DNS Configuration Flashcards

(49 cards)

1
Q

What does DNS stand for?

A

Domain Name System

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is the main purpose of DNS?

A

Convert domain names (like google.com) to IP addresses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How many root server clusters are there in DNS?

A

13 (but over 1,000 physical servers)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are GTLDs?

A

Generic Top-Level Domains (like .com, .org, .net)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are country code top-level domains?

A

Two-letter codes for countries (like .us, .ca, .uk)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is a fully qualified domain name (FQDN)?

A

A complete domain name (e.g., www.professormesser.com)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is a DNS hierarchy?

A

The tree-like structure of domain names and subdomains

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What command can you use on Linux/macOS to query DNS?

A

dig

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What command can you use on Windows to query DNS?

A

nslookup

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What are DNS resource records?

A

Entries in the DNS database (like A, AAAA, MX, CNAME)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is an A record?

A

Maps a domain name to an IPv4 address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is a AAAA record?

A

Maps a domain name to an IPv6 address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is a CNAME record?

A

Creates an alias (nickname) for another domain name

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is an MX record?

A

Specifies mail servers for a domain (for email delivery)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is a TXT record?

A

Stores text information (often used for verification or security)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is the purpose of the TTL in a DNS record?

A

Determines how long a record is cached before it must be refreshed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is SPF?

A

Sender Policy Framework (a TXT record to prevent email spoofing)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is DKIM?

A

DomainKeys Identified Mail (a TXT record for email authentication)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is DMARC?

A

Domain-based Message Authentication, Reporting & Conformance (a TXT record for email policy)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is a DNS cache?

A

A temporary storage of DNS records to speed up future requests

21
Q

Why is it important to back up DNS configurations?

A

To quickly restore service if a mistake is made

22
Q

DNS only converts domain names to IP addresses.

A

False (DNS also does reverse lookups, email routing, and more)

23
Q

There are exactly 13 root DNS servers in the world.

A

False (There are 13 root server clusters, but over 1,000 physical servers)

24
Q

A CNAME record points directly to an IP address.

A

False (CNAME points to another domain name, not an IP)

25
MX records are used for email delivery.
True
26
TXT records can only be used for email verification.
False (TXT records can store any text, including security policies)
27
SPF helps prevent email spoofing.
True
28
DKIM uses a public key stored in a TXT record.
True
29
DMARC tells receiving email servers what to do with failed SPF/DKIM emails.
True
30
The dig command is only available on Linux.
False (dig is also available on macOS and can be installed on Windows)
31
nslookup can only query A records.
False (nslookup can query any DNS record type)
32
DNS is a centralized database.
False (DNS is a distributed database)
33
A shorter TTL means DNS changes propagate faster.
True
34
DNS records never expire.
False (DNS records expire based on their TTL)
35
A user types "professormesser.com" into their browser. What DNS record type is used to find the IP address?
A or AAAA record
36
A company wants to ensure email from their domain is not marked as spam. What DNS records should they configure?
SPF, DKIM, and DMARC
37
A website is down because its IP address changed, but users still see the old IP. What DNS setting needs to be adjusted?
TTL (Time to Live)
38
An administrator wants to create an alias for "mail.example.com" called "smtp.example.com". What DNS record type should they use?
CNAME
39
A company wants to receive email at "contact@example.com". What DNS record type must be configured?
MX record
40
A user wants to verify ownership of their domain for a third-party service. What DNS record type is often used for verification?
TXT record
41
A company wants to ensure only authorized servers can send email on their behalf. What DNS record type should they use?
SPF
42
An email server receives a message claiming to be from "professormesser.com". How can it verify the message is legitimate?
Check SPF, DKIM, and DMARC records
43
A DNS administrator wants to test a new IP address for a website without affecting all users. What can they do?
Set a short TTL, update the A record, and monitor
44
A user cannot access a website, but others can. What could be the issue?
Cached DNS record (flush DNS cache or wait for TTL to expire)
45
A company wants to block email spoofing. What DNS records should they implement?
SPF, DKIM, and DMARC
46
A network administrator wants to check the MX records for a domain. What command can they use?
dig MX domain.com or nslookup -type=MX domain.com
47
A website is slow to load after a DNS change. What could be the cause?
High TTL causing old records to be cached
48
A company wants to ensure their email is digitally signed. What DNS record type should they use?
DKIM
49
A user wants to see all TXT records for a domain. What command can they use?
dig TXT domain.com or nslookup -type=TXT domain.com