Question

You work as the IT Administrator for a small corporate network. The Marketing department wants to create an intranet site that is only accessible from the private network. You have selected mrktg.private as the domain name that will hold all records for the zone. You want all client computers in the domain to update their records automatically with DNS. Because security is important, you want to make sure only the computer that created the DNS record can update it in the future.

Complete the following tasks:

1. Create the mrktg.private zone on the CorpDC DNS server.
2.Configure the new zone to be stored in Active Directory.
3. Replicate data with all DNS servers in the domain.
4. Allow only secure dynamic updates.

Answer 1

To create the mrktg.private zone on the CorpDC DNS server, configure it to be stored in Active Directory, replicate data with all DNS servers in the domain, and allow only secure dynamic updates, follow these steps:

Step-by-step explanation:

To create the mrktg.private zone on the CorpDC DNS server, follow these steps:

1. Open the DNS Manager on the CorpDC server.
2. Right-click on the Forward Lookup Zones folder and select New Zone.
3. Follow the wizard to create a primary zone for mrktg.private.
4. Ensure that the zone is set to Store the zone in Active Directory.

To configure the new zone to replicate data with all DNS servers in the domain, do the following:

1. Open the DNS Manager on each DNS server in the domain.
2. Navigate to the mrktg.private zone and open its properties.
3. Go to the Zone Transfers tab.
4. Enable Allow zone transfers.
5. Select Only to servers listed on the Name Servers tab.
6. Add the DNS servers' IP addresses in the list of servers allowed to transfer the zone.

To allow only secure dynamic updates, you need to configure the zone as follows:

1. Open the properties of the mrktg.private zone.
2. Go to the General tab.
3. Select Secure only for dynamic updates.
4. Click Apply and OK to save the changes.