Your network contains a single Active Directory domain named contoso.com. The domain contains two domain controllers named DC1 and DC2 that run Windows Server 2008 R2. DC1 hosts a primary zone for contoso.com.
DC2 hosts a secondary zone for contosto.com. On DC1, you change the zone to an Active Directory-integrated zone and configure the zone to accept secure dynamic updates only.
You need to ensure that DC2 can accept secure dynamic updates to the contoso.com zone.
Which command should you run?
A.
dnscmd.exe dc2.contoso.com /createdirectorypartition dns.contoso.com
B.
dnscmd.exe dc2.contoso.com /zoneresettype contoso.com /dsprimary
C.
dnslint.exe /ql
D.
repadmin.exe /syncall /force
There are no correct answers for this question.
Only Active Directory Integrated zones can accept secure dynamic updates. Yes, I know the reference is a bit dated, but here it is: http://technet.microsoft.com/en-us/library/cc959275.aspx
In order to go from a secondary zone to an Active Directory Integrated zone using dnscmd, you must first convert the zone to a primary zone. http://technet.microsoft.com/en-us/library/ee649181(v=ws.10).aspx
It’s questions like this one (EXACTLY like this one…*cough*) that caused me to fail my 640 exam yesterday… 🙁