Your network contains two Active Directory forests named contoso.com and corp.contoso.com.
User1 is a member of the DnsAdmins domain local group in contoso.com.
User1 attempts to create a conditional forwarder to corp.contoso.com but receive an error message shown in
the exhibit. (Click the Exhibit button.)
You need to configure bi-directional name resolution between the two forests.
What should you do first?
A.
Add User1 to the DnsUpdateProxy group.
B.
Configure the zone to be Active Directory-integrated.
C.
Enable the Advanced view from DNS Manager.
D.
Run the New Delegation Wizard.
The exhibit is not an error message!
3
0
In order to create a trust between two forests, we must ensure that name resolution is working properly between the trusting and the trusted domains either by
* having the DNS zones propagate through the forest,
* by configuring conditional forwarders, or
* by configuring stub zones.
In order to configure bi-directional name resolution between the two forests zone needs to be Active Diretory – Integrated (answer B).
On the screen shoot it is seen, that we are missing the “SECURITY” tab where we can do configurations, which only appears when the zone is AD-Integrated.
10
1
https://www.microsoftpressstore.com/articles/article.aspx?p=2217267&seqNum=3
0
0
You can tell it’s not AD Integrated because there is no security tab.
2
0
No way is Microsoft “out to get you on the exams”
The proof is in the pudding. I know you say that there is no security tab, but everyone has to admit that this is a gotcha question
4
0