GCIA · Question #48
You are planning DNS configuration for your company. You decide to configure an Active Directory integrated DNS. Which of the following are the benefits of Active Directory integrated DNS…
The correct answer is A. Replication is more efficient. B. Multi-master environments are more fault tolerant. D. It results in enhanced security. Active Directory-integrated DNS provides more efficient replication, multi-master fault tolerance, and enhanced security - but it uses multi-master replication, not a single-master model.
Question
You are planning DNS configuration for your company. You decide to configure an Active Directory integrated DNS. Which of the following are the benefits of Active Directory integrated DNS configuration? Each correct answer represents a complete solution. Choose all that apply.
Options
- AReplication is more efficient.
- BMulti-master environments are more fault tolerant.
- CSingle-master environment is simpler to administer.
- DIt results in enhanced security.
How the community answered
(37 responses)- A84% (31)
- C16% (6)
Why each option
Active Directory-integrated DNS provides more efficient replication, multi-master fault tolerance, and enhanced security - but it uses multi-master replication, not a single-master model.
AD-integrated DNS leverages Active Directory replication topology instead of standard DNS zone transfers, replicating only changed data incrementally and using compression, which is more efficient.
AD-integrated DNS uses a multi-master replication model where every domain controller hosting DNS can accept and replicate dynamic updates, eliminating the single point of failure present in standard primary-secondary DNS.
AD-integrated DNS operates in a multi-master environment, not single-master - standard (non-integrated) DNS zones use a single-master model. Describing single-master administration as a benefit of AD-integrated DNS is factually backwards.
AD-integrated DNS supports secure dynamic updates via Kerberos authentication and enforces Access Control Lists on DNS records, providing significantly stronger security than standard DNS which allows unauthenticated dynamic updates.
Concept tested: Benefits of Active Directory-integrated DNS zones
Source: https://learn.microsoft.com/en-us/windows-server/networking/dns/deploy/active-directory-integrated-dns-zones
Topics
Community Discussion
No community discussion yet for this question.