14/10/2015

LabAnswerKey:Module1:ConfiguringandTroubleshootingDomainNameSystem

Lab Answer Key: Module 1: Configuring and Troubleshooting Domain

Name System
Lab:ConfiguringandTroubleshootingDNS
Exercise1:ConfiguringDNSResourceRecords
Task1:Addtherequiredmailexchanger(MX)record

1.

Switch to LONDC1, and then sign in as Adatum\Administrator with the password Pa$$w0rd.

2.

In Server Manager, click Tools, and then click DNS.

3.

In DNS Manager, expand LONDC1, expand Forward Lookup Zones, and then click Adatum.com.

4.

Rightclick Adatum.com, and then click New host A or AAAA.

5.

In the New Host dialog box, in the Name box, type Mail1.

6.

In the IP address box, type 172.16.0.250, and then click Add Host.

7.

In the DNS dialog box, click OK.

8.

In the New Host dialog box, click Done.

9.

Rightclick Adatum.com, and then click New Mail Exchanger MX.

10. In the New Resource Record dialog box, in the Fully qualified domain name FQDN of mail server box,
type Mail1.Adatum.com, and then click OK.

Task2:AddtherequiredMicrosoftLyncServerrecords

1.

To add the required Microsoft Lync Server records, rightclick Adatum.com, and then click New host A or
AAAA.

2.

In the New Host dialog box, in the Name box, type Lyncsvr1.

3.

In the IP address box, type 172.16.0.251, and then click Add Host.

4.

In the DNS dialog box, click OK.

5.

In the New Host dialog box, click Done.

6.

Rightclick Adatum.com, and then click Other New Records.

7.

In the Resource Record Type dialog box, in the Select a resource record type list, scroll down, then click
Service Location SRV, and then click Create Record.

8.

In the New Resource Record dialog box, in the Service box, type _sipinternaltls.

https://skillpipe.com/reader/esES/Book/BookPrintView/827e15ed6a9c4f70a8eb175ccb442d8e?ChapterNumber=16&FontSize=2&FontType=segoe&An

1/6

14/10/2015

9.

LabAnswerKey:Module1:ConfiguringandTroubleshootingDomainNameSystem

In the Protocol box, type _tcp.

10. In Port Number, type 5061.

11. In the Host offering this service box, type Lyncsvr1.adatum.com.
12. Click OK, and then click Done.

Task3:Createthereverselookupzone

1.

In DNS Manager, in the navigation pane, click Reverse Lookup Zones.

2.

Rightclick Reverse Lookup Zones, and then click New Zone.

3.

In the New Zone Wizard, click Next.

4.

On the Zone Type page, click Primary zone, and then click Next.

5.

On the Active Directory Zone Replication Scope page, click Next.

6.

On the Reverse Lookup Zone Name page, click IPv4 Reverse Lookup Zone, and then click Next.

7.

On the second Reverse Lookup Zone Name page, in the Network ID box, type 172.16, and then click Next.

8.

On the Dynamic Update page, click Next.

9.

On the Completing the New Zone Wizard page, click Finish.

Results: After this exercise, you should have configured the required messaging service records and the reverse
lookup zone.

Exercise2:ConfiguringDNSConditionalForwarding
Task1:AddtheconditionalforwardingrecordforContoso.com

1.

In DNS, in the navigation pane, click Conditional Forwarders.

2.

Rightclick Conditional Forwarders, and then click New Conditional Forwarder.

3.

In the New Conditional Forwarder dialog box, in the DNS Domain box, type contoso.com.

4.

Click the <Click here to add an IP Address or DNS Name> box, type 131.107.1.2, and then press Enter.
Validation will fail because the server cannot be contacted.

5.

Select the Store this conditional forwarder in Active Directory, and replicate it as follows check box, and
then click OK.

Results: After this exercise, you should have configured conditional forwarding.
https://skillpipe.com/reader/esES/Book/BookPrintView/827e15ed6a9c4f70a8eb175ccb442d8e?ChapterNumber=16&FontSize=2&FontType=segoe&An

2/6

14/10/2015

LabAnswerKey:Module1:ConfiguringandTroubleshootingDomainNameSystem

Exercise3:InstallingandConfiguringDNSZones
Task1:InstalltheDNSserverroleonLONSVR1

1.

Switch to LONSVR1, and then sign in as Adatum\Administrator with the password Pa$$w0rd.

2.

If necessary, on the taskbar, click Server Manager.

3.

In Server Manager, in the navigation pane, click Dashboard, and then, in the details pane, click Add roles and
features.

4.

In the Add Roles and Features Wizard, click Next.

5.

On the Select installation type page, click Rolebased or featurebased installation, and then click Next.

6.

On the Select destination server page, click Next.

7.

On the Select server roles page, in the Roles list, select the DNS Server check box.

8.

In the Add Roles and Features Wizard dialog box, click Add Features.

9.

On the Select server roles page, click Next.

10. On the Select features page, click Next.

11. On the DNS Server page, click Next.
12. On the Confirm installation selections page, click Install.
13. After the role is installed, click Close.

Task2:CreatetherequiredsecondaryzonesonLONSVR1

1.

To use the Windows PowerShell commandline interface to create the secondary zone, type the following in a
Windows PowerShell Administrator console, and then press Enter:
Add-DnsServerSecondaryZone -Name "Adatum.com" -ZoneFile "Adatum.com.dns" MasterServers 172.16.0.10

Task3:Enableandconfigurezonetransfers

1.

Switch to LONDC1.

2.

On the desktop, click Windows PowerShell on the taskbar.

3.

At the Windows PowerShell Administrator command prompt, type the following cmdlet, and then press Enter:

https://skillpipe.com/reader/esES/Book/BookPrintView/827e15ed6a9c4f70a8eb175ccb442d8e?ChapterNumber=16&FontSize=2&FontType=segoe&An

3/6

14/10/2015

LabAnswerKey:Module1:ConfiguringandTroubleshootingDomainNameSystem

Set-DnsServerPrimaryZone -Name "adatum.com" Notify Notifyservers notifyservers

172.16.0.21 -SecondaryServers 172.16.0.21 SecureSecondaries
TransferToSecureServers

4.

In DNS Manager, in the navigation pane, click Adatum.com, and then, on the toolbar, click Refresh.

5.

Rightclick Adatum.com, and then click Properties.

6.

In the Adatum.com Properties dialog box, click the Zone Transfers tab.

7.

Click Notify, verify that the server 172.16.0.21 appears, and then click Cancel.

Task4:ConfigureTimetoLive(TTL),aging,andscavenging

1.

On LONDC1, in DNS Manager, rightclick Adatum.com, and then click Properties.

2.

In the Adatum.com Properties dialog box, click the Start of Authority SOA tab.

3.

In the Minimum default TTL box, type 2, and then click OK.

4.

Rightclick LONDC1, and then click Set Aging/Scavenging for All Zones.

5.

In the ServerAging/Scavenging Properties dialog box, select the Scavenge stale resource records check box,
and then click OK.

6.

In the Server Aging/Scavenging Confirmation dialog box, select the Apply these settings to the existing
Active Directoryintegrated zones check box, and then click OK.

Task5:Configureclientstousethenewnameserver

1.

Switch to LONCL1, and then sign in as Adatum\Administrator with the password Pa$$w0rd.

2.

On the Start screen, type Control, and then click Control Panel.

3.

In Control Panel, click Network and Internet.

4.

In Network and Internet, click Network and Sharing Center.

5.

In Network and Sharing Center, to the right of the Adatum.com Domain network, click Ethernet.

6.

In the Ethernet Status dialog box, click Properties.

7.

Click Internet Protocol Version 4 TCP/IPv4, and then click Properties.

8.

In the Internet Protocol Version 4 TCP/IPv4 Properties dialog box, in the Preferred DNS server box, type
172.16.0.21, and then click OK.

9.

In the Ethernet Properties dialog box, click Close.

10. In the Ethernet Status dialog box, click Close.

https://skillpipe.com/reader/esES/Book/BookPrintView/827e15ed6a9c4f70a8eb175ccb442d8e?ChapterNumber=16&FontSize=2&FontType=segoe&An

4/6

14/10/2015

LabAnswerKey:Module1:ConfiguringandTroubleshootingDomainNameSystem

Results: After this exercise, you should have installed and configured Domain Name System DNS on LONSVR1.

Exercise4:TroubleshootingDNS
Task1:Testsimpleandrecursivequeries

1.

Switch to LONDC1, and then switch to DNS Manager.

2.

In the navigation pane, rightclick LONDC1, and then click Properties.

3.

Click the Monitoring tab.

4.

On the Monitoring tab, select A simple query against this DNS server, and then click Test Now.

5.

On the Monitoring tab, select A recursive query to other DNS servers, and then click Test Now. Notice that
the Recursive test fails for LONDC1, which is normal given that there are no forwarders configured for this DNS
server to use.

6.

Pause your pointer over the lowerleft corner of the display, and then click the Windows icon.

7.

On the Start screen, type cmd, and then press Enter.

8.

In the Search results pane, click Command Prompt.

9.

At the command prompt, type the following command, and then press Enter:
sc stop dns

10. Switch back to DNS Manager.

11. In DNS Manager, in the LONDC1 Properties dialog box, on the Monitoring tab, click Test Now. Now, both
simple and recursive tests fail because no DNS server is available.
12. Switch to the Command Prompt window.
13. At the command prompt, type the following command, and then press Enter:
sc start dns

14. Switch back to DNS Manager.

15. On the Monitoring tab, click Test Now. The simple test completes successfully.
16. Close the LONDC1 Properties dialog box.

Task2:Verifystartofauthority(SOA)resourcerecordswithWindowsPowerShell

https://skillpipe.com/reader/esES/Book/BookPrintView/827e15ed6a9c4f70a8eb175ccb442d8e?ChapterNumber=16&FontSize=2&FontType=segoe&An

5/6

14/10/2015

LabAnswerKey:Module1:ConfiguringandTroubleshootingDomainNameSystem

1.

On LONDC1, on the taskbar, click Windows PowerShell.

2.

At the Windows PowerShell command prompt, type the following command, and then press Enter:
resolve-dnsname name Adatum.com type SOA

3.

Close the Windows PowerShell console.

Task3:Toprepareforthenextmodule

When you finish the lab, revert the virtual machines to their initial state. To do this, perform the following steps:
1.

On the host computer, start HyperV Manager.

2.

In the Virtual Machines list, rightclick 20411DLONDC1, and then click Revert.

3.

In the Revert Virtual Machine dialog box, click Revert.

4.

Repeat steps 2 and 3 for 20411DLONSVR1 and 20411DLONCL1.

Results: After this exercise, you should have tested and verified DNS.

https://skillpipe.com/reader/esES/Book/BookPrintView/827e15ed6a9c4f70a8eb175ccb442d8e?ChapterNumber=16&FontSize=2&FontType=segoe&An

6/6