ExamWizardzExamWizardz
Start free
Networking

What is root zone?

The root zone is the top of the DNS hierarchy, written as a single dot. It delegates each top-level domain, such as .com, to that TLD's name servers.

What is the DNS root zone?

The root zone is the starting point of the Domain Name System. Every domain name sits under it, including all the top-level domains (TLDs) such as .com, .org, .net and .uk. The root itself has no name; it's written as a single dot, which is why a fully qualified domain name can end with a trailing dot, as in www.example.com.

The root zone is not a TLD. It sits one level above them, and its main job is delegation: for each TLD it lists the authoritative name servers (NS records), with their IP addresses where needed, so resolvers know where to ask next.

Where it fits in a lookup

  1. A recursive resolver, such as your ISP's DNS server, gets a query for www.example.com that isn't in its cache.
  2. It asks a root server, which replies with a referral to the .com TLD name servers.
  3. The .com servers refer it to the authoritative name servers for example.com.
  4. Those servers return the A or AAAA record, and the resolver caches each answer for its TTL.

Because resolvers cache the TLD referrals, they only need to go back to the root occasionally.

Root servers

The root zone is served by 13 named root server identities, a.root-servers.net through m.root-servers.net, run by 12 different organizations. None of them is a single machine: each uses anycast, so many server instances around the world share the same IP address and a query reaches a nearby one. The number 13 comes from the original design, which had to fit all the root server addresses into one small DNS response.

Resolvers find the root servers through a root hints file that lists their names and IP addresses; Windows DNS Server shows them on the Root Hints tab of the server's properties. IANA manages the contents of the root zone, and the zone is signed with DNSSEC, so validating resolvers use the root's key as their starting point of trust.

For the CompTIA A+ exam

Core 1 (220-1201) objective 2.3 lists DNS among the server roles, and objective 2.4 covers DNS records such as A, AAAA, CNAME, MX and TXT. Know the hierarchy from the top down: the root, then TLDs, then second-level domains like example.com, then subdomains and hosts. Don't call the root zone a top-level domain: it sits above all of them.

Studying for CompTIA (Networking)?

ExamWizardz turns the official objectives into a guided study plan — with practice tests, realistic PBQs, and a readiness score. Start free.

Start studying free

Related terms

authoritative name server

An authoritative name server is a DNS server that is the definitive source of information for a specific domain name, providing the most accurate and up-to-date records for that domain.

DNS hierarchy

The DNS hierarchy is the organizational structure that defines how the Domain Name System (DNS) translates human-readable domain names into the IP addresses used by computers to communicate on the internet.

DNS server

A DNS server is a computer server that translates human-readable domain names into the IP addresses that computers use to identify and communicate with each other on the internet.

DNSSEC

DNSSEC (Domain Name System Security Extensions) is a security protocol that adds authentication and integrity to the Domain Name System (DNS), helping to prevent certain types of cyber attacks that target the DNS infrastructure.

recursive DNS resolver

A recursive DNS resolver is a server that iteratively queries other DNS servers to find the requested domain name information, caching the results to improve lookup speed for subsequent requests.

root DNS server

A root DNS server is a top-level server in the Domain Name System (DNS) hierarchy that provides authoritative information about the DNS root zone, directing internet traffic to the appropriate top-level domain (TLD) servers.

TLD server

A TLD (Top-Level Domain) server is a specialized domain name system (DNS) server responsible for managing and resolving requests for top-level domains on the internet, such as .com, .org, .net, and country-specific TLDs like .us or .uk.

TLD

Top-Level Domains (TLDs) are the highest-level domains in the hierarchical Domain Name System (DNS) of the internet, appearing at the end of a domain name.

← Back to the full CompTIA glossary