You have a single Active Directory domain. All domain controllers run Windows Server 2008 and are configured
as DNS servers. The domain contains one Active Directory-integrated DNS zone.
You need to ensure that outdated DNS records are automatically removed from the DNS zone.
What should you do?

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2.
The Audit account management policy setting and Audit directory services access setting are enabled for the
entire domain.
You need to ensure that changes made to Active Directory objects can be logged. The logged changes must
include the old and new values of any attributes.
What should you do?

Your company, Contoso Ltd has a main office and a branch office. The offices are connected by a WAN link.
Contoso has an Active Directory forest that contains a single domain named ad.contoso.com.
The ad.contoso.com domain contains one domain controller named DC1 that is located in the main office.DC1
is configured as a DNS server for the ad.contoso.com DNS zone. This zone is configured as a standard
primary zone.
You install a new domain controller named DC2 in the branch office. You install DNS on DC2.
You need to ensure that the DNS service can update records and resolve DNS queries in the event that aWAN
link fails.
What should you do?

Your company has a server that runs an instance of Active Directory Lightweight Directory Service (AD LDS).
You need to create new organizational units in the AD LDS application directory partition.
What should you do?

Your company has an Active Directory domain. The company has two domain controllers named DC1 and
DC2. DC1 holds the Schema Master role.
DC1 fails. You log on to Active Directory by using the administrator account. You are not able to transfer the
Schema Master operations role.
You need to ensure that DC2 holds the Schema Masterrole.
What should you do?

Your company has an Active Directory forest that runs at the functional level of Windows Server 2008.
You implement Active Directory Rights Management Services (AD RMS).
You install Microsoft SQL Server 2005. When you attempt to open the AD RMS administration Web site, you
receive the following error message: “SQL Server does not exist or access denied.”
You need to open the AD RMS administration Web site.
Which two actions should you perform? (Each correctanswer presents part of the solution.
Choose two.)

Your network consists of an Active Directory forestthat contains one domain named contoso.com. All domain
controllers run Windows Server 2008 R2 and are configured as DNS servers. You have two Active Directory-integrated zones: contoso.com and nwtraders.com.
You need to ensure a user is able to modify recordsin the contoso.com zone. You must prevent the userfrom
modifying the SOA record in the nwtraders.com zone.
What should you do?

Your company has an Active Directory domain. All servers run Windows Server 2008 R2. Your company uses
an Enterprise Root certificate authority (CA).
You need to ensure that revoked certificate information is highly available.
What should you do?

You have two servers named Server1 and Server2. Both servers run Windows Server 2008 R2. Server1 is
configured as an enterprise root certification authority (CA).
You install the Online Responder role service on Server2.
You need to configure Server1 to support the OnlineResponder.
What should you do?

Your company has an Active Directory domain. A userattempts to log on to a computer that was turned off for
twelve weeks. The administrator receives an error message that authentication has failed.
You need to ensure that the user is able to log on to the computer.
What should you do?