nerdexam
EC-Council

312-50V10 · Question #641

Under what conditions does a secondary name server request a zone transfer from a primary name server?

The correct answer is A. When a primary SOA is higher that a secondary SOA. A secondary DNS server requests a zone transfer when it finds the primary's SOA serial number is higher than its own, indicating updated zone data.

Enumeration

Question

Under what conditions does a secondary name server request a zone transfer from a primary name server?

Options

  • AWhen a primary SOA is higher that a secondary SOA
  • BWhen a secondary SOA is higher that a primary SOA
  • CWhen a primary name server has had its service restarted
  • DWhen a secondary name server has had its service restarted
  • EWhen the TTL falls to zero

How the community answered

(27 responses)
  • A
    93% (25)
  • C
    4% (1)
  • D
    4% (1)

Why each option

A secondary DNS server requests a zone transfer when it finds the primary's SOA serial number is higher than its own, indicating updated zone data.

AWhen a primary SOA is higher that a secondary SOACorrect

When a secondary server's refresh timer expires, it queries the primary for its SOA record and compares the serial numbers. If the primary's serial is higher, the secondary initiates an AXFR or IXFR request to synchronize its zone data. This serial-number-based comparison is the authoritative mechanism defined in RFC 1034 and RFC 1035 for detecting and replicating zone changes.

BWhen a secondary SOA is higher that a primary SOA

A secondary SOA serial higher than the primary's would indicate an abnormal state where the replica is somehow ahead, which does not trigger a transfer from the primary.

CWhen a primary name server has had its service restarted

Restarting the primary name server service does not directly notify secondary servers to initiate a transfer - secondaries only detect changes through the serial number comparison at the next refresh interval.

DWhen a secondary name server has had its service restarted

A secondary server restart may prompt it to check the primary, but the zone transfer only actually occurs if the SOA serial comparison reveals the primary holds newer data.

EWhen the TTL falls to zero

TTL values govern how long caching resolvers retain individual resource records and are entirely separate from the zone transfer replication mechanism between authoritative servers.

Concept tested: DNS secondary zone transfer trigger via SOA serial comparison

Source: https://www.rfc-editor.org/rfc/rfc1034

Topics

#DNS zone transfer#SOA record#primary name server#secondary name server

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice