PrepAway - Latest Free Exam Questions & Answers

You need to configure the adatum.com zone to support Name Protection

Yournetwork contains an Active Directory domain named contoso.com.
The domain contains a domain controller named DC1 that runs Windows Server 2012 R2.
DC1 has the DNS Server server role installed.
The network contains client computers that run either Linux, Windows 7, or Windows 8.
Youhave a zone named adatum.com as shown in the exhibit. (Click the Exhibit button.)

You plan to configure Name Protection on all of the DHCP servers.
You need to configure the adatum.com zone to support Name Protection.
What should you do?

PrepAway - Latest Free Exam Questions & Answers

A.
Sign the zone.

B.
Store the zone in Active Directory.

C.
Modify the Security settings of the zone.

D.
Configure Dynamic updates.

E.
Add a DNSKEY record.

Explanation:
http://technet.microsoft.com/en-us/library/ee941152(v=ws.10).aspx

6 Comments on “You need to configure the adatum.com zone to support Name Protection

  1. Mahmood Shehab says:

    There is a doubt here,

    To enable DHCP Protection you need to do 2 actions :

    1. Convert Primary DNS Server to Active Directory integrated primary !!!!!
    2. Enable Secure dynamic updates.

    In the screenshot, since the type is already Active directory-integrated, but (here is the trick) from the question you need to select the (Store the zone in Active Directory) which is under change option.

    so the answers for the question is (B),(D)




    0



    1
  2. heh says:

    so I’m going out on a whim and say that the picture is wrong, should be showing that the type is primary standard. Which then, you would need to change it to Active Directory Integrated and then change the dynamic updates to “Secure only”.

    I only state the picture is wrong, because on other pages/sites the question states “You have a standard Primary zone”. This one just says “you have a zone”.

    If you get a question that states “you have an AD-integrated zone” and the picture shows so, then you better hope this is a one-answer question with “change the dynamic updates setting to Secure only” as an option.




    0



    0

Leave a Reply