Your company has a main office and a branch office.    
The network contains an Active Directory domain named contoso.com. The DNS zone for  contoso.com is configured as an Active Directory-integrated zone and is replicated to all domain  controllers in the domain.  
The main office contains a writable domain controller named DC1. The branch office contains a  read- only domain controller （RODC） named RODC1. All domain controllers run Windows Server  
2008 R2 and are configured as DNS servers.    
You uninstall the DNS server role from RODC1. You need to prevent DNS records from  replicating to RODC1.    
What should you do（）

单项选择题YournetworkcontainsanActiveDirectorydomainnamedcontoso.com.Youcreatea GlobalNameszone.Youaddanalias（CNAME）resourcerecordnamedServer1tothezone.Thetargethostoftherecordisserver2.contoso.com.WhenyoupingServer1，youdiscoverthatthe namefailstoresolve. Yousuccessfullyresolveserver2.contoso.com.YouneedtoensurethatyoucanresolvenamesbyusingtheGlobalNameszone. Whatshouldyoudo（）

A.From the command prompt， use the netsh tool.
B.From the command prompt， use the dnscmd tool.
C.From DNS Manager， modify the properties of the GlobalNames zone.
D.From DNS Manager， modify the advanced settings of the DNS server.

单项选择题Your network contains an Active Directory domain named contoso.com. The domain contains a  domain controller named DC1. DC1 hosts a standard primary zone for contoso.com.     You discover that non-domain member computers register records in the contoso.com zone. You  need to prevent the non-domain member computers from registering records in the contoso.com  zone. All domain member computers must be allowed to register records in the contoso.com  zone.     What should you do first（）

A.Configure a trust anchor.
B.Run the Security Configuration Wizard （SCW）.
C.Change the contoso.com zone to an Active Directory-integrated zone.
D.Modify the security settings of the %SystemRoot%\System32\Dns folder.

单项选择题Your network contains an Active Directory forest named contoso.com. You plan to add a new  domain named nwtraders.com to the forest.  All DNS servers are domain controllers.     You need to ensure that the computers in nwtraders.com can update their Host （A） records on  any of the DNS servers in the forest.     What should you do（）

A.Add the computer accounts of all the domain controllers to the DnsAdmins group.
B.Add the computer accounts of all the domain controllers to the DnsUpdateProxy group.
C.Create a standard primary zone on a domain controller in the forest root domain.
D.Create an Active Directory-integrated zone on a domain controller in the forest root domain.

单项选择题Your network contains a domain controller that has two network connections named Internal and  Private. Internal has an IP address of 192.168.0.20. Private has an IP address of 10.10.10.5.     You need to prevent the domain controller from registering Host （A） records for the 10.10.10.5 IP  address.     What should you do（）

A.Modify the netlogon.dns file on the domain controller.
B.Modify the Name Server settings of the DNS zone for the domain.
C.Modify the properties of the Private network connection on the domain controller.
D.Disable netmask ordering on the DNS server that hosts the DNS zone for the domain.

单项选择题Your network contains an Active Directory domain. The domain contains two domain controllers  named DC1 and DC2.     DC1 hosts a standard primary DNS zone for the domain. Dynamic updates are enabled on the  zone. DC2 hosts a standard secondary DNS zone for the domain.     You need to configure DNS to allow only secure dynamic updates.     What should you do first（）

A.On DC1 and DC2， configure a trust anchor.
B.On DC1 and DC2， configure a connection security rule.
C.On DC1， configure the zone transfer settings.
D.On DC1， configure the zone to be stored in Active Directory.