Your network consists of a single Active Directory domain. User accounts for engineering
department are located in an OU named Engineering.
You need to create a password policy for the engineering department that is different from
your domain password policy.
What should you do?

Your network contains an Active Directory domain. The domain contains two domain
controllers named DC1 and DC2. DC1 hosts a standard primary DNS zone for the domain.
Dynamic updates are enabled on the zone. DC2 hosts a standard secondary DNS zone for
the domain.
You need to configure DNS to allow only secure dynamic updates.
What should you do first?

Your network contains a domain controller that has two network connections named Internal
and Private.
Internal has an IP address of 192.168.0.20. Private has an IP address of 10.10.10.5. You
need to prevent the domain controller from registering Host (A) records for the 10.10.10.5 IP
address.
What should you do?

Your network contains an Active Directory forest named contoso.com.
You plan to add a new domain named nwtraders.com to the forest.
All DNS servers are domain controllers.
You need to ensure that the computers in nwtraders.com can update their Host (A) records
on any of the DNS servers in the forest.

What should you do?

Your network contains an Active Directory domain named contoso.com. The domain
contains a domain controller named DC1. DC1 hosts a standard primary zone for
contoso.com.
You discover that non-domain member computers register records in the contoso.com zone.
You need to prevent the non-domain member computers from registering records in the
contoso.com zone.
All domain member computers must be allowed to register records in the contoso.com zone.
What should you do first?

Your network contains an Active Directory domain named contoso.com.
You create a GlobalNames zone. You add an alias (CNAME) resource record named
Server1 to the zone. The target host of the record is server2.contoso.com.
When you ping Server1, you discover that the name fails to resolve.
You successfully resolve server2.contoso.com.
You need to ensure that you can resolve names by using the GlobalNames zone.
What should you do?

Your company has a main office and a branch office.
The network contains an Active Directory domain named contoso.com. The DNS zone for
contoso.com is configured as an Active Directory-integrated zone and is replicated to all
domain controllers in the domain.
The main office contains a writable domain controller named DC1. The branch office
contains a read- only domain controller (RODC) named RODC1. All domain controllers run
Windows Server 2008 R2 and are configured as DNS servers.
You uninstall the DNS server role from RODC1.
You need to prevent DNS records from replicating to RODC1.
What should you do?

Your network contains an Active Directory domain named contoso.com. The domain
contains the servers shown in the following table.

The functional level of the forest is Windows Server 2003. The functional level of the domain
is Windows Server 2003.
DNS1 and DNS2 host the contoso.com zone.
All client computers run Windows 7 Enterprise.
You need to ensure that all of the names in the contoso.com zone are secured by using
DNSSEC.
What should you do first?

Your network contains a domain controller that is configured as a DNS server. The server
hosts an Active Directory-integrated zone for the domain.
You need to reduce how long it takes until stale records are deleted from the zone.
What should you do?

You have an Active Directory domain named contoso.com.
You have a domain controller named Server1 that is configured as a DNS server.
Server1 hosts a standard primary zone for contoso.com. The DNS configuration of Server1
is shown in the exhibit. (Click the Exhibit button.)

You discover that stale resource records are not automatically removed from the
contoso.com zone.
You need to ensure that the stale resource records are automatically removed from the
contoso.com zone.
What should you do?