1.2.9

You administer a branch office connected to the main headquarters with a WAN link. Servers in the branch office provide DNS and DHCP services. The company network has multiple domains. A single domain represents the branch office. A DNS server named DCI at the branch office is authoritative for the branch office's primary zone and contains no other DNS zones. DNS servers at headquarters provide name resolution for hosts in other domains. One day, you come to work to find a number of customer service complaints. They all report something similar -- clients can resolve local host names, but cannot resolve host names for other domains on the network. You contact the enterprise administrator. She tells you the IP address for the DNS server that previously used as a forwarder for the branch office has been changed to 10.155.11.15. What should you do to fix the problem?

Configure DC1 to forward name resolution requests to 10.155.11.15.

You manage the DNS infrastructure for your network. Server DNSI holds a primary zone for the research.westsim.com domain. Server DNS2 holds a primary zone for the sales.westsim.com domain. 80th servers are also domain controllers. Computers configured to use DNSI as the preferred DNS server are unable to resolve names for hosts in the sales.westsim.com domain. You need to enable DNSI to resolve names for hosts in that domain. Your company security policy states that DNS zone transfers are not allowed between DNSI and DNS2. What should you do?

On DNS1, configure a conditional forwarder for sales.westsim.com.

You manage a network with a main office and one branch office. Each office has its own internet connection, and the offices are connected with a WAN link. All computers in the main office are members of the westsim.private domain. All computers in the branch office are members of the tulsa.westsim.private domain. The DNS1 server in the main office holds a primary zone for the westsim.private domain, while the DNS2 server in the branch office holds the primary zone for the tulsa.westsim.private domain. Clients in the branch office are able to resolve hostnames for the tulsa.westsim.private domain and for all internet hosts. However, they cannot resolve hostnames for hosts in the westsim.private domain. You need to allow hosts in the branch office to resolve names for hosts in the main office while still allowing internet name resolution and minimizing WAN traffic. What should you do?

On DNS2, configure a conditional forwarder for the westsim.private domain to forward all requests to DNS1.

Your network has a single Active Directory domain named westsim.local. All westsim.local authoritative DNS servers are configured to forward DNS requests across a firewall to a public DNS server. All client computers are members of the westsim.local Active Directory domain and are configured to use westsim.local authoritative DNS servers. A new site in Seattle has just opened. The Seattle site is connected to company headquarters using a virtual private networking (VPN) connection. Company policy states that all client computers in all sites must receive internet access through a high-speed internet connection at company headquarters. You want to supply DNS service at the Seattle site, minimize unnecessary DNS traffic across the VPN connection, and configure DNS appropriately to meet company policy. What should you do? (Choose two. Each choice is part of the correct solution.)

- Install a DNS server in the Seattle site with no primary zones. - Configure the new DNS server to forward all DNS requests to westsim.local authoritative DNS servers at company headquarters.

Your network has a single Active Directory domain named westsim.local. All westsim.local authoritative DNS servers are configured to forward DNS requests across a firewall to a public DNS server. All client computers are members of the westsim.local Active Directory domain and are configured to use westsim.local authoritative DNS servers. Your company has opened one new site in South America. The South America site has its own internet connection and uses a dedicated wide area network (WAN) link to company headquarters in North America for intranet traffic. The WAN link between company headquarters in North America and the South America site is expensive and somewhat unreliable. DNS traffic across this WAN link must be minimized. You need to make appropriate DNS configurations to meet this requirement. What should you do? (Choose two. Each choice is part of the correct solution.)

- Install a DNS server with no zones in the South America site. Configure the server to conditionally forward westsim.local DNS requests to westsim.local authoritative DNS servers and to forward all other DNS requests to the local internet service provider's DNS server. - Configure all client computers in the South America site to use the new DNS server in the South America site.

Your Active Directory network uses the internal DNS namespace private.westsim.com. Several other Active Directory domains also exist, which are children to the private.westsim.com domain. On the internet, your company uses westsim.com for its public domain name. Your company manages its own DNS servers that are authoritative for the westsim.com zone. The private.westsim.com zone has been delegated to your company's Active Directory domain controllers, which are also DNS servers. Computers that are members of the private.westsim.com domain and all child domains must be able to resolve DNS names of internet resources. However, to help secure your network, DNS queries for resources in the private.westsim.com domain and all child domains must never be sent to internet DNS servers. Queries for internet names must go first to your public DNS server that is authoritative for the westsim.com domain. You need to configure your company's DNS servers to meet these requirements. What should you do? (Select two. Each correct choice is part of the solution.)

- On all DNS servers that are authoritative for the private.westsim.com zone or any child zone, create a forwarders list. Forward to DNS servers that are authoritative for the parent zone, westsim.com. - Delete root hints to internet DNS servers on all DNS servers that are authoritative for the private.westsim.com zone or any child zone.

You are the systems administrator for WestSim Corporation. You have been assigned to set up a new branch office in Tulsa. The branch will be represented by a single domain. You install a single DNS server called TulsaDNS and configure a primary zone for the branch office domain. You test name resolution and find that hosts can only resolve names for hosts within the domain. You need to enable clients in the Tulsa location to resolve names for hosts in other domains within your private network. You would like to minimize traffic across the WAN link between the sites. What should you do?

Configure TulsaDNS to use forwarders.

You are a network engineer working for WestSim Corporation. The company has an internet domain named westsim.com. The private network uses the namespace of private.westsim.com. Your company manages its own Domain Name System (DNS) servers that are authoritative for both the company's namespaces. Your network consists of several subnets at multiple locations. Sites are connected with WAN links. www.private.westsim.com is an intranet web server that is commonly used throughout the company. You want to ensure that users can always access this server by name, even if an authoritative DNS server is not available. What should you do?

Configure each client computer's hosts file with an entry for vmw.private.westsim.com.

You manage the branch office for your company network. The branch office consists of two subnets and 10 host computers. You use static addressing for all hosts on both subnets. To provide name resolution between subnets, you configure static entries on each computer. As the network grows, you decide to implement dynamic services. You configure a Windows Server 2016 server as a DHCP and DNS server. You configure a DNS zone and DHCP scopes. You configure DHCP options on the DHCP server to deliver the IP address of the DNS server to all hosts. You configure each client to get IP address and DNS server information from the DHCP server. You need to configure each client so that it no longer uses static entries for name resolution. What should you do?

Delete the hosts file on each client.

You are the network administrator for westsim.com. The network consists of Active Directory domains named westsim.com and sales.westsim.com. The DNS servers in the westsim.com domain are authoritative for the westsim.com DNS domain. The DNS servers in the sales.westsim.com domain are authoritative for the sales.westsim.com DNS domain. All the servers run Windows Server 2016. All the clients run Windows 10. The company plans to implement a new domain named private.westsim.com. You need to design the DNS infrastructure to support the new domain. Your solution must meet the following requirements: • The DNS servers in private.westsim.com must be authoritative for the private.westsim.com DNS domain. • All clients in the forest must be able to resolve private.westsim.com fully qualified domain names (FQDNs). • DNS servers in the westsim.com and sales.westsim.com domains should not be authoritative for the private.westsim.com domain and should not contain any records for nodes in the private.westsim.com. You install Active Directory, create the new domain, and verify that DNS is working within the private.westsim.com domain. What should you do next?

On the DNS servers in westsim.com, you should create a delegation for private.westsim.com and point the delegation to the DNS servers that are authoritative for private.westsim.com.