Your network contains an Active Directory domain named contoso.com.
The domain contains a domain controller named DC1 that runs Windows Server 2012 R2. DC1
has the DNS Server server role installed.
The network contains client computers that run either Linux, Windows 7, or Windows 8.
You have a zone named adatum.com as shown in the exhibit. (Click the Exhibit button.)
You plan to configure Name Protection on all of the DHCP servers.
You need to configure the adatum.com zone to support Name Protection.
Which two configurations should you perform from DNS Manager? (Each correct answer presents
part of the solution. Choose two.)
A.
Sign the zone.
B.
Store the zone in Active Directory.
C.
Modify the Security settings of the zone.
D.
Configure Dynamic updates.
E.
Add a DNS key record
Explanation:
Name protection requires secure update to work.
Without name protection DNS names may be hijacked.
You can use the following procedures to allow only secure dynamic updates for a zone. Secure
dynamic update is supported only for Active Directory-integrated zones. If the zone type is
configured differently, you must change the zone type and directory-integrate the zone before
securing it for Domain Name System (DNS) dynamic updates.
1. (B) Convert primary DNS server to Active Directory integrated primary2. (D) Enable secure dynamic updates
http://technet.microsoft.com/en-us/library/ee941152(v=ws.10).aspx
Is the exhibit wrong? the zone is already AD Integrated
0
0
Yeah exhibit is wrong, in exam check for the highlighted areas
0
0
The exhibit might not wrong, pay attention to the question: “Your network contains an Active Directory domain named contoso.com” and then “You have a zone named adatum.com as shown in the exhibit.”. Probably there’s also a zone called contoso.com but it’s not shown in the question. But the question says you have to pick 2 answers. Contoso.com zone might not be be AD integrated. That’s why you would have to choose B in this situation and D would be for Adatum.com zone which has “none” defined in the “Dynamic Updates”.
0
0
there is another option on the DHCP server as well
0
0
[url=http://www.gowatchs.com/brand-213.html]は、コンスタンチンchaykinコンプトゥスの復活祭の時計のケースを模倣するサンクトペテルブルク、ロシアの聖イサク大聖堂のように、全体的な形状は、ドーム、柱廊、鐘塔とすべてのこの記念碑の大聖堂にマッチする色を選んであった。トップの上のギョーシェとゴールドエナメルで飾られたドームは、キリスト教徒のための復活のシンボルと一致するように卵の形状に成形する。4つのミニチュアの鐘塔、24柱構造の側の上のモザイク装飾とすべての他の小さいデザイン要素を考えて、元の建物に合わせて作られている。[/url]
0
0