70-642 · Question #424
Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. You are configuring DirectAccess. You create a static host (A) record for…
The correct answer is A. Run dnscmd /config /globalqueryblocklist wpad. Windows 2008 DNS implements GlobalQueryBlockList, an additional security feature that includes ISATAP by default. This causes it to ignore any ISATAP.<domain name> request. Therefore, you must clear ISATAP from the list. Do this via the DNSCMD command or by making a registry…
Question
Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. You are configuring DirectAccess. You create a static host (A) record for isatap.contoso.com. You discover that the DNS server fails to respond to queries for the isatap.contoso.com record. You need to ensure that the DNS server resolves queries for isatap.contoso.com. What should you do?
Options
- ARun dnscmd /config /globalqueryblocklist wpad.
- BRun dnscmd /config /enableglobalqueryblocklist 1.
- CCreate a primary zone for isatap.contoso.com.
- DRun dnscmd /config /globalqueryblocklist isatap.
How the community answered
(34 responses)- A71% (24)
- B3% (1)
- C18% (6)
- D9% (3)
Explanation
Windows 2008 DNS implements GlobalQueryBlockList, an additional security feature that includes ISATAP by default. This causes it to ignore any ISATAP.<domain name> request. Therefore, you must clear ISATAP from the list. Do this via the DNSCMD command or by making a registry entry. At a command prompt, enter dnscmd /config /globalqueryblocklist wpad and press Enter. This will define the GlobalQueryBlockList as only having WPAD in it (thus removing ISATAP). You also may accomplish this by going to the registry key at HKLM:\System\Current Control Set\Services\DNS\Parameters. Edit GlobalQueryBlockList and remove ISATAP.
Topics
Community Discussion
No community discussion yet for this question.