Your network contains an Active Directory domain named contoso.com. The domain contains the servers
shown in the following table.

The functional level of the forest is Windows Server 2003. The functional level of the domain is Windows
Server 2003.
DNS1 and DNS2 host the contoso.com zone.
All client computers run Windows 7 Enterprise.
You need to ensure that all of the names in the contoso.com zone are secured by using DNSSEC.
What should you do first?

Your network contains a domain controller that is configured as a DNS server. The server hosts an Active
Directory-integrated zone for the domain.
You need to reduce how long it takes until stale records are deleted from the zone.
What should you do?

You have an Active Directory domain named contoso.com. You have a domain controller named Server1 thatis
configured as a DNS server. Server1 hosts a standard primary zone for contoso.com. The DNS configuration of
Server1 is shown in the exhibit. (Click the Exhibitbutton.)

You discover that stale resource records are not automatically removed from the contoso.com zone. You need
to ensure that the stale resource records are automatically removed from the contoso.com zone.
What should you do?

Your network contains an Active Directory domain named contoso.com.
You remove several computers from the network.
You need to ensure that the host (A) records for the removed computers are automatically deleted from the
contoso.com DNS zone.
What should you do?

You need to force a domain controller to register all service location (SRV) resource records in DNS.
Which command should you run?

Your network contains an Active Directory domain named contoso.com.
You plan to deploy a child domain named sales.contoso.com.
The domain controllers in sales.contoso.com will beDNS servers for sales.contoso.com.
You need to ensure that users in contoso.com can connect to servers in sales.contoso.com by using fully
qualified domain names (FQDNs).
What should you do?

Your network contains a single Active Directory domain named contoso.com. The domain contains two domain
controllers named DC1 and DC2 that run Windows Server 2008 R2. DC1 hosts a primary zone for contoso.
com. DC2 hosts a secondary zone for contosto.com.
On DC1, you change the zone to an Active Directory-integrated zone and configure the zone to accept secure
dynamic updates only.
You need to ensure that DC2 can accept secure dynamic updates to the contoso.com zone.
Which command should you run?

Your network contains an Active Directory domain named contoso.com. You run nslookup.exe as shown in the
following Command Prompt window.

You need to ensure that you can use Nslookup to list all of the service location (SRV) resource records for
contoso.com.
What should you modify?

Your network contains an Active Directory domain named contoso.com.
The contoso.com DNS zone is stored in Active Directory. All domain controllers run Windows Server 2008R2.
You need to identify if all of the DNS records usedfor Active Directory replication are correctly registered.
What should you do?

Your network contains an Active Directory forest. The forest contains one domain and three sites. Eachsite
contains two domain controllers. All domain controllers are DNS servers.
You create a new Active Directory-integrated zone.
You need to ensure that the new zone is replicated to the domain controllers in only one of the sites.
What should you do first?