Identity with Windows Server 2016 — Question 43

You network contains one Active Directory domain named adatum.com. The domain contains a DNS server named Server1 that runs Windows Server 2016. All domain computers use Server1 for DNS.
You sign adatum.com by using DNSSEC.
You need to configure the domain computers to validate DNS responses for adatum.com records.
What should you configure in Group Policy?

Answer options

• A. Network List Manager Policies
• B. Network Access Protection (NAP)
• C. Name Resolution Policy
• D. Public Key Policy

Correct answer: C

Explanation

The correct answer is C, as the Name Resolution Policy allows you to specify settings for DNS resolution and validation, which is crucial for DNSSEC. Options A and B do not pertain to DNS validation, while D focuses on managing public key information rather than DNS response validation.