StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Networking · Networking | Implement on-premises and hybrid name resolution

Practice question 191 of 506 · medium

A child zone is signed, but validators following its signed parent cannot establish the intended chain. The parent has no child DS record. Which step is missing?

Choose the single best answer.

  1. A.Sign ordinary child records again while leaving the parent DS absent
  2. B.Increase only the child's A-record TTL
  3. C.Publish the correct child delegation DS data in the parent through the appropriate process
  4. D.Publish only the child's DNSKEY without completing the parent delegation chain
Show the answer and explanation

✓ Correct answer

  • Publish the correct child delegation DS data in the parent through the appropriate process

The parent DS connects the trusted delegation to the child's key. TTL does not authenticate delegation. A published child DNSKEY or newly signed child records still leave the stated parent-to-child trust chain incomplete.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.