AZ-800 / Q8 / T4 | PrepareToExams

Exam

Answer confirmed

Question

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains a DNS server named Server1. Server1 hosts a DNS zone named fabrikam.com that was signed by DNSSEC.
You need to ensure that all the member servers in the domain perform DNSSEC validation for the fabrikam.com namespace.
What should you do?

Proposed answer

A. On Server1, run the Add-DnsServerTrustAnchor cmdlet.
B. On each member server, run the Add-DnsServerTrustAnchor cmdlet.
C. From a Group Policy Object (GPO), add a rule to the Name Resolution Policy Table (NRPT).
D. From a Group Policy Object (GPO), modify the Network List Manager policies.

AvoKikinha

Highly Voted 2 years, 6 months ago

Selected Answer: C

NRPT The Name Resolution Policy Table (NRPT) is a table that contains rules you can configure to specify DNS settings or special behavior for names or namespaces. The NRPT can be configured using Group Policy or by using the Windows Registry. When performing DNS name resolution, the DNS Client service checks the NRPT before sending a DNS query. If a DNS query or response matches an entry in the NRPT, it is handled according to settings in the policy. Queries and responses that do not match an NRPT entry are processed normally. You can use the NRPT to require that the DNS Client service perform DNSSEC validation of DNS responses for the namespaces that you specify.

upvoted 19 times

RJM

Highly Voted 2 years, 6 months ago

Selected Answer: C

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn593632(v=ws.11)

upvoted 10 times

Ksk08

Most Recent 2 weeks, 6 days ago

C is correct

upvoted 1 times

syu31svc

1 year, 8 months ago

Selected Answer: C

C for correct Credit to AvoKikinha for the info and RJM for the link

upvoted 3 times

johosofat

2 years ago

Selected Answer: C

C looks correct

upvoted 2 times

Related exam questions