nerdexam
EC-Council

312-50V9 · Question #531

One of your team members has asked you to analyze the following SOA record. What is the TTL? Rutgers.edu.SOA NS1.Rutgers.edu ipad.college.edu (200302028 3600 3600 604800 2400.

The correct answer is D. 2400. The minimum TTL field is the fifth and last numeric value in a DNS SOA record's parenthetical group, used for negative response caching.

Footprinting and Reconnaissance

Question

One of your team members has asked you to analyze the following SOA record. What is the TTL? Rutgers.edu.SOA NS1.Rutgers.edu ipad.college.edu (200302028 3600 3600 604800 2400.

Options

  • A200303028
  • B3600
  • C604800
  • D2400
  • E60
  • F4800

How the community answered

(21 responses)
  • A
    5% (1)
  • B
    5% (1)
  • D
    90% (19)

Why each option

The minimum TTL field is the fifth and last numeric value in a DNS SOA record's parenthetical group, used for negative response caching.

A200303028

200302028 is the serial number, which functions as the zone's version identifier and is not the TTL.

B3600

3600 appears as both the refresh interval (how often secondaries poll for updates) and the retry interval (how long to wait after a failed refresh), neither of which is the TTL.

C604800

604800 is the expire value, defining how long a secondary nameserver will serve zone data if it cannot reach the primary - this is not the TTL.

D2400Correct

The SOA record parenthetical fields follow a fixed order: serial, refresh, retry, expire, and minimum TTL. The fifth value (2400) is the minimum TTL, which defines how long resolvers cache negative responses (NXDOMAIN) for the zone. This field was repurposed for negative caching TTL per RFC 2308, making 2400 the correct answer for TTL in this record.

E60

The value 60 does not appear anywhere in this SOA record.

F4800

The value 4800 does not appear anywhere in this SOA record.

Concept tested: DNS SOA record minimum TTL field identification

Source: https://www.rfc-editor.org/rfc/rfc2308

Topics

#SOA record#DNS TTL#zone information#DNS records

Community Discussion

No community discussion yet for this question.

Full 312-50V9 Practice