Which command is used to certify peer name resolution in Active Directory?

Which command is used to certify peer name resolution in Active Directory?

• A. NSLOOKUP
• B. PING
• C. TRACEROUTE
• D. IPCONFIG

Answer: (A)

DNS name resolution is fundamental in Active Directory because clients and services locate domain controllers and other AD components by specific DNS records. To certify that peers can be resolved by name, you test DNS lookups directly, and NSLOOKUP is the right tool for that. It lets you query the DNS server for A records (host to IP), PTR records, and especially the SRV records that AD relies on, such as those listing domain controllers: _ldap._tcp.dc._msdcs.<domain>. Running NSLOOKUP to fetch these SRV records confirms that domain controllers are properly registered and discoverable by name. You can also verify an individual host’s A record to ensure its name maps to the correct IP. Other commands don’t test this DNS data directly. PING checks whether a host is reachable after name resolution but doesn’t verify the DNS entries themselves. TRACEROUTE reveals the network path to a host, not its DNS records. IPCONFIG shows your own machine’s network configuration, including DNS server settings, but it doesn’t validate that the DNS records for AD peers exist or are correct. So NSLOOKUP is the best choice for certifying peer name resolution in Active Directory.

DNS name resolution is fundamental in Active Directory because clients and services locate domain controllers and other AD components by specific DNS records. To certify that peers can be resolved by name, you test DNS lookups directly, and NSLOOKUP is the right tool for that. It lets you query the DNS server for A records (host to IP), PTR records, and especially the SRV records that AD relies on, such as those listing domain controllers: _ldap._tcp.dc._msdcs.. Running NSLOOKUP to fetch these SRV records confirms that domain controllers are properly registered and discoverable by name. You can also verify an individual host’s A record to ensure its name maps to the correct IP.

Other commands don’t test this DNS data directly. PING checks whether a host is reachable after name resolution but doesn’t verify the DNS entries themselves. TRACEROUTE reveals the network path to a host, not its DNS records. IPCONFIG shows your own machine’s network configuration, including DNS server settings, but it doesn’t validate that the DNS records for AD peers exist or are correct.

So NSLOOKUP is the best choice for certifying peer name resolution in Active Directory.