Your network contains an Active Directory domain named contoso.com. The DNS zone for
contoso.com is Active-Directory integrated.
The domain contains 500 client computers. There are an additional 20 computers in a workgroup.
You discover that every client computer on the network can add its record to the contoso.com zone.
You need to ensure that only the client computers in the Active Directory domain can register
records in the contoso.com zone.
What should you do?
A.
Sign the contoso.com zone by using DNSSEC.
B.
Configure the Dynamic updates settings of the contoso.com zone.
C.
Configure the Security settings of the contoso.com zone.
D.
Move the contoso.com zone to a domain controller that is configured as a DNS server.
D
0
0
I have found both answers in other dumps.
“If you install DNS server on a non-DC, then you are not able to create AD-integrated zones. DNS update security is available only for zones are integrated into AD DS. When you integrate a zone Directory, Access Control List (ACL) editing features are available in DNS Managers That You can add or remove users or groups from the ACL for a specified zone or resource record.”
Here is following listed: “Your network contains Active Directory domain named contoso.com The DNS zone for contoso.com is Active Directory integrated.”.
I therefore believe the correct answer is “B – Configure the Dynamic updates settings of the contoso.com zone”.
https://technet.microsoft.com/en-us/library/cc771255.aspx
0
0
Yeah,Nikita…I go with you on that.
B is correct, since it’s AD-integrated.
0
0
B
0
0
B because it is stated: “The DNS zone for contoso.com is Active-Directory integrated.”
Taking above under consideration You can configure secure updates for this zone.
0
0