Your network contains a DNS server that has a reverse lookup zone for all of your network segments.

You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).An IP security policy is assigned to Server1.

You verify IPSec traffic and see that the current security associations display only by IP address.

You need to view the fully qualified domain names for all security associations.

What should you do?

Your network consists of a single Active Directory domain.All servers run Windows Server 2003 Service Pack 2 (SP2).

You need to provide a user named User1 the required permissions to reset passwords in the domain.

What should you do?

You have DNS server named DC1 that runs Windows Server 2003 Service Pack 2 (SP2).DC1 hosts an Active Directory-integrated zone that has dynamic updates enabled.

You enable aging and scavenging for the zone.

You discover that stale records are not being removed from the zone.

You need ensure that stale records are removed from the zone.

What should you do?

75.Your company has a main office and one branch office.All servers run Windows Server 2003 Service Pack 2 (SP2).The relevant portion of the network is configured as shown in the exhibit.

All computers in the branch office are configured to use DNS2 for name resolution.

You need to configure name resolution in the branch office to meet the requirements:
Resolve names for Internet hosts.
Minimize the amount of DNS traffic over the WAN link between offices.

What should you configure on DNS2?

Exhibit:

You have a DNS server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).You have two Web servers named Server2 and Server3.

The Web servers host an internal Web site that will be accessed by the URL http://www.contoso.com.

You need to ensure that requests for www.contoso.com are distributed between Server2 and Server3.

What should you do?

Your network consists of a single Active Directory domain named litwareinc.com.You have server named

DC1 that runs Windows Server 2003 Service Pack 2 (SP2).DC1 has the DNS server role installed and is the only DNS server for the network.

On DC1, you open the DNS snap-in as shown in the exhibit.

At the command prompt, you run Nslookup www.contoso.com and receive the following error message; “***

Localhost can’t find www.contoso.com: Non-existent domain.”

You need to ensure that you can connect to Internet hosts by using fully qualified domain names (FQDNs).

What should you do?

Exhibit:

Your network consists of a single Active Directory domain.All servers run Windows Server 2003 Service Pack 2 (SP2).

A firewall separates the internal network from the Internet.The firewall blocks all outbound traffic except for HTTP and SMTP traffic.

You install a DNS server.The DNS server is configured to use the default root hints.

You need to ensure that the DNS server can resolve the host names on the Internet.

Which port should you open on the firewall?

You have two DNS servers named Server1 and Server2 that run Windows Server 2003 Service Pack 2 (SP2).

Server1 hosts a standard primary zone for contoso.com.

On Server2, you create a secondary zone for contoso.com and specify Server1 as the master server.

On Server2, you attempt to open the contoso.com zone and receive the following error message: “Zone not loaded by DNS Server.”

You need to ensure that the zone loads on Server2.

What should you do?

You have a DNS server that runs Windows Server 2003 Service Pack 2 (SP2).

You enable DNS debug logging by using the default settings.You create a primary zone named contoso.com.

You need to view all the DNS responses that the DNS server has sent.

What should you do?

You have a DNS server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).Server1 is

configured to have an IP address of 10.10.0.10.

You run the NSLookup command on the server and receive the following error message.

You need to ensure that this time-out message does not appear when you run NSLookup.

What should you do?