Your network contains an Active Directory domain named contoso.com.
The domain contains a domain controller named DC1 that runs Windows Server 2012 R2. DC1
has the DNS Server server role installed.
The network contains client computers that run either Linux, Windows 7, or Windows 8.
You have a zone named adatum.com as shown in the exhibit. (Click the Exhibit button.)
You plan to configure Name Protection on all of the DHCP servers.
You need to configure the adatum.com zone to support Name Protection.
Which two configurations should you perform from DNS Manager? (Each correct answer presents
part of the solution. Choose two.)
A.
Sign the zone.
B.
Store the zone in Active Directory.
C.
Modify the Security settings of the zone.
D.
Configure Dynamic updates.
E.
Add a DNS key record
Explanation:
http://technet.microsoft.com/en-us/library/ee941152(v=ws.10).aspx
Zone should be AD integrated, and dynamic updates need to be configured.
Think image is wrong, as the zone transfer tab is visible (=AD integrated)
MikeZZL
Correct answer is B and D, but the exhibit is not from tis question, since properties in the image in “Type” show “Active Directory-Integrated” and the “Security” tab appears, which means it’s already AD integrated.
Dynamic Updates are in “None” and should be changed to “Secure Only”.