Suppose the scenario where you are in a slave DNS server (172.16.0.25), and you ask the master DNS server ( ns1.google.com ) to transfer the zone " youtube.com " to the slave server. How would you do that using the dig command?

dig axfr @ns1.google.com youtube.com

Suppose the scenario where you are in a slave DNS server (172.16.0.25), and you ask the master DNS server ( ns1.google.com ) to transfer the zone " youtube.com " to the slave server. How would you do that using the host command?

host -l youtube.com ns1.google.com

Who's the only allowed to issue a zone transfer request?

Only validated Slave DNS server

Only validated Master DNS server

To allow zone transfers which two statements should be configured on the master DNS server?

Create an ACL to allow/deny slave hosts

Set the allow-transfer statement

Set an FW rule to allow the permitted slave DNS servers

Use BIND 9. Only BIND 9 supports zone transfers.

Set the permit-transfer statement

What can you say according to the attached image?

The ACL containing 224.123.240.3 host will be allowed for zone transfers.

The actual server is the master DNS server.

The ACL containing 224.123.240.3 host will be allowed for DNS resolution.

The actual server is the slave DNS server.

What's the main recommended best practice for running a BIND (named daemon) service with less privileges?

Create a special user/group under which the service is run

Reduce BIND network connection to TCP connections only.

Create a BIND replication server

Disable the root user for security reasons.

Suppose you've set the named daemon to run under the user/group "zbxadmin". How would be configured the start line in /etc/init.d/bind for a Debian server, in order for the service always starts under "zbxadmin" user/group?

start-stop-daemon --exec /usr/sbin/named -- -u zbxadmin -g zbxadmin

Which files should be copied to the new chroot jail directory?

/etc, /dev, /lib, /sbin, /usr/sbin and /var/run

/proc, /dev, /lib, /sbin, /usr/bin and /var/run

/etc, /dev, /lib, /boot, /usr/sbin and /var/log

/etc, /dev, /lib, /boot, /usr/sbin and /var/lib

Let's suppose that you've created the chroot jail in /var/cache/, in turn, contained the /etc/bind/ directory. Also, the original BIND configuration is on the /etc/bind/ directory. How do you copy the original BIND config to the new directory in the chroot?

cp /etc/bind/* /var/cache/bind/etc/bind/

What's the instruction that in some systems should be placed on the startup file in order to start the "named" daemon in the /var/cache/bind/ chroot jail:

start-stop-daemon --exec /usr/sbin/named -- -t /var/cache/bind/

start-stop-daemon --exec /usr/sbin/named -- -t /var/cache/bind

daemon /sbin/named -t /var/cache/bind/

daemon /sbin/named -t /var/cache/bind

"Logging to syslog will not work either as the chrooted process has no access to the Unix socket located outside the jail". What's the solution to that problem?

Use a logfile inside the chroot environment.

Use a logfile inside other server than the BIND is running.

Install MariDB on the chroot and create a DB for loggin.

According to the attached image. What's being configured on the named.conf file?

A logging for the named daemon on the chroot jail directory

A logging DB for the DNS forwarding requests

A logging encrypted file with a default encryption

According to the attached image: Which two servers should be interconnected, one as the master DNS server and the other as the slave DNS server?

192.168.72.2 (Master), and 192.168.72.1 (Slave)

192.168.72.4 (Master), and 192.168.72.1 (Slave)

192.168.72.3 (Master), and 192.168.72.3 (Slave)

192.168.72.1 (Master), and 192.168.72.2 (Slave)

192.168.72.1 it's the master and slave as well.

3) 207.3 Securing a DNS server Quiz

37 questions

Show all answers

1.

MULTIPLE SELECT QUESTION

45 sec • 1 pt

Choose three DNS security strategies to protect information:

Hiding the version numbering

Cipher the DNS port

Close the port 53

Limiting access

Limiting zone transfer

2.

MULTIPLE SELECT QUESTION

45 sec • 1 pt

Choose two DNS security strategies to protect information:

Limiting queries

Cipher the DNS port

Close the port 53

Running BIND with less privileges

Limiting OS upgrades

3.

FILL IN THE BLANK QUESTION

1 min • 1 pt

You're working on a DNS server with the IP address 172.17.97.200
Type the full command to get the BIND version the server is running:

4.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Analyze the attached image.
What does the image statement do when is configured on the named.conf file?

Hide the BIND client version

Hide the BIND server version

Hide the version of the OS

Hide the BIND service to unauthorized servers.

5.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Analyze the attached image.
What does the image statement do when is configured on the named.conf file?

Creates an ACL for 192.168.1.0/24 host. These host are able to connect the server

Creates a network ACL. Similar to a firewall.

Creates an ACL for the IP range 192.168.1.0/24

Hide the BIND service to unauthorized servers.

6.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

It consists of a series of subdomains separated by dots, like is presented in the image.

domain

zone

FQDN

URL

7.

FILL IN THE BLANK QUESTION

1 min • 1 pt

What does FQDN mean?

Access all questions and much more by creating a free account

Create resources

Host any resource

Get auto-graded reports

Continue with Google

Continue with Email

Continue with Classlink

Continue with Clever

or continue with

Microsoft

Apple

Others

Already have an account?

Similar Resources on Wayground

36 questions

MOC 20345 Test

Quiz

•

University

40 questions

Fun-a-thon Quiz

Quiz

•

University

40 questions

PTS ASJ XII TKJ 2022/2023

Quiz

•

University

40 questions

MOS 2023

Quiz

•

University

40 questions

Data Spark AI

Quiz

•

University

40 questions

EDUCATION 105 - SECOND EXAM

Quiz

•

University

40 questions

Database Systems Quiz

Quiz

•

University

35 questions

Kuis Aplikasi Kamus Digital

Quiz

•

8th Grade - University

Popular Resources on Wayground

15 questions

Fractions on a Number Line

Quiz

•

3rd Grade

10 questions

Probability Practice

Quiz

•

4th Grade

15 questions

Probability on Number LIne

Quiz

•

4th Grade

20 questions

Equivalent Fractions

Quiz

•

3rd Grade

25 questions

Multiplication Facts

Quiz

•

5th Grade

$fractions$

22 questions

fractions

Quiz

•

3rd Grade

6 questions

Appropriate Chromebook Usage

Lesson

•

7th Grade

10 questions

Greek Bases tele and phon

Quiz

•

6th - 8th Grade

Discover more resources for Computers

12 questions

IREAD Week 4 - Review

Quiz

•

3rd Grade - University

20 questions

Endocrine System

Quiz

•

University

7 questions

Renewable and Nonrenewable Resources

Interactive video

•

4th Grade - University

30 questions

W25: PSYCH 250 - Exam 2 Practice

Quiz

•

University

5 questions

Inherited and Acquired Traits of Animals

Interactive video

•

4th Grade - University

20 questions

Implicit vs. Explicit

Quiz

•

6th Grade - University

7 questions

Comparing Fractions

Interactive video

•

1st Grade - University

38 questions

Unit 8 Review - Absolutism & Revolution

Quiz

•

10th Grade - University

3) 207.3 Securing a DNS server

Choose three DNS security strategies to protect information:

Choose two DNS security strategies to protect information:

You're working on a DNS server with the IP address 172.17.97.200
Type the full command to get the BIND version the server is running:

Analyze the attached image.
What does the image statement do when is configured on the named.conf file?

Analyze the attached image.
What does the image statement do when is configured on the named.conf file?

It consists of a series of subdomains separated by dots, like is presented in the image.

What does FQDN mean?

Choose two tools used to initiate zone transfers:

"It's the mechanism to replicate DNS zone data from a master DNS server to one or more DNS servers":

Suppose the scenario where you are in a slave DNS server (172.16.0.25), and you ask the master DNS server (ns1.google.com) to transfer the zone "youtube.com" to the slave server.
How would you do that using the dig command?

Access all questions and much more by creating a free account

Similar Resources on Wayground

Popular Resources on Wayground

Discover more resources for Computers

3) 207.3 Securing a DNS server

Choose three DNS security strategies to protect information:

Choose two DNS security strategies to protect information:

You're working on a DNS server with the IP address 172.17.97.200Type the full command to get the BIND version the server is running:

Analyze the attached image.What does the image statement do when is configured on the named.conf file?

Analyze the attached image.What does the image statement do when is configured on the named.conf file?

It consists of a series of subdomains separated by dots, like is presented in the image.

What does FQDN mean?

Choose two tools used to initiate zone transfers:

"It's the mechanism to replicate DNS zone data from a master DNS server to one or more DNS servers":

Suppose the scenario where you are in a slave DNS server (172.16.0.25), and you ask the master DNS server (ns1.google.com) to transfer the zone "youtube.com" to the slave server.How would you do that using the dig command?

Access all questions and much more by creating a free account

Similar Resources on Wayground

Popular Resources on Wayground

Discover more resources for Computers

You're working on a DNS server with the IP address 172.17.97.200
Type the full command to get the BIND version the server is running:

Analyze the attached image.
What does the image statement do when is configured on the named.conf file?

Analyze the attached image.
What does the image statement do when is configured on the named.conf file?

Suppose the scenario where you are in a slave DNS server (172.16.0.25), and you ask the master DNS server (ns1.google.com) to transfer the zone "youtube.com" to the slave server.
How would you do that using the dig command?