Your network contains a DNS server named DNS1 that runs Windows Server 2008 R2.
You need to ensure that DNS1 only responds to DNS queries from computers that are located in the same subnet.
What should you configure?
A.
Interfaces from DNS Manager
B.
Security from DNS Manager
C.
Trust Anchors
D.
Windows Firewall
Explanation:
hmmm………you tell me.
The correct answer is A.
Explanation:
http://technet.microsoft.com/en-us/library/cc755068.aspx
its a badly worded question. Answer A would achieve this if connected routers were allowed to connect.
From your own link:-
Additional considerations
Restricting the DNS Server service to only listen on specific IP addresses is an effective security measure because only hosts on the same network subnet, or hosts with a router that connects them to that same segment, have access to the server.
The question states only hosts on the same subnet can connect therefore the answer must be D
One more vote for “D”