Your network contains an Active Directory forest named contoso.com.

You need to identify whether a fine-grained password policy is applied to a specific group.

Which tool should you use?

Your network contains an Active Directory domain named contoso.com.

You need to create one password policy for administrators and another password policy for all other users.

Which tool should you use?

Your network contains an Active Directory forest. The forest contains one domain named contoso.com.

You discover the following event in the Event log of domain controllers: “The request for a new account-identifier pool failed. The operation will be retried until the request succeeds. The error is ” %1 “”

You need to ensure that the domain controllers can acquire new account-identifier pools successfully.

What should you do?

Your network contains an Active Directory forest.

All users have a value set for the Department attribute.

From Active Directory Users and Computers, you search a domain for all users who have a Department attribute value of Marketing. The search returns 50 users.

From Active Directory Users and Computers, you search the entire directory for all users who have a Department attribute value of Marketing.

The search does not return any users.

You need to ensure that a search of the entire directory for users in the marketing department returns all of the users who have the Marketing Department attribute.

What should you do?

Your network contains an Active Directory domain named contoso.com.

You have an organizational unit (OU) named Sales and an OU named Engineering.

You have two Group Policy objects (GPOs) named GP01 and GPO2. GP01 and GP02 are linked to the Sales OU and contain multiple settings.

You discover that GPO2 has a setting that conflicts with a setting in GP01. When the policies are applied, the setting in GPO2 takes effect.

You need to ensure that the settings in GP01 supersede the settings in GP02. The solution must ensure that all non-conflicting settings in both GPOs are applied.

Your network contains an Active Directory domain. The domain is configured as shown in the exhibit.

You have a Group Policy Object (GPO) linked to the domain.

You need to ensure that the settings in the GPO are not processed by user accounts or computer accounts in the Finance organizational unit (OU). You must achieve this goal by using the minimum amount of administrative effort.

What should you do?

Your network contains an Active Directory domain named contoso.com.

The Administrator deletes an OU named OU1 accidentally.

You need to restore OU1. Which cmdlet should you use?

A corporate network includes a single Active Directory Domain Services (AD DS) domain. All regular user accounts reside in an organizational unit (OU) named Employees. All administrator accounts reside in an OU named Admins.

You need to ensure that any time an administrator modifies an employee’s name in AD DS, the change is audited.

What should you do first?

Your network contains an Active Directory domain named contoso.com.

You need to create a script that runs the Best Practices Analyzer (BPA) each week for all of the server roles that BPA supports on each domain controller.

You must achieve this goal by using the minimum amount of administrative effort.

Which tools should you use? (Each correct answer presents part of the solution. Choose three.)

Your network contains an Active Directory domain.

You need to activate the Active Directory Recycle Bin in the domain.

Which tool should you use?