70-216 - Tue 70-216 Question of the Day

Author

Tue 70-216 Question of the Day

wbafrank

2002-02-18, 6:11 pm

And today's poser is ....

Q25. You company has a primary DNS server, DNS1.consultus.com, that is heavily used. CPU utilization is consistently high. There are a lot of records stored on DNS1.

You suspect that some DNS queries are resulting in answers that exceed the limit for a single UDP packets and want to find out if this is true. What should you do?

A. Start System Monitor. On DNS1, monitor DNS:UDPMessageMemory counter

B. Start System Monitor. On DNS1, monitor counters DNS:TCPResponsesSent and DNS:TCPResponsesSent/Sec

C. Use Network Monitor to analyze network traffic. Use nslookup on a separate computer to query for NS records on DNS1. Compare the number of UDP packets returned to DNS in response to your queries with the number you issued.

D. Use Network Monitor to analyze network traffic. From a client machine, ping host records that are stored on DNS1. Compare the number of UDP packets returned from DNS1 in response to your queries with the number of queries issued.

Good Luck .... see you tomorrow for the answer!!

unreal

2002-02-18, 6:58 pm

My pick is :

D. Use Network Monitor to analyze network traffic. From a client machine, ping host records that are stored on DNS1. Compare the number of UDP packets returned from DNS1 in response to your queries with the number of queries issued.

Zaraspook

2002-02-18, 11:45 pm

The answer is C.

Using the Ping utility will only send ICMP packets and cannot be utilized to analyze UDP traffic. The NSLOOKUP utility would send UDP queries, which could then be analyzed against UDP responses in Network Monitor. Therefore, use the NSLOOKUP utility on a seperate computer to send UDP NS record queries and the Network Monitor would capture these UDP packets for analysis.

jeff_j_black

2002-02-19, 5:49 am

I like 'C' as well because you can specify which server to query.

trogers5

2002-02-19, 6:29 am

I think the answer is "C" as well.

wbafrank

2002-02-19, 6:21 pm

quote:
Originally posted by wbafrank
And today's poser is ....

Q25. You company has a primary DNS server, DNS1.consultus.com, that is heavily used. CPU utilization is consistently high. There are a lot of records stored on DNS1.

You suspect that some DNS queries are resulting in answers that exceed the limit for a single UDP packets and want to find out if this is true. What should you do?

A. Start System Monitor. On DNS1, monitor DNS:UDPMessageMemory counter
B. Start System Monitor. On DNS1, monitor counters DNS:TCPResponsesSent and DNS:TCPResponsesSent/Sec
C. Use Network Monitor to analyze network traffic. Use nslookup on a separate computer to query for NS records on DNS1. Compare the number of UDP packets returned to DNS in response to your queries with the number you issued.
D. Use Network Monitor to analyze network traffic. From a client machine, ping host records that are stored on DNS1. Compare the number of UDP packets returned from DNS1 in response to your queries with the number of queries issued.

Good Luck .... see you tomorrow for the answer!!

And the answer is ....

Correct Answers: C

The System Monitor is a graphical application that lets you set, graph, log and report alerts. It is used to check the state of a particular computer and to monitor counters that may help the administrator pinpoint problem areas quickly.

Monitoring any TCP counters will not help diagnose possible UDP problem. Monitoring the UDPMessageMemory counter shows the total UDP message memory used by the DNS server. It does not tell you if the system is dropping UDP paclets because they are too large.

Network Monitor is one of the most useful tools for performance monitoring. It allows you to capture packets and examine them from the inside out. It can be installed on one computer on your network. Any computers whose traffic you are interested in monitoring would need to have the Network Monitor driver installed.

Starting Network Monitor and using nslookup would enable you to compare the number of UDP packet responses with the number of UDP queries.

Using the ping tool only sends Internet Control Message Protocol (ICMP) packets. Because the ping tool does not send any UDP packets, it cannot be used for monitoring UDP traffic.

Sponsored Links