Your company has an Active Directory domain named contoso.com. The company network
has two DNS servers named DNS1 and DNS2.
The DNS servers are configured as shown in the following table.

Domain users, who are configured to use DNS2 as the preferred DNS server, are unable to
connect to Internet Web sites.
You need to enable Internet name resolution for all client computers.
What should you do?

Your network consists of a single Active Directory domain. All domain controllers run
Windows Server 2003.
You upgrade all domain controllers to Windows Server 2008.
You need to configure the Active Directory environment to support the application of multiple
password policies.
What should you do?

Your company has two Active Directory forests named contoso.com and fabrikam.com.

The company network has three DNS servers named DNS1, DNS2, and DNS3. The DNS
servers are configured as shown in the following table.

All computers that belong to the fabrikam.com domain have DNS3 configured as the
preferred DNS server. All other computers use DNS1 as the preferred DNS server.
Users from the fabrikam.com domain are unable to connect to the servers that belong to the
contoso.com domain.
You need to ensure users in the fabrikam.com domain are able to resolve all contoso.com
queries.
What should you do?

Your company, Contoso Ltd, has offices in North America and Europe. Contoso has an
Active Directory forest that has three domains.
You need to reduce the time required to authenticate users from the labs.eu.contoso.com
domain when they access resources in the eng.na.contoso.com domain.
What should you do?

Your company purchases a new application to deploy on 200 computers. The application
requires that you modify the registry on each target computer before you install the
application.
The registry modifications are in a file that has an .adm extension.
You need to prepare the target computers for the application.
What should you do?

Your company has an Active Directory forest that contains eight linked Group Policy Objects
(GPOs). One of these GPOs publishes applications to user objects. A user reports that the
application is not available for installation.
You need to identify whether the GPO has been applied.
What should you do?

Your company has an Active Directory domain.
You plan to install the Active Directory Certificate Services (AD CS) server role on a member
server that runs Windows Server 2008 R2.
You need to ensure that members of the Account Operators group are able to issue
smartcard credentials.They should not be able to revoke certificates.
Which three actions should you perform? (Each correct answer presents part of the solution.
Choose three.)

You create 200 new user accounts. The users are located in six different sites. New users
report that they receive the following error message when they try to log on: “The username
or password is incorrect.” You confirm that the user accounts exist and are enabled. You
also confirm that the user name and password information supplied are correct.
You need to identify the cause of the failure. You also need to ensure that the new users are
able to log on.
Which utility should you run?

Your network contains an Active Directory forest. All domain controllers run Windows Server
2008 R2 and are configured as DNS servers.
You have an Active Directory-integrated zone for contoso.com.
You have a Unix-based DNS server.
You need to configure your Windows Server 2008 R2 environment to allow zone transfers of
the contoso.com zone to the Unix-based DNS server.
What should you do in the DNS Manager console?

Your company has an Active Directory domain.
You log on to the domain controller. The Active Directory Schema snap-in is not available in
the Microsoft Management Console (MMC).
You need to access the Active Directory Schema snap-in.
What should you do?