Your network contains an Active Directory domain named contoso.com. The network contains 500
client computers that run Windows 8. All of the client computers connect to the Internet by using a
web proxy.
You deploy a server named Server1 that runs Windows Server 2012 R2. Server1 has the DNS Server
server role installed.
You configure all of the client computers to use Server1 as their primary DNS server.
You need to prevent Server1 from attempting to resolve Internet host names for the client
computers.
What should you do on Server1?

A.
Create a primary zone named “root”.
B.
Create a primary zone named “GlobalNames”.
C.
Create a forwarder that points to 169.254.0.1.
D.
Create a primary zone named “.”.
The answer should be “D”. The zone is called root but should be named “.”
0
0
yes it’s D. look at some questions later. same question, an other answer
0
0
it is D. I tested in my lab. i created forward lookup zone “.” and client computers could’t go on internet. In DNS Manager zone was displayed as “.(root)”
0
0
This is copied from another website and they stated that the answer is D “.”
QUESTION 127
Your network contains an Active Directory domain named contoso.com. The network contains 500 client computers that run Windows 8. All of the client computers connect to the Internet by using a web proxy. You deploy a server named Server1 that runs Windows Server 2012 R2. Server1 has the DNS Server server role installed. You configure all of the client computers to use Server1 as their primary DNS server. You need to prevent Server1 from attempting to resolve Internet host names for the client computers. What should you do on Server1?
A. Create a primary zone named “.”.
B. Configure the Security settings of the contoso.com zone.
C. Create a zone delegation for GlobalNames.contoso.com.
D. Create a stub zone named “root”.
Answer: A
Explanation:
When you install DNS on a Windows server that does not have a connection to the Internet, the zone for the domain is created and a root zone, also known as a dot zone, is also created. This root zone may prevent access to the Internet for DNS and for clients of the DNS. If there is a root zone, there are no other zones other than those that are listed with DNS, and you cannot configure forwarders or root hint servers.
Root domain
This is the top of the tree, representing an unnamed level; it is sometimes shown as two empty quotation marks (“”), indicating a null value. When used in a DNS domain name, it is stated by a trailing period (.) to designate that the name is located at the root or highest level of the domain hierarchy. In this instance, the DNS domain name is considered to be complete and points to an exact location in the tree of names. Names stated this way are called fully qualified domain names
0
0
Just for those who like some more background, see link below.
Sample Question 21
Microsoft Question:
Your network contains an Active Directory domain named contoso.com. The network contains 500 client computers that run Windows 8. All of the client computers connect to the Internet by using a web proxy. You deploy a server named Server1 that runs Windows Server 2012. Server1 has the DNS Server server role installed. You configure all of the client computers to use Server1 as their primary DNS server.You need to prevent Server1 from attempting to resolve Internet host names for the client computers. What should you do on Server1?
A. Configure the Security settings of the contoso.com zone.
B. Remove all root hints.
C. Create a primary zone named “.”.
D. Create a primary zone named “root”.
E. Create a primary zone named “GlobalNames”.
F. Create a forwarder that points to 169.254.0.1.
G. Create a stub zone named “root”.
H. Create a zone delegation for GlobalNames.contoso.com.
Answer: B,C
Explanation:
B. necessary to remove the default root hints files
C. install a root (.) zone on all internal DNS servers to prevent name resolution on the Internet http://support.microsoft.com/kb/298148
0
0