Transcender DNS Question

[eddiec]

I am trying to figure out a DNS question on a Win2k3 transcender exam.

Basically the scenario is that you have a company that has an internal
firewall network and you also have web servers that are accessable to the
companies customers and that are used for placing orders and so on.

The question is:

Which of the following should you do to enable internal users to resolve
names on the external network? (Each correct answer is a complete
solution)(Select 3 choices)

a) Create a stub zone for the northerncargo.com zone on the Internal DNS
servers.
b) On the external DNS servers, configure delegations to the ISP's DNS
servers.
c) Create a secondary northerncargo.com zone on the Internal DNS servers.
d) Implement a private root zone on the external network.
e) Create delegations for the northerncargo.com zone on the internal DNS
servers.
f) On the internal DNS servers, configure forwarding to the external DNS
servers.

OK, I figured out you would need B and F, but why would you need anything
else??? That should be sufficient to enable internal users to resolve
external DNS names?

Any assistance would be much appreciated.

eddiec

 

[William Stacey [MVP]]

Need the full question to give you answer. What "external network" are they
talking about? A partner's, the INET, etc. B does not sound right to me.
Why would you configure delegations to an ISP? You would normally configure
a forwarder or configure external dns server to use root-hints so it can
resolve from root down by itself. Please post full questions if possible.
Cheers!

 

[Ace Fekay [MVP]]

In

I am trying to figure out a DNS question on a Win2k3 transcender exam.

Basically the scenario is that you have a company that has an internal
firewall network and you also have web servers that are accessable to
the companies customers and that are used for placing orders and so
on.

The question is:

Which of the following should you do to enable internal users to
resolve names on the external network? (Each correct answer is a
complete solution)(Select 3 choices)

a) Create a stub zone for the northerncargo.com zone on the Internal
DNS servers.
b) On the external DNS servers, configure delegations to the ISP's DNS
servers.
c) Create a secondary northerncargo.com zone on the Internal DNS
servers. d) Implement a private root zone on the external network.
e) Create delegations for the northerncargo.com zone on the internal
DNS servers.
f) On the internal DNS servers, configure forwarding to the external
DNS servers.

OK, I figured out you would need B and F, but why would you need
anything else??? That should be sufficient to enable internal users
to resolve external DNS names?

Any assistance would be much appreciated.

eddiec

Transcenders gives you their answers. I hope this is NOT a braindump
question, which I''m assuming it might be.

--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS-IS" with no warranties and confers no
rights.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory

 

[eddiec]

hi William,

Thanks for the feedback.

The full network configuration is as follows:

Internet -> Firewall -> External LAN containing Web server, VPN server, two
domain controllers, a file server and two application servers
(123.45.67.0/24)->Firewall-> Internal LAN (192.168.1.0/24) located in
Toronto -> T1 WAN link -> Internal LAN (192.168.2.0/24) located in Seattle

The actual answer given by Transcender to "enable internal users to resolve
names on the external network" is:

a) Create a stub zone for the northerncargo.com zone on the Internal DNS
servers.
c) Create a secondary northerncargo.com zone on the Internal DNS servers.
f) On the internal DNS servers, configure forwarding to the external DNS
servers.

Any of these answers provides a complete solution on its own:

a) Will tell internal clients to look for resolution of external names on
the external DNS servers.
c) Means that internal clients can look at a DNS server on their own subnet
that will replicate the external DNS records.
f) Means that if an internal DNS server is asked to resolve a name that it
is not within its sub-domain then it will forward the query to the external
server.

(My answer (B) is wrong because the question is not how internal clients
will resolve Internet names but is rather how internal clients will resolve
names on the external LAN.)

I appreciate being able to work through these questions with the group's
assistance when I get stuck as this gives me a fuller comprehension of the
subject matter rather than just looking at the answers given by Transcender.

eddiec