Home » Microsoft » 70-412 v.2 » What should you do first?
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2 and has the DNS Server server role installed.
Server1 has a zone named contoso.com. The zone is configured as shown in the exhibit. (Click the Exhibit button.)
You need to assign a user named User1 permission to add and delete records from the contoso.com zone only.
What should you do first?
A. Enable the Advanced view from DNS Manager.
B. Add User1 to the DnsUpdateProxy group.
C. Run the New Delegation Wizard.
D. Configure the zone to be Active Directory-integrated.
Correct Answer: D
Explanation/Reference:
Secure dynamic updates are only supported or configurable for resource records in zones that are stored in Active Directory Domain Services (AD DS).
Note: To modify security for a resource record
1.Open DNS Manager.
2.In the console tree, click the applicable zone.
3.In the details pane, click the record that you want to view.
4.On the Action menu, click Properties.
5.On the Security tab, modify the list of member users or groups that are allowed to securely update the applicable record and reset their permissions as needed.
Reference: Modify Security for a Resource Record
