MCSA 70-741 Exam MCQ Quiz and Online Test

Important Instructions:

Total Number Of Questions : 10
Passing Marks : 7
Each Question Carry 1 Mark, No Negative Marking.
Do Not Refresh The Page.
This Is A FREE Online Test, DO NOT Pay Money To Anyone To Attend This Test.
Best Of Luck…

Results

Congratulation…
You Have Passed The Test, You Should Try To The Next One…!!

Rate this post

Unfortunately…
You Did Not Pass. Why Not Try It Again?

Rate this post

#1. You have less DNS zone security after you have used the ConvertTo-DnsServerPrimaryZone PowerShell cmdlet to convert an AD-integrated zone to a file-based DNS zone. Which statement about file-based DNS zones is not correct?

A file-based DNS zone can use the secure dynamic update feature.

A file-based DNS zone cannot use DNSSEC.

Records in a file-based DNS zone have fewer security settings.

File-based DNS zones data can be protected with NTFS.

#2. You want to get information about DNS request types and DNS query packet content. What kind of DNS logging do you need to enable to get that information?

DNS server log

Debug logging

Analytic event logging

DNS monitoring

#3. Which of the following is part of a Windows Server 2016 stub zone? (Choose two.)

Select all that apply:

The IP of one or more master servers that you can use to update the zone

Resource records not contained in a DNS server’s zone

A cache of domain names and their associated IP addresses for the most common domains that the organization uses or accesses

The delegated zone’s SOA record, NS record, and A record

#4. You are responsible for the administration of your Windows Server 2016 DNS server, which is installed on a domain controller as an AD-integrated DNS server. Paul, a new employee, also needs full administrative rights for the DNS server. Which security group must he become a member of?

DomainAdmins

DNSAdmins

Administrators

DNSUpdateProxy

#5. You are managing a Windows Server 2008 R2 domain named pearson.com (productive domain). All domain controllers are Windows Server 2008 R2 with a DNS server role and AD-integrated DNS zones. You want to perform a step-by-step migration from this existing domain to a newly created empty forest root domain (future domain) with the same domain name. You have installed the Windows Server 2016 forest root domain controller of the future domain (including DNS server role with the AD-integrated zone pearson.com). You want to migrate all DNS zone data from the zone pearson.com (productive domain) to the forest root DNS server (future domain) so that this DNS server is authoritative for that zone and DNS data is saved in the Active Directory of the future domain. This has to be done with the least administrative effort. Which configuration steps are the best option?

Create a forest trust between the productive and future domain. Replicate DNS data through Active Directory.

Create a stub zone on the DNS server of the future domain. Convert the stub zone to primary. (Store the zone in Active Directory.)

Activate a zone transfer on the DNS server of the productive domain for pearson.com. Configure the DNS server in the future domain as the secondary DNS server.

Convert the zone type of pearson.com from AD-integrated to primary without Active Directory. Copy the zone file to the %systemroot% \system32\dns folder of the DNS server of the future domain. Create a new primary zone on that DNS server and select Use This Existing File. Change the zone type to primary. (Store the zone in Active Directory.)

#6. You have a forest environment with the following domains: pearson.com, eu.pearson.com, usa.pearson.com, pearsonucertify.com, eu.pearsonucertify.com, and usa.pearsonucertify.com. Every domain has two domain controllers with AD-integrated DNS servers. Each DNS server is authoritative for the name resolution in its own domain. You plan to implement additional DNS servers in usa.pearsonucertify.com. DNS servers in usa.pearson.com must automatically know about the new DNS servers in usa.pearsonucertify.com. Which of the following is the best solution to accomplish this?

Conditional forwarding on DNS servers in usa.pearson.com

File-based stub zone on DNS servers in usa.pearson.com

AD-integrated stub zone on DNS servers in usa.pearson.com

Secondary zone usa.pearsonucertify.com on DNS servers in usa.pearson.com

#7. You want to sign DNS resource records with NSEC3 and RSA/SHA-2. Which Windows server version can use both standards?

Windows Server 2008

Windows Server 2012

Windows Server 2012 R2

Windows Server 2016

#8. You are responsible for managing your DNS environment. You have a UNIX BIND DNS server named BIND1 that is the master authoritative server for the zone pearson.com with TSIG protection enabled. You want to use a Windows Server 2016 DNS server named SEC1 as the secondary DNS server for this zone. You want to use an additional layer of security for zone transfer between BIND1 and SEC1. Which technology enables you to accomplish this?

TSIG

IPsec

HMAC-MD5

GSS-TSIG

#9. You want to get information about DNSKEY record behaviors on your Windows Server 2016 DNS server and your zone pearson.com. You use the following PowerShell command: $stat = Get-DnsServerStatistics -ZoneName pearson.com. Now you must use the correct command to get that information you need. Which command do you use?

$stat.ZoneQueryStatistics

$stat.ZoneUpdateStatistics

$stat.ZoneTransferStatistics

$stat.RRLStatistics

#10. Which command can you use to enable GlobalNames zones? (Choose two.)

Select all that apply:

Set-DnsServerGlobalNameZone

Dnscmd

Set-DnsServer

Set-DnsServerPrimaryZone

CHECK ANSWER

Rate this post