- Home
- Server Administration
- Windows
- Networking with Windows server 2016 (70-741)
1.
Which types of DNS resource records cannot be created automatically? (You do not want to use scripts.)
- A.SRV
- B.TXT
- C.A
- D.MX
- Answer & Explanation
- Report
Answer : [B, D]
Explanation :
Explanation :
| Domain controller SRV records are typically registered automatically if you install a new domain controller. DCs register the following SRV records automatically: _ldap, _kerberos, _gc, and _kpasswd. If you have to set up Skype for Business or other services, you might have to add SRV records manually. SRV records can be created manually and automatically. TXT and MX records normally have to be added manually into the zone. (Exception: You can write PowerShell scripts to automatically add resource records such as TXT or MX. Records normally are registered automatically through the dynamic update process, but they also can be added manually in the DNS manager console.) |
2.
Which global DNS setting can be used as a DNS load-balancing configuration setting?
- A.Enable DNSSEC
- B.Enable Round Robin
- C.Enable Cache Against Pollution
- D.Enable BIND Secondaries
- Answer & Explanation
- Report
Answer : [B]
Explanation :
Explanation :
| Round robin is enabled by default on a Windows Server 2016 DNS server. With this setting, you can distribute web requests and network traffic through web servers. If you enable DNSSEC, you get more security. With the Enable Cache Against Pollution setting enabled in the DNS server properties, your DNS server ignores DNS resource records that come from servers that are not authoritative for them, to provide more security. If you enable BIND secondaries, you can use UNIX BIND DNS servers together with Microsoft DNS servers. |
3.
Which DNS zone type uses RPC network traffic for replication of DNS data?
- A.Primary zone type
- B.Secondary zone type
- C.AD-integrated zone type
- D.Stub zone type
- Answer & Explanation
- Report
Answer : [C]
Explanation :
Explanation :
| DNS data such as resource records in an Active Directory–integrated DNS zone are stored in the DomainDNSZones or ForestDNSZones Active Directory partition as AD objects and are replicated through the RPC network protocol. By default, this kind of network traffic runs encrypted. If you store resource records in a primary zone and you want to replicate them to a secondary DNS server, the terminology changes from zone replication to zone transfer. In this scenario, you have to allow zone transfer first, and the zone transfer network traffic between primary and secondary DNS servers is unencrypted. If you use an Active Directory–integrated DNS zone and you want to replicate that zone to a secondary DNS server, you also first have to enable zone transfer. In this case, zone transfer also produces unencrypted network traffic. |
4.
You have two domains named pearson.com and a child domain named usa.pearson.com. The test.com zone (ADintegrated) resides on DNS1 and DNS2 (both in pearson.com). You must replicate the DNS data from test.com through AD replication only to DNS3 (usa.pearson.com). Which AD partition should you use?
- A.DomainDNSZones
- B.ForestDNSZones
- C.Custom application directory partition
- D.Configuration partition
- Answer & Explanation
- Report
Answer : [C]
Explanation :
Explanation :
| Here you want to replicate DNS data through Active Directory replication only to a specific DNS server, not to all servers in the domain or all servers in the forest, which are the two base possibilities through DomainDNSZones and ForestDNSZones. You must create a custom application directory partition and define the replication partners individually. In the zone properties of the test.com zone, you must change the replication scope to the name of the custom application directory partition. |
5.
You want to back up only your Active Directory–integrated zone (pearson.com) on your Windows Server 2016 DNS server named DNS1. Which command you can use for that?
- A.dnscmd DNS1 /ZoneExport “pearson.com” “pearson.com.bak”
- B.Export-DnsServerZone -Name “pearson.com” -FileName “pearson.com”
- C.Wbadmin.exe Start SystemStateBackup -backuptarget: E:
- D.Export-Csv -path pearson.com.csv
- Answer & Explanation
- Report
Answer : [A, B]
Explanation :
Explanation :
| You want to back up only the DNS data from the zone; you do not want to back up the complete Active Directory, including DNS zone data. Therefore, a system state backup is not the right choice; you would back up too much. With the Export-Csv PowerShell cmdlet, you cannot back up the DNS zone. With the dnscmd.exe tool, you can back up (export) zone data into a bak-file. With the PowerShell command Export-DnsServerZone, you also can back up DNS data from the zone. |
|
|
||||||||||||||||||||||||||||
