Your company has an Active Directory forest. All domain controllers run the DNS Server server role.
The company plans to decommission the WINS service. You need to enable forest-wide single name
resolution. What should you do?

You manage a domain controller that runs Windows Server 2008 R2 and the DNS Server server role.
The DNS server hosts an Active Directory-integrated zone for your domain. You need to provide a
user with the ability to manage records in the zone. The user must not be able to modify the DNS
server settings. What should you do?

Your network contains an Active Directory domain named contoso.com. All domain controllers run
Windows Server 2008 R2 and are configured as DNS servers. All client computers run Windows 7.
You create a new zone named secure.contoso.com and configure the zone to use DNSSEC. You need

to ensure that all client computers verify whether the name and address information of
secure.contoso.com is validated by the DNS servers. What should you configure from Group Policy?

Your company has a main office and two branch offices that are connected by WAN links. The main
office runs the DNS Server service on three domain controllers. The zone for your domain is
configured as an Active Directory-integrated zone. Each branch office has a single member server
that hosts a secondary zone for the domain. The DNS servers in the branch offices use the main
office DNS server as the DNS Master server for the zone. You need to minimize DNS zone transfer
traffic over the WAN links. What should you do?

Your network contains an Active Directory domain. The domain contains an enterprise certification
authority (CA) named Server1 and a server named Server2. On Server2, you deploy Network Policy
Server (NPS) and you configure a Network Access Protection (NAP) enforcement policy for IPSec.
From the Health Registration Authority snap-in on Server2, you set the lifetime of health certificates
to four hours. You discover that the validity period of the health certificates issued to client
computers is one year. You need to ensure that the health certificates are only valid for four hours.
What should you do?

Your company has a single Active Directory domain. All servers run Windows Server 2008 R2. You
install an additional DNS server that runs Windows Server 2008 R2. You need to delete the pointer
record for the IP address 10.3.2.127. What should you do?

Your company has a server that runs Windows Server 2008 R2. You have a new application that
locates remote resources by name. The new application requires IPv6. You need to ensure that the
application can locate remote resources by using IPv6. What should you do?

You are building a test environment to evaluate DNS Security Extensions (DNSSEC). You have a
domain controller named Server1 that runs Windows Server 2008 R2 in your test environment.
Server1 has the DNS Server server role installed. You need to configure Server1 to support the
DNSSEC evaluation. Which two actions should you perform? (Each correct answer presents part of
the solution. Choose two.)

Your company has a domain controller that runs Windows Server 2008 R2 and the DNS role. The
DNS domain is named contoso.com. You need to ensure that inquiries about contoso.com are sent
to dnsadmin@contoso.com. What should you do?

Your company has a domain controller named Server1 that runs Windows Server 2008 R2 and the
DNS server role. A server named Server2 runs Windows Server 2003 and Microsoft Exchange Server
2007. The company wants to deploy a new Exchange server named Server3 to receive all inbound email traffic. You need to configure DNS to direct incoming e-mail traffic to the Exchange servers. You
also need to ensure that higher priority is given to Server3. What should you do?