You have an Active Directory domain named contoso.com. You have a domain controller named  Server1 that is configured as a DNS server. Server1 hosts a standard primary zone for contoso.com. The DNS configuration of Server1 is shown in the exhibit. （Click the Exhibit button.） 
You discover that stale resource records are not automatically removed from the contoso.com  zone. You need to ensure that the stale resource records are automatically removed from the  contoso.com zone.    
What should you do（）

单项选择题Your network contains a domain controller that is configured as a DNS server. The server hosts  an Active Directory-integrated zone for the domain.     You need to reduce how long it takes until stale records are deleted from the zone.     What should you do（）

A.From the configuration directory partition of the forest， modify the tombstone lifetime.
B.From the configuration directory partition of the forest， modify the garbage collection interval.
C.From the aging properties of the zone， modify the no-refresh interval and the refresh interval.
D.From the start of authority （SOA） record of the zone， modify the refresh interval and the expire interval.

单项选择题Your network contains an Active Directory domain named contoso.com. The domain contains the  servers shown in the following table：     Server name  Operating system  Role   DC1  Windows Server 2008  Domain controller  DC2  Windows Server 2008 R2  Domain controller  DNS1  Windows Server 2008  DNS server  DNS2  Windows Server 2008 R2  DNS server     The functional level of the forest is Windows Server 2003. The functional level of the domain is  Windows Server 2003.   DNS1 and DNS2 host the contoso.com zone. All client computers run Windows 7 Enterprise.     You need to ensure that all of the names in the contoso.com zone are secured by using  DNSSEC.   What should you do first（）

A.Change the functional level of the forest.
B.Change the functional level of the domain.
C.Upgrade DC1 to Windows Server 2008 R2.
D.Upgrade DNS1 to Windows Server 2008 R2.

单项选择题Yourcompanyhasamainofficeandabranchoffice. ThenetworkcontainsanActiveDirectorydomainnamedcontoso.com.TheDNSzoneforcontoso.comisconfiguredasanActiveDirectory-integratedzoneandisreplicatedtoalldomaincontrollersinthedomain. ThemainofficecontainsawritabledomaincontrollernamedDC1.Thebranchofficecontainsaread-onlydomaincontroller（RODC）namedRODC1.AlldomaincontrollersrunWindowsServer 2008R2andareconfiguredasDNSservers. YouuninstalltheDNSserverrolefromRODC1.YouneedtopreventDNSrecordsfromreplicatingtoRODC1. Whatshouldyoudo（）

A.Modify the replication scope for the contoso.com zone.
B.Flush the DNS cache and enable cache locking on RODC1.
C.Configure conditional forwarding for the contoso.com zone.
D.Modify the zone transfer settings for the contoso.com zone.

单项选择题YournetworkcontainsanActiveDirectorydomainnamedcontoso.com.Youcreatea GlobalNameszone.Youaddanalias（CNAME）resourcerecordnamedServer1tothezone.Thetargethostoftherecordisserver2.contoso.com.WhenyoupingServer1，youdiscoverthatthe namefailstoresolve. Yousuccessfullyresolveserver2.contoso.com.YouneedtoensurethatyoucanresolvenamesbyusingtheGlobalNameszone. Whatshouldyoudo（）

A.From the command prompt， use the netsh tool.
B.From the command prompt， use the dnscmd tool.
C.From DNS Manager， modify the properties of the GlobalNames zone.
D.From DNS Manager， modify the advanced settings of the DNS server.

单项选择题Your network contains an Active Directory domain named contoso.com. The domain contains a  domain controller named DC1. DC1 hosts a standard primary zone for contoso.com.     You discover that non-domain member computers register records in the contoso.com zone. You  need to prevent the non-domain member computers from registering records in the contoso.com  zone. All domain member computers must be allowed to register records in the contoso.com  zone.     What should you do first（）

A.Configure a trust anchor.
B.Run the Security Configuration Wizard （SCW）.
C.Change the contoso.com zone to an Active Directory-integrated zone.
D.Modify the security settings of the %SystemRoot%\System32\Dns folder.