Does this meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.

Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. All client computers run Windows 10.

On Server1, you have the following zone configuration.

You need to ensure that all of the client computers in the domain perform DNSSEC validation for the fabrikam.com namespace.

Solution: From a Group Policy object (GPO) in the domain, you modify the Network List Manager Policies.

Does this meet the goal?
A . Yes
B . No

View Answer

Answer: B

Explanation:

Network List Manager Policies are security settings that you can use to configure different aspects

of how networks are listed and displayed on one computer or on many computers. Network List Manager Policies are not related to DNSSEC.

References: https://technet.microsoft.com/en-us/library/jj966256(v=ws.11).aspx

https://technet.microsoft.com/nl-nl/itpro/windows/keep-secure/network-list-manager­policies?f=255&MSPPError=-2147217396 The right way would be by using network policies: Add-DnsServerClientSubnet -Name “subnet4” -IPv4Subnet 172.16.1.0/24 -PassThruAdd-DnsServerQueryResolutionPolicy -Name “blockqueries” -Action IGNORE -ClientSubnet “EQ,subnet4” -PassThru See also: https://technet.microsoft.com/en-us/windows-server-docs/networking/dns/deploy/apply­filters-on-dns-queries