You work as the network administrator at Domain.com. The Domain.com network consists of a single Active Directory forest containing a single domain named Domain.com. All servers on the Domain.com network run Windows Server 2008 and all client computers run Windows Vista. The Domain.com network currently has two Active Directory-integrated zones: Domain.com and Weyland.com.
During the course of the day you receive instruction from Domain.com to ensure that Rory Allen from the Paris office Weyland.com zone is allowed to modify records in the Domain.com zone. Domain.com additionally wants you to prevent Rory Allen from modifying the SOA record in the Domain.com zone.
What should you do?
A.
You should consider having the permission of the Weyland.com zone modified by accessing the DNS Manager Console.
B.
You should consider having the Domain Controllers organizational unit modified by accessing the Active Directory Users and Computers console.
C.
You should consider having the permissions of the Domain.com zone modified by accessing the DNS Manager Console.
D.
You should consider having the user permissions on Domain.com modified to include all the users.
You should then have Rory Allen’s permissions on Domain.com configured to allow only the administrators group to modify the records.
Explanation:
In the scenario you should set the permissions of Domain.com using DNS Manager Console
which would allow you to prevent users from modifying the SOA record in the Domain.com zone. You set permissions for network users to modify records in Domain.com but setting permissions on the Active Directory-integrated zone would prevent users from modifying anything else on other zones.