Instiq

2Domain name servers

Practice questions →Glossary →
  • 2.1Configuring and Managing BIND

    Learn the layout of BIND's (named) core config file named.conf, and the query/operations tools dig, host, nslookup, rndc, and named-checkconf. Also cover where lightweight alternatives dnsmasq, Unbound, NSD, and PowerDNS fit in.

  • 2.2Managing Zone Data

    Learn the layout of a zone file and the format of common resource records (SOA, NS, A, AAAA, MX, CNAME, PTR). Also cover named-compilezone and named-checkzone for converting and checking zone files.

  • 2.3Securing a DNS Server

    Learn DNS server hardening: a chroot jail, restricting forwarders, DNSSEC signing and validation (dnssec-keygen, dnssec-signzone), TSIG for message integrity, and DANE for binding certificates to DNS.