Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. All client computers run Windows 10.

On Server1, you have the following zone configuration



You need to prevent Server1 from resolving queries from DNS clients located on Subnet4.

Server1 must resolve queries from all other DNS clients.

Solution: From Windows PowerShell on Server1, you run the Export-DnsServerDnsSecPublicKey cmdlet.

Does this meet the goal?

A. Yes

B. No

Explanation:

Example: Export a trust anchor to a file share

This command exports the trust anchor (DS record) for Contoso.com to a file share.

A DNS administrator runs this command from the DNS server that hosts the zone Contoso.com and specifies that the zone signing key uses the SHA-1 algorithm to create the DS record.

PS C:\> Export-DnsServerDnsSecPublicKey -ComputerName -DNSDC1.Contoso.com- –

ZoneName -Contoso.com- -Path -\\MyDNSKeyShare\keys- -PassThru -DigestType -Sha1-