Module Assessment

1.

A member resolves bne-dc1.corp.contoso.com but nltest /dsgetdc:corp.contoso.com /force fails. Which test best targets the next dependency?

Query the reverse zone for the member's pointer record.

Query _ldap._tcp.dc._msdcs.corp.contoso.com for service location records through the member's configured resolver.

Clear every resolver cache then retry sign-in.

2.

A branch site has no local domain controller, yet its site-specific service query returns a domain controller from another site. What is the most likely valid explanation?

The service record proves that the domain controller physically resides in the branch site.

The client must ignore the answer because site-specific records can contain only local targets.

Automatic site coverage registered a suitable domain controller for the uncovered site.

3.

Two authoritative servers return different host data for a directory-integrated zone immediately after a secure update. Which evidence should you collect next?

Application directory partition replication state plus direct answers from both servers.

Public recursive resolver cache contents.

A conventional primary-to-secondary zone transfer log.

4.

A client can't update a record that a Dynamic Host Configuration Protocol service account created. The zone uses secure updates. What is the best first action?

Enable nonsecure updates.

Inspect record ownership, access control, plus the intended registration identity.

Enable aggressive scavenging.

5.

After correcting an affected member's resolver list, which verification set best proves recovery?

Successful ping to one domain controller.

Successful resolution of a public web name.

Exact locator query, forced domain controller location, original directory operation, plus replication validation when zone inconsistency was involved.

Feedback