replicate to all domain controllers that are also DNS servers in the entire forest.
12. You are the administrator at Lucerne Publishing. You administer the books.lucernepublishing.com Microsoft
Windows Server 2003 Active Directory domain. Active Directory–integrated DNS is configured on all domain
controllers in the domain. You configure a member server, ServerA, to host an internal Web site for the intranet. You
want employees to access this Web site using the URL books.internal.lucernepublishing.com. What should you do?
a. Create a CNAME resource record called books, and specify internal.lucernepublishing.com as the target host.
b. Create a new zone called internal.lucernepublishing.com. Create a
CNAME resource record called books in that new zone, and specify ServerA.books.lucernepublishing.com as the
target host.
c. Create a CNAME resource record called books.internal, and specify ServerA.books.lucernepublishing.com as the
target host.
d. Create a CNAME resource record called internal, and specify ServerA.books.lucernepublishing.com as the target
host.
13. When a client queries a DNS server and requests the best answer that the DNS server can provide using only its own
database, which type of query has been performed?
a. Recursive
b. Standard
c. Iterative
d. Secondary
14. To perform a recursive query, the DNS server must have the location of the root level DNS servers. By default,
Microsoft Windows Server 2003 stores the root hints in which file?
a. Root.dns
b. Roothints.dns
c. Forwarders.dns
d. Cache.dns
15. When a DNS server that is configured to perform recursive queries cannot resolve a name or is not authoritative for
the namespace, it must contact a higher-level DNS server. What will the DNS server use to locate DNS servers that
are higher in the DNS hierarchy?
a. Root hints
b. WINS
c. SMTP
d. Recursion
16. What are the four DNS server types?
a. Primary name server
b. Master name server
c. Caching-only name server
d. Replicating name server
e. Secondary name server
17. Which type of DNS server does not contain a copy of a zone file but is capable of responding to client queries?
a. Primary name server
b. Secondary name server
c. Master name server
d. Caching-only name server
18. Which type of DNS server contains a copy of the zone file and can respond to client queries but cannot be directly
updated?
a. Primary name server
b. Secondary name server
c. Master name server
d. Caching-only name server
19. Your company uses a Microsoft Windows Server 2003 network that runs DNS. You would like to improve name
resolution, but you do not want to increase replication traffic. What can you do to accomplish this?
a. Add an additional primary name server
b. Add an additional secondary name server
c. Add a caching-only name server
d. Add a WINS server
20. While viewing your DNS database, you see the following resource record:
na.contoso.com. IN NS nadcl.na.contoso.com.
What is the purpose of this resource record?
a. To identify a name server
b. To identify an Internet server
c. To identify an individual host
d. To identify an entire domain
21. For communication to exist on a TCP/IP network using DNS, each host must be identified by a resource record in the
DNS database. Which type of DNS resource record is used to identify individual hosts?
a. PTR records
b. A records
c. NS records
d. SOA records
22. You must configure DNS to hide detailed information about your network but to still provide name resolution and
access to your resources. What step can you take to accomplish this?
a. Disable DNS and use WINS.
b. Delete the DNS database and create a host file on all domain controllers.
c. Use CNAME records in DNS to hide the identity of resources.
d. DNS cannot hide the identity of network resources.
23. A ______________ record is the A record in the parent zone for an authoritative DNS server hosting the child zone
for the delegated subdomain.
a. Glue
b. PTR
c. SOA
d. Host
24. True or false: Host computers typically use iterative queries?
25. A DNS query can result in four possible response types. Which four of the following are valid query response
options?
a. Negative answer
b. Referral answer
c. False answer
d. Authoritative answer
e. Positive answer

CHAPTER 4

1. Which DNS management tools can be used to examine the contents of DNS zone information to verify existing and
proper configuration of resource records?
a. DNSLint
b. Ipconfig
c. WINS
d. Nslookup
2. Which DNS tool can be used from the command line to perform most DNS management functions?
a. DNScmd
b. Nslookup
c. DNSLint
d. Ipconfig
3. Which two types of queries can a client request a DNS server to perform?
a. One-way
b. Recursive
c. Cumulative
d. Iterative
4. You are the administrator for a Microsoft Windows 2003 network. Users complain that they can access local resources
but have difficulty accessing Internet resources. Which type of test should you run from the DNS console to
troubleshoot this problem?
a. Recursive query to another DNS server
b. Iterative query to a local DNS server
c. Forward lookup query to the WINS server
d. Ping your local DNS server
5. One of your Microsoft Windows XP clients issues an unsuccessful query for a remote domain. You suspect that the
Cache.dns file that contains the root hints for your DNS server might contain inaccurate entries. What could you do to
test and verify that your DNS server is configured with the correct root hints?
a. Issue an iterative query to your local DNS server.
b. Open the folder named Root Hints and verify each IP address.
c. Issue a recursive query to another DNS server.
d. Query your WINS server for the address of the root server.
6. Which DNS management tool can be used to verify the consistency of a particular group of DNS resource records on
multiple DNS servers?
a. DNSLint
b. Dnscmd
c. Nslookup
d. Ipconfig
7. Which two statements are true regarding DNS and WINS name resolution?
a. WINS is used to resolve host names to IP addresses.
b. DNS is used to resolve NetBIOS names to IP addresses.
c. DNS is used to resolve host names to IP addresses.
d. WINS is used to resolve NetBIOS names to IP addresses.
8. You are the network administrator for contoso.com, which uses the default settings for clients running Microsoft
Windows XP and Microsoft Windows NT 4. Your Windows XP clients are configured to use DNS for name
resolution, and your Windows NT 4 clients are configured to register with a WINS server. Your Windows XP
clients cannot communicate with the Windows NT 4 clients by NetBIOS name. What could you do so that your
Windows XP clients can communicate with the Windows NT 4 clients by NetBIOS name?
a. Configure your WINS server to forward name queries to the DNS server for name resolution.
b. Configure a HOSTS file on the WINS server with the NetBIOS names to IP address mapping for each Windows
NT 4 client.
c. Install a secondary DNS server for the Windows NT 4 clients.
d. Configure your DNS server to forward name queries to the WINS server for name resolution.
9. Which command would you enter at the command prompt to display the contents of the DNS resolver cache?
a. Ipconfig /all
b. Ipconfig /dns
c. Ipconfig /displaydns
d. Ipconfig /show
10. Replication Monitor is a tool that monitors Active Directory replication. Which command is issued at the command
prompt to start the Replication Monitor?
a. Replmon
b. Start
c. Repl
d. Replication Monitor cannot be started from the command prompt.
11. Which command can be issued at the command prompt to purge the DNS resolver cache?
a. Ipconfig /clearcache
b. Ipconfig /deletecache
c. Ipconfig /flushdns
d. Ipconfig /flushcache
12. Which of the following is not a DNS management tool?
a. Nslookup
b. Dnscmd
c. DNSLint
d. DNSmgt
13. You are an assistant network administrator and have been asked to perform a manual test on your main DNS server.
Which two types of tests can you perform?
a. Resolver query
b. Iterative query
c. Complete query
d. Recursive query
14. As a system administrator, you perform a manual test on your DNS server. The results indicate that the iterative query
was successful, but the recursive query failed. Which of the following is most likely the problem?
a. Invalid root hints.
b. The DNS server service is stopped.
c. All root hints are valid.
d. DNS monitoring is disabled.
15. You are a network administrator and you have been asked to determine the FQDN associated with 207.1.1.19. Which
command will provide the requested information?
a. Nslookup FQDN 207.1.1.19.
b. Nslookup domain.
c. Nslookup 207.1.1.19.
d. Nslookup cannot perform this function.
16. You are a network administrator of a Microsoft Windows Server 2003 network. Your primary DNS server runs on a
Windows Server 2003 server named DNS1. To allow fault tolerance, you have a secondary DNS server that runs on a
UNIX server named DNS2. To perform maintenance, you take the primary DNS server offline. While the primary
DNS server is offline, users complain that they cannot access resources on your network. What should you do to
correct this problem?
a. Enable round robin on DNS1.
b. Enable netmask ordering on DNS2.
c. Select the BIND Secondaries option on the DNS Advanced Server Properties page on DNS1.
d. Select the BIND Secondaries option on the DNS Advanced Server Properties page on DNS2.
17. You are the network administrator for Wingtip Toys. Your internal DNS server runs on a Microsoft Windows Server
2003 server. Your company maintains three Web servers that handle catalog sales. All three Web servers maintain
identical content and respond to the host name www.wingtiptoys.com. You would like to ensure that load balancing
occurs among the three Web servers. Which action should you take to accomplish this?
a. Enable round robin on the three Web servers.
b. Enable round robin on the Advanced DNS Server Properties page of the DNS server.
c. Configure each of the three Web servers with unique host names.
d. Windows Server 2003 does not contain a load-balancing feature.
18. Your network consists of only Microsoft Windows Server 2003 servers and Microsoft Windows XP clients. To
provide fault tolerance, your network has
a primary DNS server and a secondary DNS server, both of which use default configurations. While loading a zone
file, your primary DNS server detects errors in the file. The DNS server will take which action?
a. The zone file will be loaded, but the DNS Server service will not start.
b. The zone file will be loaded. The errors will be logged and ignored.
c. The zone file will not be loaded. The DNS server will answer queries using cached information only.
d. The DNS server will not load the zone file, but will continue to attempt to load the file at five-minute intervals.
19. Your network consists of only Microsoft Windows Server 2003 servers and Microsoft Windows XP clients. To
provide fault tolerance, your network has
a primary DNS server and a secondary DNS server, both of which use default configurations. Which action can you
take to prevent your DNS server from loading a zone file that contains errors?
a. On the Advanced DNS Server Properties page, select the Fail To Load If Bad Zone Data option.
b. No action is required. The DNS server will not, by default, load a file containing errors.
c. Install all DNS servers as secondary DNS servers.
d. On the Advanced DNS Server Properties page, select the Do Not Load Zone File With Errors option.
20. When clients query your DNS server, instead of receiving a definitive answer, they receive referrals to other DNS
servers. You would like your DNS server to return a definitive answer to client queries. Which action should you take to
accomplish this?
a. This cannot be accomplished; DNS servers always return referrals to other DNS servers to clients.
b. Update the Cache.dns file.
c. Select the option to disable iterative queries on the Advanced DNS Server Properties page.
d. Clear the Disable Recursion option on the Advanced DNS Server Properties page.
21. A DNS server running on a Microsoft Windows Server 2003 network is, by default, configured to load zone data on
startup from which locations?
a. File and registry
b. Disk and registry
c. Active Directory directory service and registry
d. Registry only
22. A DNS server running on a Microsoft Windows Server 2003 network is, by default, configured to load zone data on
startup from the Active Directory directory service and the registry. Which two additional options are available for
this setting?
a. File
b. Disk
c. Secondary DNS Server
d. Registry
23. Your Microsoft Windows Server 2003 network has Microsoft Windows 2000 Professional and Microsoft Windows
XP Professional clients. Your DNS server is configured to allow dynamic updates. Your DNS database appears to
have many outdated records, and you suspect that they are a result of mobile users not properly shutting down their
client computers. Which process should you use to automatically cleanse your DNS database of stale resource
records?
a. Run the Ipconfig /flushdns command.
b. Enable aging and scavenging of DNS resource records.
c. Run DNSclean from the command prompt.
d. Run the Jetpack utility.
24. Which of the following is not a typical DNS security threat?
a. Foot printing
b. Denial of Service (DoS) attack
c. Data modification
d. Redirection
e. Redistribution
25. Your Microsoft Windows Server 2003 network has three DNS servers running on Windows Server 2003 member
servers. All DNS servers are configured to use forwarders to resolve external names and to allow zone transfers only
to servers listed in the NS resource records in their zone. Which level of DNS security is in use on this network?
a. Low-level security
b. Medium-level security
c. High-level security
d. Active Directory–integrated security
26. You are the network administrator of contoso.com. Your network has a connection to the Internet, and all of the DNS
servers run on domain controllers. Your DNS zones are all Active Directory–integrated zones. Which level of DNS
security is in use on this network?
a. Low-level security
b. Medium-level security
c. High-level security
d. Active Directory–integrated security