HOTSPOT
Your network contains an Active Directory forest. The forest contains one domain named contoso.com. The
domain contains two domain controllers named DC1 and DC2. DC1 holds all of the operations master roles.
During normal network operations, you run the following commands on DC2:
Move-ADDirectoryServerOperationMasterRole -Identity “DC2” -OperationMasterRole PDCEmulator
Move- ADDirectoryServerOperationMasterRole –Identity “DC2” -OperationMasterRole RIDMaster
DC1 fails.
You remove DC1 from the network, and then you run the following command:
Move-ADDirectoryServerOperationMasterRole –Identity “DC2” -OperationMasterRole SchemaMaster
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Hot Area:
Answer: 
In normal operation, Move-ADDirectoryServerOperationMasterRole (thank you, Tab completion!) will only MOVE a role, it does NOT SEIZE a role.
To do that, you need to add the -Force switch. So the Schema Master still resides on DC1 and first answer is No.
The PDCEmulator was previously transferred, so that is a Yes.
Finally, although we need the RID Master as well, the only FSMO Role that can create new domains (and remove them) is the Domain Naming Master. Without it, you can’t create a new domain to the forest. So the answer is No.
8
0