- Home
- Server Administration
- Windows
- Networking with Windows server 2016 (70-741)
6.
You use an ISATAP router to allow network connections between your IPv4 network and your IPv6 network through an ISATAP tunnel. Which DNS server configuration do you need on your DNS server in the IPv4 network?
- A.Configure SRV Record
- B.Configure DNSSEC
- C.Configure GlobalQueryBlockList
- D.Configure Round Robin.
- Answer & Explanation
- Report
Answer : (C)
Explanation :
Explanation :
| In the registry database of a DNS server, normally the ISATAP entry is part of the Global Query Block List. Although you can add an ISATAP host resource record manually to the zone, this still is blocked and clients cannot use it until you remove the ISATAP entry from the registry. |
7.
You add a DNS server with the IP address of 172.16.0.20 to the server-based forwarders list on your DNS server named DNS1, which is the authoritative DNS server for pearson.com. A conditional forwarder for the zone pearsonucertify.com still exists with the same IP address for the authoritative DNS server for pearsonucertify.com. To which DNS server will DNS1 forward DNS requests?
- A.DNS server in the forwarder list
- B.DNS server in the conditional fowarder list
- Answer & Explanation
- Report
Answer : [B]
Explanation :
Explanation :
| If conditional forwarders are defined for a given domain, they are used instead of server-level forwarders. |
8.
YYou have two domain controllers with an AD-integrated DNS server, named DNS1 and DNS2, in the forest root domain pearson.com. You also have one domain controller with an AD-integrated DNS server named DNS3 in the child domain usa.pearson.com. Now you set up an additional domain controller DNS4 at usa.pearson.com. You use the Active Directory Installation Wizard to promote DNS4 to a domain controller. On the DNS Options page, you notice the yellow note on the top of that page: “A delegation for this DNS server cannot be created because the authoritative parent zone cannot be found.” You need a solution with the least administrative effort. What is your next configuration step?
- A.Cancel the Active Directory Installation Wizard and set up the domain controller with PowerShell.
- B.Ignore the note and go forward with the Active Directory Installation Wizard.
- C.Restart DNS3 and repeat all steps in the Active Directory Installation Wizard.
- D.Ensure that DNS4 has a network connection to DNS1 or DNS2 and repeat all steps in the Active Directory Installation Wizard
- Answer & Explanation
- Report
Answer : [B]
Explanation :
Explanation :
|
You can ignore the note because a DNS delegation still was created with the setup of DNS3. You do not have to create a DNS delegation again. Canceling the wizard and trying to set up DNS4 as an additional domain controller for usa.pearson.com with PowerShell are not necessary because that requires too much administrative effort. The Install-ADDSDomainController PowerShell cmdlet has a parameter named CreateDNSDelegation. In this case, you can set that parameter to a value of $false. Restarting DNS2 and repeating all steps in the Active Directory Installation Wizard is not a solution because it is not a network connectivity problem from DNS4 to DNS3. When you install an additional domain controller such as DNS4, you must have network connectivity to the forest root domain controller. Verifying network connectivity to the forest root domain controllers is not a mistake, but repeating all steps in the Active Directory Installation Wizard is not required and takes too much effort. |
9.
You verify the DNS server settings. You control the socket pool size value with the PowerShell commands $dns = get-dnsserver and $dns.ServerSetting.SocketPoolSize. You notice a socket pool size value of 7500. You want to reconfigure that to the default settings. Which socket pool size should you choose?
- A.3500
- B.2500
- C.3000
- D.2000
- Answer & Explanation
- Report
Answer : [B]
Explanation :
Explanation :
| By default, the Windows Server 2016 DNS server opens a pool of 5000 UDP sockets: 2500 for IPv4 and 2500 for IPv6. The default socket pool size value is 2500. |
10.
You want to overwrite DNS server cache entries before the Cache TTL expires and you want to provide enhanced security against poisoning attacks. Which commands do you use? (Choose two.)
- A.Dnscmd /config /CacheLockingPercent 90
- B.Dnscmd /config /CacheLockingPercent 50
- C.Restart-Service DNS
- D.Dnscmd /clearcache
- Answer & Explanation
- Report
Answer : [A, C]
Explanation :
Explanation :
| Cache locking is configured as a percent value. For example, if the cache locking value is set to 50, the DNS server will not overwrite a cached entry for half the duration of the TTL. By default, the cache locking percent value is 100. This means that cached entries are not overwritten for the entire duration of the TTL. A low cache locking value increases the chance of a successful cache poisoning attack. Network traffic might be directed to a malicious site. After you have configured the new value for cache locking, you have to restart the DNS service. Clearing the DNS server cache is not necessary. |
|
|
||||||||||||||||||||||||||||
