A corporate environment includes a Windows Server 2008 R2 Active Directory Domain
Services (AD DS) domain.
You need to enable Universal Group Membership Caching on several domain controllers in
the domain.
Which tool should you use?

A.
Dsmod

B.
Dscmd

C.
Ntdsutil

D.
Active Directory Sites and Services console

Explanation:
http://technet.microsoft.com/en-us/library/cc816928.aspx
Enable Universal Group Membership Caching in a Site
In a branch site that has no global catalog server and in a forest that has multiple domains,
you can use this procedure to enable Universal Group Membership Caching on a domain
controller in the site so that a global catalog server does not have to be contacted across a
wide area network (WAN) link for every initial user logon.
To enable Universal Group Membership Caching in a site
1. Open Active Directory Sites and Services.
2. In the console tree, expand Sites, and then click the site in which you want to enable
Universal Group Membership Caching.
3. In the details pane, right-click the NTDS Site Settings object, and then click Properties.

4. Under Universal Group Membership Caching, select Enable Universal Group Membership
Caching.
5. In the Refresh cache from list, click the site that you want the domain controller to contact
when the
Universal Group membership cache must be updated, and then click OK.