Exam 70-412 topic 3 question 216 discussion

Actual exam question from Microsoft's 70-412

Question #: 216
Topic #: 3

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2 and has the DNS Server server role installed. Server1 is configured to use a DNS server from an Internet Service Provider (ISP) as a forwarder. Corporate management requires that client computers only resolve names of contoso.com computers.
You need to configure Server1 to resolve names in the contoso.com zone only.
What should you do on Server1?

A. From DNS Manager, modify the root hints of Server1.
B. From Windows PowerShell, run the Remove-DnsServerForwarder cmdlet.
C. From Windows PowerShell, run theSet-NetDnsTransitionConfiguration cmdlet.
D. From DNS Manager, modify the Advanced properties of Server1.

Show Suggested Answer

Suggested Answer: A 🗳️
If the DNS server does not know the address of the requested site, then itwill forward the request to another DNS server. Inorder to do so, the DNS server must know of the IP address of another DNS server that it can forward the request to. This is the job of root hints. Root hints provides a list of IP addresses of DNS serversthat are considered to be authoritative at the root level of the DNS hierarchy (also known as root name server). http://technet.microsoft.com/en-us/library/ee649221(v=ws.10).aspx http://technet.microsoft.com/en-us/library/jj649867.aspx http://technet.microsoft.com/en-us/library/jj613703.aspx

by wazmac at April 18, 2020, 6:08 a.m.

Comments

Submit Cancel

stoy123

4 years, 5 months ago

I agree on A, by forwarding the request to the ISP DNS, the local DNS is not actually performing the resolution itself.

upvoted 1 times

...

wazmac

4 years, 11 months ago

I stil think its D - If you were to modify the root hints, then the server would still be able to use its forwader to send requests to the ISP DNS. I think the correct answer would be to edit the advanced options and disable recursion. This also disables forwarders so that the DNS server could only resolve names it was authoritative for.

upvoted 1 times

...

benynek

5 years ago

By deleting the root hints, no other than the local DNS name resolution will function. The answer is correct.

upvoted 1 times

...

wazmac

5 years, 2 months ago

Answer should be D - From DNS Manager, modify the Advanced properties of Server1. You must assume that you use default settings, complemented with the information provided in the question. -If you modify (delete) root hints, you are still able to query DNS via the Forwarder(s). -If you use the cmdlet Remove-DnsServerForwarder, you are still able to query DNS via the Root hints (root hints are set by default). -The Set-NetDnsTransitionConfiguration is an IPv4 IPv6 transition protocol. -The only option to stop DNS queries on/to the internet is to select “Disable recursion (also disables forwarders)”. This is the only option to block both Forwarders & Root hints.

upvoted 1 times

...