How can forward zones assist in resolving external domains for an internal network?

• A. By delegating unresolved queries to external DNS servers controlled by the organization
• B. By forcing all queries to time out
• C. By duplicating all external domains locally
• D. By eliminating need for recursive resolution

Answer: (A)

Forward zones create a controlled path for external lookups. When an internal DNS server receives a query for a domain it doesn’t have in its own zones, it forwards that query to predefined external DNS servers (forwarders) that the organization manages. Those forwarders carry out the actual resolution on the internet and return the answer to the internal server, which caches it for future requests. This setup centralizes control over external resolution, enables policy enforcement and logging, and can improve performance through caching, while keeping internal clients' queries within the organization’s DNS framework. That’s why delegating unresolved queries to external DNS servers controlled by the organization is the best explanation. The other options don’t fit because forward zones don’t cause timeouts, don’t require duplicating all external domains locally, and they don’t eliminate the need for recursive resolution—the forwarders perform it upstream.