Networking with Windows Server questions
with verified answers
You have delegated a subdomain to a zone on another server. Several months
later, you hear that DNS clients can't resolve host records in the subdomain. You
discover that the IP address scheme was changed recently in the building where
the server hosting the subdomain is located. What can you do to make sure DNS
clients can resolve hostnames in the subdomain? Ans✓✓-Edit the NS record in
the delegated zone on the parent DNS server.
You have an Active Directory-integrated zone named csmtech.local on the DNS1
server. The forest root Active Directory domain is csmtech.local. Why is the
_msdcs subdomain zone delegated on the DNS1 server? Ans✓✓-To change the
replication scope of _msdcs
Which of the following are true about a stub zone? (Choose all that apply.)
Ans✓✓-It's not authoritative for the zone.
It contains SOA and NS records.
You have seven DNS servers that hold an Active Directory-integrated zone named
csmpub.local. Three of the DNS servers are in the Chicago site, which is connected
to three other sites through a WAN link with limited bandwidth. Only users in the
Chicago site need access to resources in the csmpub.local zone. Where should
you store the csmpub.local zone? Ans✓✓-Custom application partition
You have a primary zone stored in the myzone.local.dns file. Some devices that
aren't domain members are creating dynamic DNS records in the zone. You want
to make sure only domain members can create dynamic records in the zone.
What should you do first? Ans✓✓-Configure the Store the zone in Active
Directory option.
, Which of the following is not an advantage of using Active Directory-integrated
zones? Ans✓✓-Can be stored on member servers
You have a DNS server running Windows Server 2016. You would like to configure
the DNS server to respond to requests based on the source of the query and
include the capability to filter malicious queries. Which feature should you
enable? Ans✓✓-DNS Policy
You have a DNS server that has multiple network interface cards; one is an
internal interface and the second is an external interface that faces the Internet.
You would like to enable recursion for your internal DNS clients and disable it for
any Internet clients. Which Windows Server 2016 DNS feature will allow you to
specify which DNS queries will use recursion and which DNS queries will not?
Ans✓✓-DNS recursion scope
You have decided to create multiple zone scopes to configure your DNS server to
respond to clients based on whether the client is on your internal network or an
external network. What specific configuration can you use to implement this
policy? Ans✓✓-Split-brain DNS
If you disable the option to use root hints when no forwarders are available, what
are you doing? Ans✓✓-
Domain Name System Security Extension (DNSSEC) provides specific features and
protocols for validating server responses. Which of the following methods are
used by DNSSEC to ensure that the data they receive from DNS queries is accurate
and secure? Ans✓✓-Authenticated zone signing
Origin authentication of DNS data
with verified answers
You have delegated a subdomain to a zone on another server. Several months
later, you hear that DNS clients can't resolve host records in the subdomain. You
discover that the IP address scheme was changed recently in the building where
the server hosting the subdomain is located. What can you do to make sure DNS
clients can resolve hostnames in the subdomain? Ans✓✓-Edit the NS record in
the delegated zone on the parent DNS server.
You have an Active Directory-integrated zone named csmtech.local on the DNS1
server. The forest root Active Directory domain is csmtech.local. Why is the
_msdcs subdomain zone delegated on the DNS1 server? Ans✓✓-To change the
replication scope of _msdcs
Which of the following are true about a stub zone? (Choose all that apply.)
Ans✓✓-It's not authoritative for the zone.
It contains SOA and NS records.
You have seven DNS servers that hold an Active Directory-integrated zone named
csmpub.local. Three of the DNS servers are in the Chicago site, which is connected
to three other sites through a WAN link with limited bandwidth. Only users in the
Chicago site need access to resources in the csmpub.local zone. Where should
you store the csmpub.local zone? Ans✓✓-Custom application partition
You have a primary zone stored in the myzone.local.dns file. Some devices that
aren't domain members are creating dynamic DNS records in the zone. You want
to make sure only domain members can create dynamic records in the zone.
What should you do first? Ans✓✓-Configure the Store the zone in Active
Directory option.
, Which of the following is not an advantage of using Active Directory-integrated
zones? Ans✓✓-Can be stored on member servers
You have a DNS server running Windows Server 2016. You would like to configure
the DNS server to respond to requests based on the source of the query and
include the capability to filter malicious queries. Which feature should you
enable? Ans✓✓-DNS Policy
You have a DNS server that has multiple network interface cards; one is an
internal interface and the second is an external interface that faces the Internet.
You would like to enable recursion for your internal DNS clients and disable it for
any Internet clients. Which Windows Server 2016 DNS feature will allow you to
specify which DNS queries will use recursion and which DNS queries will not?
Ans✓✓-DNS recursion scope
You have decided to create multiple zone scopes to configure your DNS server to
respond to clients based on whether the client is on your internal network or an
external network. What specific configuration can you use to implement this
policy? Ans✓✓-Split-brain DNS
If you disable the option to use root hints when no forwarders are available, what
are you doing? Ans✓✓-
Domain Name System Security Extension (DNSSEC) provides specific features and
protocols for validating server responses. Which of the following methods are
used by DNSSEC to ensure that the data they receive from DNS queries is accurate
and secure? Ans✓✓-Authenticated zone signing
Origin authentication of DNS data
