AZ-800 · Question #177
Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three domains. Each domain contains 10 domain controllers. You plan to store a DNS zone in a custom…
The correct answer is D. ntdsutil.exe. To create a custom Active Directory partition for a DNS zone that replicates only to a specific subset of domain controllers, the ntdsutil.exe command-line tool should be used.
Question
Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three domains. Each domain contains 10 domain controllers. You plan to store a DNS zone in a custom Active Directory partition. You need to create the Active Directory partition for the zone. The partition must replicate to only four of the domain controllers. What should you use?
Options
- AWindows Admin Center
- BSet-DnsServer
- CNew-ADObject
- Dntdsutil.exe
How the community answered
(30 responses)- A7% (2)
- B3% (1)
- C10% (3)
- D80% (24)
Why each option
To create a custom Active Directory partition for a DNS zone that replicates only to a specific subset of domain controllers, the ntdsutil.exe command-line tool should be used.
Windows Admin Center is a graphical management tool that simplifies many AD DS tasks, but it may not offer the granular control needed to configure custom replication scopes for specific application partitions.
Set-DnsServer is a PowerShell cmdlet used for configuring DNS server settings, not for creating or managing Active Directory partitions.
New-ADObject is a PowerShell cmdlet used to create generic Active Directory objects, but it does not have the specific functionality to create an application directory partition with custom replication settings as required.
ntdsutil.exe is a powerful command-line tool used for managing Active Directory Domain Services, including the creation, deletion, and management of application directory partitions. It allows administrators to define custom replication scopes for these partitions, enabling replication to a specified subset of domain controllers, which aligns with the requirement to replicate to only four domain controllers.
Concept tested: Creating custom Active Directory application partitions and replication scope
Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/ad-cmdlets/ntdsutil
Topics
Community Discussion
No community discussion yet for this question.