Implement On-Premises and Hybrid Name Resolution AZ-800 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   Your on-premises DNS server is configured to forward all queries to a public DNS provider. You have recently created an Azure Public DNS zone for a new public website. You want on-premises clients to resolve the new website's name using Azure DNS, but you do not want to change the global forwarder. What should you configure?

   • AA secondary zone for the new website's domain.
   • BChange the global forwarder to Azure DNS.
   • CA stub zone for the new website's domain.
   • DA conditional forwarder for the new website's domain to Azure DNS name servers.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company is deploying a new branch office and wants to create a DNS zone for 'branch.contoso.com' that will be managed by the branch's Windows Server DNS server. The zone must replicate only to DNS servers in the branch office, not to the entire forest. What should you do?

   • ACreate an Active Directory-integrated zone with replication scope set to all DNS servers in the branch site.
   • BCreate a secondary zone on the branch server with the primary on a domain controller.
   • CCreate a standard primary zone and manually transfer it to the branch server.
   • DCreate a stub zone in the branch server.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   Your on-premises DNS server is configured with a conditional forwarder for the domain azure.contoso.com to an Azure DNS Private Resolver inbound endpoint. You have also configured a forwarder for all other queries to a public DNS provider. Users report that some names in azure.contoso.com resolve correctly, but others fail with a 'server failure' error. What is the most likely cause?

   • AThe private zone contains records that reference names in other zones that the resolver cannot resolve.
   • BSome records in the private zone have a different case than the query, causing case-insensitive mismatch.
   • CThe conditional forwarder is configured with a short timeout, causing intermittent failures.
   • DThe conditional forwarder is using recursion, but the inbound endpoint does not support recursion.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   Contoso has an on-premises Active Directory domain with two domain controllers running Windows Server 2019 DNS. They need to resolve names in the partner domain fabrikam.com, which is hosted by Fabrikam's own DNS servers. Contoso's firewall only allows DNS traffic to Fabrikam's two public IP addresses. You need to configure DNS so that queries for fabrikam.com are sent directly to Fabrikam's servers, while all other external queries continue to use the existing internet forwarder. What should you do?

   • AAdd Fabrikam's DNS servers as additional forwarders on the DNS server properties.
   • BCreate a conditional forwarder for fabrikam.com pointing to Fabrikam's DNS servers.
   • CConfigure a stub zone for fabrikam.com with the master servers set to Fabrikam's DNS servers.
   • DCreate a secondary zone for fabrikam.com and transfer the zone from Fabrikam's servers.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following is a common use case for implementing DNS policies in Windows Server?

   • ASplit-brain DNS, where internal and external clients receive different answers for the same domain name
   • BAutomatically creating DNS records for new computers
   • CReplicating DNS zones to other servers
   • DEncrypting DNS queries with DNSSEC
   Reveal Solution Discussion Select an answer first