A network systems administrator is auditing the public DNS zone configuration for an enterprise domain () to support a new email server deployment. The administrator runs the following diagnostic command to inspect existing records:
text
; <<>> DiG 9.16.1-Ubuntu <<>> enterprise.example TXT
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41209
;; QUESTION SECTION:
;enterprise.example. IN TXT
;; ANSWER SECTION:
enterprise.example. 3600 IN TXT "v=spf1 ip4:198.51.100.25/28 -all"
To complete the setup for receiving inbound email and ensuring valid domain authentication, which TWO DNS resource records must be properly configured in the forward lookup zone?
- An MX record mapping the domain apex to the mail server's FQDN alongside an assigned preference number.Cevap
- A TXT record at the domain apex containing the Sender Policy Framework (SPF) string identifying authorized sending IP addresses.Cevap
- CA PTR record in the forward lookup zone mapping the mail server hostname to its public IPv4 address.
- DAn SRV record configured on TCP port 25 specifying the target hostname and priority for incoming SMTP traffic.
- EA TXT record requiring DNS query traffic to use TCP port 53 exclusively for all SPF verification requests.
Cevap
The correct records to configure are an MX record directing mail traffic to the server's FQDN with a preference value, and a TXT record containing the SPF policy string.
To establish email services, an enterprise requires an MX record to specify the receiving mail server's FQDN along with a preference value. Additionally, domain authentication relies on a TXT record at the zone apex containing SPF specifications () to declare authorized sending IP addresses.
Adım Adım Çözüm
Anahtar Kavram
DNS Infrastructure and Resource Record Functions (MX and TXT/SPF)
Tahmini Süre:2m 0s