Technical Interview Questions (Part 1 - 3) (Networking) Edited & Maintained by SYED JAHANZAIB - Aacable@Hotmail

6/8/2015 TechnicalInterviewQuestions(Part1/3)[Networking]Edited&MaintainedbySYEDJAHANZAIB/aacable@hotmail.
com|SyedJahanzaibPersonn
SyedJahanzaibPersonnelBlogtoShare
Knowledge!
February17,2010
TechnicalInterviewQuestions(Part1/3)[Networking]Edited&
MaintainedbySYEDJAHANZAIB/aacable@hotmail.com
Filedunder:GeneralITRelatedSyedJahanzaib/Pinochio~:)@6:33AM
i
5Votes
TechnicalInterviewQuestions(Part1/3)
[Networking]
Edited&MaintainedbySYEDJAHANZAIB/aacable@hotmail.com
1.WhatisanIPaddress?
2.Whatisasubnetmask?
3.WhatisARP?
4.WhatisARPCachePoisoning?
5.WhatistheANDingprocess?
6.Whatisadefaultgateway?WhathappensifIdonthaveone?
7.CanaworkstationcomputerbeconfiguredtobrowsetheInternetand
yetNOThaveadefaultgateway?
8.Whatisasubnet?
9.WhatisAPIPA?
https://aacable.wordpress.com/2010/02/17/technicalinterviewquestionspart13networkingeditedmaintainedbysyedjahanzaibaacablehotmailcom/
1/25
6/8/2015 TechnicalInterviewQuestions(Part1/3)[Networking]Edited&MaintainedbySYEDJAHANZAIB/aacable@hotmail.com|SyedJahanzaibPersonn
10.WhatisanRFC?Nameafewifpossible(notnecessarily
thenumbers,justtheideasbehindthem)
11.WhatisRFC1918?
12.WhatisCIDR?
13.YouhavethefollowingNetworkID:192.115.103.64/27.
WhatistheIPrangeforyournetwork?
14.YouhavethefollowingNetworkID:131.112.0.0.Youneedatleast
500hostspernetwork.Howmanynetworkscanyoucreate?Whatsubnet
maskwillyouuse?
15.Youneedtoviewatnetworktraffic.Whatwillyouuse?Nameafew
tools
16.HowdoIknowthepaththatapackettakestothedestination?
17.Whatdoestheping192.168.0.1l1000n100commanddo?
18.WhatisDHCP?Whatarethebenefitsanddrawbacksofusingit?
19.DescribethestepstakenbytheclientandDHCPserverinorderto
obtainanIPaddress.
20.WhatistheDHCPNACKandwhendoIgetone?Name2scenarios.
21.WhatportsareusedbyDHCPandtheDHCPclients?
22.DescribetheprocessofinstallingaDHCPserverinanAD
infrastructure.
23.WhatisDHCPINFORM?
24.DescribetheintegrationbetweenDHCPandDNS.
25.WhatoptionsinDHCPdoyouregularlyuseforanMSNetwork?
26.WhatareUserClassesandVendorClassesinDHCP?
27.HowdoIconfigureaclientmachinetouseaspecificUserClass?
28.WhatistheBOOTPprotocolusedfor,wheremightyoufinditin
windowsnetworkinfrastructure?
29.DNSzonesdescribethedifferencesbetweenthe4types.
30.DNSrecordtypesdescribethemostimportantones.
31.Describetheprocessofworkingwithanexternaldomainname
32.DescribetheimportanceofDNStoAD.
2/25
33.DescribeafewmethodsoffindinganMXrecordforaremotedomain
ontheInternet.
34.WhatdoesDisableRecursioninDNSmean?
35.WhatcouldcausetheForwardersandRootHintstobegrayedout?
36.WhatisaSingleLabeldomainnameandwhatsortofissuescanit
cause?
37.Whatistheinaddr.arpazoneusedfor?
38.WhataretherequirementsfromDNStosupportAD?
39.HowdoyoumanuallycreateSRVrecordsinDNS?
40.Name3benefitsofusingADintegratedzones.
41.WhatarethebenefitsofusingWindows2003DNSwhenusingAD
integratedzones?
42.YouinstalledanewADdomainandthenew(andfirst)DChasnot
registereditsSRVrecordsinDNS.Nameafewpossiblecauses.
43.WhatarethebenefitsandscenariosofusingStubzones?
44.WhatarethebenefitsandscenariosofusingConditionalForwarding?
45.WhatarethedifferencesbetweenWindowsClustering,NetworkLoad
BalancingandRoundRobin,andscenariosforeachuse?
46.HowdoIworkwiththeHostnamecacheonaclientcomputer?
47.HowdoIcleartheDNScacheontheDNSserver?
48.Whatisthe224.0.1.24addressusedfor?
49.WhatisWINSandwhendoweuseit?
50.CanyouhaveaMicrosoftbasednetworkwithoutanyWINSserveron
it?WhataretheconsiderationsregardingnotusingWINS?
51.DescribethedifferencesbetweenWINSpushandpullreplications.
52.WhatisthedifferencebetweentombstoningaWINSrecordandsimply
deletingit?
53.NametheNetBIOSnamesyoumightexpectfromaWindows2003DCthat
isregisteredinWINS.
54.Describetheroleoftheroutingtableonahostandonarouter.
55.Whatareroutingprotocols?Whydoweneedthem?Nameafew.
56.Whatarerouterinterfaces?Whattypescantheybe?
3/25
57.InWindows2003routing,whataretheinterfacefilters?
58.WhatisNAT?
59.WhatistherealdifferencebetweenNATandPAT?
60.HowdoyouconfigureNATonWindows2003?
61.HowdoyouallowinboundtrafficforspecifichostsonWindows2003
NAT?
62.WhatisVPN?WhattypesofVPNdoesWindows2000andbeyondwork
withnatively?
63.WhatisIAS?Inwhatscenariosdoweuseit?
64.WhatsthedifferencebetweenMixedmodeandNativemodeinADwhen
dealingwithRRAS?
65.WhatistheRASandIASgroupinAD?
66.WhatareConditionsandProfileinRRASPolicies?
67.WhattypesorauthenticationcanaWindows2003basedRRASwork
with?
68.HowdoesSSLwork?
69.HowdoesIPSecwork?
70.HowdoIdeployIPSecforalargenumberofcomputers?
71.WhattypesofauthenticationcanIPSecuse?
72.WhatisPFS(PerfectForwardSecrecy)inIPSec?
73.HowdoImonitorIPSec?
74.LookingatIPSecencryptedtrafficwithasniffer.Whatpackettypes
doIsee?
75.WhatcanyoudowithNETSH?
76.HowdoIlookattheopenportsonmymachine?
ANSWERS
4/25
1)WhatisanIPaddress?
AnInternetProtocol(IP)addressisanumericallabelthatisassignedtodevicesparticipatingina
computernetworkutilizingtheInternet
anIPaddressisa32bitnumberthatidentifieseachsenderorreceiverofinformationthatissentin
packetsacrossthelan/Internet.
AnIPaddresshastwoparts:theidentifierofaparticularnetworkontheInternetandanidentifierof
theparticulardevice(whichcanbeaserveroraworkstation)withinthatnetwork.OntheInternetitself
thatis,betweentherouterthatmovepacketsfromonepointtoanotheralongtherouteonlythe
networkpartoftheaddressislookedat.
2)Whatisasubnetmask?
AsubnetmaskallowsyoutoidentifywhichpartofanIPaddressisreservedforthenetwork,and
whichpartisavailableforhostuse.IfyoulookattheIPaddressalone,especiallynowwithclassless
interdomainrouting,youcanttellwhichpartoftheaddressiswhich.Addingthesubnetmask,or
netmask,givesyoualltheinformationyouneedtocalculatenetworkandhostportionsoftheaddress
withease.Insummary,knowingthesubnetmaskcanallowyoutoeasilycalculatewhetherIPaddresses
areon.
Subnettingenablesthenetworkadministratortofurtherdividethehostpartoftheaddressintotwoor
moresubnets.
3)WhatisARP?
ShortforAddressResolutionProtocol,anetworklayerprotocolusedtoconvertanIPaddressintoa
physicaladdress(calledaDLCaddress),suchasanEthernetaddress.Ahostwishingtoobtaina
physicaladdressbroadcastsanARPrequestontotheTCP/IPnetwork.Thehostonthenetworkthathas
theIPaddressintherequestthenreplieswithitsphysicalhardwareaddress.
ARPisaveryimportantpartofIPnetworking.ARPisusedtoconnectOSILayer3(Network)toOSI
Layer2(DataLink).Formostofus,thatmeansthatARPisusedtolinkourIPaddressingtoour
Ethernetaddressing(MACAddressing).Foryoutocommunicatewithanydeviceonyournetwork,you
musthavetheEthernetMACaddressforthatdevice.IfthedeviceisnotonyourLAN,yougothrough
yourdefaultgateway(yourrouter).Inthiscase,yourrouterwillbethedestinationMACaddressthat
yourPCwillcommunicatewith.
4)WhatisARPCachePoisoning?
amethodofattackinganEthernetLANbyupdatingthetargetcomputersARPcachewithbothaforged
ARPrequestandreplypacketsinanefforttochangetheLayer2EthernetMACaddress(i.e.,theaddress
ofthenetworkcard)toonethattheattackercanmonitor.BecausetheARPreplieshavebeenforged,the
targetcomputersendsframesthatweremeantfortheoriginaldestinationtotheattackerscomputer
firstsotheframescanberead.AsuccessfulAPRattemptisinvisibletotheuser.
ARPcachepoisoning,alsoknownasARPspoofing,istheprocessoffalsifyingthesourceMediaAccess
Control(MAC)addressesofpacketsbeingsentonanEthernetnetwork.ItisaMAClayerattackthatcan
onlybecarriedoutwhenanattackerisconnectedtothesamelocalnetworkasthetargetmachines,
limitingitseffectivenessonlytonetworksconnectedwithswitches,hubs,andbridges;notrouters.
5)WhatistheANDingprocess?
Inordertodeterminewhetheradestinationhostislocalorremote,acomputerwillperformasimple
5/25
mathematicalcomputationreferredtoasanANDoperation.Whilethesendinghostdoesthisoperation
internally,understandingwhattakesplaceisthekeytounderstandinghowanIPbasedsystemknows
whethertosendpacketsdirectlytoahostortoarouter.
NoticethatwhentheresultingANDvaluesareconvertedbacktobinary,itbecomesclearthatthetwo
hostsareondifferentnetworks.ComputerAisonsubnet192.168.56.0,whilethedestinationhostison
subnet192.168.64.0,which
meansthatComputerAwillnextbesendingthedatatoarouter.WithoutANDing,determininglocal
andremotehostscanbedifficult.Onceyoureveryfamiliarwithsubnettingandcalculatingrangesof
addresses,recognizinglocalandremotehostswillbecomemuchmoreintuitive.Wheneveryourein
doubtastowhetherhostsarelocalorremote,usetheANDingprocess.Youshouldalsonoticethatthe
ANDingprocessalwaysproducesthesubnetIDofagivenhost.
6)Whatisadefaultgateway?WhathappensifIdonthaveone?
AdefaultgatewayisusedbyahostwhenanIPpacketsdestinationaddressbelongstosomeplace
outsidethelocalsubnet.ThedefaultgatewayaddressisusuallyaninterfacebelongingtotheLANs
borderrouter.
Incomputernetworking,adefaultnetworkgatewayisthedevicethatpassestrafficfromthelocal
subnettodevices
onothersubnets.ThedefaultgatewayoftenconnectsalocalnetworktotheInternet,althoughinternal
gatewaysforconnectingtwolocalnetworksalsoexist.
7)CanaworkstationcomputerbeconfiguredtobrowsetheInternetandyetNOThaveadefault
gateway?
Ifweareusingpublicipaddress,wecanbrowsetheinternet.Ifitishavinganintranetaddressa
gatewayisneededasarouterorfirewalltocommunicatewithinternet.
8)Whatisasubnet?
Aportionofanetworkwhichsharesanetworkaddressinwhicheachcomponentisidentifiedbya
subnetnumber.
Asubnetisalogicalorganizationofnetworkaddressrangesusedtoseparatehostsandnetworkdevices
fromeachothertoserveadesignpurpose.
Inmanycases,subnetsarecreatedtoserveasphysicalorgeographicalseparationssimilartothose
foundbetweenrooms,floors,buildings,orcities.
9)WhatisAPIPA?
ShortforAutomaticPrivateIPAddressing,afeatureoflaterWindowsoperatingsystems.WithAPIPA,
DHCPclientscanautomaticallyselfconfigureanIPaddressandsubnetmaskwhenaDHCPserverisnt
available.WhenaDHCPclientbootsup,itfirstlooksforaDHCPserverinordertoobtainanIP
addressandsubnetmask.Iftheclientisunabletofindtheinformation,itusesAPIPAtoautomatically
configureitselfwithanIPaddressfromarangethathasbeenreservedespeciallyforMicrosoft.TheIP
addressrangeis169.254.0.1through169.254.255.254.Theclientalsoconfiguresitselfwithadefaultclass
Bsubnetmaskof255.255.0.0.AclientusestheselfconfiguredIPaddressuntilaDHCPserverbecomes
available.
TheAPIPAservicealsochecksregularlyforthepresenceofaDHCPserver(everyfiveminutes,
accordingtoMicrosoft).IfitdetectsaDHCPserveronthenetwork,APIPAstops,andtheDHCPserver
replacestheAPIPAnetworkingaddresseswithdynamicallyassignedaddresses.
APIPAismeantfornonroutedsmallbusinessenvironments,
6/25
usuallylessthan25clients.
10)WhatisanRFC?Nameafewifpossible(notnecessarilythenumbers,justtheideasbehindthem)
ShortforRequestforComments,aseriesofnotesabouttheInternet,startedin1969(whentheInternet
wastheARPANET).AnInternetDocumentcanbesubmittedtotheIETFbyanyone,buttheIETF
decidesifthedocumentbecomesanRFC.Eventually,ifitgainsenoughinterest,itmayevolveintoan
Internetstandard.
EachRFCisdesignatedbyanRFCnumber.Oncepublished,anRFCneverchanges.Modificationstoan
originalRFCareassignedanewRFCnumber.
11)WhatisRFC1918?
RFC1918isAddressAllocationforPrivateInternetsTheInternetAssignedNumbersAuthority(IANA)
hasreservedthe
followingthreeblocksofthe
IPaddressspaceforprivateinternets:10.0.0.0
10.255.255.255(10/8prefix)172.16.0.0172.31.255.255
(172.16/12prefix)192.168.0.0192.168.255.255
(192.168/16prefix)Wewillrefertothefirstblockas24bitblock,thesecondas20bitblock,andto
thethirdas16bitblock.Notethat(inpreCIDRnotation)thefirstblockisnothingbutasingleclass
Anetworknumber,whilethesecondblockisasetof16contiguousclassBnetworknumbers,andthird
blockisasetof256contiguousclassCnetworknumbers.
12)WhatisCIDR?
CIDR(ClasslessInterDomainRouting,sometimesknownassupernetting)isawaytoallocateand
specifytheInternetaddressesusedininterdomainroutingmoreflexiblythanwiththeoriginalsystem
ofInternetProtocol(IP)addressclasses.Asaresult,thenumberofavailableInternetaddresseshasbeen
greatlyincreased.
13.YouhavethefollowingNetworkID:
192.115.103.64/27.WhatistheIPrangeforyournetwork?
Itrangesfrom192.115.103.64192.115.103.96
Buttheusableaddressarefrom192.115.103.64
192.115.103.94
192.115.103.95itisthebroadcastaddress
192.115.103.96willbetheipaddressofnextrange
wecanuse30hostsinthisnetwork
14.YouhavethefollowingNetworkID:131.112.0.0.Youneedatleast500hostspernetwork.Howmany
networkscanyoucreate?Whatsubnetmaskwillyouuse?
Ifyouneed500usersthen2^9thwouldgiveyou512(rememberthefirstandlastarenetworkand
broadcast),510usable.Soofyour32bitsyouwouldturnthelast9offforhostandthatwouldgiveyou
giveyoua255.255.254.0subnetmask
(11111111.11111111.11111110.00000000).
Nowthatweknowthat
wecanseethatyouhavethefirst7ofyourthirdoctetturnedonsotofigureouthowmanysubnetsyou
haveustheformula
7/25
2^7th=128.Soyoucanhave128subnetswith500peopleonthem.
15.Youneedtoviewatnetworktraffic.Whatwillyouuse?Nameafewtools
winsharkortcpdump,orethereal(availableinourfileserver)
16.HowdoIknowthepaththatapackettakestothedestination?
usetracertcommandline
17.Whatdoestheping192.168.0.1l1000n100commanddo?
Thepingcommandwillsendroundtrippacketstoadestination(otherPC,router,printer,etc.)andsee
howlongittakes.The192.168.0.1
isthedestination(which,bythewayisatypicaldefaultIPaddressofarouter.)Thel1000ishowbig
thepacketshouldbeinbytes.Thedefaultis32,ifthelparameterisnotused.Andthen100issaying
tosendit100times.Thedefaultis4,whenthisparameterisnotused.
18.WhatisDHCP?Whatarethebenefitsanddrawbacksofusingit?
Benefits:
1.DHCPminimizesconfigurationerrorscausedbymanualIPaddressconfiguration.
2.Reducednetworkadministration.
Disadvantage
YourmachinenamedoesnotchangewhenyougetanewIPaddress.TheDNS(DomainNameSystem)
nameisassociatedwithyourIPaddressandthereforedoeschange.Thisonlypresentsaproblemif
otherclientstrytoaccessyourmachinebyitsDNSname.
19.DescribethestepstakenbytheclientandDHCPserverinordertoobtainanIPaddress.
*AtleastoneDHCPservermustexistonanetwork.
OncetheDHCPserversoftwareisinstalled,youcreateaDHCPscope,whichisapoolofIPaddresses
thattheservermanages.Whenclientslogon,theyrequestanIPaddressfromtheserver,andtheserver
providesanIPaddressfromitspoolofavailableaddresses.
*DHCPwasoriginallydefinedinRFC1531(DynamicHostConfigurationProtocol,October1993)but
themostrecentupdateisRFC2131(DynamicHostConfigurationProtocol,March1997).TheIETF
DynamicHostConfiguration(dhc)WorkingGroupischarteredtoproduceaprotocolforautomated
allocation,configuration,andmanagementofIPaddressesandTCP/IPprotocolstackparameters.
20.WhatistheDHCPNACKandwhendoIgetone?Name2scenarios.
RecentlyIsawalotofqueriesregardingwhentheMicrosoftDHCPserverissuesaNAKtoDHCP
clients.Forsimplificationpurposes,Iamlistingdownthepossiblescenariosinwhichtheservershould
NOTissueaNAK.ThisshouldgiveyouagoodunderstandingofDHCPNAKbehavior.WhenaDHCP
serverreceivesaDHCPRequestwithapreviouslyassignedaddressspecified,itfirstcheckstoseeifit
camefromthelocalsegmentbycheckingtheGIADDRfield.Ifitoriginatedfromthelocalsegment,the
8/25
DHCPservercomparestherequestedaddresstotheIPaddressandsubnetmaskbelongingtothelocal
interfacethatreceivedtherequest.
DHCPserverwillissueaNAKtotheclientONLYIFitissurethattheclient,onthelocalsubnet,is
askingforanaddressthatdoesntexistonthatsubnet.TheserverwillsendaNAKEXCEPTinthe
followingscenarios:
1.Requestedaddressfrompossiblythesamesubnetbutnotintheaddresspooloftheserver:
Thiscanbethefailoverscenarioinwhich2DHCPserversareservingthesamesubnetsothatwhenone
goesdown,theothershouldnotNAKtoclientswhichgotanIPfromthefirstserver.
2.Requestedaddressonadifferentsubnet:
IftheAddressisfromthesamesuperscopetowhichthesubnetbelongs,DHCPserverwillACKthe
REQUEST.
21.WhatportsareusedbyDHCPandtheDHCPclients?
RequestsareonUDPport68,ServerrepliesonUDP67
22.DescribetheprocessofinstallingaDHCPserverinanADinfrastructure.
UseAdd/Removeprogramwizard...
23.WhatisDHCPINFORM?
DHCPInformisaDHCPmessageusedbyDHCPclientstoobtainDHCPoptions.WhilePPPremote
accessclientsdonotuseDHCPtoobtainIPaddressesfortheremoteaccessconnection,Windows2000
andWindows98remoteaccessclientsusetheDHCPInformmessagetoobtainDNSserverIPaddresses,
WINSserverIPaddresses,andaDNSdomainname.TheDHCPInformmessageissentaftertheIPCP
negotiationisconcluded.TheDHCPInformmessagereceivedbytheremoteaccessserveristhen
forwardedtoaDHCPserver.TheremoteaccessserverforwardsDHCPInformmessagesonlyifithas
beenconfiguredwiththeDHCPRelayAgent..
24.DescribetheintegrationbetweenDHCPandDNS.
Traditionally,DNSandDHCPservershavebeenconfiguredandmanagedoneatatime.Similarly,
changingauthorizationrightsforaparticularuseronagroupofdeviceshasmeantvisitingeachoneand
makingconfigurationchanges.DHCPintegrationwithDNSallowstheaggregationofthesetasksacross
devices,enablingacompanysnetworkservicestoscaleinstepwiththegrowthofnetworkusers,
devices,andpolicies,whilereducingadministrativeoperationsandcosts.
Thisintegrationprovidespracticaloperationalefficienciesthatlowertotalcostofownership.Creatinga
DHCPnetworkautomaticallycreatesanassociatedDNSzone,forexample,reducingthenumberof
tasksrequiredofnetworkadministrators.AndintegrationofDNSandDHCPinthesamedatabase
instanceprovidesunmatchedconsistencybetweenserviceandmanagementviewsofIPaddresscentric
networkservicesdata.
25.WhatoptionsinDHCPdoyouregularlyuseforanMSnetwork?
AutomaticprovidingIPaddress
Subnetmask
DNSserver
9/25
Domainname
Defaultgetawayorrouter
26.WhatareUserClassesandVendorClassesinDHCP?
MicrosoftVendorClasses
ThefollowinglistcontainspredefinedvendorclassesthatareavailableinWindows2000DHCPserver.
ClassDataClassNameDescriptionMSFT5.0MicrosoftWindows
2000optionsClassthatincludesallWindows2000DHCP
clients.MSFT98Microsoft
Windows98optionsClassthatincludesallWindows98and
MicrosoftWindowsMillenniumEdition(Me)DHCPclients.MSFT
MicrosoftoptionsClassthatincludes
allWindows98,WindowsMe,andWindows2000DHCPclients.
IfyouhavenonMicrosoftDHCPclients,youcandefineothervendorspecificclassesontheDHCP
server.Whenyoudefinesuchclasses,makesurethevendorclassidentifierthatyoudefinematchesthe
identifierusedbytheclients.
UserClasses
Thefollowinglistcontainspredefineduserclassesthat
areavailableinWindows2000DHCPserver.
CollapsethistableExpandthistable
ClassIDClassTypeDescriptionUnspecifiedDefaultuser
classAllDHCPclientsthathavenouserclassspecified.
RRAS.MicrosoftDefaultRoutingandRemoteAccessclassAllDialUpNetworking(DUN)clients.
BootpDefaultBootpclassAllBootpclients
Inadditiontothesepredefinedclasses,youcanalsoaddcustomuserclassesforWindows2000DHCP
clients.Whenyouconfiguresuchclasses,youmustspecifyacustomidentifierthatcorrespondstothe
user
classdefinedontheDHCPserver.
27.HowdoIconfigureaclientmachinetouseaspecificUserClass?
Thecommandtoconfigureaclientmachinetouseaspecificuserclassis
ipconfig/setclassid<NameofyourNetworkcard><NameoftheclassyoucreatedonDHCPandyou
wanttojoin(Nameiscasesensitive)>
Eg:
ipconfig/setclassidLocalAreaNetworkAccounting
28.WhatistheBOOTPprotocolusedfor,wheremightyoufinditinWindowsnetworkinfrastructure?
BootP(RFC951)provides
10/25
*auniqueIPaddresstotherequester(usingport67)similartotheDHCPrequestonport68AND
*canprovide(wheresupported)theabilitytobootasystemwithoutaharddrive(ie:adisklessclient)
AppleOSX10.*ServersupportsBootP(albeit)renamedasNetBoot.ThefacilityallowstheAdminto
maintainaselectedsetofconfigurationsasbootimagesandthenassignsetsofclientsystemsto
share(orbootfrom)thatimage.ForexampleAccounting,Management,andEngineeringdepartments
haveelementsincommon,butwhichcanbeuniquefromother
departments.Performingupgradesandmaintenanceonthreeimagesisfarmoreproductivethat
workingonallclientsystemsindividually.
Startupisobviouslynetworkintensive,andbeyond4050clients,theAdminneedstocarefullysubnet
theinfrastructure,usegigabitswitches,andhosttheimageslocaltotheclientstoavoidsaturatingthe
network.ThiswillexpandthenumberofBootPserversandmultiplythenumberofimages,butthe
productivityof1BootPserverper50clientsis
undeniable
Sunmicro,Linux,andAIXRS/600allsupportBootP.
Todate,Windowsdoesnotsupportbootingdisklessclients.
29.DNSzonesdescribethedifferencesbetweenthe4types.
Dnszoneisactualfilewhichcontainsalltherecordsforaspecificdomain.
i)ForwardLookupZones:
Thiszoneisresponsibletoresolvehostnametoip.
ii)ReverseLookupZones:
Thiszoneisresponsibletoresolveiptohostname.
iii)StubZone:
Stubzoneisreadonlycopyofprimaryzone.butitcontains
only3recordsviz
theSOAfortheprimaryzone,NSrecordandaHost(A)record.
30.DNSrecordtypesdescribethemostimportantones.TypeofRecordWhatitdoes
A(Host)Classicresourcerecord.MapshostnametoIP(ipv4)
PTRMapsIPtohostname(ReverseofA(Host)
AAAAMapshostnametoip(ipv6)
CnameCanonicalname,inplainEnglishanalias.suchasWebServer,FTPServer,ChatServer
NSIdentifiesDNSnameservers.Importantforforwarders
MXMailservers,particularlyforotherdomains.MXrecordsrequiredtodeliverinternetemail.
11/25
_SRVRequiredforActiveDirectory.Wholefamilyofunderscoreservice,records,forexample,gc=
globalcatalog.
SOAMakeapointoffindingtheStartofAuthority(SOA)tabatthe
DNSServer.
31.Describetheprocessofworkingwithanexternaldomainname
ServingSiteswithExternalDomainNameServers,IfyouhostWebsitesonthisserverandhavea
standaloneDNSserveractingasaprimary(master)nameserverforyoursites,youmaywanttosetup
yourcontrolpanelsDNSservertofunctionasasecondary(slave)nameserver:
TomakethecontrolpanelsDNSserveractasasecondarynameserver:
1.GotoDomains>domainname>DNSSettings(intheWebSitegroup).
2.ClickSwitchDNSServiceMode.
3.SpecifytheIPaddressoftheprimary(master)DNSserver.
4.ClickAdd.
5.Repeatstepsfrom1to5foreachWebsitethatneedstohaveasecondarynameserveronthismachine.
TomakethecontrolpanelsDNSserveractasaprimaryforazone:
2.ClickSwitchDNSServiceMode.Theoriginalresourcerecordsforthezonewillberestored.
IfyouhostWebsitesonthisserverandrelyentirelyonothermachinestoperformtheDomainName
Serviceforyoursites(therearetwoexternalnameserversaprimaryandasecondary),switchoffthe
controlpanelsDNSserviceforeachsiteservedbyexternalnameservers.
ToswitchoffthecontrolpanelsDNSserviceforasite
servedbyanexternalnameserver:
2.ClickSwitchOfftheDNSServiceintheToolsgroup.
TurningtheDNSserviceoffforthezonewillrefreshthescreen,sothatonlyalistofnameservers
remains.
Note:Thelistednameserverrecordshavenoeffectonthesystem.Theyareonlypresentedonthescreen
asclickablelinkstogiveyouachancetovalidatetheconfigurationofthezonemaintainedonthe
externalauthoritativenameservers.
1.Repeatthestepsfrom1to3toswitchoffthelocaldomainnameserviceforeachsiteservedby
externalnameservers.
Ifyouwishtovalidatetheconfigurationofazonemaintainedonauthoritativenameservers:
2.Addtothelisttheentriespointingtothe
appropriatenameserversthatareauthoritativeforthezone:clickAdd,specifyanameserver,andclick
OK.Repeatthisforeachnameserveryouwouldliketotest.Therecordswillappearinthelist.
1.Clicktherecordsthatyouhavejustcreated.ParallelsPleskPanelwillretrievethezonefilefroma
12/25
remotenameserverandchecktheresourcerecordstomakesurethatdomainsresourcesareproperly
resolved.
Theresultswillbeinterpretedanddisplayedonthescreen.
32.DescribetheimportanceofDNStoAD.
WhenyouinstallActiveDirectoryonaserver,youpromotetheservertotheroleofadomaincontroller
foraspecifieddomain.Whencompletingthisprocess,youarepromptedtospecifyaDNSdomainname
fortheActiveDirectorydomainforwhichyouarejoiningandpromotingtheserver.Ifduringthis
process,aDNSserverauthoritativeforthedomainthatyou
specifiedeithercannotbelocatedonthenetworkordoesnotsupporttheDNSdynamicupdate
protocol,youarepromptedwiththeoptiontoinstallaDNSserver.Thisoptionisprovidedbecausea
DNSserverisrequiredtolocatethisserverorotherdomaincontrollersformembersofanActive
Directorydomain
33.DescribeafewmethodsoffindinganMXrecordforaremotedomainontheInternet.
InordertofindMXRecordsforSMTPdomainsyoucanuseCommandlinetoolssuchasNSLOOKUP
orDIG.Youcanalsouseonlinewebservicesthatallowyoutoperformquicksearchesanddisplaythe
informationinaconvenientmanner.
34.WhatdoesDisableRecursioninDNSmean?
IntheWindows2000/2003DNSconsole(dnsmgmt.msc),underaserversProperties>Forwarderstabis
thesettingDonotuserecursionforthisdomain.OntheAdvancedtabyouwillfindtheconfusingly
similaroptionDisablerecursion(alsodisablesforwarders).
RecursionreferstotheactionofaDNSserverqueryingadditionalDNSservers(e.g.localISPDNSor
therootDNSservers)toresolvequeriesthatitcannotresolvefromitsowndatabase
35.WhatcouldcausetheForwardersandRootHintstobegrayedout?
Win2KconfiguredyourDNSserverasaprivaterootserver
36.WhatisaSingleLabeldomainnameandwhatsortofissuescanitcause?
Singlelabelnamesconsistofasinglewordlikecontoso.
SinglelabelDNSnamescannotberegisteredbyusinganInternetregistrar.
Clientcomputersanddomaincontrollersthatjoinedtosinglelabeldomainsrequireadditional
configurationtoynamicallyregisterDNSrecordsin
singlelabelDNSzones.Clientcomputersanddomaincontrollersmayrequireadditional
configurationtoresolveDNSqueriesinsinglelabelDNSzones.
Bydefault,WindowsServer2003baseddomainmembers,WindowsXPbaseddomainmembers,and
Windows2000baseddomainmembersdonotperformdynamicupdatestosinglelabelDNSzones.
Someserverbasedapplicationsareincompatiblewithsinglelabeldomainnames.Application
supportmaynotexistintheinitialreleaseofanapplication,orsupportmaybedroppedinafuture
release.Forexample,
MicrosoftExchangeServer2007isnotsupportedinenvironmentsinwhichsinglelabelDNSis
used.
Someserverbasedapplicationsareincompatiblewiththedomainrenamefeaturethatissupportedin
WindowsServer2003domaincontrollersandinWindowsServer2008domaincontrollers.These
incompatibilitieseitherblockorcomplicatetheuseofthedomainrenamefeaturewhenyoutryto
renameasinglelabelDNSnametoafullyqualifieddomainname.
13/25
37.Whatistheinaddr.arpazoneusedfor?
WhencreatingDNSrecordsforyourhosts,Arecordsmakesense.Afterall,howcantheworldfindyour
mailserverunlesstheIPaddressofthatserverisassociatedwithitshostnamewithinaDNSdatabase?
However,PTRrecordsarentaseasilyunderstood.Ifyoualreadyhaveazonefile,why
doestherehavetobeaseparateinaddr.arpazonecontainingPTRrecordsmatchingyourArecords?
AndwhoshouldbemakingthosePTRrecordsyouoryourprovider?Letsstartbydefiningin
addr.arpa..arpaisactuallyaTLDlike.comor.org.ThenameoftheTLDcomesfromAddressand
RoutingParameterAreaandithasbeendesignatedbytheIANAtobeusedexclusivelyforInternet
infrastructurepurposes.Inotherwords,itisanimportantzoneandanintegralpartoftheinner
workingsofDNS.The
RFCforDNS(RFC1035)hasanentiresectionontheinaddr.arpadomain.Thefirsttwoparagraphsin
thatsectionstatethepurposeofthedomain:TheInternetusesaspecialdomaintosupportgateway
locationandInternetaddresstohostmapping.Otherclassesmayemployasimilar
strategyinotherdomains.Theintentofthisdomainistoprovideaguaranteedmethodtoperformhost
addresstohostnamemapping,andtofacilitatequeriestolocateallgatewaysonaparticularnetworkin
theInternet.Notethatbothoftheseservicesaresimilartofunctionsthatcouldbeperformedbyinverse
queries;thedifferenceisthatthispartofthedomainnamespaceisstructuredaccordingtoaddress,and
hencecanguaranteethattheappropriatedatacanbelocatedwithoutanexhaustivesearchofthedomain
space.Inotherwords,thiszoneprovidesadatabaseofallallocatednetworksandtheDNSreachable
hostswithinthosenetworks.Ifyourassignednetworkdoesnotappearinthiszone,itappearstobe
unallocated.AndifyourhostsdonthaveaPTRrecordinthisdatabase,theyappeartobeunreachable
throughDNS.AssuminganArecordexistsforahost,amissingPTRrecordmayormaynotimpacton
theDNSreachabilityofthathost,dependingupontheapplicationsrunningonthathost.Forexample,a
mailserverwilldefinitelybeimpactedasPTRrecordsareusedinmailheaderchecksandbymostanti
SPAMmechanisms.Dependinguponyourwebserverconfiguration,itmayalsodependuponan
existingPTRrecord.ThisiswhytheDNSRFCsrecommendthateveryArecordhasanassociatedPTR
record.ButwhoshouldmakeandhostthosePTRrecords?Twentyyearsagowhenyoucouldbuyafull
ClassCnetworkaddress(i.e.254hostaddresses)theanswerwaseasy:you.Remember,theinaddr.arpa
zoneisconcernedwithdelegatednetworkaddresses.Inotherwords,theownerofthenetworkaddress
isauthoritative(i.e.responsible)forthehostPTRrecordsassociatedwiththatnetworkaddressspace.If
youonlyownoneortwohostaddresseswithinanetworkaddressspace,theprovideryoupurchased
thoseaddressesfromneedstohostyourPTRrecordsastheprovideristheownerof(i.e.authoritative
for)thenetworkaddress.ThingsareabitmoreinterestingifyouhavebeendelegatedaCIDRblockof
addresses.Theinaddr.arpazoneassumesaclassfuladdressingschemewhereaClassAaddressisone
octet(or/8),aClassBis2octets(or/16)andaClassCis3octets(or/24).CIDRallowsfordelegating
addressspaceoutsideoftheseboundariessaya/19ora/28.RFC2317providesabestcurrentpractice
formaintaininginaddr.arpawiththesetypesofnetworkallocations.HereisasummaryregardingPTR
records:DontwaituntiluserscomplainaboutDNSunreachabilitybeproactiveandensurethereis
anassociatedPTRrecordforeveryArecord.IfyourproviderhostsyourArecords,theyshouldalso
hostyourPTRrecords.IfyouonlyhaveoneortwoassignedIPaddresses,yourprovidershouldhost
yourPTRrecordsastheyareauthoritativeforthenetworkthosehostsbelongto.Ifyouownanentire
networkaddress(e.g.aClassC
addressendingin0),youareresponsibleforhostingyourPTRrecords.Ifyouareconfiguringan
internalDNSserverwithintheprivateaddressranges(e.g.10.0.0.0or
192.168.0.0),youareresponsibleforyourowninternalPTRrecords.Remember:thekeytoPTR
hostingisknowingwhoisauthoritativeforthenetworkaddressforyourdomain.Whenindoubt,it
probablyisnotyou.
38.WhataretherequirementsfromDNStosupportAD?
WhenyouinstallActiveDirectoryonamemberserver,thememberserverispromotedtoadomain
controller.ActiveDirectoryusesDNSasthelocationmechanismfordomaincontrollers,enabling
computersonthenetworktoobtainIPaddressesofdomaincontrollers.Duringtheinstallationof
14/25
ActiveDirectory,theservice(SRV)andaddress(A)resourcerecordsaredynamicallyregisteredinDNS,
whicharenecessaryforthesuccessfulfunctionalityofthedomaincontrollerlocator(Locator)
mechanism.
Tofinddomaincontrollersinadomainorforest,aclientqueriesDNSfortheSRVandADNSresource
recordsofthedomaincontroller,whichprovidetheclientwiththenamesandIPaddressesofthe
domaincontrollers.Inthiscontext,theSRVandAresourcerecordsarereferredtoasLocatorDNS
resourcerecords.Whenaddingadomaincontrollertoaforest,youareupdatingaDNSzonehostedona
DNSserverwiththeLocatorDNSresourcerecordsandidentifyingthedomaincontroller.Forthis
reason,theDNSzonemustallowdynamicupdates(RFC2136)andtheDNSserverhostingthatzone
mustsupporttheSRVresourcerecords(RFC2782)toadvertisetheActiveDirectorydirectoryservice.
FormoreinformationaboutRFCs,seeDNSRFCs.
IftheDNSserverhostingtheauthoritativeDNSzoneisnotaserverrunningWindows2000or
WindowsServer2003,contactyourDNSadministratortodetermineiftheDNSserversupportsthe
requiredstandards.Iftheserverdoesnotsupporttherequiredstandards,or
theauthoritativeDNSzonecannotbeconfiguredtoallowdynamicupdates,thenmodificationis
requiredtoyourexistingDNSinfrastructure.
39.HowdoyoumanuallycreateSRVrecordsinDNS?
thisisonwindowsserver
gotorun>dnsmgmt.msc
rightclickonthezoneyouwanttoaddsrvrecordtoandchooseothernewrecordandchooseservice
location(srv)..
40.Name3benefitsofusingADintegratedzones.
1.youcangiveeasynameresolutiontourclients.
2.BycreatingADintegratedzoneyoucanalsotracehackerandspammerbycreatingreversezone.
3.ADintegratedzonedallforincrementalzonetransferswhichontransferchangesandnottheentire
zone.Thisreduceszonetransfertraffic.
4.ADIntegratedzonessuportbothsecureanddmanicupdates.
5.ADintegratedzonesarestoredaspartoftheactivedirectoryandsupportdomainwideorforestwide
replicationthroughapplicationpertitionsinAD.
41.WhatarethebenefitsofusingWindows2003DNSwhenusingADintegratedzones?
Advantages:
DNSsupportsDynamicregistrationofSRVrecordsregisteredbyaActiveDirectoryserveroradomain
controllerduringpromotion.WiththehelpofSRVrecordsclientmachinescanfinddomaincontrollers
inthenetwork.
1.DNSsupportsSecureDynamicupdates.Unauthorizedaccessisdenied.
2.ExchangeserverneedsinternalDNSorADDNStolocateGlobalCatalogservers.
3.ActiveDirectoryIntegratedZone.Ifyouhavemorethan
onedomaincontroller(recommended)youneednotworryabout
zonereplication.ActiveDirectoryreplicationwilltakecareofDNSzonereplicationalso.
15/25
4.IfyournetworkuseDHCPwithActiveDirectorythennootherDHCPwillbeabletoserviceclient
requestscomingfromdifferentnetwork.ItisbecauseDHCPserverisauthorizedinADandwillbethe
onlyservertoparticipateonnetworktoprovideIPAddressinformationtoclientmachines.
5.Moreover,youcanuseNT4DNSwithServicePack4orlater.ItsupportsbothSRVrecordregistration
andDynamicUpdates.
UsingMicrosoftDNSgivesthefollowingbenefits:
Ifyouimplementnetworksthatrequiresecureupdates.
IfyouwanttotakebenefitofActiveDirectoryreplication.
IfyouwanttointegrateDHCPwithDNSforLowlevelclients
toregistertheirHostrecordsinZonedatabase.
42.YouinstalledanewADdomainandthenew(andfirst)DChasnotregistereditsSRVrecordsin
DNS.Nameafewpossiblecauses.
ThemachinecannotbeconfiguredwithDNSclientherown
TheDNSservicecannotberun
43.WhatarethebenefitsandscenariosofusingStubzones?
OneofthenewfeaturesintroducedintheWindowsServer2003basedimplementationofDNSarestub
zones.Itsmainpurposeistoprovidenameresolutionindomains,forwhichalocalDNSserverisnot
authoritative.Thestubzonecontainsonlyafewrecords:
StartofAuthority(SOA)
recordpointingtoaremoteDNSserverthatisconsideredtobethebestsourceofinformationaboutthe
targetDNSdomain,oneormoreNameServer(NS)records(includingtheentryassociatedwiththe
SOArecord),whichareauthoritativefortheDNSdomainrepresentedbythestubzone,
correspondingArecordsforeachoftheNSentries(providingIPaddressesoftheservers).Whileyou
canalsoprovidenameresolutionforaremotedomainbyeithercreatingasecondaryzone(whichwasa
commonapproachin
WindowsServer2000DNSimplementation)ordelegation(whendealingwithacontiguous
namespace),suchapproachforcesperiodiczonetransfers,whicharenotneededwhenstubzonesare
used.NecessitytotraversenetworkinordertoobtainindividualrecordshostedontheremoteName
Serversismitigatedtosomeextentbycachingprocess,whichkeepsthemonthelocalserverforthe
durationoftheirTimetoLive(TTL)parameter.Inaddition,recordsresidinginastubzoneare
periodicallyvalidatedandrefreshedinordertoavoidlamedelegations.
44.WhatarethebenefitsandscenariosofusingConditionalForwarding?
45.WhatarethedifferencesbetweenWindowsClustering,NetworkLoadBalancingandRoundRobin,
andscenariosforeachuse?
Iwillmakeafewassumptionshere:
1)ByWindowsClusteringNetworkLoadBalancingyoumeanWindowsNetwork
LoadBalancingsoftwareincludedinWindowsServersoftwarea.k.aNLB.,and
2)ByRoundRobin,youmeanDNSRoundRobinmeaningtheabsenceofasoftwareorhardwareload
balancingdevice,ortheconceptoftheRoundRobinalgorithmavailableinjustabouteveryload
balancingsolution.
16/25
MicrosoftNLBisdesignedforasmallnumber(46)ofWindowsServersandalowtomoderate
numberofnewconnectionspersecond,toprovidedistributionofwebserverrequeststomultiple
serversinavirtualresourcepool.Somewouldcallthisacluster,buttherearesuttledifferences
betweenaclusteredgroupofdevicesandamorelooselyconfiguredvirtualpool.Fromthestandpointof
scalabilityandperformance,almostallhardwareloadbalancingsolutionsaresuperiortothisandother
lessknownsoftwareloadbalancingsolutions[e.g.BrightTigercirca1998].
DNSRoundRobinisaninherentloadbalancingmethodbuiltintoDNS.WhenyouresolveanIP
addressthathasmorethanoneArecord,DNShandsoutdifferentresolutionstodifferentrequesting
localDNSservers.Althoughthereareseveralfactorseffectingtheexactresultingalgorithm(e.g.DNS
caching,TTL,multipleDNSservers[authoritativeorcached]),IstressthetermroughlywhenIsayit
roughlyresultsinanevendistributionofresolutionstoeachoftheaddressesspecifiedforaparticular
URL.Itdoesnothowever,consideravailability,performance,oranyothermetricandiscompletely
static.ThebasicRRalgorithmisavailableinmanysoftwareandhardwareloadbalancingsolutionsand
simplyhandsthenextrequesttothenextresourceandstartsbackatthefirstresourcewhenithitsthe
lastone.
NLBisbasedonproprietarysoftware,meantforsmallgroupsofWindowsserversonlyonprivate
networks,andisdynamicinnature(takesintoaccountavailabilityofaserver,andinsomecases
performance).RoundRobin,DNSorotherwise,ismoregeneric,staticinnature(doesnottakeinto
accountanythingbuttheresourceisamemberoftheresourcepoolandeachmemberisequal),and
rangesfromDNStothedefaultstaticloadbalancingmethodoneveryhardwaredeviceinthemarket.
46.HowdoIworkwiththeHostnamecacheonaclientcomputer?
47.HowdoIcleartheDNScacheontheDNSserver?
Tocleartheservernamescache
*UsingtheWindowsinterface
*Usingacommandline
UsingtheWindowsinterface
1.OpenDNS.
2.Intheconsoletree,clicktheapplicableDNSserver.
Where?
*DNS/applicableDNSserver
3.OntheActionmenu,clickClearCache.
Notes
*Toperformthisprocedure,youmustbeamemberoftheAdministratorsgrouponthelocalcomputer,
oryoumusthavebeendelegatedtheappropriateauthority.Ifthecomputerisjoinedtoadomain,
membersoftheDomainAdminsgroupmightbeabletoperformthisprocedure.Asasecuritybest
practice,considerusingRunastoperformthisprocedure.
17/25
*ToopenDNS,clickStart,clickControlPanel,
doubleclickAdministrativeTools,andthendoubleclickDNS.
Usingacommandline
1.OpenCommandPrompt.
2.TypethefollowingcommandandthenpressENTER:
DnscmdServerName/clearcache
48.Whatisthe224.0.1.24addressusedfor?
WINSservergroupaddress.Usedtosupportautodiscoveryanddynamicconfigurationofreplicationfor
WINSservers.Formoreinformation,seeWINSreplicationoverviewWINSservergroupaddress.Used
tosupportautodiscoveryanddynamicconfigurationofreplicationforWINSservers.
49.WhatisWINSandwhendoweuseit?
IntheWindowsServerfamily,theprimarymeansforclientcomputertolocateandcommunicatewith
othercomputersonanInternetProtocol(IP)networkisbyusingDomainName
System(DNS).However,clientsthatuseolderversionsofWindows,suchasWindowsNT4.0,use
networkbasicI/Osystem(NetBIOS)namesfornetworkcommunication.Someapplicationsthatrunon
WindowsServer2003mayalsouseNetBIOSnamesfornetworkcommunication.UsingNetBIOSnames
requiresamethodofresolvingNetBIOSnamestoIP.UsingaWINSserverisessentialforany
WindowsclientcomputertoworkwithotherWindowscomputersovertheInternet.Inaddition,usinga
WINSserverisessentialforanyWindowsclientcomputeratIndianaUniversitythatintendstouse
Microsoftnetworkresources.TouseWINSservices,youmustinsertintoyourTCP/IPnetworking
configurationtheIPaddressoftheWINSserversyouwishtouse.
50.CanyouhaveaMicrosoftbasednetworkwithoutanyWINSserveronit?Whatarethe
considerationsregardingnotusingWINS?
51.DescribethedifferencesbetweenWINSpushandpullreplications.
ToreplicatedatabaseentriesbetweenapairofWINSservers,youmustconfigureeachWINSserverasa
pullpartner,apushpartner,orbothwiththeotherWINSserver.
*ApushpartnerisaWINSserverthatsendsamessagetoitspullpartners,notifyingthemthatithas
newWINSdatabaseentries.WhenaWINSserverspullpartnerrespondstothemessagewitha
replicationrequest,theWINSserversends(pushes)copiesofitsnewWINSdatabaseentries(also
knownasreplicas)totherequestingpullpartner.
*ApullpartnerisaWINSserverthatpullsWINSdatabaseentriesfromitspushpartnersbyrequesting
anynewWINSdatabaseentriesthatthepushpartnershave.ThepullpartnerrequeststhenewWINS
databaseentriesthathaveahigherversionnumberthanthelastentrythepull
partnerreceivedduringthemostrecentreplication.
52.WhatisthedifferencebetweentombstoningaWINSrecordandsimplydeletingit?
SimpledeletionremovestherecordsthatareselectedintheWINSconsoleonlyfromthelocalWINS
serveryouarecurrentlymanaging.IftheWINSrecordsdeletedinthiswayexistinWINSdata
replicatedtootherWINSserversonyournetwork,theseadditionalrecordsarenotfullyremoved.
18/25
Also,recordsthataresimplydeletedononlyoneservercanreappearafterreplicationbetweenthe
WINSserverwheresimpledeletionwasusedandanyofitsreplicationpartners.Tombstoningmarks
theselectedrecordsastombstoned,thatis,markedlocallyasextinctandimmediatelyreleasedfrom
activeusebythelocalWINSserver.Thismethodallowsthetombstonedrecordstoremainpresentin
theserverdatabaseforpurposesofsubsequentreplicationoftheserecordstootherservers.Whenthe
tombstonedrecordsarereplicated,thetombstonestatusisupdatedandappliedbyotherWINSservers
thatstorereplicatedcopiesoftheserecords.EachreplicatingWINSserverthenupdatesandtombstones
53.NametheNetBIOSnamesyoumightexpectfromaWindows2003DCthatisregisteredinWINS.
54.Describetheroleoftheroutingtableonahostandon
arouter.
Duringtheprocessofrouting,decisionsofhostsandroutersareaidedbyadatabaseofroutesknownas
theroutingtable.Theroutingtableisnotexclusivetoarouter.Dependingontheroutableprotocol,
hostsmayalsohavearoutingtablethatmaybeusedtodecidethebestrouterforthepackettobe
forwarded.HostbasedroutingtablesareoptionalfortheInternetProtocol,aswellasobsoleteroutable
protocolssuchasIPX.
55.Whatareroutingprotocols?Whydoweneedthem?Nameafew.
Aroutingprotocolisaprotocolthatspecifieshowrouterscommunicatewitheachother,disseminating
informationthatenablesthemtoselectroutesbetweenanytwonodesonacomputernetwork,the
choiceoftheroutebeingdonebyroutingalgorithms.Eachrouterhasapriorknowledgeonlyof
networksattachedtoitdirectly.Aroutingprotocolsharesthisinformationfirstamongimmediate
neighbors,andthenthroughoutthenetwork.Thisway,routersgainknowledgeofthetopologyofthe
network.Foradiscussionoftheconceptsbehindroutingprotocols,see:Routing.
ThetermroutingprotocolmayreferspecificallytooneoperatingatlayerthreeoftheOSImodel,which
similarlydisseminatestopologyinformationbetweenrouters.
ManyroutingprotocolsusedinthepublicInternetaredefinedindocumentscalledRFCs.[1][2][3][4]
Althoughtherearemanytypesofroutingprotocols,twomajorclassesareinwidespreaduseinthe
Internet:
linkstateroutingprotocols,suchasOSPFandISIS;and
pathvectorordistancevectorprotocols,suchasBGP,RIP
andEIGRP.
56.Whatarerouterinterfaces?Whattypescantheybe?
Routerscanhavemanydifferenttypesofconnectors;fromEthernet,FastEthernet,andTokenRingto
SerialandISDNports.Someoftheavailableconfigurableitemsarelogicaladdresses(IP,IPX),media
types,bandwidth,andadministrativecommands.Interfacesareconfiguredininterfacemodewhich
yougettofromglobalconfigurationmodeafterloggingin.
ThemediatypeisEthernet,FastEthernet,GigabitEthernet,
Serial,Tokenring,orothermediatypes.Youmustkeepin
mindthata10MbEthernetinterfaceistheonlykindofEthernetinterfacecalledEthernet.A100Mb
EthernetinterfaceiscalledaFastEthernetinterfaceanda1000MbEthernetinterfaceiscalleda
GigabitEthernetinterface.
57.InWindows2003routing,whataretheinterfacefilters?
19/25
58.WhatisNAT?
WindowsServer2003providesnetworkaddresstranslation(NAT)functionalityasapartoftheRouting
andRemoteAccessservice.NATenablescomputersonsmalltomediumsizedorganizationswith
privatenetworkstoaccessresourcesontheInternetorotherpublicnetwork.The
computersonaprivatenetworkareconfiguredwithreusableprivateInternetProtocolversion4(IPv4)
addresses;thecomputersonapublicnetworkareconfiguredwithgloballyuniqueIPv4(or,rarelyat
present,InternetProtocolversion6[IPv6])addresses.Atypicaldeploymentisasmallofficeorhome
office(SOHO),oramediumsizedbusinesss,thatusesRoutingandRemoteAccessNATtechnologyto
enablecomputersontheinternalcorporatenetworktoconnecttoresourcesontheInternetwithout
havingtodeployaproxyserver.
59.WhatistherealdifferencebetweenNATandPAT?
TakeNAT(NetworkAddressTranslation)andPAT(PortAddressTranslation).NATallowsyouto
translateormaponeIPaddressontoanothersingleipaddress.PATontheotherhandiswhatismost
commonlyreferredtoasNAT.InaPATsystemyouhaveasingleorgroupofpublicIPaddressesthat
aretranslatedtomultipleinternalipaddressesbymappingtheTCP/UDPportstodifferentports.This
meansthatbyusingsomemagiconarouterorserveryoucangetaroundproblemsthatyoumight
havewithtwowebbrowserssendingarequestoutthesameport.
60.HowdoyouconfigureNATonWindows2003?
http://www.windowsnetworking.com/articles_tutorials/NAT_Windows_2003_Setup_Configuration.html
ConfigureRoutingandRemoteAccess
ToactivateRoutingandRemoteAccess,followthesesteps:
1.ClickStart,pointtoAllPrograms,pointto
AdministrativeTools,andthenclickRoutingandRemoteAccess.
2.Rightclickyourserver,andthenclickConfigureand
EnableRoutingandRemoteAccess.
3.IntheRoutingandRemoteAccessSetupWizard,click
Next,clickNetworkaddresstranslation(NAT),andthen
clickNext.
4.ClickUsethispublicinterfacetoconnecttothe
Internet,andthenclickthenetworkadapterthatis
connectedtotheInternet.Atthisstageyouhavetheoption
toreducetheriskofunauthorizedaccesstoyournetwork.
Todoso,clicktoselecttheEnablesecurityonthe
selectedinterfacebysettingupBasicFirewallcheckbox.
5.ExaminetheselectedoptionsintheSummarybox,and
thenclickFinish.
ConfiguredynamicIPaddressassignmentforprivatenetwork
clients
YoucanconfigureyourNetworkAddressTranslationcomputer
toactasaDynamicHostConfigurationProtocol(DHCP)
serverforcomputersonyourinternalnetwork.Todoso,
followthesesteps:
2.Expandyourservernode,andthenexpandIPRouting.
3.RightclickNAT/BasicFirewall,andthenclickProperties.
20/25
4.IntheNAT/BasicFirewallPropertiesdialogbox,clicktheAddressAssignmenttab.
5.ClicktoselecttheAutomaticallyassignIPaddresses
byusingtheDHCPallocatorcheckbox.Noticethatdefault
privatenetwork192.168.0.0withthesubnetmaskof
255.255.0.0isautomaticallyaddedintheIPaddressandtheMaskboxes.Youcankeepthedefault
values,oryoucan
modifythesevaluestosuityournetwork.
6.IfyourinternalnetworkrequiresstaticIPassignmentforsomecomputerssuchasfordomain
controllersorforDNSserversexcludethoseIPaddressesfromtheDHCPpool.Todothis,follow
thesesteps:
1.ClickExclude.
2.IntheExcludeReservedAddressesdialogbox,
clickAdd,typetheIPaddress,andthenclickOK.
3.Repeatstepbforalladdressesthatyouwanttoexclude.
4.ClickOK.
Configurenameresolution
Toconfigurenameresolution,followthesesteps:
2.RightclickNAT/BasicFirewall,andthenclickProperties.
3.IntheNAT/BasicFirewallPropertiesdialogbox,clicktheNameResolutiontab.
4.ClicktoselecttheClientsusingDomainNameSystem
(DNS)checkbox.Ifyouuseademanddialinterfaceto
connecttoanexternalDNSserver,clicktoselectthe
Connecttothepublicnetworkwhenanameneedstobe
resolvedcheckbox,andthenclicktheappropriatedialup
interfaceinthelist.
61.HowdoyouallowinboundtrafficforspecifichostsonWindows2003NAT?
YoucanusetheWindowsServer2003implementationofIPSectocompensateforthelimited
protectionsprovidedbyapplicationsfornetworktraffic,orasanetworklayerfoundationofadefense
indepthstrategy.DonotuseIPSecasareplacementforotheruserandapplicationsecurity
controls,becauseitcannotprotectagainstattacksfromwithinestablishedandtrustedcommunication
paths.Yourauthenticationstrategymustbewelldefinedandimplementedforthepotentialsecurity
providedbyIPSectoberealized,becauseauthenticationverifiestheidentityandtrustofthecomputer
attheotherendoftheconnection.
62.WhatisVPN?WhattypesofVPNdoesWindows2000andbeyondworkwithnatively?
VPNgivesextremelysecureconnectionsbetweenprivate
networkslinkedthroughtheInternet.Itallowsremote
computerstoactasthoughtheywereonthesamesecure,
localnetwork.
L2TP(layer2tunnelingprotocol)
vpnserverisalsoknowasL2TPserverinnativemode&in
PPTPinmixedmode
21/25
63.WhatisIAS?Inwhatscenariosdoweuseit?
IASiscalledasInternetAuthenticationService.Itsusedbyforconfiguringcentralisedauthentication
usingRADIUSserver.
64.WhatsthedifferencebetweenMixedmodeandNativemodeinADwhendealingwithRRAS?
WhenyouareinMixedmodecertainoptionsinthedialintaboftheuserproeprtiesaredisabled.And
someoftheRRASpoliciesarealsodisabled.Soifyouwanthighlevelsecuritywithalltheadvanced
featurethenchangetheADtoNativemode.
65.WhatistheRASandIASgroupinAD?
Usedformanagingsecurityandallowingadministrationfortherespectiverolesoftheserver.
66.WhatareConditionsandProfileinRRASPolicies?
Theconditionsandprofilesareusedtosetsomerestrictionsbasedonthemediatype,connection
method,groupmembershipandlotmore.Soifusedmatchesthoseconditionsmentionedintheprofile
thenhecanallowed/
deniedaccesstoRAS/VPNserver.
67.WhattypesorauthenticationcanaWindows2003basedRRASworkwith?
ItsupportsauthenticationmethodslikeMSCHAPv2,MSCHAP,SPAP,EAP,Digestauthentication.(
YoucancheckitbygoingtopropertiesofyourserverinRRAS)
68.HowdoesSSLwork?
Internetcommunicationtypicallyrunsthroughmultipleprogramlayersonaserverbeforegettingtothe
requesteddatasuchasawebpageorcgiscripts.
Theouterlayeristhefirsttobehitbytherequest.ThisisthehighlevelprotocolssuchasHTTP(web
server),IMAP(mailserver),andFTP(filetransfer).
Determiningwhichouterlayerprotocolwillhandletherequestdependsonthetypeofrequestmadeby
theclient.ThishighlevelprotocolthenprocessestherequestthroughtheSecureSocketsLayer.Ifthe
requestisforanonsecureconnectionitpassesthroughtotheTCP/IPlayerandtheserverapplicationor
data.
Iftheclientrequestedasecureconnectionthessllayerinitiatesahandshaketobeginthesecure
communicationprocess.DependingontheSSLsetupontheserver,itmayrequirethatasecure
connectionbemadebeforeallowingcommunicationtopassthroughtotheTCP/IPlayerinwhich
caseanonsecurerequestwillsendbackanerroraskingforthemtoretrysecurely(orsimplydenythe
nonsecure
connection).
69.HowdoesIPSecwork?
IPSecisanInternetEngineeringTaskForce(IETF)standardsuiteofprotocolsthatprovidesdata
authentication,integrity,andconfidentialityasdataistransferredbetweencommunicationpoints
acrossIPnetworks.IPSecprovidesdatasecurityattheIPpacketlevel.Apacketisadatabundlethatis
organizedfortransmissionacrossanetwork,anditincludesaheaderandpayload(thedatainthe
22/25
packet).IPSecemergedasaviablenetworksecuritystandardbecauseenterpriseswantedtoensurethat
datacouldbesecurelytransmittedovertheInternet.IPSecprotectsagainstpossiblesecurityexposures
byprotectingdatawhileintransit.
70.HowdoIdeployIPSecforalargenumberofcomputers?
JustusethisprogramServerandDomainIsolationUsingIPsecandGroupPolicy
71.WhattypesofauthenticationcanIPSecuse?
DeployingL2TP/IPSecbasedRemoteAccess
DeployingL2TPbasedremoteaccessVPNconnectionsusingWindowsServer2003consistsofthe
following:
*Deploycertificateinfrastructure
*DeployInternetinfrastructure
*DeployAAAinfrastructure
*DeployVPNservers
*Deployintranetinfrastructure
*DeployVPNclients
*Implantarcertificadoinfraestrutura
*ImplantarinfraestruturaInternet
*ImplantarinfraestruturaAAA
*ImplementarVPNservidores
*Implantarintranetinfraestrutura
*ImplementarclientesVPN
72.WhatisPFS(PerfectForwardSecrecy)inIPSec?
Inanauthenticatedkeyagreementprotocolthatusespublickeycryptography,perfectforwardsecrecy
(orPFS)isthepropertythatensuresthatasessionkeyderivedfromasetoflongtermpublicand
privatekeyswillnotbecompromisedifoneofthe(longterm)privatekeysiscompromisedinthe
future.Forwardsecrecyhasbeenusedasasynonymforperfectforwardsecrecy[1],sincetheterm
perfecthasbeencontroversialinthiscontext.However,atleastonereference[2]distinguishesperfect
forwardsecrecyfromforwardsecrecywiththeadditionalpropertythatanagreedkeywillnotbe
compromisedevenifagreedkeysderivedfromthesamelongtermkeyingmaterialinasubsequentrun
arecompromised.
73.HowdoImonitorIPSec?
TotesttheIPSecpolicies,useIPSecMonitor.IPSecMonitor(Ipsecmon.exe)providesinformationabout
whichIPSecpolicyisactiveandwhetherasecurechannelbetweencomputersisestablished.
23/25
74.LookingatIPSecencryptedtrafficwithasniffer.WhatpackettypesdoIsee?
Youcanseethepackagestopass,butyoucannotseeits
contents
IPSecPacketTypes
IPSecpackettypesincludetheauthenticationheader(AH)fordataintegrityandtheencapsulating
securitypayload(ESP)fordataconfidentialityandintegrity.Theauthenticationheader(AH)protocol
createsanenvelopethatprovidesintegrity,dataoriginidentificationandprotectionagainstreplay
attacks.Itauthenticateseverypacketasadefenseagainstsessionstealingattacks.AlthoughtheIP
headeritselfisoutsidetheAHheader,AHalsoprovideslimitedverificationofitbynotallowing
changestotheIPheaderafterpacketcreation(notethatthisusuallyprecludestheuseofAHinNAT
environments,whichmodifypacketheadersatthepointofNAT).AHpacketsuseIPprotocol51.The
encapsulatingsecuritypayload(ESP)protocolprovidesthefeaturesofAH(exceptforIPheader
authentication),plusencryption.ItcanalsobeusedinanullencryptionmodethatprovidestheAH
protectionagainstreplayattacksandothersuchattacks,withoutencryptionorIPheader
authentication.ThiscanallowforachievingsomeofthebenefitsofIPSecinaNATenvironmentthat
wouldnotordinarilyworkwellwithIPSec.ESPpacketsuseIPprotocol50.
75.WhatcanyoudowithNETSH?
Netshisacommandlinescriptingutilitythatallowsyouto,eitherlocallyorremotely,display,modify
orscriptthenetworkconfigurationofacomputerthatiscurrentlyrunning.
76.HowdoIlookattheopenportsonmymachine?
Windows:Openacommandprompt(Startbutton>Run>type
cmd),andtype:
netstata
Linux:OpenanSSHsessionandtype:
netstatan
About these ads
Comments(8)
8Comments
1. SyyedSahaballahTalaAppkiIlimmedindugnitaraqqiatafarmayayehnoteshumlogokeliyebahut
madadgarhaiAllahaapapnepiyaNabikesadkeaapkejayeztammanpurikareauraapkoharbala
aurtufansesalamtrakhe
CommentbyMohammedshamimJuly27,2011@4:11PM
Reply
JazakAllah!
CommentbyPinochio/zaibJuly28,2011@7:43AM
Reply
2. SyyedSahaballahTalaAppkiilimmedindugnitaraqqiatafarmayayehnoteshumlogokeliyebahut
madadgarhaiAllahaapapnepiyareNabikesadkeaapkejayeztammanpurikareauraapkoharbala
aurtufansesalamtrakhe
24/25
CommentbyMohammedshamimJuly27,2011@4:13PM
Reply
3. Assalam,
Awesomework.!!Veryusefulinformation
IamunabletofindalinkforTechnicalInterviewQuestions(Part3/3)couldyoupleasehelpmewith
thatlink!
Thanksalotforsahringveryusefulinformation!
Regards,
Mohasin
CommentbyMohasinMarch13,2012@10:50PM
Reply
4. metounabletofind3/3link
CommentbymohankumarvMay23,2012@3:10PM
Reply
5. []TechnicalInterviewQuestions(Part1/3)[Networking]Edited&MaintainedbySYEDJAHANZAIB
/aFiledunder:GeneralITRelatedSyedJahanzaib/Pinochio~:)@6:33AM[]
PingbackbyGeneralNetworkEngineerInterviewQuestionsGeneralKnowledgeQuestions
Yogesh(Yogi)June6,2012@1:32AM
Reply
6. Salam;CanIhavesomeGroupPolicyQuestionslikeActiveDirectory.Shukran.ShoaibLat
CommentbyShoaibLatApril12,2014@6:35AM
Reply
7. ThanksforurbriefanswerSendtelecominterviewqandalinkinmymailid
CommentbymageshJune21,2014@12:29PM
Reply
RSS(ReallySimpleSyndication)feedforcommentsonthispost.TrackBackURI(UniformResource
Identifier)
TheSilveristheNewBlackTheme.BlogatWordPress.com.
Follow
FollowSyedJahanzaibPersonnelBlogtoShareKnowledge!
BuildawebsitewithWordPress.com
25/25

Technical Interview Questions (Part 1 - 3) (Networking) Edited & Maintained by SYED JAHANZAIB - Aacable@Hotmail

Enviado por

Dados do documento

Título original

Direitos autorais

Formatos disponíveis

Compartilhar este documento

Compartilhar ou incorporar documento

Opções de compartilhamento

Você considera este documento útil?

Este conteúdo é inapropriado?

Direitos autorais:

Formatos disponíveis

Technical Interview Questions (Part 1 - 3) (Networking) Edited & Maintained by SYED JAHANZAIB - Aacable@Hotmail

Enviado por

Direitos autorais:

Formatos disponíveis

6/8/2015 TechnicalInterviewQuestions(Part1/3)[Networking]Edited&MaintainedbySYEDJAHANZAIB/aacable@hotmail.

Você também pode gostar