Examkin

Question

Difficulty: HardDNS Infrastructure and Record Types

Match each DNS resource record type to its corresponding technical description or administrative function within an enterprise DNS infrastructure.

  • SRV RecordMaps a specific symbolic service name and transport protocol to a canonical target hostname, specifying port number, priority, and weight values.
  • SOA RecordSpecifies zone administrative defaults, including primary master name server, administrator contact email, serial number, and zone refresh/retry/expire timers.
  • RRSIG RecordContains a digital signature used by DNSSEC to validate the authenticity and integrity of an associated resource record set (RRset).
  • CNAME RecordDefines an alias for an existing canonical hostname, requiring the DNS resolver to restart the lookup process for the targeted canonical name.

Answer

SRV Record matches the description detailing service name, protocol, port number, priority, and weight. SOA Record matches the description detailing zone administration parameters, primary master name server, contact email, and zone timers. RRSIG Record matches the description specifying DNSSEC digital signatures for RRsets. CNAME Record matches the description defining an alias mapping to a canonical hostname requiring secondary resolution.
Each DNS record type serves a distinct technical role: SRV handles service and port discovery; SOA contains zone-wide administrative metadata and replication timers; RRSIG provides DNSSEC cryptographic signatures over record sets; and CNAME acts as a domain alias pointing to a canonical domain name.

Step-by-Step Solution

1
Analyze SRV Record requirements
Identify that SRV records uniquely incorporate service/protocol specification along with priority, weight, and port fields for service location discovery.
Used in protocols like LDAP, Kerberos, and VoIP for dynamic service locator resolution.
2
Analyze SOA Record parameters
Identify that SOA records define zone-level metadata including serial numbers, refresh, retry, expire intervals, and administrative email address.
Crucial for primary/secondary DNS replication synchronization and authoritative zone parameters.
3
Analyze RRSIG Record functionality
Identify that RRSIG is a key component of DNSSEC containing public key cryptography signatures over DNS record sets.
Prevents cache poisoning and spoofing by enabling cryptographic validation of response data.
4
Analyze CNAME Record functionality
Identify that CNAME acts as an alias to a canonical name, forcing recursive resolvers to initiate a secondary lookup cycle.
Simplifies domain management when multiple service names point to a single host entity.

Key Concept

DNS Infrastructure Record Types and Technical Functions
Rate this question

Topics

DNS Infrastructure and Record Types

More questions from this topic