You manage a domain controller that runs Windows Server 2008 R2 and the DNS Server server role. The DNS server hosts an Active Directory-integrated zone for your domain.You need to provide a user with the ability to manage records in the zone. The user m

第1题：

Your network contains an Active Directory domain named contoso.com. The domain contains the  servers shown in the following table：     Server name  Operating system  Role   DC1  Windows Server 2008  Domain controller  DC2  Windows Server 2008 R2  Domain controller  DNS1  Windows Server 2008  DNS server  DNS2  Windows Server 2008 R2  DNS server     The functional level of the forest is Windows Server 2003. The functional level of the domain is  Windows Server 2003.   DNS1 and DNS2 host the contoso.com zone. All client computers run Windows 7 Enterprise.     You need to ensure that all of the names in the contoso.com zone are secured by using  DNSSEC.   What should you do first（）

• A、Change the functional level of the forest.
• B、Change the functional level of the domain.
• C、Upgrade DC1 to Windows Server 2008 R2.
• D、Upgrade DNS1 to Windows Server 2008 R2.

第2题：

Your company has a Berkley Internet Name Domain (BIND) DNS server named Server1 that hosts the contoso.com DNS zone. You plan to replace Server1 with a DNS server named Server2 that runs Windows Server 2003 Service Pack 2 (SP2). You need to configure DNS on Server2 to meet the following requirements: Retain all resource records currently in the contoso.com zone.Allow updates to resource records for the contoso.com zone on Server2.  What should you do? （）

• A、On Server2, configure a primary zone for contoso.com.  
• B、On Server2, configure a secondary zone for contoso.com. Configure the contoso.com zone on Server2 as a primary zone.  
• C、Copy the contoso.com.dns file from Server1 to the %systemroot%/System32/DNS folder on Server2. On Server2, restart the DNS Server service.  
• D、Copy the contoso.com.dns file from Server1 to the %systemroot%/System32/DNS folder on Server2. On Server2, create a secondary zone for contoso.com.

第3题：

You work as the IT professional in an international company which is named wiikigo. You are experienced in implementing and administering a network operating system. You are specialized in configuring IP addressing and services, configuring name resolution and network access and so on. You are in charge of a domain controller that runs windows server 2008 and the DNS server role. The dns server hosts an active directory-integrated zone for your domain. You need to provide a user with the ability to manage records in the zone. But the user must not so what action should you perform?（）

• A、The user permissions on the zone should be granted.
• B、The user permissions on the DNS zone should be granted.
• C、The user should be added to the DNSUpdateProxy Global security group.
• D、The user should be added to the DNSAdmins domain local security group.

第4题：

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 （SP2）. You have a DNS server named Server1 that hosts a primary zone for the domain. You have a DNS server named Server 2 that hosts a secondary zone for the domain.  You discover that the resource records on Server2 are different from the resource records on Server1. You need to ensure that the resource records are the same on Server1 and Server2.  What should you do？（）

• A、On Server2， select Reload in the DNS zone.
• B、On Server2， select Reload from Master in the DNS zone.
• C、On Server1， select Update Server Data File in the DNS zone.
• D、On Server1， deselect the Fail on load if bad zone data option.

第5题：

You have a DNS server named Server1 that hosts a primary zone for the domain. You have a DNS server named Server 2 that hosts a secondary zone for the domain.You discover that the resource records on Server2 are different from the resource records on Server1. You need to ensure that the resource records are the same on Server1 and Server2. What should you do?（）

• A、On Server2, select Reload in the DNS zone. 
• B、On Server2, select Reload from Master in the DNS zone. 
• C、On Server1, select Update Server Data File in the DNS zone. 
• D、On Server1, deselect the Fail on load if bad zone data option. 

第6题：

You have an Active Directory domain named contoso.com.   You have a domain controller named Server1 that is configured as a DNS server.   Server1 hosts a standard primary zone for contoso.com. The DNS configuration of Server1 is shown in  the exhibit. （Click the Exhibit button.）   You discover that stale resource records are not automatically removed from the contoso.com zone.   You need to ensure that the stale resource records are automatically removed from the contoso.com  zone.   What should you do（）

• A、Set the scavenging period of Server1 to 0 days.
• B、Modify the Server Aging/Scavenging properties.
• C、Configure the aging properties for the contoso.com zone.
• D、Convert the contoso.com zone to an Active Directory-integrated zone.

第7题：

Your company has a main office and two branch offices that are connected by WAN links. The main office runs the DNS service on three domain controllers. The zone for your domain is configured as an Active Directory-integrated zone. Each branch office has a single member server that hosts a secondary zone for the domain. The DNS servers in the branch offices use the main office DNS server as the DNS Master server for the zone. You need to minimize DNS zone transfer traffic over the WAN links. What should you do？（）

• A、Decrease the Retry Interval setting in the Start of Authority （SOA） record for the zone
• B、Decrease the Refresh Interval setting in the Start of Authority （SOA） record for the zone
• C、Increase the Refresh Interval setting in the Start of Authority （SOA） record for the zone
• D、Disable the netmask ordering option in the properties of the DNS master server for the zone.

第8题：

You manage a domain controller that runs Windows Server 2008 R2 and the DNS Server server role.The DNS server hosts an Active Directory-integrated zone for your domain.You need to provide a user with the ability to manage records in the zone. The user must not be able to modify the DNS server settings.What should you do？（）

• A、Add the user to the DNSUpdateProxy Global security group.
• B、Add the user to the DNSAdmins Domain Local security group.
• C、Grant the user permissions on the zone.
• D、Grant the user permissions on the DNS server.

第9题：

第10题：

Your network contains an Active Directory forest. All domain controllers run Windows Server 2008 and are configured as DNS servers. You have an Active Directory-integrated zone for contoso，com. You have a Unix-based DNS server， You need to configure your Windows Server 2008 environment to allow zone transfers of the contoso，com zone to the Unix-based DNS server. What should you do in the DNS Manager console（）

• A、Disable recursion.
• B、Create a stub zone.
• C、Create a secondary zone.
• D、Enable BIND secondaries.

第11题：

You have DNS server named DC1 that runs Windows Server 2003 Service Pack 2 （SP2）. DC1 hosts an Active Directory-integrated zone that has dynamic updates enabled.  You enable aging and scavenging for the zone.You discover that stale records are not being removed from the zone. You need ensure that stale records are removed from the zone.  What should you do？（）

• A、Reduce the Refresh interval for the zone.
• B、Enable aging and scavenging for the server.
• C、Reduce the No-Refresh interval for the zone.
• D、Open the DNS snap-in， right -click DC1， and select Update Server Data Files.

第12题：

Your network consists of a single Active Directory domain. You have a domain controller and a   member server that run Windows Server 2008 R2. Both servers are configured as DNS servers. Client  computers run either Windows XP Service Pack 3 or Windows 7.   You have a standard primary zone on the domain controller. The member server hosts a secondary copy  of the zone.You need to ensure that only authenticated users are allowed to update host （A） records in the DNS zone.   What should you do first（）

• A、On the member server， add a conditional forwarder.
• B、On the member server， install Active Directory Domain Services.
• C、Add all computer accounts to the DNSUpdateProxy group.
• D、Convert the standard primary zone to an Active Directory-integrated zone.

第13题：

Your network consists of an Active Directory forest that contains one domain named  contoso.com.     All domain controllers run Windows Server 2008 R2 and are configured as DNS servers. You  have two Active Directory-integrated zones： contoso.com and nwtraders.com.   You need to ensure a user is able to modify records in the contoso.com zone. You must prevent  the user from modifying the SOA record in the nwtraders.com zone.     What should you do（）

• A、From the DNS Manager console， modify the permissions of the contoso.com zone.
• B、From the DNS Manager console， modify the permissions of the nwtraders.com zone.
• C、From the Active Directory Users and Computers console， run the Delegation of Control Wizard.
• D、From the Active Directory Users and Computers console， modify the permissions of the Domain Controllers organiz

第14题：

You have DNS server named DC1 that runs Windows Server 2003 Service Pack 2 （SP2）. DC1 hosts an Active Directory-integrated zone that has dynamic updates enabled. You enable aging and scavenging for the zone.You discover that stale records are not being removed from the zone. You need ensure that stale records are removed from the zone. What should you do？（）

• A、Reduce the Refresh interval for the zone. 
• B、Enable aging and scavenging for the server. 
• C、Reduce the No-Refresh interval for the zone. 
• D、Open the DNS snap-in, right -click DC1, and select Update Server Data Files. 

第15题：

Your company has a single Active Directory forest that has an Active Directory domain named na.contoso.com. A server named Server1 runs the DNS Server server role. You notice stale resource records in the na.contoso.com zone. You have enabled DNS scavenging on Server1. Three weeks later, you notice that the stale resource records remain in na.contoso.com. You need to ensure that the stale resource records are removed from na.contoso.com. What should you do？（）

• A、Stop and restart the DNS Server service on Server1.
• B、Enable DNS scavenging on the na.contoso.com zone.
• C、Run the dnscmd Server1 /AgeAllRecords command on Server1.
• D、Run the dnscmd Server1 /StartScavenging command on Server1.

第16题：

Your company has a main office and two branch offices that are connected by WAN links. The main office runs the DNS Server service on three domain controllers. The zone for your domain is configured as an Active Directory-integrated zone. Each branch office has a single member server that hosts a secondary zone for the domain. The DNS servers in the branch offices use the main office DNS server as the DNS Master server for the zone. You need to minimize DNS zone transfer traffic over the WAN links. What should you do？（）

• A、Decrease the Retry Interval setting in the Start of Authority (SOA) record for the zone.
• B、Decrease the Refresh Interval setting in the Start of Authority (SOA) record for the zone.
• C、Increase the Refresh Interval setting in the Start of Authority (SOA) record for the zone.
• D、Disable the netmask ordering option in the properties of the DNS Master server for the zone.

第17题：

Your network consists of a single Active Directory domain.You have a domain controller named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).The DNS service is installed on Server1. Server1 contains only Active Directory-integrated zones. Zone transfers are disabled for all zones.You need to back up the DNS zones on Server1. What should you do? （）

• A、From a command prompt, run Nslookup.exe. 
• B、From Windows Backup, back up the system state. 
• C、From Windows Backup, back up %SystemRoot%/System32/DNS. 
• D、From the DNS snap-in, right-click Server1 and then click Export List.

第18题：