70-410題庫求解

现在zx

Your network contains an Active Directory domain named contoso.com. The network
contains a member server named Server1 that runs Windows Server 2012 R2. Server1 has
the DNS Server server role installed and has a primary zone for contoso.com.
The Active Directory domain contains 500 client computers. There are an additional 20
computers in a workgroup.
You discover that every client computer on the network can add its record to the
contoso.com zone.
You need to ensure that only the client computers in the Active Directory domain can
register records in the contoso.com zone.
What should you do first?
A. Move the contoso.com zone to a domain controller that is configured as a DNS server.
B. Configure the Dynamic updates settings of the contoso.com zone.
C. Sign the contoso.com zone by using DNSSEC
D. Configure the Security settings of the contoso.com zone.

black105133

expmental

thanks for the great share

tszyeung

可參考以下連結
http://www.tutorialspoint.com/ar ... nly-dynamic-updates
Secure only – When this type of dynamic update is selected, only the computers that are members of the DNS domain can register themselves with the DNS server. The DNS server automatically rejects the requests from the computers that do not belong to the domain. This protects the DNS server from getting automatically populated with records of unwanted, suspicious and/or fake computers.