Information Technology Reference
In-Depth Information
4.
Your company consists of a single Active Directory forest. You have a Windows Server
2012 R2 domain controller that also has the DNS role installed. You also have a Unix-
based DNS server at the same location. You need to configure your Windows DNS server to
allow zone transfers to the Unix-based DNS server. What should you do?
A.
Enable BIND secondaries.
B.
Configure the Unix machine as a stub zone.
C.
Convert the DNS server to Active Directory Integrated.
D.
Configure the Microsoft DNS server to forward all requests to the Unix DNS server.
5.
You are the network administrator for Stellacon Corporation. Stellacon has two trees in
its Active Directory forest, stellacon.com and abc.com. Company policy does not allow
DNS zone transfers between the two trees. You need to make sure that when anyone in
abc.com tries to access the stellacon.com domain, all names are resolved from the stel-
lacon.com DNS server. What should you do?
A.
Create a new secondary zone in abc.com for stellacon.com.
B.
Configure conditional forwarding on the abc.com DNS server for stellacon.com.
C.
Create a new secondary zone in stellacon.com for abc.com.
D.
Configure conditional forwarding on the stellacon.com DNS server for abc.com.
6.
You are the network administrator for your organization. A new company policy states that
all inbound DNS queries need to be recorded. What can you do to verify that the IT depart-
ment is compliant with this new policy?
A.
Enable Server Auditing - Object Access.
B.
Enable DNS debug logging.
C.
Enable server database query logging.
D.
Enable DNS Auditing - Object Access.
7.
You are the network administrator for a small company with two DNS servers: DNS1
and DNS2. Both DNS servers reside on domain controllers. DNS1 is set up as a standard
primary zone, and DNS2 is set up as a secondary zone. A new security policy was written
stating that all DNS zone transfers must be encrypted. How can you implement the new
security policy?
A.
Enable the Secure Only setting on DNS1.
B.
Enable the Secure Only setting on DNS2.
C.
Configure Secure Only on the Zone Transfers tab for both servers.
D.
Delete the secondary zone on DNS2. Convert both DNS servers to use Active Direc-
tory Integrated zones.
Search WWH ::
Custom Search