DRAG DROP
ABC.com has an Active Directory forest on a single domain. The domain operates Windows
Server 2008. A new administrator accidentally deletes the entire organizational unit in the
Active Directory database that hosts 6000 objects.
You have backed up the system state data using third-party backup software. To restore
backup, you start the domain controller in the Directory Services Restore Mode (DSRM).
You need to perform an authoritative restore of the organizational unit and restore the
domain controller to its original state.
Which three actions should you perform?

Answer:

Explanation:
Performing Authoritative Restore of Active Directory Objects
http://technet.microsoft.com/en-us/library/cc816878.aspx
Restart the Domain Controller in Directory Services Restore Mode Locally
http://technet.microsoft.com/en-us/library/cc816897.aspx
Restore AD DS from Backup (Nonauthoritative Restore)
http://technet.microsoft.com/en-us/library/cc794755.aspx
Mark an Object or Objects as Authoritative
http://technet.microsoft.com/en-us/library/cc816813.aspx
Restart the Domain Controller in Directory Services Restore Mode Locally
If you have physical access to a domain controller, you can restart the domain controller in
Directory Services Restore Mode (DSRM) locally. Restarting in DSRM takes the domain
controller offline. In this mode, the server is functioning as a member server, not as a domain
controller.
During installation of Active Directory Domain Services (AD DS), you set the Administrator
password for logging on to the server in DSRM. When you start Windows Server 2008 in
DSRM, you must log on by using this DSRM password for the local Administrator account.
Restore AD DS from Backup (Nonauthoritative Restore)
Nonauthoritative restore from backup restores Active Directory Domain Services (AD DS)
from its current state to the previous state of a backup. Use this procedure before you
perform an authoritative restore procedure to recover objects that were deleted after the time
of the backup. To restore AD DS from backup, use a system state or critical-volumes
backup.
Mark an Object or Objects as Authoritative

In this procedure, you use the ntdsutil command to select objects that are to be marked
authoritative when they replicate to other domain controllers.
Restart the domain controller
[Don’t restart the domain controller in Safe Mode, you would have a ‘crippled’ server without
AD DS.]