How would you ensure that ABC_SR12 does not perform name resolution of Internet host names for the client computers?

You work as an administrator at ABC.com. The ABC.com network consists of a single domain
named ABC.com. All servers in the ABC.com domain have Windows Server 2012 R2 installed and
all client computers have Windows 8 installed.
All client computers are connected to the Internet via an Internet Proxy Server named ABC_SR11.
You add the DNS Server server role on a server named ABC_SR12 and make ABC_SR12 the
primary DNS server on the client computers.
How would you ensure that ABC_SR12 does not perform name resolution of Internet host names
for the client computers?

You work as an administrator at ABC.com. The ABC.com network consists of a single domain
named ABC.com. All servers in the ABC.com domain have Windows Server 2012 R2 installed and
all client computers have Windows 8 installed.
All client computers are connected to the Internet via an Internet Proxy Server named ABC_SR11.
You add the DNS Server server role on a server named ABC_SR12 and make ABC_SR12 the
primary DNS server on the client computers.
How would you ensure that ABC_SR12 does not perform name resolution of Internet host names
for the client computers?

A.
You should configure the DNS zone on ABC_SR12 as a stub zone.

B.
You should configure the DNS zone on ABC_SR12 as an Active Directory-Integrated zone.

C.
You should configure the DNS zone on ABC_SR12 as a Standard Primary zone.

D.
You should configure the DNS zone on ABC_SR12 as a Secondary zone.

Explanation:



Leave a Reply 8

Your email address will not be published. Required fields are marked *


Robert

Robert

B is the best choice

Doug

Doug

A is the Microsoft answer (for some reason they just LOVE stub zones). B is the DNS administrators answer that would allow proper DNS redundancy. I’ve actually argued this with newbie Microsoft support people while troubleshooting a hospital companies DNS replication issues and been refunded support fees/hours by Microsoft for their flaw in this thought.

In my experience I’ve found AD integrated conditional forwarding to ALWAYS be more reliable than stub zones, especially in complex trusted domain environments.

robber

robber

They are all wrong.

correct answers could be:
add a root (“.”) zone to server12
no forwarder and remove the roothints.
making sure server12 can’t connect to an upstream (forwarder) dns server or roothints by configuring the firewall.

If you change C. to:
You should configure a(instead the)DNS zone on ABC_SR12 as a Standard Primary zone.
or to:
You should configure the root DNS zone on ABC_SR12 as a Standard Primary zone.
it would be the correct answers. if this is on the exam i’d go for C.

robber

robber

edit: B wouldn’t be correct as you don’t want to replicate this zone by mistake. it should just live on server12.

MancaMulas

MancaMulas

For the same reason you referred i chose C, before i looked in to the answer.
Now i’m not sure which one to choose A or C…

Josiah

Josiah

A stub zone is a copy of a zone that contains only those resource records that are necessary to identify the authoritative Domain Name System (DNS) servers for that zone. Typically, you use a stub zone to resolve names between separate DNS namespaces.