Yournetwork contains an Active Directory domain named contoso.com. The domain contains a
domain controller named DC1 that runs Windows Server 2012 R2. DC1 has the DNS Server server
role installed.
The network contains client computers that run either Linux, Windows 7, or Windows 8.
You have a standard primary zone named adatum.com as shown in the exhibit. (Click the Exhibit
button.)
You plan to configure Name Protection on all of the DHCP servers.
You need to configure the adatum.com zone to support Name Protection.
Which two configurations should you perform from DNS Manager? (Each correct answer presents
part of the solution. Choose two.)
A.
Sign the zone.
B.
Store the zone in Active Directory.
C.
Modify the Security settings of the zone.
D.
Configure Dynamic updates.
E.
Add a DNS key record
Explanation:
Name protection requires secure update to work. Without name protection DNS names may be
hijacked.
You can use the following procedures to allow only secure dynamic updates for a zone. Secure
dynamic update is supported only for Active Directory–integrated zones. If the zone type is
configured differently, you must change the zone type and directory-integrate the zone before
securing it for Domain Name System (DNS) dynamic updates.
1. (B) Convert primary DNS server to Active Directory integrated primary
2. (D) Enable secure dynamic updates
DHCP: Secure DNS updates should be configured if Name Protection is enabled on any
IPv4 scope
http://technet.microsoft.com/en-us/library/ee941152(v=ws.10).aspx
Active Directory and Linux? How?
0
0
A realm trust…
1
0
The exhibit shows that it is already a AD Integrated zone, so how can B be part of the answer? It even says “Data is stored in Active Directory” in the original picture before you show the answer?
0
0
wrong exibith
0
0
As JF said, I think this exhibit is wrong. The zone is already AD integrated, this only leaves D as the correct answer. No other option, as far as I’m aware the zone does not require to be signed for this to work and C/E don’t make any sense in this case.
0
0
I’m late to the party, but the exhibit image is clearly wrong. The question says “You have a standard primary zone named adatum.com as shown in the exhibit”
The zone you have is NOT AD INTEGRATED. So B is a must.
Then D.
To add to the confusion, MS has a question very similar to this one, but it only says “you have a zone as in the exhibit” and has this exact image. In that question it doesn’t ask for two answers (this one DOES).
1
0