Your company has a single Active Directory forest that has six domains. All DNS servers in the forest run Windows Server 2008 R2.You need to ensure that all public DNS queries are channeled through a single-caching-only DNS server.
Which two actions should you perform？（）

多项选择题Your company uses Active Directory-integrated DNS. Users require access to the Internet. You run a network capture. You notice the DNS server is sending DNS name resolution queries to a server named f.root-servers.net. You need to prevent the DNS server from sending queries to f.root-servers.net. The server must be able to resolve names for Internet hosts. Which two actions should you perform？（）

A. Enable forwarding to your ISP¯s DNS servers
B. Disable the root hints on the DNS server.
C. Disable the netmask ordering option on the DNS server.
D. Configure Reverse Lookup Zones for the IP subnets on the network.

单项选择题Your network consists of a single Active Directory domain. The domain contains a server named Server1 that runs Windows Server 2008 R2. All client computers run Windows 7. All computers are members of the Active Directory domain. You assign the Secure Server (Require Security) IPsec policy to Server1 by using a Group Policy object (GPO). Users report that they fail to connect to Server1. You need to ensure that users can connect to Server1. All connections to Server1 must be encrypted. What should you do？（）

A. Restart the IPsec Policy Agent service on Server1.
B. Assign the Client (Respond Only) IPsec policy to Server1.
C. Assign the Server (Request Security) IPsec policy to Server1.
D. Assign the Client (Respond Only) IPsec policy to all client computers.

单项选择题Your network contains one Active Directory domain. You have a member server that runs Windows Server 2008 R2.You need to immediately disable all incoming connections to the server. What should you do？（）

A. From the Services snap-in, disable the IP Helper.
B. From the Services snap-in, disable the Netlogon service.
C. From Windows Firewall, enable the Block all connections option on the Public Profile.
D. From Windows Firewall, enable the Block all connections option on the Domain Profile.

单项选择题Your company has an IPv4 Ethernet network.A router named R1 connects your segment to the Internet. A router named R2 joins your subnet with a segment named Private1. The Private1 segment has a network address of 10.128.4.0 26. Your computer named WKS1 requires access to servers on the Private1 network. The WKS1 computer configuration is as shown in the following table. Network Addresses IPv4 Address 10.128.64.113 Subnet mask 255.255.252.0 Default Gateway 10.128.64.1 The routers are configured as shown in the following table. Router ID Addresses R1 interface 1 R1 interface 2 (To Internet) 10.128.64.1 131.107.108.37 R2 interface 1 R2 interface 2 10.128.64.10 10.128.4.1 WKS1 is unable to connect to the Private1 network by using the current configuration.You need to add a persistent route for the Private1 network to the routing table on WKS1. Which command should you run on WKS1？（）

A. Route add -p 10.128.4.0/22 10.128.4.1
B. Route add p 10.128.4.0/26 10.128.64.10
C. Route add p 10.128.4.0 mask 255.255.255.192 10.128.64.1
D. Route add p 10.128.64.10 mask 255.255.255.192 10.128.4.0

多项选择题Your network uses IPv4. You install a server that runs Windows Server 2008 R2 at a branch office. The server is configured with two network interfaces.You need to configure routing on the server at the branch office. Which two actions should you perform？（）

A. Install the Routing and Remote Access Services role service.
B. Run the netsh ras ip set access ALL command. 
C. Run the netsh interface ipv4 enable command. 
D. Enable the IPv4 Router Routing and Remote Access option.