How does Active Directory Domain Services (ADDS) utilize DNS?

How does Active Directory Domain Services (ADDS) utilize DNS?

• A. It uses DNS to locate domain controllers for various operations
• B. It uses DNS to assign IP addresses
• C. It uses DNS to route emails
• D. It uses DNS to manage user passwords

Answer: (A)

ADDS relies on DNS as the service location mechanism. When a client needs to authenticate or access directory services, it looks up DNS for specific SRV records that tell it which domain controllers can handle LDAP and Kerberos, and, if needed, which DCs host the Global Catalog. The relevant records, such as those for LDAP and Kerberos under the forest’s DNS zone, list the available domain controllers, and the corresponding A/AAAA records resolve those DC names to IP addresses. This DNS-based discovery is what lets clients find a reachable DC for authentication and directory operations, and it also helps with replication and site-aware routing within AD. DNS isn’t used to assign IP addresses (that’s DHCP), route emails (that’s MX/DNS mail routing), or manage user passwords (that’s handled by the directory service itself).

ADDS relies on DNS as the service location mechanism. When a client needs to authenticate or access directory services, it looks up DNS for specific SRV records that tell it which domain controllers can handle LDAP and Kerberos, and, if needed, which DCs host the Global Catalog. The relevant records, such as those for LDAP and Kerberos under the forest’s DNS zone, list the available domain controllers, and the corresponding A/AAAA records resolve those DC names to IP addresses. This DNS-based discovery is what lets clients find a reachable DC for authentication and directory operations, and it also helps with replication and site-aware routing within AD. DNS isn’t used to assign IP addresses (that’s DHCP), route emails (that’s MX/DNS mail routing), or manage user passwords (that’s handled by the directory service itself).