Your network contains an Active Directory domain. The domain contains an enterprise certification
authority (CA) named Server1 and a server named Server2. On Server2, you deploy Network Policy
Server (NPS) and you configure a Network Access Protection (NAP) enforcement policy for IPSec.
From the Health Registration Authority snap-in on Server2, you set the lifetime of health certificates
to four hours. You discover that the validity period of the health certificates issued to client
computers is one year. You need to ensure that the health certificates are only valid for four hours.
What should you do?

Your company has a single Active Directory domain. All servers run Windows Server 2008 R2. You
install an additional DNS server that runs Windows Server 2008 R2. You need to delete the pointer
record for the IP address 10.3.2.127. What should you do?

Your company has a server that runs Windows Server 2008 R2. You have a new application that
locates remote resources by name. The new application requires IPv6. You need to ensure that the
application can locate remote resources by using IPv6. What should you do?

You are building a test environment to evaluate DNS Security Extensions (DNSSEC). You have a
domain controller named Server1 that runs Windows Server 2008 R2 in your test environment.
Server1 has the DNS Server server role installed. You need to configure Server1 to support the
DNSSEC evaluation. Which two actions should you perform? (Each correct answer presents part of
the solution. Choose two.)

Your company has a domain controller that runs Windows Server 2008 R2 and the DNS role. The
DNS domain is named contoso.com. You need to ensure that inquiries about contoso.com are sent
to dnsadmin@contoso.com. What should you do?

Your company has a domain controller named Server1 that runs Windows Server 2008 R2 and the
DNS server role. A server named Server2 runs Windows Server 2003 and Microsoft Exchange Server
2007. The company wants to deploy a new Exchange server named Server3 to receive all inbound email traffic. You need to configure DNS to direct incoming e-mail traffic to the Exchange servers. You
also need to ensure that higher priority is given to Server3. What should you do?

Your network contains an Active Directory domain. The domain contains DNS servers that run
Windows Server 2008 R2. The network has two external links. One link connects to the Internet. The
other link directly connects to the network of a partner company. The partner companys network is
not connected to the Internet. You need to ensure that users on your network can access resources
on the partner companys network. The solution must ensure that the users on your network can
continue to access resources on the Internet. Which two actions should you perform on the DNS
servers? (Each correct answer presents a complete solution. Choose two.)

Your company has a domain controller named Server1 that runs Windows Server 2008 R2 and the
DNS Server server role. A server named Server2 runs a custom application. You need to configure
DNS to include the following parameters for the custom application:
• Service
• Priority
• Weight
• Protocol
• Port number
• Host offering this service
Which record should you create?

Your company has a main office and two branch offices. Domain controllers in the main office host
an Active Directory-integrated zone. The DNS servers in the branch offices host a secondary zone for
the domain and use the main office DNS servers as their DNS Master servers for the zone. The
company adds a new branch office. You add a member server named Branch3 and install the DNS
Server server role on the server. You configure a secondary zone for the domain. The zone transfer
fails. You need to configure DNS to provide zone data to the DNS server in the new branch office.
What should you do?

HOTSPOT
Your network contains a server named Server1 that runs Windows Server 2008 R2. You configure
IPSec on Server1. You need to identify the total number of encrypted bytes sent and received by
Server1. Which node should you use to achieve this task? To answer, select the appropriate node in
the answer area.