Soru

Zorluk: OrtaTroubleshooting DNS and Name Resolution Services

A user on a Windows workstation reports that navigating to `portal.corp.local` in a web browser leads to a 'Connection Refused' error. A network technician runs `nslookup portal.corp.local` and receives a successful authoritative response pointing to `192.168.10.45`. However, running `ipconfig /displaydns` on the client workstation reveals the following output:

text
Record Name . . . . . : portal.corp.local
Record Type . . . . . : 1
Time To Live . . . . : 86400
Data Length . . . . . : 4
Section . . . . . . . : Answer
A (Host) Record . . . : 127.0.0.1

Which of the following is the root cause of the name resolution failure?

  1. A static entry in the client workstation's local HOSTS file is mapping the domain to the loopback address.Cevap
  2. B
    The DNS server is missing an authoritative AAAA record for portal.corp.local.
  3. C
    An upstream firewall is blocking TCP port 53 traffic required for standard DNS queries.
  4. D
    The nslookup utility bypassed the local resolver cache and returned an unverified cached response from an external recursive server.

Cevap

A static entry in the client workstation's local HOSTS file is mapping the domain to the loopback address.
Operating systems check local resolution mechanisms (such as the HOSTS file) prior to sending DNS requests across the network. Entries in the HOSTS file are cached locally with a TTL of 86400 seconds. Because `nslookup` bypasses local system resolution to directly query DNS servers, it received the valid IP address (`192.168.10.45`), whereas application traffic from the web browser utilized the local cache entry pointing to `127.0.0.1`.

Adım Adım Çözüm

1
Analyze the result of the nslookup query
The DNS server resolves `portal.corp.local` to `192.168.10.45`.
Confirms that the host record on the DNS server is configured correctly.
2
Analyze the output of `ipconfig /displaydns`
The client resolver cache contains an A record mapping `portal.corp.local` to `127.0.0.1` with a TTL of 86400.
Identifies the exact IP address the workstation operating system uses for host resolution.
3
Evaluate operating system resolution order and source of entry
Entries defined in the local `HOSTS` file take precedence over DNS server queries and populate the resolver cache with a static 24-hour TTL (86400 seconds).
Explains why web browser connections fail while direct nslookup queries return the true server address.

Anahtar Kavram

Local HOSTS file precedence over DNS server queries and DNS cache behavior
Bu soruyu puanla