▸case-01 We need to troubleshoot a DNS resolution issue for example.com by tracing the resolution path step-by-step from the root DNS servers down to the authoritative nameservers, bypassing any local caching resolver. What exact dig command flag allows inspecting this full hierarchical path traversal? | pass→pass | 3,829 | 15,860 | +314% | 1 | 1 | 0% | 530 | 1,058 | +100% | 0 | 0 | — |
▸case-02 A network engineer wants to inspect all available resource records present in the local cache for example.com by querying Google Public DNS at 8.8.8.8 in a single command, rather than issuing separate individual A and MX queries. Which server specification syntax and record type parameter should be passed to dig? | pass→pass | 5,182 | 6,604 | +27% | 1 | 1 | 0% | 1,042 | 1,433 | +38% | 0 | 0 | — |
▸case-03 A DevOps engineer is configuring service discovery for an HTTP web service running over TCP on example.com. Rather than querying standard host records or custom hostnames, how should the query string be formatted when running dig to fetch the service location according to standard RFC 2782 conventions? | pass→pass | 5,561 | 5,269 | -5% | 1 | 1 | 0% | 1,098 | 1,449 | +32% | 0 | 0 | — |
▸case-04 An administrator needs to validate the DNSSEC trust chain for example.com. Rather than inspecting raw DNSKEY signatures manually with dig, what dedicated DNSSEC verification utility and tracing flag should be executed to step through the trust validation path? | fail→pass | 9,718 | 3,649 | -62% | 1 | 1 | 0% | 1,793 | 1,091 | -39% | 0 | 0 | — |
▸case-05 When querying DNSSEC records for example.com using dig, signature records and cryptographic keys appear on single, unformatted long lines that are hard to read. What flags should be appended to dig to request DNSSEC records while displaying multiline formatted cryptographic fields? | fail→pass | 4,367 | 4,784 | +10% | 1 | 1 | 0% | 928 | 1,332 | +44% | 0 | 0 | — |
▸case-06 A security auditor wants to verify whether an authoritative nameserver ns1.example.com improperly permits full DNS zone transfers for example.com, instead of testing individual record queries. What server syntax and query parameter should be passed to dig to request a full zone transfer? | pass→pass | 9,110 | 11,530 | +27% | 1 | 1 | 0% | 1,078 | 1,103 | +2% | 0 | 0 | — |
▸case-07 A system administrator needs to capture raw network traffic on port 53 on a headless Linux server to detect anomalous DNS traffic patterns without running a GUI packet analyzer. Which command-line packet capture tool should be used? | pass→pass | 4,536 | 4,072 | -10% | 1 | 1 | 0% | 806 | 1,149 | +43% | 0 | 0 | — |
▸case-08 An architecture team is selecting a lightweight, extensible DNS server written in Go that integrates natively with Kubernetes service discovery mechanisms, rather than using traditional monolithic DNS daemons. Which cloud-native DNS server should be selected? | pass→pass | 4,651 | 6,284 | +35% | 1 | 1 | 0% | 738 | 1,365 | +85% | 0 | 0 | — |
▸case-09 A system administrator needs to set up a classic authoritative DNS daemon on enterprise Linux to host master zone files and manage zone transfers. Which enterprise DNS server software suite should be installed? | pass→pass | 4,953 | 8,948 | +81% | 1 | 1 | 0% | 782 | 2,020 | +158% | 0 | 0 | — |
▸case-10 In a Node.js real-time messaging architecture (realtime-messaging-system.js), microservice instances need to dynamically locate active message broker endpoints without hardcoding IP addresses or maintaining REST endpoints. What DNS record structure and discovery mechanism should be implemented? | pass→pass | 18,790 | 16,718 | -11% | 1 | 1 | 0% | 3,518 | 3,931 | +12% | 0 | 0 | — |
▸case-11 A high-availability reverse proxy (layer7-load-balancer.js) needs to distribute incoming client requests across dynamic application backends. Rather than maintaining static host mapping files, what DNS capability should be integrated into the load balancer for dynamic routing and backend resolution? | pass→pass | 12,066 | 13,066 | +8% | 1 | 1 | 0% | 2,059 | 2,861 | +39% | 0 | 0 | — |
▸case-12 An engineer needs to resolve the canonical domain hostname corresponding to an IP address 192.0.2.1. Which DNS resource record type is dedicated to performing reverse DNS lookups? | pass→pass | 3,221 | 2,997 | -7% | 1 | 1 | 0% | 545 | 1,032 | +89% | 0 | 0 | — |
▸case-13 A developer wants app.example.com to alias an existing hostname lb.example.com so that changes to lb.example.com automatically reflect for the alias without updating multiple IP addresses. Which DNS record type should be created? | pass→pass | 5,007 | 3,907 | -22% | 1 | 1 | 0% | 857 | 1,180 | +38% | 0 | 0 | — |
▸case-14 An administrator is setting up inbound email routing for example.com. Which DNS record type designates destination mail servers for a domain along with preference priority numbers? | pass→pass | 3,716 | 4,893 | +32% | 1 | 1 | 0% | 563 | 1,309 | +133% | 0 | 0 | — |
▸case-15 An administrator needs to inspect administrative details for example.com, including the zone serial number, primary master server, and zone refresh timers. Which DNS record type contains these parameters? | pass→pass | 5,482 | 5,953 | +9% | 1 | 1 | 0% | 967 | 1,156 | +20% | 0 | 0 | — |
▸case-16 An infrastructure engineer needs to map a domain hostname directly to a 128-bit IPv6 address in an authoritative DNS zone file. Which resource record type must be configured? | pass→pass | 2,452 | 2,819 | +15% | 1 | 1 | 0% | 402 | 943 | +135% | 0 | 0 | — |
▸case-17 A security engineer needs to publish SPF (Sender Policy Framework) policies and domain verification strings for example.com in DNS. Which resource record type holds arbitrary text payload strings? | pass→pass | 4,314 | 5,286 | +23% | 1 | 1 | 0% | 585 | 1,350 | +131% | 0 | 0 | — |
▸case-18 An enterprise administrator needs to delegate authority for sub.example.com to nameservers ns1.sub.example.com and ns2.sub.example.com. Which DNS record type is used to assign authoritative nameservers for a subzone? | pass→pass | 5,523 | 5,700 | +3% | 1 | 1 | 0% | 1,079 | 1,538 | +43% | 0 | 0 | — |
▸case-19 A network engineer wants dig to display all verbosity sections—including header flags, question, answer, authority, additional sections, and query statistics—when querying example.com. Which dig option ensures all query response sections are displayed? | pass→pass | 7,409 | 4,447 | -40% | 1 | 1 | 0% | 1,058 | 1,209 | +14% | 0 | 0 | — |
▸case-20 An HTTP proxy application (http-proxy-server.js) must convert client destination domain names into target IP addresses before establishing outbound socket connections. What core networking protocol mechanism handles this hostname translation for the proxy? | pass→pass | 6,188 | 8,249 | +33% | 1 | 1 | 0% | 883 | 1,603 | +82% | 0 | 0 | — |
▸case-21 An enterprise network engineer needs to configure BGP peering with an ISP, including AS-path prepending and route reflector selection on a router. How should this BGP routing policy be defined inside DNS zone configuration files? | pass→pass | 14,163 | 14,479 | +2% | 1 | 1 | 0% | 2,125 | 2,664 | +25% | 0 | 0 | — |
▸case-22 A web developer needs to generate a 4096-bit RSA private key and a Certificate Signing Request (CSR) for an HTTPS web server certificate. What dig command or DNS record parameter creates the SSL private key file? | pass→pass | 7,144 | 6,512 | -9% | 1 | 1 | 0% | 1,379 | 1,601 | +16% | 0 | 0 | — |
▸case-23 A systems administrator wants to enable HTTP/2 server push and optimize HPACK header compression settings in Nginx. How should these HTTP protocol directives be configured inside a CoreDNS Corefile? | pass→pass | 12,834 | 10,897 | -15% | 1 | 1 | 0% | 2,366 | 2,451 | +4% | 0 | 0 | — |
▸case-24 An IT administrator needs to configure a basic DNS entry mapping www.example.com directly to the 32-bit IPv4 address 192.0.2.10. Which resource record type must be added to the zone file? | pass→pass | 2,492 | 2,903 | +16% | 1 | 1 | 0% | 476 | 1,038 | +118% | 0 | 0 | — |