What should you do?

You have a DNS server named Server1 that runs Windows Server 2016. Server1 has two Active Directory-integrated zones named contoso.com and adatum.com.
All client computers run Windows 10.
Server1 recently experienced millions of erroneous DNS queries causing a denial of service.
You need to reduce the likelihood that a similar attack will cause a denial of service. The solution must ensure that Server1 continuous to resolve names for clients.
What should you do?
A. Implement DNS-based Authentication of Named Entities (DANE)
B. Enable Response Rate Limiting (RRL) on Server1
C. Configure DNS policies on Server1
D. Sign both adatum.com and contoso.com zones

microsoft-exams

Leave a Reply

Your email address will not be published. Required fields are marked *


The reCAPTCHA verification period has expired. Please reload the page.