Your network contains an Active Directory domain named contoso.com. The domain
contains a domain controller named DC1. DC1 hosts an Active Directory-integrated zone for
contoso.com.
The research department maintains its own DNS servers and hosts a zone named
research.contoso.com on a UNIXbased server named Server1.
The perimeter network contains a DNS server named Server2. Server2 is a standalone
server that runs Windows Server 2008 R2.
You need to configure the DNS settings of Server2 to meet the following requirements:
Server2 must maintain a copy of all the records in research.contoso.com.
DC1 must query Server2 to resolve the names of Internet hosts.
Which two actions should you perform? (Each correct answer presents part of the solution.
Choose two.)

Your company has two offices. The offices are located in Miami and London.
The network contains an Active Directory forest named contoso.com. The forest contains
two child domains named miami.contoso.com and london.contoso.com. The domain
contains 50 domain controllers that run Windows Server 2008 R2. Each office is configured
as an Active Directory site.
The forest contains a custom attribute named SecurityAccessCode.
You recently configured a domain controller named DC22 as a global catalog server.
You need to verify that SecurityAccessCode is configured to replicate to DC22.
What should you do?

Your network contains an Active Directory forest named contoso.com. The forest contains a
single domain. The domain contains 50 domain controllers that run Windows Server 2008
R2.
The domain contains a group named Computer_Location.
You plan to create 1,000 computer accounts in the domain in several organizational units
(OUs).
You need to ensure that the members of the Computer_Location group can modify the
description of each computer account as soon as the account is created.
The solution must use permissions that are applied explicitly to the new computer accounts.
What should you do?

Your company has two offices. The offices are located in Miami and London.
The network contains an Active Directory forest named contoso.com. The forest contains
two child domains named miami.contoso.com and london.contoso.com. Each domain
contains 50 domain controllers that run Windows Server 2008 R2. Each office is configured
as an Active Directory site.
The office in London recently hired several thousand new employees.
You need to move 10 domain controllers from miami.contoso.com to london.contoso.com.
What should you do?

Your network contains an Active Directory forest. The forest contains a single domain named
contoso.com. The domain contains domain controllers that run either Windows Server 2003
or Windows Server 2008 R2.
The functional level of the domain and the forest is Windows Server 2003.
You need to add a read-only domain controller (RODC) to the forest.
What should you do first?

Your network contains an Active Directory domain named contoso.com.
The domain has a branch site that contains a read-only domain controller (RODC) named
RODC1.
A user named User1 is a member of the Allowed RODC Password Replication Group. User1
frequently logs on to a computer in the branchsite.
You remove User1 from the Allowed RODC Password Replication Group.
You need to ensure that the password of User1 is no longer cached on RODC1.
What should you do?

HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain
contains a domain controller named DC1.
You install Active Directory Lightweight Directory Services (AD LDS) on a member server
named Server2. On Server2, you create a directory partition named fabrikam.com.
You need to configure the MS-AdamSyncConfig.xml file to synchronize data from
contoso.com to fabrikam.com.
What should you do? (To answer, select the appropriate options in the answer area.)

Your network contains 50 domain controllers that runs Windows Server 2008 R2.
You need to create a script that resets the Directory Services Restore Mode (DSRM)
password on all of the domain controllers. The solution must NOT maintain passwords in the
script.
Which two tools should you use? (Each correct answer presents part of the solution. Choose
two.)

Your network consists of an Active Directory forest that contains one domain named
contoso.com. All domain controllers run Windows Server 2008 R2 and are configured as
DNS servers. You have two Active Directory-integrated zones: contoso.com and
nwtraders.com.
You need to ensure a user is able to modify records in the nwtraders.com zone. The solution
must prevent the user from modifying the SOA record in the contoso.com zone.
What should you do?

HOTSPOT
Your network contains an Active Directory domain named contoso.com. All servers are
located in the same Active Directory site. The domain contains two domain controllers
named DC1 and DC2. Both domain controllers host an Active Directory-integrated zone for
contoso.com.
The Start of Authority (SOA) record of the contoso.com zone is shown in the exhibit. (Click
the Exhibit button.)

You have a member server named Server1. Server1 hosts a secondary zone of
contoso.com.
On DC1, you add a new record to the contoso.com zone.
In the table below, identify the maximum amount of time required to replicate the record to
each server. Make only one selection in each column.