Your company has a server that runs Windows Server 2008 R2. Active Directory Certificate
Services (AD CS) is configured as a standalone Certification Authority (CA) on the server.
You need to audit changes to the CA configuration settings and the CA security settings.
Which two tasks should you perform? (Each correct answer presents part of the solution.
Choose two.)

Your company has a single-domain Active Directory forest. The functional level of the
domain is Windows Server 2008.
You perform the following activities:
Create a global distribution group.
Add users to the global distribution group.
Create a shared folder on a Windows Server 2008 member server.
Place the global distribution group in a domain local group that has access to the shared
folder.
You need to ensure that the users have access to the shared folder.
What should you do?

Your company hires 10 new employees.
You want the new employees to connect to the main office through a VPN connection.
You create new user accounts and grant the new employees they Allow Read and Allow
Execute permissions to shared resources in the main office.
The new employees are unable to access shared resources in the main office.
You need to ensure that users are able to establish a VPN connection to the main office.
What should you do?

Your network consists of a single Active Directory domain. All domain controllers run
Windows Server 2008 R2.
You need to identify the Lightweight Directory Access Protocol (LDAP) clients that are using
the largest amount of available CPU resources on a domain controller.

What should you do?

Your company has an Active Directory forest that contains only Windows Server 2008
domain controllers.
You need to prepare the Active Directory domain to install Windows Server 2008 R2 domain
controllers.
Which two tasks should you perform? (Each correct answer presents part of the solution.
Choose two.)

You need to identify all failed logon attempts on the domain controllers.
What should you do?

Your company has a DNS server that has 10 Active Directory integrated zones.
You need to provide copies of the zone files of the DNS server to the security department.
What should you do?

Your company has an Active Directory forest. The company has three locations. Each
location has an organizational unit and a child organizational unit named Sales.
The Sales organizational unit contains all users and computers of the sales department.
The company plans to deploy a Microsoft Office 2007 application on all computers within the
three Sales organizational units.
You need to ensure that the Office 2007 application is installed only on the computers in the
Sales organizational units.
What should you do?

Your company has a main office and 10 branch offices. Each branch office has an Active
Directory site that contains one domain controller. Only domain controllers in the main office
are configured as Global Catalog servers.
You need to deactivate the Universal Group Membership Caching (UGMC) option on the
domain controllers in the branch offices.
At which level should you deactivate UGMC?

Your network consists of a single Active Directory domain. All domain controllers run
Windows Server 2003.
You upgrade all domain controllers to Windows Server 2008 R2.
You need to ensure that the Sysvol share replicates by using DFS Replication (DFS-R).
What should you do?