Your company has an active directory domain named ad.contoso.com. the company also has a public namespace named contoso.com. you need to ensure that public DNS zone records cannot be copied. You must achieve this goal without impacting the functionality o

第1题：

Your company has a single Active Directory domain named contoso.com. All servers in the domain run Windows Server 2003 Service Pack 2 (SP2). You have two DNS servers named DNS1 and DNS2. DNS1 hosts an Active Directory-integrated zone for contoso.com. DNS2 hosts a standard secondary zone for contoso.com. You need to monitor the total number of zone transfer requests.  What should you do?（）

• A、On DNS1 create a counter log.
• B、On DNS2 create a counter log.
• C、On DNS1 use Active Directory Replication Monitor.
• D、On DNS2 use Active Directory Replication Monitor.

第2题：

Your company has a single domain named contoso.com. The contoso.com DNS zone is Active Directoryintegrated. Your partner company has a single domain named partner.com. The partner.com DNS zone is Active Directory-integrated. The IP Addresses of the DNS servers in the partner domain will change. You need to ensure name resolution for users in contoso.com to resources in partner.com on each DNS server in contoso.com. What should you do？（） 

• A、Create a stub zone for partner.com on each DNS server in contoso.com
• B、Configure the zone replication scope for partner.com to replicate to all DNS servers in the forest
• C、Configure an application directory partition in the contoso.com forest. Enlist all DNS servers in the contoso.com forest in the partition
• D、Configure an application directory partition in the partner forest. Enlist all DNS servers in the partner forest in the partition.

第3题：

Your company has a main office and a branch office.   The network contains an Active Directory domain named contoso.com. The DNS zone for contoso.com is  configured as an Active Directory-integrated zone and is replicated to all domain controllers in the  domain.   The main office contains a writable domain controller named DC1. The branch office contains a read-only  domain controller （RODC） named RODC1. All domain controllers run Windows Server 2008 R2 and are  configured as DNS servers.   You uninstall the DNS server role from RODC1.   You need to prevent DNS records from replicating to RODC1.  What should you do（）

• A、Modify the replication scope for the contoso.com zone.
• B、Flush the DNS cache and enable cache locking on RODC1.
• C、Configure conditional forwarding for the contoso.com zone.
• D、Modify the zone transfer settings for the contoso.com zone.

第4题：

Explanation/Reference： QUESTION 29 You have an Exchange Server 2010 organization named contoso.com.  Your company plans to provide business continuity services for a company named Fabrikam. Fabrikam has an Exchange Server 2007 organization and uses the fabrikam.com SMTP domain. You need to configure your organization to queue and relay all e-mail messages sent to fabrikam.comfrom the Internet.  What should you do？（）

• A、Create a new remote domain， and then modify the mail exchange （MX） record for the fabrikam.com public DNS domain.
• B、Create a new remote domain， and then modify the mail exchange （MX） records for the contoso.com public DNS domain.
• C、Create a new External Relay Accepted Domain， and then modify the mail exchange （MX） records for the contoso.com public DNS domain.
• D、Create a new External Relay Accepted Domain， and then modify the mail exchange （MX） records for the fabrikam.com public DNS domain.

第5题：

Your network consists of a single Active Directory domain. All domain controllers run Windows  Server 2008 R2 and are configured as DNS servers.     A domain controller named DC1 has a standard primary zone for contoso.com. A domain  controller named DC2 has a standard secondary zone for contoso.com.  You need to ensure that the replication of the contoso.com zone is encrypted. You must not lose  any zone data.     What should you do（）

• A、On both servers， modify the interface that the DNS server listens on.
• B、Convert the primary zone into an Active Directory-integrated zone. Delete the secondary zone.
• C、Convert the primary zone into an Active Directory-integrated stub zone. Delete the secondary zone.
• D、Configure the zone transfer settings of the standard primary zone. Modify the Master Servers lists on the secondary

第6题：

Your company has a single Active Directory forest that has an Active Directory domain named na.contoso.com. A server named Server1 runs the DNS Server server role. You notice stale resource records in the na.contoso.com zone. You have enabled DNS scavenging on Server1. Three weeks later, you notice that the stale resource records remain in na.contoso.com. You need to ensure that the stale resource records are removed from na.contoso.com. What should you do？（）

• A、Stop and restart the DNS Server service on Server1.
• B、Enable DNS scavenging on the na.contoso.com zone.
• C、Run the dnscmd Server1 /AgeAllRecords command on Server1.
• D、Run the dnscmd Server1 /StartScavenging command on Server1.

第7题：

Your company has an Active Directory forest. All domain controllers run the DNS Server server role.The company plans to decommission the WINS service.You need to enable forest-wide single name resolution.What should you do？（）

• A、Enable WINS-R lookup in DNS.
• B、Create Service Location (SRV) records for the single name resources.
• C、Create an Active Directory-integrated zone named LegacyWINS. Create host (A) records for the single name resources.
• D、Create an Active Directory-integrated zone named GlobalNames. Create host (A) records for the single name resources.

第8题：

Your company has a main office and one branch office. The network consists of an Active Directory domain named contoso.com. All servers run Windows Server 2003 Service Pack 2 (SP2). In the main office, a server named DNS1 hosts the primary DNS zone for contoso.com. In the branch office, you configure a secondary DNS zone for contoso.com on a server named DNS2. You discover that the resource records are not being transferred to DNS2. You verify that the contoso.com zone on DNS2 is configured to have the correct IP address for DNS1. You need to ensure that the resource records for contoso.com are transferred to DNS2. What should you do?（）

• A、On DNS2, configure a stub zone for contoso.com. 
• B、On DNS2, configure a conditional forwarder for contoso.com. 
• C、On DNS1, configure a delegation record for DNS2.contoso.com. 
• D、On DNS1, add the IP address for DNS2 to the contoso.com Name Servers list.

第9题：

第10题：

Your company has an Active Directory domain named ad.contoso.com The company also has a public name space named contoso.com. You need to ensure that public DNS zone records can not be copied. You must achieve this goal without impacting the functionality of public DNS name resolutions. What should you do（）

• A、 Disable the notify feature for the contoso.com zone.
• B、 Disable the Allow-Read permission for the Everyone group on the contoso.com DNS domain.
• C、 Configure the All domain controllers in the domain zone replication option on ad.contoso.com.
• D、 Configure the Allow zone transfers only to servers listed on the Name Servers option on contoso.com

第11题：

Your company has a single domain named contoso.com. the contoso.com DNS zone is active directory-integrated. Your partner company has a single domain named partner.com. the partner.com. DNS zone is active directory-integrated. The IP addresses to the DNS servers in the partner domain will change. You need to ensure name resolution for users in contoso.com to resources in partner.com on each DNS server in contoso.com. what should you do?（）

• A、Create a stub zone for partner.com on each DNS server in contoso.com.
• B、Configure the zone replication scope for partner.com to replicate to all DNS servers In the forest.
• C、Configure an application directory partition in the contoso.com forest. Enlist all DNS servers in the contoso.com forest in the partition.
• D、Configure an application directory partition in the partner forest. Enlist all DNS servers in the partner forest in the partition.

第12题：

Your company has a single active directory forest that has an active directory domain named na.contoso.com.zone. you have enabled DNS scavenging on server1. Three weeks later, you notice that the stale resource records remain in na.contoso.com. you need to ensure that the stale resource records are removed from na.contoso.com. what should you do?（）

• A、Stop and restart the DNS service on server1.
• B、Enable DNS scavenging on the na.contoso.com zone.
• C、Run the dnscmd server1 /ageallrecords command on server1/.
• D、Run the dnscmd server1 /startscavenging command on server1.

第13题：

Your network contains an Active Directory domain named contoso.com. You run nslookup.exe as  shown in the following Command Prompt window.     You need to ensure that you can use Nslookup to list all of the service location （SRV） resource  records for contoso.com.     What should you modify（）

• A、the root hints of the DNS server
• B、the security settings of the zone
• C、the Windows Firewall settings on the DNS server
• D、the zone transfer settings of the zone

第14题：

Your company has an Active Directory forest. All domain controllers run the DNS server role. The company plans to decommission the WINS service. You need to enable forest-wide single name resolution. What should you do?（）

• A、Enable WINS-R lookup in DNS
• B、Create Service Locator （SRV） records for the single name resources
• C、Create an Active Directory-Integrated zone named LegacyWINS. Create host （A） records for the single name resources
• D、Create an Active Directory-integrated zone named GlobalNames. Create host （A） records for the single name resources

第15题：

You company has a single Active Directory domain named contoso.com. All servers in the domain run Windows Server 2003 Service Pack 2 (SP2). You have two DNS servers named DNS1 and DNS2. DNS1 hosts an Active Directory-integrated zone for contoso.com. DNS2 hosts a standard secondary zone for contoso.com. You need to monitor the total number of zone transfer requests.  What should you do?（）

• A、On DNS1 create a counter log.
• B、On DNS2 create a counter log.
• C、On DNS1 use Active Directory Replication Monitor.
• D、On DNS2 use Active Directory Replication Monitor.

第16题：

Your company has a single domain named contoso.com. The contoso.com DNS zone is Active Directory-integrated. Your partner company has a single domain named partner.com. The partner.com DNS zone is Active Directory-integrated. The IP addresses of the DNS servers in the partner domain will change. You need to ensure name resolution for users in contoso.com to resources in partner.com. What should you do？（）

• A、Create a stub zone for partner.com on each DNS server in contoso.com.
• B、Configure the Zone Replication Scope for partner.com to replicate to all DNS servers in the forest.
• C、Configure an application directory partition in the contoso.com forest. Enlist all DNS servers in the contoso.com forest in the partition.
• D、Configure an application directory partition in the partner forest. Enlist all DNS servers in the partner forest in the partition.

第17题：