You work as a Network Administrator for Net Perfect Inc. The company has a Windows Server 2008 network environment. The network is configured as a Windows Active Directory-based single forest single domain network. The domain functional level is set to Windows Server 2003. You have configured an Active Directory-integrated DNS zone on the network. A new security policy dictates that each incoming DNS query should be recorded. Which of the following steps will you take to implement the new security policy?

Question

Accepted Answer

C. Enable debug logging on the DNS server. Windows DNS Server includes a debug logging feature that, when enabled, writes detailed query and response records to a DNS.LOG file. This feature is disabled by default to conserve resources, so it must be manually turned on via the DNS Manager console under the server's Debug Logging properties tab. Enabling it fulfills the security policy requirement to record each incoming DNS query.

Answer

A. Create a GPO. A Group Policy Object controls user and computer settings across the domain but has no built-in mechanism to enable or configure DNS server debug logging.

Answer

B. Do nothing, each incoming DNS queries is recorded by default in DNS.LOG file. DNS debug logging is disabled by default on Windows Server 2008; incoming queries are not automatically recorded until the feature is explicitly enabled.

Answer

D. Create a new OU. Creating a new Organizational Unit is an Active Directory structuring task and has no relationship to DNS query logging.

You work as a Network Administrator for Net Perfect Inc. The company has a Windows Server 2008 network environment. The network is configured as a Windows Active Directory-based single forest single…

Question

Options

How the community answered

Why each option

Topics

Community Discussion