HOTSPOT
Your network contains an Active Directory domain named contoso.com.
A portion of the Group Policy object (GPO) settings for a computer in the contoso.com
domain is configured as shown in the following exhibit. (Click the Exhibit button.)

To answer, complete each statement according to the information presented in the exhibit.

Your network contains an Active Directory domain named contoso.com.
The network contains a public key infrastructure (PKI).
You deploy a new certificate revocation list (CRL) distribution point (CDP) to a server named
Server1.
You discover that users cannot download delta CRLs from Server1.
You verify that the users can download the complete CRL successfully.
You need to ensure that the users can download delta CRLs from Server1.
Which command should you run?

DRAG DROP
Your network contains an Active Directory domain named contoso.com.
You have a server named Server1 that is configured as an enterprise root certification
authority (CA).
You need to ensure that private keys can be archived on Server1.
Which three actions should you perform in sequence? (To answer, move the appropriate
three actions from the list of actions to the answer area and arrange them in the correct
order.)

HOTSPOT
Your network contains an Active Directory domain named contoso.com.
The domain contains a domain controller named DC1. DC1 has the DNS namespaces
configured as shown in the following table.

In the table below, identify which queries will have an authoritative or non-authoritative
response from DC1. Make only one selection in each row.

Your company has one main office and four branch offices.
The main office contains a standard primary DNS zone named adatum.com. Each branch
office contains a copy of the adatum.com zone.
When records are added to the adatum.com zone, you discover that it takes up to one hour
before the changes replicate to each zone in the branch offices.
You need to minimize the amount of time it takes for the records to be updated in the branch
offices.
What should you do?

Your network contains an Active Directory domain named contoso.com. The domain
contains a domain controller named DC1.
You have a member server named Server1.
Both DC1 and Server1 have the DNS Server server role installed.
On DC1, you create an Active Directory-integrated zone named adatum.com.
You need to ensure that Server1 receives a copy of the zone.
Which two actions should you perform? (Each correct answer presents part of the solution.
Choose two.)

Your network contains an Active Directory domain named contoso.com.
You need to ensure that when computers are joined manually to the domain by using the
System Properties, the computer account of the computers is created automatically in an
organizational unit (OU) named NewComputers.
Which command should you run?

Your network contains an Active Directory domain named contoso.com.
The domain contains an enterprise certification authority (CA).
You plan to delegate certificate enrollment for Smartcard Logon certificates to a user named
User1. User1 is the member of a group named CONTOSO\DelegatedAdmins.

You need to recommend a solution to provide User1 with the ability to enroll for Smartcard
Logon certificates on behalf of other domain users.
What should you include in the recommendation?

Your network contains an Active Directory domain named contoso.com. The domain
contains a domain controller named DC1 that runs Windows Server 2008 R2.
You need to increase the amount of Active Directory diagnostic information logged to the
Event Viewer on DC1.
What should you do?

HOTSPOT
Your network contains an Active Directory domain named contoso.com.
The Zone Transfers settings of contoso.com are configured as shown in the Zone Transfers
exhibit. (Click the Exhibit button.)

The Name Servers settings of contoso.com are configured as shown in the Name Servers
exhibit. (Click the Exhibit button.)

To answer, complete each statement according to the information presented in the exhibits.