peparing mcsa: help on a question

[Ruben James]

hello ng,

i'm just preparing my mcsa 2003 examen. i found this test-question and i'd
like to have your opinion. i would say a is correct. b does not make any
sense to me. but i am not sure about c + d. both could be correct. but d
seems a little strange to me. forwarding all unresolved requests to the dns
server of an other divison ??

what is your opinion.



thank you

rj





You are the network administrator for NSCOM.com. NSCOM includes two
divisions:

Contoso, Ltd. and Fabrikam, Inc. The two divisions are in separate
locations. The two

locations are connected by a WAN connection.

The network consists of two single-domain Active Directory forests. The
domain names are

contoso.com and fabrikam.com. All domain controllers run Windows Server
2003. All

domain controllers are configured as DNS servers. All computers in each
domain are

configured to use the local domain controller for DNS.

Users in the contoso.com domain frequently need to access several Web
servers in the

fabrikam.com domain. However, when the users attempt to connect, they
receive an error

message stating that the servers cannot be located.

You need to ensure that users in the contoso.com domain can access the Web
servers in the

fabrikam.com domain. Your solution must have a minimal effect on the current
name

resolution and should require minimal administrative effort to maintain.





What are two possible ways to achieve this goal? (Each correct answer
presents a complete

solution. Choose two)



A. On the DNS servers in the contoso.com domain, create a secondary zone for
the fabrikam.com

domain. Configure one of the DNS servers in the fabrikam.com domain as the
primary DNS

server for the zone.

B. Configure the DNS servers in the contoso.com domain with a primary zone
for the

fabrikam.com domain.

Create a host (A) resource record for each of the Web servers in the
fabrikam.com domain.

C. On the DNS servers in the contoso.com domain, create an Active
Directory-integrated stub

zone for the fabrikam.com domain.

Configure one of the DNS servers in the fabrikam.com domain as the primary
DNS server for the

zone.

D. Create a forwarder entry on the DNS servers in the contoso.com domain.

Configure the servers to forward all unresolved requests to a DNS server in
the fabrikam.com

domain.

 

[Kevin D. Goodknecht Sr. [MVP]]

hello ng,

i'm just preparing my mcsa 2003 examen. i found this test-question
and i'd like to have your opinion. i would say a is correct. b does
not make any sense to me. but i am not sure about c + d. both could
be correct. but d seems a little strange to me. forwarding all
unresolved requests to the dns server of an other divison ??

what is your opinion.

Out of the choices given,

A & C
D would not be advisable because then all external queries from contoso.com
would go to the fabrikam.com DNS servers.

What are two possible ways to achieve this goal? (Each correct answer
presents a complete

solution. Choose two)

A. On the DNS servers in the contoso.com domain, create a secondary zone
for

the fabrikam.com domain. Configure one of the DNS servers in the
fabrikam.com domain as the primary DNS server for the zone.

This would required that the admin from the fabrikam.com domain allow zone
transfers to the contoso.com DNS servers.

B. Configure the DNS servers in the contoso.com domain with a primary zone

for the fabrikam.com domain.
Create a host (A) resource record for each of the Web servers in the
fabrikam.com domain.

This would work for accessing the web servers, it would require maintaining
the A records for the web servers though. Too much administration

C. On the DNS servers in the contoso.com domain, create an Active

Directory-integrated stub zone for the fabrikam.com domain.
Configure one of the DNS servers in the fabrikam.com domain as the primary
DNS server for the zone.

This would be one of the more desirable and easiest to set up and requires
very little maintenance.

D. Create a forwarder entry on the DNS servers in the contoso.com domain.

Configure the servers to forward all unresolved requests to a DNS server in
the fabrikam.com domain.

This would be the least desirable way, because it would require all external
queries to go to the fabrikam.com DNS servers.


There are actually three reasonable choices and the third choice not given
here, on the contoso.com DNS, add a conditional forwarder for fabrikam.com
to the IP of the fabrikam.com DNS servers.

So the three reasonable choices are:
A A secondary zone
B A Stub zone
C A conditional forwarder

Out of the three choices B & C are more desirable because a full zone
transfer is not needed and can be done without having to allow a full zone
transfer.
C requires no zone transfers at all, while B require transfer of NS and A
records from fabrikam.com