Contoso， Ltd. has an Active Directory domain named ad.contoso.com. Fabrikam， Inc. has an  Active Directory domain named intranet.fabrikam.com.     Fabrikam’s security policy prohibits the transfer of internal DNS zone data outside the Fabrikam  network. 

第1题：

Contoso, Ltd. has an Active Directory domain named ad.contoso.com. Fabrikam, Inc. has an Active   Directory domain named intranet.fabrikam.com.   Fabrikams security policy prohibits the transfer of internal DNS zone data outside the Fabrikam network.   You need to ensure that the Contoso users are able to resolve names from the intranet.fabrikam.com  domain.   What should you do（） 

• A、Create a new stub zone for the intranet.fabrikam.com domain.
• B、Configure conditional forwarding for the intranet.fabrikam.com domain.
• C、Create a standard secondary zone for the intranet.fabrikam.com domain.
• D、Create an Active Directoryintegrated zone for the intranet.fabrikam.com domain.

第2题：

Your company has an Active Directory domain named ad.contoso.com. All client computers run Windows Vista.  The company has recently acquired a company that has an Active Directory domain named ad.fabrikam.com. A two-way forest trust is established between the ad.fabrikam.comdomain and the ad.contoso.com domain. You need to edit the ad.contoso.com domain Group Policy object （GPO） to enable users in the ad.contoso.com domain to access resources in thead.fabrikam.com domain. What should you do？（）

• A、Configure the DNS Suffix Search List option to ad.contoso.com， ad.fabrikam.com.
• B、Configure the Allow DNS Suffix Appending to Unqualified Multi-Label Name Queries option to True.
• C、Configure the Primary DNS Suffix option to ad.contoso.com， ad.fabrikam.com. Configure the Primary DNS Suffix Devolution option to True.
• D、Configure the Primary DNS Suffix option to ad.contoso.com， ad.fabrikam.com. Configure the Primary DNS Suffix Devolution option to False.

第3题：

Your company has an Active Directory domain named contoso.com. FS1 is a member server in  contoso.com. You add a second network interface card, NIC2, to FS1 and connect NIC2 to a subnet that contains computers in a DNS domain named fabrikam.com. Fabrikam.com has a DHCP server and a  DNS server.   Users in fabrikam.com are unable to resolve FS1 by using DNS.  The safer , easier way to help you pass any IT exams.  8 / 90   You need to ensure that FS1 has an A record in the fabrikam.com DNS zone.   What are two possible ways to achieve this goal（）

• A、Configure the DHCP server in fabrikam.com with the scope option 044 WINS/NBNS Servers.
• B、Configure the DHCP server in fabrikam.com by setting the scope option 015 DNS Domain Name to the domain name fabrikam.com.
• C、Configure NIC2 by configuring the Append these DNS suffixes （in order）： option.
• D、Configure NIC2 by configuring the Use this connections DNS suffix in DNS registration option.
• E、Configure the DHCP server in contoso.com by setting the scope option 015 DNS Domain Name to the  domain name fabrikam.com.

第4题：

You are the network administrator for Fabrikam， Inc. The network consists of a single Active Directory domain named fabrikam.com. A Windows Server 2003 computer named Server1 functions as the DNS server for the domain.Wingtip Toys is a division of Fabrikam， Inc. The Wingtip Toys network consists of a single Active Directory domain named wingtiptoys.com. Server1 is a secondary zone server for wingtiptoys.com.You are monitoring notification traffic between the two domains. You need to keep a record of when the primary DNS server for wingtiptoys.com informs Server1 of available changes in the wingtiptoys.com zone. What should you do？（）

• A、Use the Performance console to create a log of the DNS performance counter Notification Received on Server1.
• B、Enable debug logging on Server1. Configure the log to record Notification events.
• C、Run the replmon command to monitor replication events on Server1.
• D、Run the dcdiag command to check DNS registration on Server1.

第5题：

Your network consists of a single Active Directory domain. All domain controllers run Windows  Server 2008 R2 and are configured as DNS servers.     A domain controller named DC1 has a standard primary zone for contoso.com. A domain  controller named DC2 has a standard secondary zone for contoso.com.  You need to ensure that the replication of the contoso.com zone is encrypted. You must not lose  any zone data.     What should you do（）

• A、On both servers， modify the interface that the DNS server listens on.
• B、Convert the primary zone into an Active Directory-integrated zone. Delete the secondary zone.
• C、Convert the primary zone into an Active Directory-integrated stub zone. Delete the secondary zone.
• D、Configure the zone transfer settings of the standard primary zone. Modify the Master Servers lists on the secondary

第6题：

Your company has two Active Directory forests as shown in the following table：     Forest name  Forest functional level  Domain（s）  contoso.com  Windows Server 2008  contoso.com   fabrikam.com  Windows Server 2008  fabrikam.com  eng.fabrikam.com     The forests are connected by using a two-way forest trust. Each trust direction is configured with  forest-wide authentication. The new security policy of the company prohibits users from the  eng.fabrikam.com domain to access resources in the contoso.com domain.     You need to configure the forest trust to meet the new security policy requirement.     What should you do（）

• A、Delete the outgoing forest trust in the contoso.com domain.
• B、Delete the incoming forest trust in the contoso.com domain.
• C、Change the properties of the existing incoming forest trust in the contoso.com domain from Forest-wide authenticat
• D、Change the properties of the existing outgoing forest trust in the contoso.com domain to exclude *.eng.fabrikam.com

第7题：

Your company has an Active Directory domain named ad.contoso.com All client computers run Windows Vista. The company has recently acquired a company that has an Active Directory domain named ad. fabrikam.com. A two-way forest trust is established between the ad.fabrikam.com domain and the ad. contoso.com domain. You need to edit the ad.contoso.com domain Group Policy Object （GPO） to enable users in ad.contoso.com domain to access resources in the ad.frabrikam.com domain. What should you do？（） 

• A、Configure the DNS suffix Search List option to ad.contoso.com， ad.fabrikam.com
• B、Configure the Allow DNS Suffix appending to Unqualified Multi-Label Name Queries option to True
• C、Configure the Primary DNS Suffix to ad.contoso.com， ad.fabrikam.com. configure the Primary DNS suffix Devolution option to True
• D、Configure the Primary DNS Suffix to ad.contoso.com， ad.fabrikam.com. configure the Primary DNS suffix Devolution option to False

第8题：

Contoso， Ltd has an Active Directory domain named ad.contoso.com Fabrikam， Inc. has an Active Directory domain named intranet.fabrikam.com. Fabrikams security policy prohibits the transfer of internal DNS zone data outside the Fabrikam network. You need to ensure that the Contoso users are able to resolve names from the intranet.fabrikam.com domain. What should you do（）

• A、Create a new stub zone for the intranet.fabrikam，com domain.
• B、Configure conditional forwarding for the intranet.fabrikam.com domain.
• C、Create a standard secondary zone for the intranet.fabrikam.com domain.
• D、Create an Active DirectoryCintegrated zone for the intranet.fabrikam.com domain.

第9题：

Your company， Contoso， Ltd.， has a main office and a branch office. The offices are connected  by a WAN link. Contoso has an Active Directory forest that contains a single domain named  ad.contoso.com.     The ad.contoso.com domain contains one domain controller named DC1 that is located in the  main office. DC1 is configured as a DNS server for the ad.contoso.com DNS zone. This zone is  configured as a standard primary zone.   You install a new domain controller named DC2 in the branch office. You install DNS on DC2.  You need to ensure that the DNS service can update records and resolve DNS queries in the  event that a WAN link fails.     What should you do（）

• A、Create a new stub zone named ad.contoso.com on DC2.
• B、Configure the DNS server on DC2 to forward requests to DC1.
• C、Create a new secondary zone named ad.contoso.com on DC2.
• D、Convert the ad.contoso.com zone on DC1 to an Active Directory-integrated zone.

第10题：

Your company has a single Active Directory directory service forest named contoso.com. A partner organization has a forest named fabrikam.com. Both forests are set to the Windows 2000 forest functional  level. Domains named contoso.com and fabrikam.com are set to Windows 2000 Native Mode. You plan to create a forest trust relationship between contoso.com and fabrikam.com. You need to be able to configure selective authentication for the trust relationship. What should you do？（）

• A、 Raise the forest functional level on contoso.com and fabrikam.com to Windows Server 2003.
• B、 Raise the domain functional level on contoso.com and fabrikam.com to Windows Server 2003.
• C、 Raise the domain functional level and the forest functional level on contoso.com to Windows Server 2003.
• D、 Raise the domain functional level and the forest functional level on fabrikam.com to Windows Server 2003.

第11题：

Your company has a single Active Directory domain named contoso.com. All servers in the domain run Windows Server 2003 Service Pack 2 (SP2). You have two DNS servers named DNS1 and DNS2. DNS1 hosts an Active Directory-integrated zone for contoso.com. DNS2 hosts a standard secondary zone for contoso.com. You need to monitor the total number of zone transfer requests.  What should you do?（）

• A、On DNS1 create a counter log.
• B、On DNS2 create a counter log.
• C、On DNS1 use Active Directory Replication Monitor.
• D、On DNS2 use Active Directory Replication Monitor.

第12题：

Your company has an Active Directory domain named ad.contoso.com. All client computers run Windows 7.The company has recently acquired a company that has an Active Directory domain named ad.fabrikam.com. A two-way forest trust is established between the ad.fabrikam.com domain and the ad.contoso.com domain.You need to edit the ad.contoso.com domain Group Policy object (GPO) to enable users in the ad.contoso.com domain to access resources in the ad.fabrikam.com domain.What should you do？（）

• A、Configure the DNS Suffix Search List option to ad.contoso.com, ad.fabrikam.com.
• B、Configure the Allow DNS Suffix Appending to Unqualified Multi-Label Name Queries option to True.
• C、Configure the Primary DNS Suffix option to ad.contoso.com, ad.fabrikam.com. Configure the Primary DNS Suffix Devolution option to True.
• D、Configure the Primary DNS Suffix option to ad.contoso.com, ad.fabrikam.com. Configure the Primary DNS Suffix Devolution option to False.

第13题：

Your company has two Active Directory forests as shown in the following table.  Forest name  Forest functional level Domain（s）  contoso.com  Windows Server 2008  contoso.com  fabrikam.com  Windows Server 2008  fabrikam.com eng.fabrikam.com   The forests are connected by using a two-way forest trust. Each trust direction is configured with  forest-wide  authentication. The  new  security  policy  of  the  company  prohibits  users  from  the  eng.fabrikam.com domain to access resources in the contoso.com domain.   You need to configure the forest trust to meet the new security policy requirement.   What should you do（）

• A、Delete the outgoing forest trust in the contoso.com domain.
• B、Delete the incoming forest trust in the contoso.com domain.
• C、Change the properties of the existing incoming forest trust in the contoso.com domain from  Forest-wide authentication to Selective authentication.
• D、Change the properties of the existing outgoing forest trust in the contoso.com domain to Exclude  *.eng.fabrikam.com from the Name Suffix Routing trust properties

第14题：

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 and are configured as DNS servers. A domain controller named DC1 has a standard primary zone for contoso，com. A domain controller named DC2 has a standard secondary zone for contoso，com. You need to ensure that the replication of the contoso，com zone is encrypted. You must not lose any zone data. What should you do（）

• A、On both servers， modify the interface that the DNS server listens on.
• B、Convert the primary zone into an Active Directory-integrated zone. Delete the secondary zone.
• C、Convert the primary zone into an Active Directory-integrated stub zone. Delete the secondary zone.
• D、Configure the zone transfer settings of the standard primary zone. Modify the Master Servers lists on the secondary zone.

第15题：

Your company has an active directory domain named ad.contoso.com all client computers run windows vista. The company has recently acquired a company that has an active directory domain named ad.fabrikam.com. a two-way forest trust is established between the ad.fabrikam.com domain and the ad.contoso.com domain. You need to edit the ad.contoso.com domain group policy object (GPO) to enable users in ad.contoso.com domain to access resources in the ad.frabrikam.com domain.What should you do?（）

• A、Configure the DNS suffix searc List option to ad.contoso.com, ad.fabrikam.com .
• B、Configure the allow DNS suffix appending to unqualified milti-label name queries option to true.
• C、Configure the primary DNS suffix to ad.contoso.com, ad.fabrikam.com. configure the primary DNS suffix devolution option to true.
• D、Configure the primary DNS Suffix to ad.contoso.com, ad.fabrikam.com. configure the primary DNS suffix devolution option to false.

第16题：