Your company has a single Active Directory domain. All domain controllers run Windows
Server 2003.
You install Windows Server 2008 R2 on a server.
You need to add the new server as a domain controller in your domain.
What should you do first?

Your company has a main office and three branch offices. Each office is configured as a
separate Active Directory site that has its own domain controller.
You disable an account that has administrative rights.
You need to immediately replicate the disabled account information to all sites.
What are two possible ways to achieve this goal? (Each correct answer presents a complete
solution. Choose two.)

Your network consists of a single Active Directory domain. All domain controllers run
Windows Server 2008 R2.
You need to capture all replication errors from all domain controllers to a central location.
What should you do?

Your company has an Active Directory forest that contains client computers that run
Windows Vista andMicrosoft Windows XP.
You need to ensure that users are able to install approved application updates on their
computers.
Which two actions should you perform? (Each correct answer presents part of the solution.
Choose two.)

Your company has an Active Directory domain that has an organizational unit named Sales.
The Sales organizational unit contains two global security groups named sales managers
and sales executives.
You need to apply desktop restrictions to the sales executives group.
You must not apply these desktop restrictions to the sales managers group.
You create a GPO named DesktopLockdown and link it to the Sales organizational unit.
What should you do next?

Your company network has an Active Directory forest that has one parent domain and one
child domain. The child domain has two domain controllers that run Windows Server 2008.
All user accounts from the child domain are migrated to the parent domain. The child domain
is scheduled to be decommissioned.
You need to remove the child domain from the Active Directory forest.
What are two possible ways to achieve this goal? (Each correct answer presents a complete
solution. Choose two.)

Your network consists of a single Active Directory domain. The domain contains 10 domain
controllers. The domain controllers run Windows Server 2008 R2 and are configured as DNS
servers.
You plan to create a new Active Directory-integrated zone.
You need to ensure that the new zone is only replicated to four of your domain controllers.
What should you do first?

You have a domain controller named DC1 that runs Windows Server 2008 R2. DC1 is
configured as a DNS Server for contoso.com.
You install the DNS Server role on a member server named Server1 and then you create a
standard secondary zone for contoso.com.
You configure DC1 as the master server for the zone.
You need to ensure that Server1 receives zone updates from DC1.
What should you do?

Your company has an Active Directory domain. All servers run Windows Server 2008 R2.
Your company runs an Enterprise Root certification authority (CA).
You need to ensure that only administrators can sign code.
Which two tasks should you perform? (Each correct answer presents part of the solution.
Choose two.)

Your company has an Active Directory forest.
You plan to install an Enterprise certification authority (CA) on a dedicated stand-alone
server.
When you attempt to add the Active Directory Certificate Services (AD CS) role, you find that
the Enterprise CA option is not available.
You need to install the AD CS role as an Enterprise CA.
What should you do first?