70-740 Exam QuestionsBrowse all questions from this exam

70-740 Exam - Question 72


Note: In this section, you'll see one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem, and you must determine whether the solution meets the stated goals. Any of the solutions might solve the problem. It is also possible that none of the solutions solve the problem.

Once you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.

Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. All client computers run Windows 10.

On Server1, you have the following zone configuration:

You need to prevent Server1 from resolving queries from DNS clients located on Subnet4. Server1 must resolve queries from all other DNS clients.

Solution: From the Security setting of each zone on Server1, you modify the permissions.

Does this meet the goal?

Show Answer
Correct Answer: B

Modifying the Security settings of each zone to change permissions is not the correct method to prevent Server1 from resolving queries from DNS clients located on Subnet4. DNS zone permissions control who can modify or manage the zones, but they do not control from which subnets the DNS server responds to queries. The correct approach is to configure the DNS server's response policies or use firewall rules to block DNS queries from Subnet4.

Discussion

2 comments
Sign in to comment
uevenasdf
Feb 17, 2020

Is this meant to be in the 70-740 exam? Sounds like it belongs in 70-741?

davidtldOption: B
Dec 16, 2019

You need to update permissions to the Subnet. The zone permissions are not relevant