QUESTION 141
Your company uses Active Directory-integrated DNS. Users require access to the Internet. You run a network capture. You notice the DNS server is sending DNS name resolution queries to a server named f.root-servers.net. You need to prevent the DNS server from sending queries to f.root- servers.net. The server must be able to resolve names for Internet hosts. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. Enable forwarding to your ISP’s DNS servers.
B. Disable the root hints on the DNS server.
C. Disable the netmask ordering option on the DNS server.
D. Configure Reverse Lookup Zones for the IP subnets on the network.
Answer: AB
QUESTION 142
Your company has a single Active Directory forest that has six domains. All DNS servers in the forest run Windows Server 2008 R2. You need to ensure that all public DNS queries are channeled through a single-caching-only DNS server. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. Disable the root hints.
B. Enable BIND secondaries.
C. Configure a forwarder to the caching DNS server.
D. Configure a GlobalNames host (A) record for the hostname of the caching DNS server.
Answer: AC
QUESTION 143
Contoso Ltd. has a single Active Directory forest that has five domains. Each domain has two DNS servers. Each DNS server hosts Active Directory-integrated zones for all five domains. All domain controllers run Windows Server 2008 R2. Contoso acquires a company named Tailspin Toys. Tailspin Toys has a single Active Directory forest that contains a single domain. You need to configure the DNS system in the Contoso forest to provide name resolution for resources in both forests. What should you do?
A. Configure client computers in the Contoso forest to use the Tailspin Toys DNS server as the alternate DNS server.
B. Create a new conditional forwarder and store it in Active Directory. Replicate the new conditional forwarder to all DNS servers in the Contoso forest.
C. Create a new application directory partition in the Contoso forest. Enlist the directory partition for all DNS servers.
D. Create a new host (A) record in the GlobalNames folder on one of the DNS servers in the Contoso forest. Configure the host (A) record by using the Tailspin Toys domain name and the IP address of the DNS server in the Tailspin Toys forest.
Answer: B
QUESTION 144
Your company has a single Active Directory forest that has an Active Directory domain named na.contoso.com. A server named Server1 runs the DNS Server server role. You notice stale resource records in the na.contoso.com zone. You have enabled DNS scavenging on Server1. Three weeks later, you notice that the stale resource records remain in na.contoso.com. You need to ensure that the stale resource records are removed from na.contoso.com. What should you do?
A. Stop and restart the DNS Server service on Server1.
B. Enable DNS scavenging on the na.contoso.com zone.
C. Run the dnscmd Server1 /AgeAllRecords command on Server1.
D. Run the dnscmd Server1 /StartScavenging command on Server1.
Answer: B
QUESTION 145
Your company has two servers that run Windows Server 2008 R2 named Server2 and Server3. Both servers have the DNS Server server role installed. Server3 is configured to forward all DNS requests to Server2.
You update a DNS record on Server2.
You need to ensure that Server3 is able to immediately resolve the updated DNS record.
What should you do?
A. Run the dnscmd . /clearcache command on Server3.
B. Run the ipconfig /flushdns command on Server3.
C. Decrease the Time-to-Live (TTL) on the Start of Authority (SOA) record of na.contoso.com to 15 minutes.
D. Increase the Retry Interval value on the Start of Authority (SOA) record of na.contoso.com to 15 minutes.
Answer: A
QUESTION 146
Your company has a main office and a branch office. The company network has two WINS servers. You have an application that requires NetBIOS name resolution. The WINS servers are configured as shown in the following table
You discover that the WINS addresses on all client computers in both offices are configured in the following order of use:
10.1.0.23
10.6.0.254
You reconfigure the WINS addresses on all client computers in the branch office in the following order of use:
10.6.0.254
10.1.0.23
After the reconfiguration, users in the branch office are unable to connect to the servers that are located in the main office. You need to restore name resolution in the branch office. What should you do?
A. Configure the burst handling option on DC2.
B. Configure DC1 and DC2 as WINS push/pull replication partners.
C. In the WINS server properties on DC1, increase the Renew interval setting to 1 day.
D. In the WINS server properties on DC2, increase the Renew interval setting to 1 day.
Answer: B
QUESTION 147
Your company has a server named Server1 that runs a Server Core installation of Windows Server 2008 R2, and the DNS Server server role. Server1 has one network interface named Local Area Connection. The static IP address of the network interface is configured as 10.0.0.1. You need to create a DNS zone named local.contoso.com on Server1. Which command should you use?
A. ipconfig /registerdns:local.contoso.com
B. dnscmd Server1 /ZoneAdd local.contoso.com /DSPrimary
C. dnscmd Server1 /ZoneAdd local.contoso.com /Primary /file local.contoso.com.dns
D. netsh interface ipv4 set dnsserver name="local.contoso.com" static 10.0.0.1 primary
Answer: C
QUESTION 148
Your company has a single domain named contoso.com. The contoso.com DNS zone is Active Directory-integrated. Your partner company has a single domain named partner.com. The partner.com DNS zone is Active Directory-integrated. The IP addresses of the DNS servers in the partner domain will change. You need to ensure name resolution for users in contoso.com to resources in partner.com. What should you do?
A. Create a stub zone for partner.com on each DNS server in contoso.com.
B. Configure the Zone Replication Scope for partner.com to replicate to all DNS servers in the forest.
C. Configure an application directory partition in the contoso.com forest. Enlist all DNS servers in the contoso.com forest in the partition.
D. Configure an application directory partition in the partner forest. Enlist all DNS servers in the partner forest in the partition.
Answer: A
QUESTION 149
Your company has an Active Directory forest. All domain controllers run the DNS Server server role. The company plans to decommission the WINS service. You need to enable forest-wide single name resolution. What should you do?
A. Enable WINS-R lookup in DNS.
B. Create Service Location (SRV) records for the single name resources.
C. Create an Active Directory-integrated zone named LegacyWINS. Create host (A) records for the single name resources.
D. Create an Active Directory-integrated zone named GlobalNames. Create host (A) records for the single name resources.
Answer: D
QUESTION 150
You manage a domain controller that runs Windows Server 2008 R2 and the DNS Server server role. The DNS server hosts an Active Directory-integrated zone for your domain. You need to provide a user with the ability to manage records in the zone. The user must not be able to modify the DNS server settings. What should you do?
A. Add the user to the DNSUpdateProxy Global security group.
B. Add the user to the DNSAdmins Domain Local security group.
C. Grant the user permissions on the zone.
D. Grant the user permissions on the DNS server.
Answer: C
OFFER Microsoft 70-649 PDF and VCE Free Download