Question

Difficulty: Very hardTroubleshooting DNS and Name Resolution Services

A network engineer is systematically troubleshooting a client workstation that is experiencing intermittent domain name resolution failures for internal corporate servers. Arrange the troubleshooting steps in the correct, logical order—beginning with local client configuration verification and progressing outward to network transport validation.

  1. 1Run ipconfig /all to verify the client's assigned Primary DNS server IP address and configured DNS suffix search list.
  2. 2Examine local cached resolution records using ipconfig /displaydns to check for stale, corrupted, or erroneous entries.
  3. 3Inspect the local HOSTS file (%SystemRoot%\System32\drivers\etc\hosts) to check for static mapping overrides.
  4. 4Perform an explicit DNS query using nslookup directed explicitly to the designated internal DNS server IP to bypass local OS caching.
  5. 5Analyze network path ACLs and firewall rules to verify that traffic on UDP port 53 and TCP port 53 is not being blocked between the client and DNS server.

Answer

The correct systematic order begins with verifying client IP configuration settings (ipconfig /all), followed by inspecting local DNS cache entries (ipconfig /displaydns), checking static mapping overrides in the HOSTS file, issuing an explicit query directly to the DNS server (nslookup), and finally inspecting network path firewalls for UDP/TCP port 53 traffic blocking.
Systematic DNS troubleshooting follows a logical progression from local client endpoint configuration (verifying IP settings, clearing local cache, inspecting static HOSTS file entries) to direct server querying (nslookup), and finally to network path transport verification (UDP/TCP port 53 firewall inspection).

Step-by-Step Solution

1
Verify client IP configuration settings.
Confirmed assigned Primary/Secondary DNS IP addresses and DNS search suffixes.
Incorrect server IPs or missing domain suffixes prevent queries from reaching the intended server.
2
Inspect local endpoint DNS resolver cache.
Identified whether previously resolved names or stale negative cache entries are causing failures.
Operating systems check memory cache before sending outbound network queries.
3
Review local static HOSTS file overrides.
Checked for misconfigured IP-to-hostname mappings on the local filesystem.
HOSTS file entries supersede DNS server lookup requests in standard host name resolution order.
4
Execute explicit nslookup targeting the DNS server.
Determined whether the DNS server responds to direct FQDN queries.
Direct queries bypass client-side caching and isolate client configuration from server responsiveness.
5
Verify network transport layer rules on UDP/TCP port 53.
Isolated intermediate network firewalls blocking DNS traffic.
If client configuration is valid but queries time out, intermediate network firewalls or ACLs are blocking UDP/TCP port 53.

Key Concept

Troubleshooting DNS and Name Resolution Services
Estimated Time:2m 0s
Rate this question