Exam 70-744 topic 1 question 164 discussion

Actual exam question from Microsoft's 70-744

Question #: 164
Topic #: 1

Your network contains an Active Directory domain named contoso.com.
All DNS servers host an Active Directory-integrated zone for the domain that is DNSSEC-signed. All the DNS servers have a trust anchor installed for a DNS zone named fabrikam.com.
For all the computers in the domain, you configure a name resolution policy that enforces DNSSEC validation for the contoso.com and fabrikam.com DNS namespaces.
You need to verify whether the trust anchor is valid.
What should you do?

A. On a domain-joined computer, run Resolve-DnsName to query a DNS server that hosts the fabrikam.com zone for a DNS record in the fabrikam.com zone.
B. On a domain-joined computer, run Resolve-DnsName to query a domain controller for a DNS record in the fabrikam.com zone.
C. On a domain-joined computer, run Get-DnsServerZone.
D. On a domain controller, run Get-DnsServerDnsZoneSetting.

Show Suggested Answer

Suggested Answer: A 🗳️
References:
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn593652(v%3Dws.11)

by Maku5555 at Oct. 31, 2020, 8:05 p.m.

Comments

Submit Cancel

SamsOtro

4 years, 5 months ago

Agree with A - run Resolve-DnsName to query a DNS server that hosts the zone.

upvoted 2 times

...

Maku5555

4 years, 6 months ago

Is it correct?

upvoted 1 times

algerianphoenix

4 years, 6 months ago

Yes, it is correct.

upvoted 2 times

...

Exam 70-744 All Questions

View all questions & answers for the 70-744 exam

Exam 70-744 topic 1 question 164 discussion

Comments

SamsOtro

Maku5555

algerianphoenix

SY0-701