Users can’t log in and DNS errors appear in the event logs — where do you start troubleshooting?
How do you handle a split-brain DNS scenario (internal vs. external same domain name)?
What are the implications of enabling scavenging in AD-integrated zones?
How do you verify that a new DC correctly registered all its SRV records?
A domain controller lost its DNS zone — how would you recover it?