Your network contains two DNS servers named DNS1 and DNS2 that run Windows Server 2012 R2. DNS1 has
a primary zone named contoso.com. DNS2 has a secondary copy of the contoso.com zone.
You need to log the zone transfer packets sent between DNS1 and DNS2.
What should you configure?
A.
debug logging from DNS Manager
B.
logging from Windows Firewall with Advanced Security
C.
monitoring from DNS Manager
D.
a Data Collector Set (DCS) from Performance Monitor
Explanation:
Monitoring DNS with the DNS Console
The DNS management console includes functionality that enables you to use the console to monitor DNS
activity:*Event Logging tab: You can access the Event Logging tab located within the Properties dialog box of the DNS
server to specify the DNS events that you want to monitor. Through the Event Logging tab, you can limit the
events which are written to the DNS Events log.
*Monitoring tab: The Monitoring tab is also located within the Properties dialog box of the DNS server. This tab
allows you to test querying of the DNS server.
A) is the correct answer.
Debug Logging More detailed logging of the actual communication occurring on the DNS server can be gathered for inspection. Debug logging is disabled by default but can be enabled from the properties of the DNS server; Figure 6.31 displays the Debug Logging tab. This feature is valuable if the DNS server is not acting reliably. Although most DNS issues are resolved with proper IP connectivity, you will fi nd this tool useful when IP connectivity is etermined
not to be the cause. On rare occasions, we have had to verify whether specific requests were hitting the server, and this tool provided the information.