Question

Difficulty: MediumIP Addressing Services

A network administrator is configuring dynamic IP addressing and name resolution services across an enterprise network. The organization requires client hostnames to be automatically registered in the internal DNS zone whenever a host receives an IPv4 address lease from the centralized DHCP server. Which TWO of the following steps must be configured to enable dynamic DNS (DDNS) updates between the DHCP and DNS servers?

  1. Configure the DHCP server with authentication credentials to send dynamic update requests to the authoritative DNS server on behalf of clientsAnswer
  2. Configure the primary DNS zone properties to permit secure dynamic updates from the authorized DHCP serverAnswer
  3. C
    Configure an IP helper address on the authoritative DNS server pointing to the DHCP server to relay PTR record updates
  4. D
    Create static CNAME resource records for all host IP addresses in the DHCP pool prior to lease allocation
  5. E
    Reconfigure the DNS update transport settings to transmit dynamic zone records over UDP port 67

Answer

To establish dynamic DNS (DDNS) integration, the administrator must permit secure dynamic updates on the primary DNS zone and configure the DHCP server with credentials authorized to send update requests to the authoritative DNS server on behalf of DHCP clients.
Dynamic DNS (DDNS) allows automatic updating of DNS database records when IP address leases are granted. For this to operate seamlessly, the primary DNS zone must be set to allow secure dynamic updates, and the DHCP server must be configured with authorized credentials to submit host (A) and pointer (PTR) record creation requests to the DNS server.

Step-by-Step Solution

1
Analyze how dynamic host resolution updates interact during DHCP lease allocation.
Identify that the DHCP server creates or updates Forward (A) and Reverse (PTR) DNS records when handing out leases.
Centralized DDNS offloads domain registration responsibilities from individual client endpoints to the DHCP infrastructure.
2
Determine the necessary permission settings on the DNS server.
Enable secure dynamic updates on the authoritative zone of the primary DNS server.
Authoritative DNS servers reject unauthenticated or unpermitted dynamic record update attempts by default.
3
Determine the necessary credentials on the DHCP server.
Supply the DHCP server with authentication credentials (e.g., TSIG key or account) authorized to modify DNS zone records.
The DNS server requires valid security context from the DHCP server to permit record creation and modifications.

Key Concept

Dynamic DNS (DDNS) Integration with DHCP Services
Estimated Time:1m 30s
Rate this question