Your network contains an Active Directory forest. The functional level of the forest is
Windows Server 2008 R2.
Your company’s corporate security policy states that the password for each user account
must be changed at least every 45 days.

You have a user account named Service 1. Servicel is used by a network application named
Application1.
Every 45 days, Applicationl fails.
After resetting the password for Servicel, Applicationl runs properly.
You need to resolve the issue that causes Applicationl to fail. The solution must adhere to
the corporate security policy.
What should you do?

Your network contains an Active Directory domain named contoso.com.
The domain contains an enterprise certification authority (CA).
You need to deploy certificates based on Version 1 templates to all of the computers in the
domain. The solution must minimize administrative effort.
You create a Group Policy object (GPO) named GPOl and link the GPO to the domain.
What should you do next?

Your network contains an Active Directory forest named contoso.com. The forest contains
five domains. You have a shortcut trust between two of the domains. You need to validate
that the trust is operating properly. What should you use?

Your network contains an Active Directory forest named contoso.com. The forest contains a
single domain and 10 domain controllers. All of the domain controllers run Windows Server
2008 R2 Service Pack 1 (SP1).
The forest contains an application directory partition named dc=app1,dc=contoso,dc=com. A
domain controller named DC1 has a copy of the application directory partition.
You need to configure a domain controller named DC2 to receive a copy of
dc=app1,dc=contoso,dc=com.
Which tool should you use?

HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain
contains two domain controllers named DC1 and DC2. Both domain controllers host an
Active Directory-integrated zone for contoso.com. Each domain controller is located in a
different city.
You have a member server named Serverl. Serverl hosts a stub zone for contoso.com.
On DC1, you add a name server (NS) record to the contoso.com zone.
In the table below, identify which toot you must use to replicate the record to each server.
Make only one selection in each column. Each correct selection is worth one point.

Your network contains a single Active Directory domain. The domain contains five read-only
domain controllers (RODCs) and five writable domain controllers. All servers run Windows
Server 2008.
You plan to install a new RODC that runs Windows Server 2008 R2.
You need to ensure that you can add the new RODC to the domain. You want to achieve
this goal by using the minimum amount of administrative effort.
Which two actions should you perform? (Each correct answer presents part of the solution.
Choose two.)

DRAG DROP
Your network contains an Active Directory domain named contoso.com. A domain controller
named DC1 runs Windows Server 2008 R2 Service Pack 1 (SP1).
You install Windows Server 2008 R2 SP1 on a server named Server1.
You need to perform an offline domain join of Serverl to the domain.
What should you do?
To answer, move the appropriate actions from the list of actions to the answer area and
arrange them in the correct order.

Your network contains an Active Directory domain. The domain contains 20 domain
controllers. You need to identify which domain controllers are global catalog servers. Which
tool should you use?

Your network contains an Active Directory domain named contoso.com. The domain has
one Active Directory site.
The domain contains an organizational unit (OU) named OU1. OU1 contains user accounts
for 100 users and their managers.
You apply a Group Policy object (GPO) named GPO1 to OU1. GPO1 restricts several
desktop settings.
The managers request that the desktop settings not be applied to them.
You need to prevent the desktop settings in GPOl from being applied to the managers. All
other users in OU1 must have GPO1 applied to them.
What should you do?

Your network contains an Active Directory domain named contoso.com.
The domain contains an enterprise certification authority (CA).
You need to deploy certificates based on Version 1 templates to all of the computers in the
domain. The solution must minimize administrative effort.
You create a Group Policy object (GPO) named GPO1 and link the GPO to the domain.
What should you do next?