Soru

Zorluk: OrtaTroubleshooting DNS and Name Resolution Services

A network technician is investigating a connectivity issue on a Linux workstation. When executing `nslookup repo.corp.local`, the command returns an IP address of `10.50.10.25` from the internal DNS server. However, ping commands and web browser traffic directed to `repo.corp.local` consistently attempt to connect to `10.50.10.99`, resulting in connection timeouts.

Which of the following is the most likely cause of this name resolution discrepancy?

  1. The local /etc/hosts file contains an outdated entry mapping repo.corp.local to 10.50.10.99.Cevap
  2. B
    The nslookup utility misinterpreted a cached response from the default gateway instead of querying the authoritative DNS server.
  3. C
    The DNS server is missing an AAAA record for the host, forcing the operating system to fall back to an obsolete PTR record.
  4. D
    The network firewall is blocking TCP port 53 traffic while allowing UDP port 53 traffic.

Cevap

The local /etc/hosts file contains an outdated entry mapping repo.corp.local to 10.50.10.99.
The correct answer identifies that the local `/etc/hosts` file contains an outdated mapping. In operating systems like Linux and Windows, standard applications (such as web browsers or the `ping` utility) follow the system's name resolution order, which prioritizes the local `hosts` file before sending a query to a DNS server. In contrast, diagnostic tools like `nslookup` bypass the local `hosts` file and query the configured DNS server directly. Therefore, `nslookup` retrieves the correct IP address (`10.50.10.25`) from DNS, while applications read the stale entry (`10.50.10.99`) from `/etc/hosts`.

Adım Adım Çözüm

1
Analyze the difference between how nslookup operates versus standard OS application traffic.
Recognize that nslookup uses its own internal stub resolver code to query configured DNS servers directly, ignoring local host files.
Utility tools like nslookup bypass local operating system host lookup files (/etc/hosts).
2
Examine the operating system name resolution order for standard network applications (ping, browsers).
Determine that OS applications consult local host files (/etc/hosts) prior to querying external or internal DNS servers.
Default OS Name Service Switch configuration checks local file entries before sending DNS queries.
3
Correlate the behavior to the root cause.
An old entry in /etc/hosts causes ping and browsers to use 10.50.10.99, while nslookup accurately fetches 10.50.10.25 from DNS.
A static host entry overrides dynamic DNS query results for general system traffic.

Anahtar Kavram

Operating System Name Resolution Order vs Direct DNS Diagnostic Utility Behavior
Bu soruyu puanla