nerdexam
EC-Council

312-50V11 · Question #641

Under what conditions does a secondary name server request a zone transfer from a primary name server?

The correct answer is A. When a primary SOA is higher that a secondary SOA. A secondary DNS server initiates a zone transfer only when it detects that the primary server's SOA serial number is higher than its own, indicating the primary has newer zone data.

Footprinting and Reconnaissance

Question

Under what conditions does a secondary name server request a zone transfer from a primary name server?

Options

  • AWhen a primary SOA is higher that a secondary SOA
  • BWhen a secondary SOA is higher that a primary SOA
  • CWhen a primary name server has had its service restarted
  • DWhen a secondary name server has had its service restarted
  • EWhen the TTL falls to zero

How the community answered

(38 responses)
  • A
    89% (34)
  • B
    3% (1)
  • C
    5% (2)
  • E
    3% (1)

Why each option

A secondary DNS server initiates a zone transfer only when it detects that the primary server's SOA serial number is higher than its own, indicating the primary has newer zone data.

AWhen a primary SOA is higher that a secondary SOACorrect

DNS zone transfers are triggered by comparing SOA (Start of Authority) serial numbers. When the secondary polls the primary and finds the primary's SOA serial is higher, it knows the zone data has been updated and requests a full (AXFR) or incremental (IXFR) zone transfer to synchronize records.

BWhen a secondary SOA is higher that a primary SOA

A higher secondary SOA serial would mean the secondary is ahead of the primary, which would not trigger a transfer - the secondary already has newer or equal data.

CWhen a primary name server has had its service restarted

Restarting the primary name server does not by itself cause the secondary to initiate a zone transfer; the secondary relies on SOA comparison or NOTIFY messages.

DWhen a secondary name server has had its service restarted

When a secondary restarts, it may reload its local zone file or poll the primary, but a transfer only occurs if the SOA serial comparison reveals the primary is newer.

EWhen the TTL falls to zero

TTL (Time to Live) governs how long resolvers cache individual resource records, not the synchronization interval between primary and secondary name servers.

Concept tested: DNS zone transfer SOA serial number comparison

Source: https://learn.microsoft.com/en-us/windows-server/networking/dns/zone-transfers

Topics

#DNS zone transfer#SOA serial number#primary name server#secondary name server

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice