11. You have a domain controller named DC1 that runs Windows Server 2008. DC1 is configured as a DNS server
for contoso.com.
You install the DNS Server server role on a member server named Server1 and then you create a standard
secondary zone for contoso.com. You configure DC1 as the master server for the zone.
You need to ensure that Server1 receives zone updates from DC1.
What should you do?
A. On Server1, add a conditional forwarder.
B. On DC1, modify the permissions of contoso.com zonE.
C. On DC1, modify the zone transfer settings for the contoso.com zone.
D. Add the Server1 computer account to the DNSUpdateProxy group.
Answer: C
12. Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008
and are configured as DNS servers. A domain controller named DC1 has a standard primary zone for contoso.com.
A domain controller named DC2 has a standard secondary zone for contoso.com.
You need to ensure that the replication of the contoso.com zone is encrypted. You must not lose any zone data.
What should you do?
A. On both servers, modify the interface that the DNS server listens on.
B. Convert the primary zone into an Active Directory-integrated zonE. Delete the secondary zone.
C. Convert the primary zone into an Active Directory-integrated stub zonE. Delete the secondary zone.
D. Configure the zone transfer settings of the standard primary zonE. Modify the Master Servers lists on the
secondary zone.
Answer: B
13. Your network consists of a single Active Directory domain. The domain contains 10 domain controllers. The
domain controllers run Windows Server 2008 and are configured as DNS servers.
You plan to create a new Active Directory-integrated zone.
You need to ensure that the new zone is only replicated to four of your domain controllers.
What should you do first?
A. Create a new delegation in the ForestDnsZones application directory partition.
B. Create a new delegation in the DomainDnsZones application directory partition.
C. From the command prompt, run dnscmd and specify the /enlistdirectorypartition parameter.
D. From the command prompt, run dnscmd and specify the /createdirectorypartition parameter.
Answer: D
14. Your company has a single Active Directory domain named intranet.contoso.com. All domain controllers run
Windows Server 2008. The domain functional level and the forest functional level are set to Windows 2000 native
mode.
You need to ensure the UPN suffix for contoso.com is available for user accounts.
What should you do first?
A. Raise the contoso.com forest functional level to Windows Server 2003 or Windows Server 2008.
B. Raise the contoso.com domain functional level to Windows Server 2003 or Windows Server 2008.
C. Add the new UPN suffix to the forest.
D. Change the Primary DNS Suffix option in the Default Domain Controllers Group Policy Object (GPO) to
contoso.com.
Answer: C
15. Your company has an Active Directory forest that contains only Windows Server 2003 domain controllers.
You need to prepare the Active Directory domain to install Windows Server 2008 domain controllers.
Which two tasks should you perform? (Each correct answer presents part of the solution. Choose two.)
A. Run the adprep /forestprep command.
B. Run the adprep /domainprep command.
C. Raise the forest functional level to Windows Server 2008.
D. Raise the domain functional level to Windows Server 2008.
Answer: A AND B