Exam 70-741 topic 1 question 49 discussion

Actual exam question from Microsoft's 70-741

Question #: 49
Topic #: 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. All client computers run Windows 10.
On Server1, you have the following zone configuration.

You need to ensure that all of the client computers in the domain perform DNSSEC validation for the fabrikam.com namespace.
Solution: From a Group Policy object (GPO) in the domain, you add a rule to the Name Resolution Policy Table (NRPT).
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: A 🗳️
The NRPT stores configurations and settings that are used to deploy DNS Security Extensions (DNSSEC), and also stores information related to DirectAccess, a remote access technology.
Note: The Name Resolution Policy Table (NRPT) is a new feature available in Windows Server 2008 R2. The NRPT is a table that contains rules you can configure to specify DNS settings or special behavior for names or namespaces. When performing DNS name resolution, the DNS Client service checks the
NRPT before sending a DNS query. If a DNS query or response matches an entry in the NRPT, it is handled according to settings in the policy. Queries and responses that do not match an NRPT entry are processed normally.
References: https://technet.microsoft.com/en-us/library/ee649207(v=ws.10).aspx

by coleman at Nov. 12, 2019, 1:45 p.m.

Comments

Submit Cancel

coleman

Highly Voted 5 years, 6 months ago

YES You can fill in the suffix "fabrikam.com" a the "Suffix" field on a NRPT rule and force DNSSEC validation to be performed against the mentioned domain.

upvoted 5 times

...

panda

Most Recent 4 years, 4 months ago

I think Yes is correct. NRPT is a GPO which determines whether DNSSEC is used or not used.

upvoted 1 times

...

CassarJ

5 years, 5 months ago

Correct. https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn593632(v%3Dws.11)

upvoted 2 times

...