求410的解題

f08954738

QUESTION 20
Your network contains an Active Directory domain named contoso.com. The DNS zone for contoso.com is
Active-Directory integrated.
The domain contains 500 client computers. There are an additional 20 computers in a workgroup.
You discover that every client computer on the network can add its record to the contoso.com zone.
You need to ensure that only the client computers in the Active Directory domain can register records in
the contoso.com zone.
What should you do?
A.  Sign the contoso.com zone by using DNSSEC.
B.  Configure the Dynamic updates settings of the contoso.com zone.
C.  Configure the Security settings of the contoso.com zone
D.  Move the contoso.com zone to a domain controller that is configured as a DNS server.
Correct Answer: B

為什麼是B  不是D嗎  有人可以解釋嗎?? 到底是D還是B ??

82899115

正确答案是D

ee326

因为”The DNS zone for contoso.com is Active-Directory integrated.”，所以DNS 本来就装在AD 上。希望只有Domain computer  才可以更新 DNS 纪录，所以需要修改Dynamic updates settings 为 secure only，所以答案是 B

桐花万里路