Your network contains an Active Directory forest. The forest contains two domains named
contoso.com and eu.contoso.com. All domain controllers are DNS servers.
The domain controllers in contoso.com host the zone for contoso.com. The domain
controllers in eu.contoso.com host the zone for eu.contoso.com. The DNS zone for
contoso.com is configured as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that all domain controllers in the forest host a writable copy of
_msdsc.contoso.com.
Which two actions should you perform? (Each correct answer presents part of the solution.
Choose two.)

You need to compact an Active Directory database on a domain controller that runs
Windows Server 2008 R2.
What should you do?

Your network contains an Active Directory domain named contoso.com. Contoso.com
contains three servers.
The servers are configured as shown in the following table.

You need to ensure that users can manually enroll and renew their certificates by using the
Certificate Enrollment Web Service.
Which two actions should you perform? (Each correct answer presents part of the solution.
Choose two.)

Your network contains an Active Directory domain named contoso.com. Contoso.com
contains a member server that runs Windows Server 2008 Standard.
You need to install an enterprise subordinate certification authority (CA) that supports private
key archival.
You must achieve this goal by using the minimum amount of administrative effort.
What should you do first?

Your network contains an Active Directory domain. The domain contains a member server
named Server1 that runs Windows Server 2008 R2.
You need to configure Server1 as a global catalog server.
What should you do?

Your network contains three Active Directory forests named Forest1, Forest2, and Forest3.
Each forest contains three domains. A two-way forest trust exists between Forest1 and
Forest2. A two-way forest trust exists between Forest2 andForest3.
You need to configure the forests to meet the following requirements:
Users in Forest3 must be able to access resources in Forest1
Users in Forest1 must be able to access resources in Forest3.
The number of trusts must be minimized.
What should you do?

Your network contains an Active Directory domain. All domain controller run Windows Server
2003.
You replace all domain controllers with domain controllers that run Windows Server 2008
R2. You raise the functional level of the domain to Windows Server 2008 R2.
You need to minimize the amount of SYSVOL replication traffic on the network.
What should you do?

Your network contains an Active Directory forest. The forest contains two domain controllers.
The domain controllers are configured as shown in the following table.

All client computers run Windows 7.
You need to ensure that all client computers in the domain keep the same time as an
external time server.
What should you do?

Your network contains an Active Directory domain named contoso.com. Contoso.com
contains two domain controllers. The domain controllers are configured as shown in the
following table.

All client computers have IP addresses in the 10.1.2.1 to 10.1.2.240 range.
You need to minimize the number of client authentication requests sent to DC2.
What should you do?

Active Directory Rights Management Services (AD RMS) is deployed on your network.
You need to configure AD RMS to use Kerberos authentication.
Which two actions should you perform? (Each correct answer presents part of the solution.
Choose two.)