Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
Scribd Logo
Upload

Welcome to Scribd!

  • 15 views

    070 743

    Uploaded by

    Milos
    This document contains a series of questions about configuring DNSSEC validation for the fabrikam.com namespace on client computers in an Active Directory domain. The domain contains a DNS server named Server1. To ensure all clients perform DNSSEC validation for fabrikam.com, the correct solution is to add a rule to the Name Resolution Policy Table (NRPT) from a Group Policy object in the domain. The NRPT stores configurations for deploying DNSSEC and controls special DNS behavior for names or namespaces.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    070 743

    Uploaded by

    Milos
    15 views6 pages
    This document contains a series of questions about configuring DNSSEC validation for the fabrikam.com namespace on client computers in an Active Directory domain. The domain contains a DNS server named Server1. To ensure all clients perform DNSSEC validation for fabrikam.com, the correct solution is to add a rule to the Name Resolution Policy Table (NRPT) from a Group Policy object in the domain. The NRPT stores configurations for deploying DNSSEC and controls special DNS behavior for names or namespaces.

    Original Title

    070-743

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    This document contains a series of questions about configuring DNSSEC validation for the fabrikam.com namespace on client computers in an Active Directory domain. The domain contains a DNS server named Server1. To ensure all clients perform DNSSEC validation for fabrikam.com, the correct solution is to add a rule to the Name Resolution Policy Table (NRPT) from a Group Policy object in the domain. The NRPT stores configurations for deploying DNSSEC and controls special DNS behavior for names or namespaces.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    15 views6 pages

    070 743

    Uploaded by

    Milos
    This document contains a series of questions about configuring DNSSEC validation for the fabrikam.com namespace on client computers in an Active Directory domain. The domain contains a DNS server named Server1. To ensure all clients perform DNSSEC validation for fabrikam.com, the correct solution is to add a rule to the Name Resolution Policy Table (NRPT) from a Group Policy object in the domain. The NRPT stores configurations for deploying DNSSEC and controls special DNS behavior for names or namespaces.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    of 6

    Http://www.passcert.

    com
    The safer , easier way to help you pass any IT exams.

    Exam : 070-743

    Title : Upgrading Your Skills to


    MCSA: Windows Server
    2016

    Version : DEMO

    1 / 5
    The safer , easier way to help you pass any IT exams.

    1.Note: This question is part of a series of questions that present the same scenario. Each question in the
    series contains a unique solution that might meet the stated goals. Some questions sets might have more
    than one correct solutions, while others might not have a correct solution.
    After you answer a question in this section, you will NOT be able to return to it. As a result, these
    questions will not appear in the review screen.
    Your network contains an Active Directory forest named contoso.com. The forest contains a member
    server named Server1 that runs Windows Server 2016. All domain controllers run Windows Server 2012
    R2.
    Contoso.com has the following configuration:

    You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to configure
    device registration. You need to configure Active Directory to support the planned deployment.
    Solution: You upgrade a domain controller to Windows Server 2016.
    Does this meet the goal?
    A. Yes
    B. No
    Answer: B
    Explanation:
    Device registration requires a forest functional level of Windows Server 2012 R2.
    References:
    https://technet.microsoft.com/en-us/windows-server-docs/identity/ad-fs/deployment/configure-a-
    federation-server-with-device-registration-service
    https://technet.microsoft.com/en-us/windows-server-docs/identity/ad-fs/design/ad-fs-requirements

    2.Note: This question is part of a series of questions that present the same scenario. Each question in the
    series contains a unique solution that might meet the stated goals. Some questions sets might have more
    than one correct solutions, while others might not have a correct solution.
    After you answer a question in this section, you will NOT be able to return to it. As a result, these
    questions will not appear in the review screen.
    Your network contains an Active Directory forest named contoso.com. The forest contains a member
    server named Server1 that runs Windows Server 2016. All domain controllers run Windows Server 2012
    R2.
    Contoso.com has the following configuration:

    2 / 5
    The safer , easier way to help you pass any IT exams.

    You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to configure
    device registration. You need to configure Active Directory to support the planned deployment.
    Solution: You raise the forest (domain) functional level to Windows Server 2012 R2.
    Does this meet the goal?
    A. Yes
    B. No
    Answer: B
    Explanation:
    For a Windows Server 2012 R2 AD FS server, this solution would work.
    However, new installations of AD FS 2016 require the Active Directory 2016 schema (minimum version
    85).
    References: https://technet.microsoft.com/en-us/windows-server-docs/identity/ad-
    fs/operations/configure-device-based-conditional-access-on-premises

    3.Note: This question is part of a series of questions that present the same scenario. Each question in the
    series contains a unique solution that might meet the stated goals. Some questions sets might have more
    than one correct solutions, while others might not have a correct solution.
    After you answer a question in this section, you will NOT be able to return to it. As a result, these
    questions will not appear in the review screen.
    Your network contains an Active Directory forest named contoso.com. The forest contains a member
    server named Server1 that runs Windows Server 2016. All domain controllers run Windows Server 2012
    R2.
    Contoso.com has the following configuration:

    You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to configure
    device registration. You need to configure Active Directory to support the planned deployment.
    Solution: You run adprep.exe from the Windows Server 2016 installation media.
    Does this meet the goal?
    A. Yes
    B. No
    Answer: B

    3 / 5
    The safer , easier way to help you pass any IT exams.

    Explanation:
    Device registration requires a forest functional level of Windows Server 2012 R2.
    New installations of AD FS 2016 require the Active Directory 2016 schema (minimum version 85).
    References: https://technet.microsoft.com/en-us/library/dd464018(v=ws.10).aspx
    https://technet.microsoft.com/en-us/windows-server-docs/identity/ad-fs/operations/configure-
    device-based-conditional-access-on-premises

    4.Note: This question is part of a series of questions that present the same scenario. Each question in the
    series contains a unique solution. Determine whether the solution meets the stated goals.
    Your network contains an Active Directory domain named contoso.com. The domain contains a DNS
    server named Server1. All client computers run Windows 10.
    On Server1, you have the following zone configuration.

    You need to ensure that all of the client computers in the domain perform DNSSEC validation for the
    fabrikam.com namespace.
    Solution: From Windows PowerShell on Server1, you run the Add-DnsServertrustAnchor cmdlet.
    Does this meet the goal?
    A. Yes
    B. No
    Answer: B
    Explanation:
    The Add-DnsServerTrustAnchor command adds a trust anchor to a DNS server. A trust anchor (or trust
    “point”) is a public cryptographic key for a signed zone. Trust anchors must be configured on every
    non-authoritative DNS server that will attempt to validate DNS data. Trust Anchors have no direct relation
    to DSSEC validation.
    References: https://technet.microsoft.com/en-us/library/jj649932.aspx
    https://technet.microsoft.com/en-us/library/dn593672(v=ws.11).aspx

    5.Note: This question is part of a series of questions that present the same scenario. Each question
    in the series contains a unique solution. Determine whether the solution meets the stated goals.
    Your network contains an Active Directory domain named contoso.com. The domain contains a DNS
    server named Server1. All client computers run Windows 10. On Server1, you have the following zone
    configuration.

    4 / 5
    The safer , easier way to help you pass any IT exams.

    You need to ensure that all of the client computers in the domain perform DNSSEC validation for the
    fabrikam.com namespace.
    Solution: From a Group Policy object (GPO) in the domain, you add a rule to the Name Resolution Policy
    Table (NRPT).
    Does this meet the goal?
    A. Yes
    B. No
    Answer: A
    Explanation:
    The NRPT stores configurations and settings that are used to deploy DNS Security Extensions
    (DNSSEC), and also stores information related to DirectAccess, a remote access technology.
    Note: The Name Resolution Policy Table (NRPT) is a new feature available in Windows Server 2008 R2.
    The NRPT is a table that contains rules you can configure to specify DNS settings or special behavior for
    names or namespaces. When performing DNS name resolution, the DNS Client service checks the NRPT
    before sending a DNS query. If a DNS query or response matches an entry in the NRPT, it is handled
    according to settings in the policy. Queries and responses that do not match an NRPT entry are
    processed normally.
    References: https://technet.microsoft.com/en-us/library/ee649207(v=ws.10).aspx

    5 / 5

    You might also like