GCIA · Question #85
Andrew works as an Administrator for a Windows 2000 based network. The network has a primary external DNS server, and a secondary DNS server located on the ISP's UNIX server, in order to provide fault
The correct answer is C. He should select the BIND secondaries check box in the Advanced tab of the Properties window on the. Windows DNS servers use fast zone transfer by default, which is incompatible with older BIND-based UNIX DNS servers, requiring the BIND secondaries option to be enabled on the primary server.
Question
Andrew works as an Administrator for a Windows 2000 based network. The network has a primary external DNS server, and a secondary DNS server located on the ISP's UNIX server, in order to provide fault tolerance. Users complain that they are unable to connect to the URL when using the secondary server. What should Andrew do to resolve the problem?
Options
- AHe should disable the fast zone transfer in the Advanced tab of the Properties window on the secondary
- BHe should select the BIND secondaries check box in the Zone Transfer tab of the Properties window on
- CHe should select the BIND secondaries check box in the Advanced tab of the Properties window on the
- DHe should enable the fast zone transfer in the Advanced tab of the Properties window on the primary
How the community answered
(49 responses)- A6% (3)
- B2% (1)
- C82% (40)
- D10% (5)
Why each option
Windows DNS servers use fast zone transfer by default, which is incompatible with older BIND-based UNIX DNS servers, requiring the BIND secondaries option to be enabled on the primary server.
Zone transfer compatibility is controlled by the primary server's settings, so modifying the secondary server cannot resolve the BIND format mismatch.
The BIND secondaries setting is found in the Advanced tab, not the Zone Transfer tab, of the primary server's Properties window.
The BIND secondaries checkbox is located in the Advanced tab of the primary DNS server's Properties window, not on the secondary. Enabling this option causes the primary to disable fast zone transfers and send zone data in a plain-text format compatible with older BIND implementations. This resolves interoperability failures between a Windows DNS primary and a UNIX BIND secondary.
Fast zone transfer is already enabled by default on Windows DNS primaries and is the root cause of the BIND incompatibility, so enabling it again does not resolve the issue.
Concept tested: Windows DNS BIND secondaries interoperability setting
Source: https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc757658(v=ws.10)
Topics
Community Discussion
No community discussion yet for this question.