70-740 Exam QuestionsBrowse all questions from this exam

70-740 Exam - Question 74


Note: In this section, you'll see one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem, and you must determine whether the solution meets the stated goals. Any of the solutions might solve the problem. It is also possible that none of the solutions solve the problem.

Once you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.

Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. All client computers run Windows 10.

On Server1, you have the following zone configuration:

You need to prevent Server1 from resolving queries from DNS clients located on Subnet4. Server1 must resolve queries from all other DNS clients.

Solution: From Windows Firewall with Advanced Security on Server1, you create an inbound rule.

Does this meet the goal?

Show Answer
Correct Answer: A

Creating an inbound rule in Windows Firewall with Advanced Security on Server1 to block traffic from Subnet4 would effectively prevent DNS clients located on Subnet4 from resolving queries. This approach works because an inbound rule can be configured to deny traffic from a specific IP range, ensuring that Server1 does not process DNS queries originating from Subnet4 while still allowing queries from other subnets. Thus, this solution meets the stated goal.

Discussion

2 comments
Sign in to comment
OliveiraOption: B
Feb 22, 2020

It's not the right way to block requesting from subnet4 but, it works putting the subnet4 on the inbound rule of the Firewall Rule

rebeenOption: B
May 2, 2020

The write answer is B. No. and this is the explanation: https://www.petri.com/windows-server-2016-apply-filters-dns-queries

josevirtual
Jul 3, 2020

That link shows another way to do it, but I think that the answer is A, Yes, an inbound rule should work too.