1. Adding a "." zone to a DNS server makes it a root server. Now a root server doesnt resolve external names. Why doesnt it?
2. Let's say I have 10 clients and they use a forwarding DNS server. If the "disable recursion" in the advanced tab on the forwarding server is clicked, the forwarders tab gets dimmed out. So how do the clients resolve external queries? ( I think they can only do internal names once this happens).
3. Question 11 on page 14-22 in the blue book.
You are the network administrator for Contoso, Inc. Contoso manufactures military equipment and security is very important. You have converted the DNS zones on your Windows Server 2003 Active Directory domain to Active Directory-integrated zones. You suspect that Contoso is under attack from a malicious Internet user. In particular, you suspect that redirection is being used to feed incorrect data into the organisation. How can you combat this attack? (Choose all that apply)
A. Disable recursion on all DNS servers
B. Disable round robin on all DNS server
C. Ensure that all server caches are protected against pollution
D. Allow only secure updates on all DNS zones
They reckon it's C and D. I think it is A,C and D. It doesnt say anywhere in the question that resolving internet queries is important for the company or that clients access the internet frequently. So doesnt choice A make the network secure? All they say is the security is very important.
4. This might be a dumb question, but I'll ask anyways. A stub zone contains the NS record of some domain. I know stub zones are great, that your DNS server knows the NS record of a domain which expedites name resolution. But what if that domain changed its DNS server to something completely different, say from 155.156.45.1 to 203.120.26.63. Now your DNS server holds incorrect data. This slows down the query process as the DNS server will then have to recursively resolve the name, right?
Help's appreciated.
