Your network contains two Active Directory forests named contoso.com and corp.contoso.com.
User1 is a member of the DnsAdmins domain local group in contoso.com.
User1 attempts to create a conditional forwarder to corp.contoso.com but receive an error message shown in
the exhibit. (Click the Exhibit button.)
You need to configure bi-directional name resolution between the two forests.
What should you do first?
A.
Add User1 to the DnsUpdateProxy group.
B.
Configure the zone to be Active Directory-integrated.
C.
Enable the Advanced view from DNS Manager.
D.
Run the New Delegation Wizard.
Explanation:
The zone must be Active Directory-integrated.
pikapoka
July 9, 2017 at 12:42 pm
In order to create a trust between two forests, we must ensure that name resolution is working properly between the trusting and the trusted domains either by
* having the DNS zones propagate through the forest,
* by configuring conditional forwarders, or
* by configuring stub zones.
In order to configure bi-directional name resolution between the two forests zone needs to be Active Diretory – Integrated (answer B).
On the screen shoot it is seen, that we are missing the “SECURITY” tab where we can do configurations, which only appears when the zone is AD-Integrated.
1
1
BTW Pictures are not valid
1
0