What should you do?

AZ-800 1 Comment

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains a DNS server named Server1. Server1 hosts a DNS zone named fabrikam.com that was signed by DNSSEC.

You need to ensure that all the member servers in the domain perform DNSSEC validation for the fabrikam.com namespace.

What should you do?
A . On Served, run the Add-DnsServerTrustAnchor cmdlet.
B . On each member server, run the Add-DnsServerTrustAnchor cmdlet.
C . From a Group Policy Object (GPO). add a rule to the Name Resolution Policy Table (NRPT).
D . From a Group Policy Object (GPO). modify the Network List Manager policies.

Answer: C

Latest AZ-800 Dumps Valid Version with 54 Q&As

Latest And Valid Q&A | Instant Download | Once Fail, Full Refund

Instant Download AZ-800 PDF     AZ-800 Questions Online Training
Subscribe
Notify of
guest
1 Comment
Inline Feedbacks
View all comments
Mike
Mike
2 years ago

Explanation:
You can use the NRPT to require that DNSSEC validation is performed on DNS responses for queries in the namespaces that you specify.

Reference: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn593632(v=ws.11)

0
Reply