You use Forefront Identity Manager (2010) in your company network. You configure Password Change
Notification Service (PCNS) between Active Directory Domain Services (AD DS) and AD LDS. You discover
that passwords are not being reset on the target systems. You need to be able to ascertain the cause of the
issue.
What should you do?

You use Forefront Identity Manager (FIM) 2010 in your company network. You configure Password Change
Notification Service (PCNS) between an Active Directory Domain Services (AD DS) domain named contoso.
com and an Active Directory Lightweight Directory Services (AD LDS) instance. The FIM Service is hosted on a
server named FIM-Srv-1.
After you change the password for an AD account, you receive the following RPC exception error:
ProcessID is 3252
System Time is: 7/22/2009 9:8:43:109
Generating component is 3
Status is -2146893022 – The target principal name is incorrect.
Detection location is 150
Flags is 0
NumberOfParameters is 3
Long val: 16
Long val: 6
Long val: 0
You verify the following requirements: The DNS is resolving names correctly. The SPN for the target has been
assigned to an AD account used to host the target process. Time clocks are synchronized to an authoritative
time source. You need to identify the cause of the error.
What should you do?

You administer a Forefront Identity Manager (FIM) 2010 server in your company network. FIM synchronizes
data between several data sources and the FIM Portal.
All data sources have an attribute named First Namemapped to the person:
firstName metaverse attribute. Attribute flow precedence for the person: firstName attribute is set toequal
precedence.
Synchronization rules are configured to import and export the attribute. The FIM Portal is the last contributor.
You change the value of the First Name attribute inthe FIM Portal and run full synchronization. You discover
that the value of First Name in the FIM Portal has been staged to the connector space but is not updated in the
metaverse.
Which describes the cause of the synchronization issue?

You deploy Forefront Identity Manager (FIM) 2010 inyour company network. You configure group
synchronization between the Active Directory DomainServices (AD DS) domain and the FIM Portal. You
discover that when you add a new user to a group through the FIM Portal, the group membership successfully
flows to the domain. However, if you delete all users from the group, the domain group membership is not
updated.
What is the cause of the issue?

You deploy Forefront Identity Manager (FIM) 2010 inyour company network. You configure Active Directory
Domain Services (AD DS) and a Microsoft SQL Server database as data sources for a metaverse person
object attribute named department.
You configure outbound synchronization rules for the attribute for both data sources. When you assign a value
to the attribute for a user object in the Active Directory domain, the attribute is successfully updated in the SQL
Server database. However, when you delete the attribute data from a user object in the domain, the value of the
attribute is replaced with the attribute data from the SQL Server database.
You need to ensure that the attribute data is deleted from the SQL Server database after the deletion of the
attribute data from the domain.
Which describes the cause of the attribute data flow issue?

You deploy Forefront Identity Manager (FIM) 2010 inyour company network. You create and configure
management agents (MAs) named FIM MA, HR MA, and ADMA . You import user accounts from the HR MA
data source as metaverse person objects and provision them into the FIM Portal. However, you are unable to
provision the user accounts into the AD MA data source. The expectedRuleList attribute is empty for all
imported person objects.
What is the cause of the issue?

You use Forefront Identity Manager (FIM) 2010 in your company network. You install and configure the
Management Agent (MA) for Certificate Management. You discover the following issues: The MA for Certificate
Management does not synchronize to the FIM Server. The entries do not appear in the event log. You need to
ensure that data synchronizes properly for the MA for Certificate Management.
What should you do?

You use Forefront Identity Manager (FIM) 2010 in your company network. The Management Agent for Active
Directory (AD MA) is unable to process password reset requests for users who have configured the Password
Reset authentication challenge questions.
What are some possible causes of the issue? (Chooseall that apply.)

You administer a Forefront Identity Management (FIM) 2010 server in your company network. You configure an
Active Directory Management Agent (AD MA). The AD MA exports identity data to Active Directory. You receive
a permissions error during an export operation.
What is the cause of the error?

You are planning to deploy Forefront Identity Manager (FIM) 2010 in your company network. You need to select
a FIM topology that meets the following requirements: Removes single points of failure. Separates end-user
operations from administrative data synchronization.
What should you do? (Choose all that apply.)