Free MCSE Braindumps .com provides the best resource to prepare for the actual certification exams like 070-290, 070-293, 070-210 and more.
Welcome to Free MCSE Braindumps.com
[Home] [Free MCSE dumps] [MCSE certification Deatils] [MCSE study guides] [MCSE Sample Tests] [Microsoft Books] [Certification News] [Submit Dumps] [Web Resources] [Links]
Pablo Software Solutions
70-296 Managing and Maintaining a Windows Server 2003 Environment for an MCSA Certified on Windows 2000
Comments: webmaster@freemcsebraindumps.com
Copyright 2000-2005, Free
MCSE Brain dumps .com
The material on this web site is not sponsored by, endorsed by or affiliated with
Microsoft or the MCSE certification or with any vendor such as Cisco, Oracle, Sun etc.
They own trademarks to their certifications. We use them to display information as a fair use
of the names.
Go Back to the Braindumps Page
Go Back to the Braindumps Page
You are the administrator of the Alecnet.com company network. The network consists of a single Active
Directory domain Alecnet.com .com. The network includes 20 servers running Windows Server 2003 and
200 client computers running Windows XP Professional. The office uses a single class C private IP address
range.
The company announces a major expansion. Alecnet.com will open 12 branch offices. The 12 branch
offices will connect to the existing office by direct T1 lines. Each branch office will have the same
number of computers as the main office.
You need to plan the IP addressing for the new company. You want to assign all company IP addresses
from a single classful private IP address range.
What should you do?


A. Assign each office a new class C private IP address range.
B. Assign each office a new class B private IP address range.
C. Assign each office a subnet from a new class B private IP address range.
D. Assign each office a subnet from the current class C private IP address range.
Answer: C


You are the network administrator for Alecnet.com .com. Alecnet.com has offices in New York,
Copenhagen, and Ankara. The network consists of a single Active Directory domain and three sites. The
sites are named NYsite, CopSite, and AnkSite.
Alecnet.com is adding a new division at the New York office for publishing fiction books. You create a new
organizational unit (OU) named Fiction for the fiction division. You add a new network segment and
subnet for the fiction division. You plan to place new Windows XP Professional computers for the fiction
division in the new subnet. You also plan to add a new domain controller to NYSite.
You need to ensure that users in the fiction division use the domain controllers in the New York office
when logging on to the network.
What should you do?


A. Decrease the metric for the default gateway on the new Windows XP Professional computers.
B. Create a new subnet object for the new subnet.
Add the new subnet object to NYSite.
C. Configure the location attribute for the new Windows XP Professional computers to be NYSite.
D. Move the domain controller objects for the domain controllers in the New York office to the Fiction OU.
Answer: B

You are a network administrator for Alecnet.com . All servers run Windows Server 2003. All
client computers run Windows XP Professional.
The network contains a single DHCP server that services two subnets named Subnet CK1 and
Subnet CK2 , as shown in the work area. All servers and the administrator client computer have manually
assigned IP addresses. All other client computers are DHCP clients.
The router on your network fails and is replaced by another router. After the router is replaced, client
computers on Subnet CK2 cannot receive IP addressing from the DHCP server.
You need to configure an appropriate host to be a DHCP relay agent.
Which component should you use?
To answer, select the appropriate component in the work area.

You are a network administrator for Alecnet.com . All domain controllers run Windows Server 2003. The
network contains 50 Windows 98 client computers, 300 Windows 2000 Professional computers, and 150
Windows XP Professional computers.
According to the network design specification, the Kerberos version 5 authentication protocol must be
used for all client computers on the internal network.
You need to ensure that Kerberos version 5 authentication is used for all client computers on the internal
network.
What should you do?


A. On each domain controller, disable Server Message Block (SMB) signing and encryption of the secure
channel traffic.
B. Replace all Windows 98 computers with new Windows XP Professional computers.
C. Install the Active Directory Client Extension software on the Windows 98 computers.
D. Upgrade all Windows 98 computers to Windows NT workstation 4.0.
Answer: B

You are the security analyst for Alecnet.com . The network consists of a single Active Directory domain
Alecnet.com .com. All servers run Windows Server 2003. The network currently does not have a connection
the Internet.
You are in the process of designing an Internet connection solution for Alecnet.com . Alecnet.com
Internet security policy includes the following requirements:


1. Traffic that originates from outside the Alecnet.com network must never be passed to the
Alecnet.com intranet.
2. Internal Alecnet.com resources must not be directly accessible from the Internet.
3. Alecnet.com 's public Web site must not contain any confidential Alecnet.com information.
4. Alecnet.com 's public Web site must be accessible from the Internet, even in the event of the failure of any
Alecnet.com -owned network component.
You design a network solution that provides strict access control to the Alecnet.com intranet by means of
a firewall. Your new design includes a perimeter network, which contains resources that external users
or computers might need to access. Your design also includes three computers running intrusion-
detection software: ISD1, IDS2, and IDS3.
You now need to plan the placement of five servers on the network in accordance with Alecnet.com 's
Internet security policy.
How should you place the servers to comply with the security policy?
To answer, drag the appropriate server role to the correct network location in the Network Diagram.


You are the network administrator for a new branch office of Alecnet.com . The office network is
connected to the Internet by a T1 line.
Alecnet.com 's Internet service provider (ISP) gives you a single public IP address and provides
firewall services to protect the office network.
The office network includes five windows XP Professional client computers and a Windows Server 2003
computer named Alecnet.com

A. All client computers are configured to use DHCP to obtain their IP
configuration settings.
Alecnet.com A is configured as a DHCP server and contains two network adapters. You connect one
network adapter to the ISP connection, and you connect the other network adapter to the office network.
You
want to configure Alecnet.com A so that client computers can access the Internet.
Which two courses of action should you take? (Each correct answer presents part of the solution. Choose
two)
A. Remove the DHCP Server service.
B. Install the DNS Server service.
C. Run the route command to add a route to the internal network.
D. Assign the public IP address to the external network adapter. Install and configure Routing and Remote
Access.
Answer: B, D

You are the administrator for Alecnet.com . The network consists of a single active directory domain named
Alecnet.com .com. All servers run windows server 2003
When the network was designed, the design team set design specifications. After the network was
implemented, the deployment team set baseline specifications. The specifications for broadcast traffic
are:

1. The design specifications requires that broadcast traffic must be 5 percent or less of total network
traffic
2. The baseline specifications showed that the broadcast traffic is always 1 percent or less of the total
network traffic during normal operation
You need to monitor the network traffic and find out if the level of broadcast traffic is within the design
and baseline specs. You decide to use network monitor. After monitoring for 1 hour, you observe the
results shown in the exhibit:
You need to report the results of your observations to management.
Which 2 actions should you take?

A. Report that broadcast traffic is outside of the baseline specs
B. Report that the broadcast traffic is outside of the design specs
C. Report that the broadcast traffic is within the design specs
D. Report that the broadcast traffic is within the baseline specs
Answer: A, B

You are the network administrator for Alecnet.com . The network consists of a single Active Directory
domain named Alecnet.com .com. The network contains two IP subnets connected by a Windows Server 200
computer running Routing and Remote Access. All servers run Windows Server 2003. All client
computers run Windows XP Professional.
Each subnet contains a domain controller. Each subnet contains a DHCP server, which provides TCP/IP
configuration information to the computers on only its subnet. The relevant portion of the network is
shown in the exhibit.


You recently implemented a Microsoft Internet Security and Acceleration (ISA) Server 2000 array on the
network to provide Internet connectivity. The ISA Server array uses Network Load Balancing on the
internal adapters. The array's Network Load Balancing cluster address is 172.30.32.1. You configure the
DHCP server on Subnet1 to provide the array's Network Load Balancing cluster address as the default
gateway. You configure the DHCP server on Subnet2 to provide the IP address 172.30.64.1 as the default
gateway for Subnet2.
Users on Subnet2 report that they cannot connect to Internet-based resources. They can successfully
connect to resources located on Subnet1. Users on Subnet1 can successfully connect to Internet-based
resources. You investigate and discover that no Internet requests from computers on Subnet2 are being
received by the ISA Server array.
You need to provide Internet connectivity to users on Subnet2.

What should you do?

A. Configure the DHCP server on Subnet2 to provide the address 172.30.32.1 as the default gateway.
B. Configure the DHCP server on Subnet2 to provide the address 172.30.32.2 as the default gateway.
C. On the Routing and Remote Access server, add a default route to 172.30.32.1.
D. On the Routing and Remote Access server, add a default route to 131.107.72.17.
Answer: C

You are a network administrator for Alecnet.com . The network consists of multiple physical segments. The
network contains two Windows Server 2003 computers named Alecnet.com SrvA and Www.ePlanetLabs.co
SrvB,

and several Windows 2000 Server computers. Alecnet.com SrvA is configured with a single DHCP scope
for the
10.250.100.0/24 network with an IP address range of 10.250.100.10 to 10.250.100.100
Several users on the network report that they cannot connect to file and print servers, but they can
connect to each other's client computers. All other users on the network are able to connect to all
network resources. You run the ipconfig.exe /all command on one of the affected client computers and
observe the information in the following table:


You need to configure all affected client computers so that they can communicate with all other hosts on
the network.
Which two actions should you take? (Each correct answer presents part of the solution. Choose two)


A. Disable the DHCP service on Alecnet.com SrvB.
B. Increase the IP address range for the 10.250.100.0/24 scope on Alecnet.com SrvA.
C. Add global DHCP scope options to Alecnet.com SrvA for default gateway, DNS servers, and WINS serve
D. Delete all IP address reservation in the scope on Alecnet.com SrvA.
E. Run the ipconfig.exe /renew command on all affected client computers.
F. Run the ipconfig.exe /registerdns command on all affected client computers.
Answer: A, E

You are the network administrator for Alecnet.com . The network consists of a single Active
Directory domain named Alecnet.com .com.
You configure a new Windows Server 2003 file server named Alecnet.com Srvl. You restore user files from
a tape backup, and you create a logon script that maps drive letters to shared files on Alecnet.com Srv1.
Users report that they cannot access Alecnet.com Srvl through the drive mappings you created. Users
also report that Alecnet.com Srvl does not appear in My Network Places.
You log on to Alecnet.com Srvl and confirm that the files are present and that the NTFS permissions and
share permissions are correct. You cannot access any network resources. You run the ipconfig command
and see the following output.
You need to configure the TCP/IP properties on Alecnet.com Srv1 to resolve the problem. What should
you do?

A. Add Alecnet.com .com to the DNS suffix for this connection
field. B. Configure the default gateway.
C. Configure the DNS server address.
D. Configure a static IP address.
Answer: D

You are a network administrator for Alecnet.com . The network consists of a single Active Directory
domain named Alecnet.com .com. All domain controllers and member servers run Windows Server
2003, Enterprise Edition. All client computers run Windows XP Professional.
Alecnet.com has one main office and one branch office. The two offices are connected to a T1 WAN
connection. There is a hardware router at each end of the connection. The main office contains 10,000
client computers, and the branch office contains 5,000 client computers.
You need to use DHCP to provide IP addresses to the Windows XP Professional computers in both
offices. You need to minimize network configuration traffic on the WAN connection. Your solution needs
to prevent any component involved in the DHCP architecture from becoming a single point of failure.
What should you do?

A. At the main office, configure two Windows Server 2003 computers as a DHCP server cluster.
Configure the branch office router as a DHCP relay agent.
B. At the main office, configure two Windows Server 2003 computers as a DHCP server cluster.
At the branch office, configure a Windows Server 2003 computer as a DHCP relay agent.
C. At the main office, configure two Windows Server 2003 computers as a DHCP server cluster.
At the branch office, configure two Windows Server 2003 computers as a DHCP server cluster.
D. At the main office, configure two Windows Server 2003 computers as DHCP servers.
Configure one DHCP server to handle 80 percent of the IP address scope and the other DHCP server to handle
20 percent.
Configure the branch office router as a DHCP relay agent.
Answer: C

You are the network administrator for Alecnet.com .com. The network consists of a single Active Directory
domain named Alecnet.com .com. All servers run Windows Server 2003. All client computers run
Windows XP Professional. The network also contains 10 network printers. All servers have manually
configured IP addresses. The client computers and network printers receive their TCP/IP configuration
information from a DHCP server.
Alecnet.com IP policy states that each of the network printers will always be configured with the same IP
address. You configure a DHCP server and create a DHCP scope as shown in the exhibit.
Users report that they cannot submit print jobs to any of the network printers. You investigate and
discover that none of the network printers are receiving their IP addresses from the DHCP server.
You need to ensure that the network printers receive their IP addresses from DHCP.
What should you do?


A. Remove the IP address reservations for the network printers from the DHCP scope.
B. Delete the IP address exclusion range for the network printers from the DHCP scope.
C. Add the 009 LPR Servers option to the DHCP server options.
D. Enable address conflict detection on the DHCP server.
Answer: B

You are the network administrator for Alecnet.com . Alecnet.com has an internal network and a
perimeter network, as shown in the work area.
The internal network consists of a single Active Directory domain Alecnet.com .com. The internal network
contains a Windows Server 2003 domain controller named DC1, which runs the DNS Server service. The
internal network also contains a Windows Server 2003 file server named Alecnet.com 1, which runs the
DHCP Server service. The network contains 500 Windows XP Professional computers.
The perimeter network contains a public Web server named Web CK1 . The internal network is connected
to the perimeter network by a firewall. The perimeter network is connected to the Internet.
You need to plan an IP address strategy. The IP address strategy must provide TCP/IP connectivity from
the internal network to Web CK1 . Alecnet.com wants to reduce administrative overhead by automatically
assigning IP addresses whenever possible.
You need to choose the appropriate IP addressing distribution method for the computers on the
networks.
To answer, drag the appropriate IP addressing distribution method or methods to the correct computer
or computers in the work area.

You are the network administrator for Alecnet.com . The network consists of a single Active Directory
domain Alecnet.com .com. All servers run Windows Server 2003. All client computers run Windows XP
Professional. The network consists of three physical subnets, which corresponds to the three buildings on
Alecnet.com 's campus, as shown in the Network Diagram exhibit.
All servers have manually configured IP addresses. All client computers receive their TCP/IP
configuration information from a DHCP server located on the Building1 subnet. The DHCP server has
one scope configured for each subnet.
Users on the Building2 subnet and the Building3 subnet report that they periodically cannot connect to
network resources located on any subnet. You discover that during times of high network usage, client
computers in Building2 and Building3 are configured as shown in the Network Connection Details
exhibit.

You need to ensure that all client computers receive valid IP addresses for their subnet even during times
of high network usage.
What should you do?


A. Install one DHCP server on the Building2 subnet and one on the Building3 subnet.
On each DHCP server, configure identical scopes for each subnet.
B. Install one DHCP server on the Building2 subnet and one on the Building3 subnet.
On each DHCP server, configure a single subnet-specific scope.
C. Configure one DHCP relay agent on the Building2 subnet and one on the Building3 subnet to forward DHCP
requests to the Building1 subnet DHCP server.
D. Configure an administrative template in the Default Domain Policy Group Policy object (GPO) to disable
Automatic Private IP addressing (APIPA) on the client computers.
Answer: B

You are the network administrator for Alecnet.com .com. The relevant portion of the network is shown
in the exhibit.
All servers run Windows Server 2003. Each subnet of the network contains 100 Windows XP
Professional computers. Each subnet also contains a DHCP server, which provides TCP/IP configuration
information to all computers on its local subnet. You create and configure Subnet3 for a new department
at your company.
Users in Subnet3 report that they cannot connect to resources located on servers in Subnet1 and Subnet2.
When they attempt to connect to these resources, they receive the following message: "Server not found".
The users can successfully connect to resources located on servers in Subnet3.
Users in Subnet1 and Subnet2 report that they cannot connect to resources located on servers in Subnet3.
When they attempt to connect to these resources, they receive the following error message: "Server did
not respond in a timely manner". The users can successfully connect to resources in both Subnet1 and
Subnet2.
You need to ensure that all client computers can connect to server-based resources an all subnets.
What should you do?


A. Configure the DHCP server in Subnet3 to provide a subnet mask of 255.255.255.0
B. Configure the DHCP servers in Subnet1 and Subnet2 to provide a subnet mask of 255.255.0.0.
C. Configure the Alecnet.com 2 Interface E1 to use a subnet mask of 255.255.0.0.
D. Configure the IP address of the Alecnet.com 2 Interface E0 as the default gateway for
Subnet3. E. Configure the IP address of the Alecnet.com 2 Interface E1 as the default gateway
for Subnet2.
Answer: A

You are the administrator of a network at Alecnet.com . The network consists of a single Active Directory
domain Alecnet.com .com. All servers run Windows Server 2003. Client computers run either Windows
XP Professional or Windows 98. All Windows 98 computers have the Active Directory Client Extensions
software installed.
The network consists of three physical subnets. Each subnet contains a domain controller and a server
that runs DHCP. Each subnet also contains a server that runs both the DNS Server service and the WINS
service. All client computers receive their TCP/IP configuration from the DHCP server that is located on
their local subnet.
All of the Windows 98 computers are located on a single subnet. The DHCP scope on this subnet is
configured with the options shown in the exhibit.


All DHCP servers are configured with similar options.
Users of the Windows 98 computers report that they cannot connect to resources on the Windows Server
2003 computers located on any subnet. When they attempt to connect to a shared resource by using
\\servername\sharename in the Run command, they receive the following error message: "Server not
found". The users can successfully connect to Web-based resources located on the same servers.
When you attempt to connect to the servers by using the ping command on an affected Windows 98
computer you can connect successfully. The users of the Windows XP Professional computers do not
report the same problems.
You need to ensure that the users of the Windows 98 computers can connect to shared resources on the
Windows Server 2003 computers.
What should you do?

A. On the affected subnet's DHCP server, configure the scope options to use the Windows 98 vendor class.
B. On the affected subnet's DHCP server, remove the WINS/NBT Node Type from the scope options.
C. On each DHCP server, remove the Microsoft Disable NetBIOS Option from the scope options.
D. On each DHCP server, add the NetBIOS over TCP/IP NBDD DHCP scope option to the scope options.

Answer: C

You are the network admin for Alecnet.com . Your network contains 3 subnets. All servers have
manually assigned IP addresses while all clients are configured to receive an address from a DHCP
server. The DHCP server is located in Site 1. The DHCP server has a scope configured for each subnet.
Users in site 2 and site 3 are complaining that periodically they cannot connect to resources located on
any subnet. You discover that during times of peak usage users are receiving an IP address in the

169.254.x.x address range.
You need to ensure that all client computers receive an address from their subnet even during times of
peak usage.
What should you do?
A.
Install one DHCP server in site 2 and site 3. On each DHCP server, configure identical scopes for each subnet
B. Install one DHCP server in Site 2 and Site 3. On each DHCP server configure a single subnet specific scope
C. Configure a DHCP Relay agent on Site 2 and Site 3
D. Configure a GPO on the domain that disables APIPA
Answer: B


You are the security analyst for Alecnet.com .com. The network consists of Alecnet.com 's intrane
perimeter network. The networks are separated by a firewall. Alecnet.com 's intranet consists of a single
Active Directory domain named corp. Alecnet.com .com. The perimeter network consists of a DNS
domain named Alecnet.com .com. The perimeter network contains publicly accessible Web servers.
The intranet contains a Windows Server 2003 DNS server named Alecnet.com 1. Alecnet.com 1 h
Active Directory-integrated primary zone for the corp. Alecnet.com .com domain. Alecnet.com 1
hosts a secondary zone that is not integrated with Active Directory for the Alecnet.com .com domain. The perimeter
network contains a Windows Server 2003 DNS server named Alecnet.com 2. Alecnet.com 2 is
authoritative for the Alecnet.com .com DNS domain, which contains the resource records for the publicly accessible
servers. Alecnet.com 1 is configured to forward requests to Alecnet.com 2. Alecnet.com
c nfigured with root hints. Alecnet.com 's written DNS security includes the following requirements:

1. The internal DNS namespace must never be accessible by external users or computers.
2. External users must not be able to retrieve zone information from either DNS server.
You need to plan a DNS security solution that meets the DNS security policy requirements. Your solution
must not adversely affect required or allowed name resolution functions in the network.
What should you do?
A. On Alecnet.com 2, allow zone transfers to only servers listed in the Name Servers
list. Disable recursion on Alecnet.com 1.
B. On Alecnet.com 2, allow zone transfers to only servers listed by IP
address. On Alecnet.com 1, do not allow zone transfers.
C. On Alecnet.com 1, allow zone transfers to only servers listed in the Name Servers
list. Disable recursion on Alecnet.com 2.
D. On Alecnet.com 1, allow zone transfer to only servers listed by IP
address. On Alecnet.com 2, do not allow zone transfers.
Answer: A

You are the network administrator for Alecnet.com .com. The network consists of a single Active
Directory forest that contains three domains. Each domain contains domain controllers that run Windows
2000 Server and domain controllers that run Windows Server 2003. The DNS Server service is installed on all
domain controllers. All client computers run Windows XP Professional.
You need to add an additional DNS zone that is hosted on at least one DNS server on each domain. You
want to configure the zone to allow secure updates only.
What should you do?

A. Configure the new zone on DNS servers in the root domain.
Configure stub zones that refer to DNS servers in another two domains.
B. Configure the new zone as a primary zone on one DNS server.
Configure other DNS servers in the three domains as secondary servers for this zone.
Enable the DNS Security Extensions (DNSSEC) protocol.
C. Configure the new zone as an Active Directory-integrated zone on DNS servers in the three domains.
Store the zone data in the DNS directory partition named DomainDNSZones.
D. Configure the new zone as an Active Directory-integrated zone on DNS servers in the three domains.
Store the zone data in the DNS directory partition named ForestDNSZones.
Answer: D

You are a network administrator for Alecnet.com . The network consists of 20 Active Directory domains.
All servers run Windows Server 2003. Alecnet.com has 240 offices. Each office is configured as an Active
Directory site.
Alecnet.com has a branch office that contains four users. User objects for these users are stored in the
australia. Alecnet.com .com domain. The branch office is connected to the corporate network by a 56Kbps
WAN connection. The branch office contains a domain controller named Alecnet.com 17 that is
configured as an additional domain controller for the australia. Alecnet.com .com domain. An Active
Directory site is configured for the branch office. Alecnet.com 17 is a member of this site. An IP site link
exists between the branch office and the main office.
The WAN connection is available only during business hours. Users in the branch office report slow
response times on the WAN connection. You examine the WAN connection and discover that the
problem is caused by Active Directory replication.
You need to improve the performance of the WAN connection.
What should you do?

A. Configure Alecnet.com 17as a global catalog server.
B. Enable universal group membership caching in the branch office.
C. Remove Active Directory from Alecnet.com 17 and configure Alecnet.com 17 as a member ser
D. On the site link that connects the branch office to the corporate network, increase the replication interval.
Answer: D

You are the network administrator for Alecnet.com . The network consists of two physical subnets
connected by a hardware-based router. Each subnet contains two domain controllers running Windows
Advanced Server. All other servers run Windows 2000 server.
Alecnet.com is in the process of migrating to a Windows Server 2003 Active Directory domain-
based network. You plan to install two new Windows Server 2003 computers as domain controllers
in the domain. The migration plan does not currently allow for upgrading the Windows 2000
domain controllers or changing any operations master roles.
Currently, host name resolution is performed by one of the Windows 2000 domain controllers that are
running the DNS Server service. The DNS server hosts a standard primary zone for the domain. The
migration plan requires that the DNS zone must be implemented as an Active Directory-integrated zone.
You need to redesign the DNS infrastructure to comply with the requirements of the migration plan. You
need to ensure that the Active Directory-integrated zone will be loaded and hosted on all domain
controllers.
What should you do?

A. Configure the zone replication scope to replicate the zone to all DNS servers in the Active Directory forest.
B. Configure the zone replication scope to replicate the zone to all DNS servers in the Active Directory domain
named Alecnet.com .com.
C. Configure the zone replication scope to replicate the zone to all domain controllers in the Active Directory
domain named Alecnet.com .com.
D. Configure the zone replication scope to replicate the zone to all domain controllers specified for a separate
DNS application directory partition.
Answer: C

You are the network administrator for Alecnet.com . The network contains Windows Server 2003
computers and Windows XP Professional computers.
Alecnet.com deploys two DNS servers. Both DNS servers run Windows Server 2003. One DNS server is
inside of the corporate firewall, and the other DNS server is outside of the firewall. The external DNS
server provides name resolution for the external Internet name of Alecnet.com on the Internet, and it is
configured with root hints. The internal DNS server hosts the DNS zones related to the internal network
configuration, and it is not configured with root hints.
You want to limit the exposure of the client computers to DNS-related attacks from the Internet, without
limiting their access to Internet-based sites.
Which two actions should you take? (Each correct answer presents part of the solution. (Choose two)

A. Configure the client computers to use only the internal DNS server.
B. Configure the client computers to use both DNS servers. List the internal DNS server first.
C. Configure the firewall to allow only network traffic on the DNS ports.
D. On the internal DNS server, disable recursion.
E. On the internal DNS server, configure the external DNS server as forwarder.
F. On the internal DNS server, add the external DNS server as the only root hint.
Answer: A, E

You are the network administrator for Contoso, Ltd. The network consists of a single Active Directory
forest. The functional level of the forest is Windows Server 2003. The forest root domain is contoso.com.
Contoso Ltd. recently merged with another company named Alecnet.com whose network consists of a
single Active Directory forest. The functional level of the Alecnet.com forest is Windows Server 2003.
The forest root domain for Alecnet.com is Alecnet.com .com. You need to create a forest trust
relationship between the two forests. Each company has dedicated connections to the Internet.
You need to configure DNS to support the forest trust relationship. You want to maintain Internet name
resolution capability for each company's network.
What should you do?


A. Configure the contoso.com DNS servers to forward to the Alecnet.com .com DNS
servers. Configure the Alecnet.com .com DNS servers to forward to the contoso.com DNS
servers.
B. Configure conditional forwarding of Alecnet.com .com on the contoso.com DNS servers to the
Alecnet.com .com DNS servers.
Configure conditional forwarding of contoso.com on the Alecnet.com .com DNS servers to the contoso.com
servers.
C. Configure a standard primary zone for Alecnet.com .com on one of the contoso.com DNS
servers. Configure a standard primary zone for contoso.com on one of the Alecnet.com .com DNS
servers.
D. Configure an Active Directory-integrated zone for Alecnet.com .com on the contoso.com DNS
servers. Configure an Active Directory-integrated zone for contoso.com on the Alecnet.com .com DNS
servers.
Answer: B