Courseiva
mediumMultiple ChoiceObjective-mapped

220-1201 Practice Question: A small office reports that internal users can…

A small office reports that internal users can access the internet but cannot resolve domain names to IP addresses. The DNS server is configured correctly. Which port should be checked on the firewall?

⚠ Common exam trap

The CompTIA A+ exam often tests the misconception that DNS uses only TCP or that port 80/443 are involved in name resolution, leading candidates to overlook the specific UDP port 53 requirement for DNS queries.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Port 53

Port 53 is the standard port for DNS traffic, used for both TCP and UDP. Since internal users can access the internet but cannot resolve domain names, the firewall is likely blocking outbound DNS queries on port 53, preventing the client from reaching the DNS server even though the server itself is configured correctly.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Port 80

    Why it's wrong here

    Port 80 is for HTTP web traffic, not DNS.

  • Port 53

    Why this is correct

    Port 53 is the standard port for DNS queries and zone transfers.

  • Port 443

    Why it's wrong here

    Port 443 is for HTTPS, not DNS.

  • Port 67

    Why it's wrong here

    Port 67 is used for DHCP server, not DNS.

Visual reference

Client Recursive Resolver Root DNS (13 root servers) TLD DNS (.com, .org, …) Authoritative example.com query IP addr answer

About these practice questions

One of 972 original 220-1201 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This 220-1201 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1201 exam.