You have a Windows Server 2008 R2 that has the Active Directory Certificate Services server role installed.
You need to minimize the amount of time it takes for client computers to download a certificate revocation list
(CRL).
What should you do?

You want users to log on to Active Directory by using a new Principal Name (UPN).
You need to modify the UPN suffix for all user accounts.
Which tool should you use?

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2.
Auditing is configured to log changes made to the Managed By attribute on group objects in an organizational
unit named OU1.
You need to log changes made to the Description attribute on all group objects in OU1 only.
What should you do?

Your company uses shared folders. Users are grantedaccess to the shared folders by using domain local
groups. One of the shared folders contains confidential data.
You need to ensure that unauthorized users are not able to access the shared folder that contains confidential
data.
What should you do?

Your company has an Active Directory domain. You install an Enterprise Root certification authority (CA) on a
member server named Server1.
You need to ensure that only the Security Manager is authorized to revoke certificates that are supplied by
Server1.
What should you do?

You need to deploy a read-only domain controller (RODC) that runs Windows Server 2008 R2.
What is the minimal forest functional level that you should use?

Your company has three Active Directory domains in a single forest. You install a new Active Directoryenabled
application. The application ads new user attributes to the Active Directory schema.
You discover that the Active Directory replication traffic to the Global Catalogs has increased.
You need to prevent the new attributes from being replicated to the Global Catalog. You must achieve this goal
without affecting application functionality.
What should you do?

You are decommissioning one of the domain controllers in a child domain.
You need to transfer all domain operations master roles within the child domain to a newly installed domain
controller in the same child domain.
Which three domain operations master roles should you transfer? (Each correct answer presents part of the
solution. Choose three.)

There are 100 servers and 2000 computers present atyour company’s headquarters.
The DHCP service is installed on a two-node Microsoft failover cluster named CKMFO to ensure the high
availability of the service.
The nodes are named as CKMFON1 and CKMFON2.
The cluster on CKMFO has one physical shared disk of 400 GB capacity.
A 200GB single volume is configured on the shared disk.
Company has decided to host a Windows Internet Naming Service (WINS) on CKMFON1.
The DHCP and WINS services will be hosted on other nodes.
Using High Availability Wizard, you begin creating the WINS service group on cluster available on CKMFON1
node.
The wizard shows an error “no disks are available” during configuration.
Which action should you perform to configure storage volumes on CKMFON1 to successfully add the WINS
Service group to CKMFON1?

Exhibit:

Company servers run Windows Server 2008. It has a single Active Directory domain. A server called S4 has file
services role installed. You install some disk for additional storage. The disks are configured as shown in the
exhibit.
To support data stripping with parity, you have to create a new drive volume.
What should you do to achieve this objective?