Your company has an Active Directory domain. All servers run Windows Server 2008 R2.
Your company uses an Enterprise Root certification authority (CA) and an Enterprise
Intermediate CA.
The Enterprise Intermediate CA certificate expires.
You need to deploy a new Enterprise Intermediate CA certificate to all computers in the
domain.
What should you do?

Your company has recently acquired a new subsidiary company in Quebec. The Active
Directory administrators of the subsidiary company must use the French-language version of
the administrative templates.
You create a folder on the PDC emulator for the subsidiary domain in the path
%systemroot%\SYSVOL\domain\Policies\PolicyDefinitions\FR.
You need to ensure that the French-language version of the templates is available.
What should you do?

A user in a branch office of your company attempts to join a computer to the domain, but the
attempt fails.
You need to enable the user to join a single computer to the domain.
You must ensure that the user is denied any additional rights beyond those required to
complete the task.
What should you do?

The default domain GPO in your company is configured by using the following account
policy settings:
Minimum password length: 8 characters
Maximum password age: 30 days
Enforce password history: 12 passwords remembered
Account lockout threshold: 3 invalid logon attempts
Account lockout duration: 30 minutes
You install Microsoft SQL Server on a computer named Server1 that runs Windows Server
2008 R2. The SQL Server application uses a service account named SQLSrv. The SQLSrv
account has domain user rights.
The SQL Server computer fails after running successfully for several weeks. The SQLSrv
user account is not locked out.

You need to resolve the server failure and prevent recurrence of the failure. Which two
actions should you perform? (Each correct answer presents part of the solution. Choose
two.)

Your company has two Active Directory forests named Forest1 and Forest2, The forest
functional level and the domain functional level of Forest1 are set to Windows Server 2008.
The forest functional level of Forest2 is set to Windows 2000, and the domain functional
levels in Forest2 are set to Windows Server 2003.
You need to set up a transitive forest trust between Forest1 and Forest2.
What should you do first?

Your company has an Active Directory forest that contains two domains, The forest has
universal groups that contain members from each domain. A branch office has a domain
controller named DC1, Users at the branch office report that the logon process takes too
long.
You need to decrease the amount of time it takes for the branch office users to logon.
What should you do?

Your company has an Active Directory domain. The main office has a DNS server named
DNS1 that is configured with Active Directory-integrated DNS. The branch office has a DNS
server named DNS2 that contains a secondary copy of the zone from DNS1. The two offices
are connected with an unreliable WAN link.
You add a new server to the main office.
Five minutes after adding the server, a user from the branch office reports that he is unable
to connect to the new server.
You need to ensure that the user is able to connect to the new server.
What should you do?

You need to validate whether Active Directory successfully replicated between two domain
controllers.What should you do?

You have a domain controller that runs Windows Server 2008 R2. The Windows Server
Backup feature is installed on the domain controller.
You need to perform a non-authoritative restore of the domain controller by using an existing
backup file.
What should you do?

Your company has an Active Directory forest. Not all domain controllers in the forest are
configured as Global Catalog Servers. Your domain structure contains one root domain and
one child domain.
You modify the folder permissions on a file server that is in the child domain. You discover
that some Access Control entries start with S-1-5-21 and that no account name is listed.
You need to list the account names.
What should you do?