You need to ensure that all of the names in the contoso.com zone are secured by using DNSSEC
Your network contains an Active Directory domainnamed contoso.com.
The domain contains the servers shown in the following table.
The functional level of the forestis Windows Server 2003.
The functional level of the domainis Windows Server 2003.
DNS1and DNS2 hostthe contoso.com zone.
All client computersrun Windows 7 Enterprise.
You need to ensure that all of the names in the contoso.com zone are secured by using DNSSEC.
What should you do first?
You need to reduce how long it takes until stale records are deleted from the zone
Your network contains a domain controllerthat is configured as a DNS server.
The server hostsan Active Directory-integrated zone for the domain.
You need to reduce how long it takes until stale records are deleted from the zone.
What should you do?
You need to ensure that the stale resource records are automatically removed from the contoso.com zone
You have an Active Directory domainnamed contoso.com.
You have a domain controllernamed Server1that is configured as a DNS server.
Server1 hosts a standard primary zonefor contoso.com.
The DNS configurationof Server1is shown below:
You discover that stale resource records are not automatically removed from the contoso.com zone.
You need to ensure that the stale resource records are automatically removed from the contoso.com
zone.
What should you do?
You need to ensure that the host (A) records for the removed computers are automatically deleted from the cont
Your network contains an Active Directory domainnamed contoso.com.
You remove several computers from the network.
You need to ensure that the host (A) records for the removed computers are automatically deleted from
the contoso.com DNS zone.
What should you do?
Which command should you run?
You need to force a domain controller to register all service location (SRV) resource records in DNS.
Which command should you run?
You need to ensure that users in contoso.com can connect to servers in sales.contoso.com by using fully qualif
Your network contains an Active Directory domainnamed contoso.com.
You plan to deploy a child domain named sales.contoso.com.
The domain controllersin sales.contoso.comwill be DNS servers for sales.contoso.com.
You need to ensure that users in contoso.com can connect to servers in sales.contoso.com by using
fully qualified domain names (FQDNs).
What should you do?
Which command should you run?
Your network contains a single Active Directory domainnamed contoso.com.
The domain contains two domain controllersnamed DC1and DC2that run Windows Server 2008 R2.
DC1 hosts a primary zone for contoso.com.
DC2 hosts a secondary zone for contosto.com.
On DC1, you change the zone to an Active Directory-integrated zoneand configure the zone to accept
secure dynamic updates only.
You need to ensure that DC2 can accept secure dynamic updates to the contoso.com zone.
Which command should you run?
What should you modify?
You need to identify if all of the DNS records used forActive Directory replication are correctly registered
Your network containsan Active Directory domainnamed contoso.com.
The contoso.com DNS zoneis stored in Active Directory.
All domain controllersrun Windows Server 2008 R2.
You need to identify if all of the DNS records used forActive Directory replication are correctly
registered.
What should you do?
You need to ensure that the new zone is replicated to the domain controllers in only one of the sites
Your network contains an Active Directory forest.
The forest contains one domainand three sites.
Each site contains two domain controllers.
All domain controllersare DNS servers.
You create a new Active Directory-integrated zone.
You need to ensure that the new zone is replicated to the domain controllers in only one of the sites.
What should you do first?