You work as the network administrator at Domain.com. The Domain.com network consists of a single Active Directory domain named Domain.com. Domain.com has its headquarters located in London and branch office located in Paris. All servers on the Domain.com network run Windows Server 2008 and all client computers run Windows Vista.
Domain.com currently makes use of a computer named CERTKILLER-SR01 in the London office which has the DNS service role installed. During the course of the day you are informed by Domain.com that non-domain members are able to dynamically register DNS records. Domain.com has recently requested that you ensure that only the domain controllers of Domain.com are able to dynamically register their DNS registration information.
What should you do?
A.
You should consider ensuring that the zone transfers are enabled to Name Servers
B.
You should consider ensuring that the Authenticated Users group is removed
C.
You should consider ensuring that the dynamic updates are set to Secure Only.
D.
You should consider ensuring that the Everyone group is denied the Create All Child Objects permission.
Explanation:
In order to ensure that only domain members are able to register their DNS records dynamically you need to set the option Secure only for Dynamic updates. This will only allow the domain members to register their DNS records dynamically.Reference :
www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/cnet/cncf_imp_afpf.mspx