1.

Stephen is creating a standard primary zone for his company on a Windows Server 2003 DNS server. Stephen wants to enable secure-only dynamic DNS updates on his standard primary zone for clients within his office. Stephen opens the DNS management console and opens the Properties window of the primary zone. He notices that the only options available for dynamic updates are None and Nonsecure and Secure. Why can't Stephen enable secure-only dynamic DNS updates on this zone?

1. Stephen cannot use secure-only dynamic DNS updates unless his zone is an Active Directory integrated zone.

2. The Secure Dynamic Updates feature is not available in Windows Server 2003.

3. After creating the zone, Stephen must stop and restart the DNS server service.

4. Stephen can just use the Nonsecure and Secure option, since clients will attempt to use secure dynamic updates first.

2.

Your manager is concerned that the DNS servers in your network could be susceptible to name spoofing and wants to implement DNS security in your environment. He asks you to research the implementation of DNSSEC onto your existing Windows Server 2003 DNS servers. After researching DNSSEC, you explain to your boss that your Windows Server 2003 DNS servers can only act as secondary servers while running DNSSEC. Why is this so?

1. A Windows Server 2003 DNS server can only run as a secondary server when using DNSSEC because...