Exam 70-741 topic 1 question 12 discussion

Actual exam question from Microsoft's 70-741

Question #: 12
Topic #: 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. All client computers run Windows 10.
On Server1, you have the following zone configuration.

You have the following subnets defined on Server1.

You need to prevent Server1 from resolving queries from DNS clients located on Subnet4. Server1 must resolve queries from all other DNS clients.
Solution: From Windows PowerShell on Server1, you run the Add-DnsServerQueryResolutionPolicy cmdlet.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: A 🗳️
https://technet.microsoft.com/en-us/itpro/powershell/windows/dns-server/add-dnsserverqueryresolutionpolicy

by coleman at Nov. 5, 2019, 1:01 p.m.

Comments

Submit Cancel

coleman

Highly Voted 5 years, 7 months ago

From Windows Firewall with Advanced Security on Server1, you create an inbound rule. & From Windows PowerShell on Server1, you run the Add-DnsServerQueryResolutionPolicy cmdlet. are correct .

upvoted 9 times

Ant0ny

5 years, 4 months ago

I dont think you can create a rule to a specific subnet from Windows Firewall can you?

upvoted 1 times

rohw

5 years, 4 months ago

After you create the firewall rule, you can go back and edit it to apply to specific IP addresses, ranges, or subnets.

upvoted 1 times

...

jelly_baby

5 years, 2 months ago

Even though the Firewall option is technically true, there was no Firewall content in the 70-741 exam and you need to answer it 'the Microsoft way'. Microsoft want you to answer it based on what you learned for it's objectives. Add-DnsServerQueryResolutionPolicy is the ONLY way according to this exam.

upvoted 7 times

shaunakpandey

5 years ago

I think Add-DnsServerQueryResolutionPolicy cmdlet will do the trick. you cannot do it by setting a inbound rule in this scenario is because all these zone are configured within server1 itself, therefore, there will be no inbound connection has to be established at the first place.

upvoted 2 times

...

Dave_Holden

Highly Voted 5 years, 5 months ago

A is correct. The 741 exam doesn't even cover any firewall content! That should be enough of a red herring for anyone. You have to use a DNS policy to set a query rule.

upvoted 9 times

...

Kamikazekiller

Most Recent 4 years, 11 months ago

Answer is A

upvoted 2 times

...

ATL

5 years ago

This one was in the exam

upvoted 3 times

...

Nhan

5 years, 4 months ago

PS C:\> Add-DnsServerQueryResolutionPolicy -Name "LBPolicy" -ZoneName "contoso.com" -Action ALLOW -FQDN "EQ,career.contoso.com" -ZoneScope "NorthAmericaZoneScope,7;EuropeZoneScope,3" -PassThru Name ProcessingOrder IsEnabled Action ---- --------------- --------- ------ LBPolicy 3 True Allow The answer is correct, which is A

upvoted 4 times

...