CORRECTED (Previously BD)Your network contains an Active Directory domain named contoso.com. The
domain contains a domain controller named DC1 that runs Windows Server 2012 R2. DC1 has the DNS Server
server role installed.
The network contains client computers that run either Linux, Windows 7, or Windows 8. You have a standard
primary zone named adatum.com as shown in the exhibit. (Click the Exhibit button.)
You plan to configure Name Protection on all of the DHCP servers.
You need to configure the adatum.com zone to support Name Protection. Which two configurations should you
perform from DNS Manager? (Each correct answer presents part of the solution. Choose two.)
A.
Sign the zone.
B.
Store the zone in Active Directory.
C.
Modify the Security settings of the zone.
D.
Configure Dynamic updates.
E.
Add a DNS key record
Explanation:
http://technet.microsoft.com/en-us/library/ee941152(v=ws.10).aspx
B & D
Actually, it’s only D, as from what it is seen on the screen shot, zone type is already Active Directory – Integrated.
I think that screen shot is wrong.
https://technet.microsoft.com/en-us/library/ee941152(v=ws.10).aspx
I agree. I think its either the wrong picture or the question only needs one answer. Name protection requires Dynamic Updates to configured to secure and stored in AD integrated zone.
To correct myself.
In the scenario is written:
“You have a standard primary zone named adatum.com”
Ignore the screen shot (as it is wrong) and the answer is B & D
B.
Store the zone in Active Directory.
D.
Configure Dynamic updates.