The ABC.com network consists of a single Active Directory domain named ABC.com. All servers

on the ABC.com network run Windows Server 2003.
ABC.com contains a Development department. ABC.com contains a domain controller named
ABC-SR24 which is also configured as a DNS Server. A ABC.com employee named Clive Wilson
works in the Development department. One morning Clive Wilson complains that he cannot
connect to another network server.
During investigation, you notice that nslookup queries sometimes take a long time and sometimes
fail altogether.
You suspect that there is a problem with ABC-SR24.
How would you configure monitoring on ABC-SR24 so that you can review individual name
resolution queries?

A.
Use System Monitor to monitor host resolution queries on ABC-SR24.

B.
Use Event Viewer to view the DNS event log on ABC-SR24.

C.
Select the Log packets for debugging option on the Debug Logging tab in the DNS server
properties on ABC-SR24.

D.
Use Network Monitor to capture DNS query packets on ABC-SR24.

Explanation:
If you need to analyze and monitor the DNS server performance in greater detail,
you can use the optional debug tool. You can choose to log packets based on the following:
Their direction, either outbound or inbound
The transport protocol, either TCP or UDP
Their contents: queries/transfers, updates, or notifications
Their type, either requests or responses
Their IP address
Finally, you can choose to include detailed information.
Note: This is the only thing thats going to let you see details about packets.
Reference:
J. C. Mackin, Ian McLean, MCSA/MCSE self-paced training kit (exam 70-291): Implementing,
Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure, Microsoft
Press, Redmond, Washington, 2004, Chapter 5