Soru

Zorluk: OrtaTroubleshooting DNS and Name Resolution Services

An IT technician is troubleshooting name resolution issues on an administrator workstation. The technician issues an `nslookup` command for `app.finance.local` and receives a successful reply pointing to `192.168.10.50`. However, when attempting to ping `app.finance.local` from the same machine, the system attempts to send traffic to `10.0.0.99` and times out.

text
C:\Users\Admin> nslookup app.finance.local
Server: dns01.corp.internal
Address: 10.0.0.1

Name: app.finance.local
Address: 192.168.10.50

C:\Users\Admin> ping app.finance.local
Pinging app.finance.local [10.0.0.99] with 32 bytes of data:
Request timed out.

Which of the following is the most likely cause of the discrepancy in resolved IP addresses?

  1. A static entry for app.finance.local mapping to 10.0.0.99 is present in the local hosts file.Cevap
  2. B
    The DNS server dns01.corp.internal has a misconfigured CNAME record instead of an A record.
  3. C
    The client workstation is configured to use TCP port 53 for ping requests and UDP port 53 for nslookup queries.
  4. D
    The nslookup utility received an unauthoritative non-recursive response due to a misconfigured root hint.

Cevap

A static entry for app.finance.local mapping to 10.0.0.99 is present in the local hosts file.
The correct answer identifies that a static entry exists in the local hosts file. Standard operating system commands like `ping` utilize the OS name resolution pipeline, which evaluates the local `hosts` file and resolver cache before sending requests to remote DNS servers. The diagnostic tool `nslookup`, however, bypasses local system files and queries the DNS server directly. The discrepancy between `nslookup` (192.168.10.50) and `ping` (10.0.0.99) indicates that a local `hosts` file entry is overriding the DNS server's record for normal application traffic.

Adım Adım Çözüm

1
Analyze the behavior of the nslookup utility
nslookup directly contacts the configured DNS server (10.0.0.1) over network sockets, completely bypassing the local operating system resolver library, DNS cache, and hosts file.
This confirms that the DNS server holds the correct record (192.168.10.50).
2
Analyze the behavior of standard OS utilities (e.g., ping)
ping relies on the OS Stub Resolver, which checks local mechanisms (such as the local hosts file and local DNS resolver cache) prior to initiating a network DNS query.
Because ping attempts to reach 10.0.0.99, a local override must exist on the client machine that takes precedence over network DNS responses.
3
Identify the root cause of the address discrepancy
A legacy or manual entry in the system's local hosts file (%SystemRoot%\System32\drivers\etc\hosts) maps app.finance.local to 10.0.0.99, overriding the valid DNS response for standard applications.
Removing or correcting the entry in the local hosts file will restore consistent name resolution.

Anahtar Kavram

Operating System Hostname Resolution Order vs. Direct DNS Diagnostics (nslookup vs. OS Resolver)
Bu soruyu puanla