QUESTION NO: 165

QUESTION NO: 165
You are the administrator of TestKing’s network. Your company has a main office two branch offices
and two small branch offices. The company network consists of one Windows 2000 domain. The main
office and the two large branch offices are connected by a dedicated T1 lines as shown in the exhibit.

The two branch offices use 128 KBPS ISDN lines and routing and remote access over the internet to
connect to the company’s internal network. You are designing your DNS name resolution
environment. You want to accomplish the following goals:
• DNS name resolution traffic across the WAN links will be minimized.
• DNS replication traffic across the WAN links will be minimized.
• DNS replication traffic across the public WAN links will be secured.
• Name resolution performance for client computers will be optimized.
You take the following actions:
• Install the DNS server service on one domain controller at each office.

• Create an active directory integrated zone on each DNS server at each office.
• Configure client computer to query their local DNS server.
• Configure the zones to allow dynamic updates.
Which result or result do these actions produce? (Choose all that apply)
A. DNS name resolution traffic across the WAN links is minimized.
B. DNS replication traffic across the WAN links is minimized.
C. DNS replication traffic across the public WAN links is secured.
D. Name resolution performance for client computers is optimized.
Answer: A, B, C, D
Explanation:
A: A DNS server has been installed in each location and the clients have been configured use the local DNS
server for name resolution. This minimizes DNS name resolution traffic across the WAN links.
B: Active Directory integrated zones replicates on a per-property basis, propagating only relevant changes.
This is more efficient than full zone transfers. Additionally compression is used as well. This minimizes
zone replication traffic.
C: Replication between standard and secondary DNS zones are unencrypted.. By creating an Active
Directory integrated zone, DNS zone transfers will be included Active Directory replication. Active
Directory replication uses secure channels which provides encryption.
D: A DNS server has been installed in each location and the clients have been configured use the local DNS
server for name resolution. This minimizes slow DNS name resolution traffic across the WAN links and
optimizes name resolution performance.