You are building a test environment to evaluate DNS Security Extensions (DNSSEC). You have a domain controller named Server1 that runs Windows Server 2008 R2 in your test environment. Server1 has the DNS Server server role installed.

You need to configure Server1 to support the DNSSEC evaluation.

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

Your company has a single Active Directory domain. All servers run Windows Server 2008 R2. You install an additional DNS server that runs Windows Server 2008 R2.

You need to delete the pointer record for the IP address 10.3.2.127.

What should you do?

Your company has a main office and two branch offices. Domain controllers in the main office host an Active Directory-integrated zone. The DNS servers in the branch offices host a secondary zone for the domain and use the main office DNS servers as the DNS Master servers for the zone. Each branch office has an application server. Users access the application server by using its fully qualified domain name.

You need to ensure that users in the branch offices can access their local application server even if the WAN links are down for three days.

What should you do?

Your company has a main office and two branch offices that are connected by WAN links. The main office runs the DNS Server service on three domain controllers. The zone for your domain is configured as an Active Directory-integrated zone. Each branch office has a single member server that hosts a secondary zone for the domain. The DNS servers in the branch offices use the main office DNS server as the DNS Master server for the zone.

You need to minimize DNS zone transfer traffic over the WAN links.

What should you do?

Your company has multiple DNS servers in the main office. You plan to install DNS on a member server in a branch office.

You need to ensure that the DNS server in the branch office is able to query any DNS server in the main office, and you need to limit the number of DNS records that are transferred to the DNS server in the branch office.

What should you do?

You manage a domain controller that runs Windows Server 2008 R2 and the DNS Server server role. The DNS server hosts an Active Directory-integrated zone for your domain.

You need to provide a user with the ability to manage records in the zone. The user must not be able to modify the DNS server settings.

What should you do?

Your company has an Active Directory forest. All domain controllers run the DNS Server server role. The company plans to decommission the WINS service.

You need to enable forest-wide single name resolution.

What should you do?

Your company has a single domain named contoso.com. The contoso.com DNS zone is Active Directory-integrated. Your partner company has a single domain named partner.com. The partner.com DNS zone is Active Directory-integrated. The IP addresses of the DNS servers in the partner domain will change.

You need to ensure name resolution for users in contoso.com to resources in partner.com.

What should you do?

Your company has a server named Server1 that runs a Server Core installation of Windows Server 2008 R2, and the DNS Server server role. Server1 has one network interface named Local Area Connection. The static IP address of the network interface is configured as 10.0.0.1.

You need to create a DNS zone named local.contoso.com on Server1.

Which command should you use?

Your company has two servers that run Windows Server 2008 R2 named Server2 and Server3. Both servers have the DNS Server server role installed. Server3 is configured to forward all DNS requests to Server2. You update a DNS record on Server2.

You need to ensure that Server3 is able to immediately resolve the updated DNS record.

What should you do?