Refer to the exhibit. Which field contains DNS header information if the payload is a query or a response?

The correct answer is D. QR. If the payload of a DNS message is a query or response, the DNS header field that contains information about the message is the QR (Query/ Response) field. The QR field is a 1-bit field in the DNS header that indicates whether the message is a query (QR=0) or a response (QR=1)…

Submitted by haruto_sh· Mar 6, 2026Network Intrusion Analysis

Question

Exhibit

Options

How the community answered

(17 responses)

A
6% (1)
B
6% (1)
D
88% (15)

Explanation

If the payload of a DNS message is a query or response, the DNS header field that contains information about the message is the QR (Query/ Response) field. The QR field is a 1-bit field in the DNS header that indicates whether the message is a query (QR=0) or a response (QR=1). The ID (Identification) field is a 16-bit field that identifies the DNS query and is used to match responses with queries. The Z (Reserved for future use) field is a 3- bit field that is currently unused and must be set to 0. The TC (Truncated) field is a 1-bit field that indicates whether a message was truncated due to size limitations.

Topics

#DNS protocol#packet analysis#network headers

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice