396.2 Active Directory Name Resolution (weight: 2) LPIC-3-MIXED-ENVIRONMENTS Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A Samba AD DC was recently promoted in a lab. Clients can authenticate using the DC's IP address, but when they try to join the domain using the FQDN 'corp.example.com', the join fails with 'DNS lookup failed'. The DC's hostname resolves correctly via the local /etc/hosts file on the DC itself. Which configuration step is most likely required to resolve the issue?

   • ASet the client's DNS search suffix to 'corp.example.com' without changing the DNS server address.
   • BDisable the firewall on the clients to allow DNS queries to reach the DC.
   • CConfigure the clients to use the Samba DC as their primary DNS server and ensure the DC's DNS zone contains the required SRV and A records.
   • DAdd the domain's SRV records to the /etc/hosts file on each client workstation.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A Samba AD environment has two domain controllers: DC1 (192.0.2.10) and DC2 (192.0.2.20). During a maintenance window, DC1 is taken offline. After the maintenance, clients report that authentication is slow and sometimes fails. Inspection shows the SRV record for _ldap._tcp.corp.example.com still lists DC1 with a higher priority (lower value) than DC2. What is the most likely cause and the appropriate fix?

   • AThe SRV record for DC1 was not updated after it returned, so clients still try it first; verify DC1's registration and let dynamic DNS update the record.
   • BThe _sites zone is missing a record for the default site, so clients cannot find any DC; recreate the site structure.
   • CDC2's SRV record has a lower priority value than DC1, so clients always prefer DC2; adjust the priority values to make DC1 preferred.
   • DThe clients have a cached DNS entry for DC1 that will expire in 24 hours; no action is needed.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A Samba AD administrator is troubleshooting a client that cannot resolve the domain 'corp.example.com' to any DC. The client can ping the DC's IP address. Which command or query would directly verify the presence of the LDAP SRV record for the domain?

   • Ahost -t SRV _ldap._tcp.corp.example.com
   • Bnslookup -type=A corp.example.com
   • Cping -c 3 corp.example.com
   • Ddig corp.example.com ANY
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A Samba AD administrator is troubleshooting a client that cannot find a DC in the 'BranchOffice' site. The client is in the 'BranchOffice' site, but it always contacts a DC in the 'MainOffice' site. The DNS zone for the domain is correctly configured. Which DNS record or zone is most likely missing or misconfigured?

   • AThe SRV record under _sites.BranchOffice._tcp.corp.example.com for the LDAP service.
   • BThe _msdcs zone's CNAME record pointing to the domain's root.
   • CThe A record for the client's hostname in the forward lookup zone.
   • DThe _udp zone for the domain, which is required for all client queries.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A Samba AD administrator is examining the DNS zone for the domain 'corp.example.com'. They notice the following SRV record: '_ldap._tcp.corp.example.com. 600 IN SRV 0 100 389 dc1.corp.example.com.' What does the '100' in this record indicate?

   • AThe time-to-live (TTL) of the record in seconds.
   • BThe priority of the record, where lower values are preferred.
   • CThe port number on which the LDAP service is listening.
   • DThe weight of the record, used for load balancing among records with the same priority.
   Reveal Solution Discussion Select an answer first