Your network contains one Active Directory domain. You have a member server that runs Windows
Server 2008 R2. You need to immediately disable all incoming connections to the server. What
should you do?

Your network consists of a single Active Directory domain. The domain contains a server named
Server1 that runs Windows Server 2008 R2. All client computers run Windows 7. All computers are
members of the Active Directory domain. You assign the Secure Server (Require Security) IPsec
policy to Server1 by using a Group Policy object (GPO). Users report that they fail to connect to
Server1. You need to ensure that users can connect to Server1. All connections to Server1 must be
encrypted. What should you do?

Your network consists of a single Active Directory domain. The domain contains a server named
Server1 that runs Windows Server 2008 R2. All client computers run Windows 7. All computers are
members of the Active Directory domain. You assign the Secure Server (Require Security) IPsec
policy to Server1 by using a Group Policy object (GPO). Users report that they fail to connect to
Server1. You need to ensure that users can connect to Server1. All connections to Server1 must be
encrypted. What should you do?

Your company uses Active Directory-integrated DNS. Users require access to the Internet. You run a
network capture. You notice the DNS server is sending DNS name resolution queries to a server
named f.root-servers.net. You need to prevent the DNS server from sending queries to f.rootservers.net. The server must be able to resolve names for Internet hosts. Which two actions should
you perform? (Each correct answer presents part of the solution. Choose two.)

Your company uses Active Directory-integrated DNS. Users require access to the Internet. You run a
network capture. You notice the DNS server is sending DNS name resolution queries to a server
named f.root-servers.net. You need to prevent the DNS server from sending queries to f.rootservers.net. The server must be able to resolve names for Internet hosts. Which two actions should
you perform? (Each correct answer presents part of the solution. Choose two.)

Your company has a single Active Directory forest that has six domains. All DNS servers in the forest
run Windows Server 2008 R2. You need to ensure that all public DNS queries are channeled through
a single-caching-only DNS server. Which two actions should you perform? (Each correct answer
presents part of the solution. Choose two.)

Your company has a single Active Directory forest that has six domains. All DNS servers in the forest
run Windows Server 2008 R2. You need to ensure that all public DNS queries are channeled through
a single-caching-only DNS server. Which two actions should you perform? (Each correct answer
presents part of the solution. Choose two.)

Contoso Ltd. has a single Active Directory forest that has five domains. Each domain has two DNS
servers. Each DNS server hosts Active Directory-integrated zones for all five domains. All domain
controllers run Windows Server 2008 R2. Contoso acquires a company named Tailspin Toys. Tailspin
Toys has a single Active Directory forest that contains a single domain. You need to configure the
DNS system in the Contoso forest to provide name resolution for resources in both forests. What
should you do?

Contoso Ltd. has a single Active Directory forest that has five domains. Each domain has two DNS
servers. Each DNS server hosts Active Directory-integrated zones for all five domains. All domain
controllers run Windows Server 2008 R2. Contoso acquires a company named Tailspin Toys. Tailspin
Toys has a single Active Directory forest that contains a single domain. You need to configure the
DNS system in the Contoso forest to provide name resolution for resources in both forests. What
should you do?

Your company has a single Active Directory forest that has an Active Directory domain named
na.contoso.com. A server named Server1 runs the DNS Server server role. You notice stale resource
records in the na.contoso.com zone. You have enabled DNS scavenging on Server1. Three weeks
later, you notice that the stale resource records remain in na.contoso.com. You need to ensure that
the stale resource records are removed from na.contoso.com. What should you do?