Your network contains an Active Directory forest named contoso.com.
You need to identify the Password Setting object (PSO) applied to a user named User1.
Which cmdlet should you run?

DRAG DROP
Your network contains an Active Directory domain named contoso.com.
You need to create a Group Policy object (GPO) that contains all of the settings included in
the Windows Server 2008 R2 Security Baseline. The solution must minimize administrative
effort.
Which three actions should you perform in sequence? (To answer, move the appropriate
three actions from the list of actions to the answer area and arrange them in the correct
order.)

Your network contains an Active Directory forest named contoso.com. The domain contains
two domain controllers named DC1 and DC2 that run Windows Server 2008 R2. DC2 holds
the PDC emulator role.
The power supply on DC2 fails.
You seize the PDC emulator role to DC1.
You replace the power supply on DC2.
You need to bring DC2 back online as the PDC emulator as soon as possible. The solution
must minimize the disruption of services for users.
What should you do?

Your network contains an Active Directory domain.
You need to activate the Active Directory Recycle Bin in the domain.
Which tool should you use?

Your network contains an Active Directory domain named adatum.com. The functional level
of the domain is Windows Server 2008. All domain controllers run Windows Server 2008 R2.
All client computers run Windows 7 Enterprise.
You need to create a snapshot of Active Directory.
What should you do?

Your company has a main office and five branch offices that are connected by WAN links.
The company has an Active Directory domain named contoso.com.
Each branch office has a member server configured as a DNS server. All branch office DNS
servers host a secondary zone for contoso.com.
You need to configure the contoso.com zone to ensure that clients cache records from the
zone for 4 days.
What should you do?

You have an Active Directory domain named contoso.com.
You have a domain controller named Server1 that is configured as a DNS server.
Server1 hosts a standard primary zone for contoso.com. The Zone Aging/Scavenging
Properties of the contoso.com zone are shown in the exhibit. (Click the Exhibit button.)

You discover that stale resource records are not automatically removed from the
contoso.com zone.
You need to ensure that the stale resource records are automatically removed from the
contoso.com zone.
What should you do?

Your network contains an Active Directory forest. The forest contains two domains named
contoso.com and east.contoso.com.
The contoso.com domain contains a domain controller named DC1. The east.contoso.com
domain contains a domain controller namedDC2. DC1 and DC2 have the DNS Server server
role installed.
You need to create a DNS zone that is available on DC1 and DC2. The solution must ensure
that zone transfers are encrypted. What should you do?

Your network contains an Active Directory domain. The domain is configured as shown in
the following table.

Users in Branch2 sometimes authenticate to a domain controller in Branch1.
You need to ensure that users in Branch2 only authenticate to the domain controllers in
Main.
What should you do?

You have an enterprise subordinate certification authority (CA).
You have a group named Group1.
You need to ensure that members of Group1 can revoke certificates.
What should you do?