Name : Anas Al-Ward
Group: 1
ID: 23160059
1- What is WMI Filter
WMI (Windows Management Instrumentation) Filter is a query written in WQL (WMI
Query Language) that is used with Group Policy Objects (GPOs).
Function: It allows a GPO to apply only if certain conditions on the target machine are true.
Examples:
Apply a policy only on Windows 10 devices.
Apply a policy only if the machine has more than 4GB of RAM.
Benefit: Gives precise control over where and when GPOs are applied.
2- DNS Resource Record Types in the Forward
Lookup Zone
The Forward Lookup Zone in DNS resolves names → IP addresses.
Here are the six main record types:
A Record (Address Record)
Maps a hostname to an IPv4 address.
Example: www.example.com → 192.168.1.10
Use: Basic name-to-IP resolution.
MX Record (Mail Exchange)
Defines the mail server for a domain.
Example: example.com → mail.example.com
Use: Directs email traffic.
SRV Record (Service Record)
Specifies services (e.g., LDAP, Kerberos) and the servers hosting them.
Example: Used by Active Directory to locate Domain Controllers.
Use: Service discovery.
NS Record (Name Server Record)
Lists the authoritative name servers for a domain.
Example: example.com → ns1.example.com
Use: Defines who manages the domain.
SOA Record (Start of Authority)
Created automatically with a zone.
Contains zone information such as:
Primary DNS server
Administrator email
Serial number (zone version)
Use: Authoritative information about the zone.
CNAME Record (Canonical Name / Alias Record)
Maps one hostname to another (alias).
Example: ftp.example.com → server1.example.com
Use: Multiple names pointing to the same server.
3- DNS Troubleshooting Tools
1) Nslookup
Function: Queries DNS servers to test name resolution.
When to use: Troubleshooting DNS name/IP resolution problems.
Examples: nslookup example.com # Name → IP nslookup 8.8.8.8 # IP → Name
2) Dnscmd
Function: Command-line tool for managing DNS servers.
When to use: To create, delete, or modify zones and records without GUI.
Examples: dnscmd /enumzones dnscmd /zoneadd example.com /primary dnscmd
/recordadd example.com www A 192.168.1.10
3) Dnslint
Function: Verifies DNS health and consistency.
When to use: To troubleshoot DNS resolution or mail-related DNS issues.
Examples: dnslint /d example.com # Checks a domain dnslint /ad /s 192.168.1.1
# Checks AD-related DNS
4) Ipconfig
Function: General network tool; can refresh DNS cache.
When to use: If DNS cache is stale or name resolution is failing.
Examples: ipconfig /flushdns # Clear DNS cache ipconfig /displaydns # Show
cached DNS entries ipconfig /registerdns # Register computer in DNS
5) DNS Server Monitoring
Function: Monitors DNS server activity and errors.
When to use: To track performance, errors, or unusual DNS activity.
Examples:
Event Viewer: Check DNS service errors/warnings.
Performance Monitor (Perfmon): Monitor DNS query counts and server load.