You need to ensure that DNS records can only be updated by the computer that registered the record
Your network contains an Active Directory domain. All DNS servers are domain controllers.
You view the properties of the DNS zone as shown in the exhibit. (Click the Exhibit button.)
You need to ensure that DNS records can only be updated by the computer that registered
the record.
What should you do first?
Which command should you run?
You deploy a certification authority (CA) named CA1. CA1 will be used to issue a large
number of temporary certificates to provide users with access to public wireless access
points (WAPs).
You create a certificate template named Template1. You enable the Do not store certificates
and requests in the CA database option.
You need to configure CA1 to ensure that certificate requests and issued certificates for
Template1 are not stored in the CA database.
Which command should you run?
Which Object Access audit policy should you configure?
Your network contains an Active Directory domain named contoso.com. The domain
contains a file server named Server1 that runs Windows Server 2008 R2. Server1 has a file
share named Share1.
You plan to configure the audit policy settings of Server1 by using a Group Policy object
(GPO).
You need to ensure that entries are generated in the Event Log when the users in a group
named Group1 successfully access or fail to access the files in Share1. The event entries
must show the specific operation each user attempted. The solution must minimize the
number of audit entries in the Event Log.
Which Object Access audit policy should you configure?
Which two FSMO roles should you identify?
Your network contains an Active Directory forest named contoso.com. The forest contains
three domains named contoso.com, childl.contoso.com, and child2.contoso.com. The
childl.contoso.com domain contains five domain controllers. The domain controllers are
configured as shown in the following table.
You plan to decommission the child1.contoso.com domain.
You need to identify which two FSMO roles can be moved from childl.contoso.com to
child2.contoso.com.
Which two FSMO roles should you identify? (Each correct answer presents part of the
solution. Choose two.)
You need to ensure that the passwords for all users in Group1 are at least 10 characters long
Your network contains an Active Directory domain. The domain contains a group named
Group1. The minimum password length for the domain is set to six characters.
You need to ensure that the passwords for all users in Group1 are at least 10 characters
long. All other users must be able to use passwords that are six characters long.
You create an Active Directory Fine Grained Password Policy.
What should you do next?
You need to ensure that all of the computers in the domain automatically enroll for a certificate based on the
You have Active Directory Certificate Services (AD CS) deployed.
You have a Version 1 certificate template.
You need to ensure that all of the computers in the domain automatically enroll for a
certificate based on the certificate template.
What should you do?
complete each statement according to the information presented in the exhibit.
HOTSPOT
Your network contains an Active Directory domain that has the password policy shown in the
following exhibit. (Click the Exhibit button.)
To answer, complete each statement according to the information presented in the exhibit.
You need to ensure that users in Branch2 only authenticate to the domain controllers in Branch1
Your network contains an Active Directory domain. The domain is configured as shown in
the following table.
Users in Branch2 sometimes authenticate to a domain controller in Main.
You need to ensure that users in Branch2 only authenticate to the domain controllers in
Branch1.
What should you do?
Which domain controller should you identify?
Your network contains an Active Directory forest named contoso.com. The forest contains
two domains. All domain controllers are configured as global catalog servers.
The forest root domain contains five domain controllers. The domain controllers are
configured as shown in the following table.
You plan to create a custom attribute in Active Directory that will replicate to all of the global
catalog servers.
You need to identify which domain controller must be online to perform the planned action.
Which domain controller should you identify?
You need to move the infrastructure master role from DC1 to DC2
Your network contains an Active Directory forest named contoso.com. The forest contains a
single domain. The domain contains two domain controllers named DC1 and DC2 that run
Windows Server 2008 R2. DC1 is configured as the infrastructure master for contoso.com.
You need to move the infrastructure master role from DC1 to DC2.
What should you do?