Exam 70-411 topic 3 question 13 discussion

Actual exam question from Microsoft's 70-411

Question #: 13
Topic #: 3

Your network contains an Active Directory domain named contoso.com.
You have a standard primary zone named contoso.com.
You need to ensure that only users who are members of a group named Group1 can create DNS records in the contoso.com zone. All other users must be prevented from creating, modifying, or deleting DNS records in the zone.
What should you do first?

A. Run the Zone Signing Wizard for the zone.
B. From the properties of the zone, modify the start of authority (SOA) record.
C. From the properties of the zone, change the zone type.
D. Run the New Delegation Wizard for the zone.

Show Suggested Answer

Suggested Answer: B 🗳️

by MSportJ at Sept. 13, 2019, 5:58 p.m.

Comments

Submit Cancel

Rezerestibeiro27

4 years, 11 months ago

C, it is..

upvoted 2 times

...

wazmac

5 years, 5 months ago

Definitely C, the Zone is not AD Integrated, when you make it AD Integrated the Security tab becomes available for the Zone to set permissions.

upvoted 4 times

...

TechExams

5 years, 7 months ago

Correct Answer: D. Run the New Delegation Wizard for the zone. Ref: http: //technet. microsoft. com/en-us/library/cc753014. aspx http: //technet. microsoft. com/en-us/library/cc726034. aspx http: //support. microsoft. com/kb/816101

upvoted 1 times

...