Your network contains an Active Directory domain named contoso.com. The domain
contains a domain controller named DC1. DC1 has the DNS Server server role installed and
hosts an Active Directory-integrated zone for contoso.com. The no-refresh interval is set to
three days and the refresh interval is set to 10 days.
The Advanced DNS settings of DC1 are shown in the Advanced DNS Settings exhibit. (Click
the Exhibit button.)

You open the properties of a static record named Server1 as shown in the Server1 Record
exhibit. (Click the Exhibit button.)

You discover that the scavenging process ran today, but the record for Server1 was not
deleted.
You run dnscmd.exe and specify the ageallrecords parameter.
You need to identify when the record for Server1 will be deleted from the zone.
In how many days will the record be deleted?

A corporate network includes a single Active Directory Domain Services (AD D5) domain.
The domain contains 10 domain controllers. The domain controllers run Windows Server
2008 R2 and are configured as DNS servers.
You plan to create an Active Directory-integrated zone.
You need to ensure that the new zone is replicated to only four of the domain controllers.
What should you do first?

A corporate network includes an Active Directory Domain Services (AD DS) forest that
contains two domains. All servers run Windows Server 2008 R2. All domain controllers are
configured as DNS servers.
A standard primary zone for dev.contoso.com is stored on a member server.
You need to ensure that all domain controllers can resolve names from the dev.contoso.com
zone.
What should you do?

Your network contains an Active Directory domain. The domain is configured as shown in
the exhibit. (Click the Exhibit button.)

You have two Group Policy objects (GPOs) named GPO1 and GPO2. GPO1 and GPO2 are
linked to the Finance organizational unit (OU) and contain multiple settings.
You discover that GPO2 has a setting that conflicts with a setting in GPO1. When the
policies are applied, the setting in GPO2 takes effect.
You need to ensure that the settings in GPO1 supersede the settings in GPO2. The solution
must ensure that all non-conflicting settings in both GPOs are applied.
What should you do?

Your network contains an Active Directory forest. The forest contains two domains named
contoso.com and east.contoso.com. The contoso.com domain contains a domain controller
named DC1. The east.contoso.com domain contains a domain controller named DC2. DC1
and DC2 have the DNS Server server role installed.
You need to create a DNS zone that is available on DC1 and DC2. The solution must ensure
that zone transfers are encrypted.
What should you do?

You have an Active Directory domain named contoso.com.
You need to view the account lockout threshold and duration for the domain.
Which tool should you use?

Your network contains an Active Directory domain named contoso.com.
You have an organizational unit (OU) named Sales and an OU named Engineering.
Users in the Sates OU frequently log on to client computers in the Engineering OU.
You need to meet the following requirements:
All of the user settings in the Group Policy objects (GPOs) linked to both the Sales OU and
the Engineering OU must be applied to sales users when they log on to client computers in
the Engineering OU.
Only the policy settings in the GPOs linked to the Sales OU must be applied to sales users
when they log on to client computers in the Sales OU.
Policy settings in the GPOs linked to the Sales OU must not be applied to users in the
Engineering OU.
What should you do?

Your network contains two Active Directory forests named contoso.com and fabrikam.com.
Each forest contains a single domain.
A two-way forest trust exists between the forests. Selective authentication is enabled on the
trust.
Contoso.com contains a group named Group 1.
Fabrikam.com contains a server named Server1.
You need to ensure that users in Group1 can access resources on Server1.
What should you modify?

Your network contains an Active Directory forest named contoso.com. The forest contains
two domains named contoso.com and child.contoso.com. The forest contains two sites
named Seattle and Denver. Both sites contain users, client computers, and domain
controllers from both domains.
The Seattle site contains the first domain controller deployed to the forest. The Seattle site
also contains the primary domain controller (PDC) emulator for both domains. All of the
domain controllers are configured as DNS servers. All DNS zones are replicated to all of the
domain controllers in the forest.
The users in the Denver site report that is takes a long time to log on to their client computer
when they use their user principal name (UPN). The users in the Seattle site do not
experience the same issue.
You need to reduce the amount of time it takes for the Denver users to log on to their client
computer by using their UPN.
What should you do?

Your network contains an Active Directory forest named contoso.com.
You need to identify whether a fine-grained password policy is applied to a specific group.
Which tool should you use?