Your network contains an Active Directory domain. All domain controller run Windows Server
2003.
You replace all domain controllers with domain controllers that run Windows Server 2008
R2. You raise the functional level of the domain to Windows Server 2008 R2.
You need to minimize the amount of SYSVOL replication traffic on the network.
What should you do?

Your network contains three Active Directory forests named Forest1, Forest2, and Forest3.
Each forest contains three domains. A two-way forest trust exists between Forest1 and
Forest2. A two-way forest trust exists between Forest2 andForest3.
You need to configure the forests to meet the following requirements:
Users in Forest3 must be able to access resources in Forest1
Users in Forest1 must be able to access resources in Forest3.
The number of trusts must be minimized.
What should you do?

Your network contains an Active Directory forest. The forest contains two domain controllers.
The domain controllers are configured as shown in the following table.

All client computers run Windows 7.
You need to ensure that all client computers in the domain keep the same time as an
external time server.
What should you do?

Your network contains an Active Directory domain named contoso.com. Contoso.com
contains two domain controllers. The domain controllers are configured as shown in the
following table.

All client computers have IP addresses in the 10.1.2.1 to 10.1.2.240 range.
You need to minimize the number of client authentication requests sent to DC2.
What should you do?

Active Directory Rights Management Services (AD RMS) is deployed on your network.
You need to configure AD RMS to use Kerberos authentication.
Which two actions should you perform? (Each correct answer presents part of the solution.
Choose two.)

Your network contains an Active Directory forest. The forest contains an Active Directory site
for a remote office. The remote site contains a read-only domain controller (RODC).
You need to configure the RODC to store only the passwords of users in the remote site.
What should you do?

Your company has four offices. The network contains a single Active Directory domain. Each
office has a domain controller. Each office has an organizational unit (OU) that contains the
user accounts for the users in that office. In each office, support technicians perform basic
troubleshooting for the users in their respective office.
You need to ensure that the support technicians can reset the passwords for the user
accounts in their respective office only. The solution must prevent the technicians from
creating user accounts.
What should you do?

Your network contains a single Active Directory domain. Client computers run either
Windows XP Service Pack 3 (SP3) or Windows 7. All of the computer accounts for the client
computers are located in an organizational unit (OU) named OU1.
You link a new Group Policy object (GPO) named GPO10 to OU1.
You need to ensure that GPO10 is applied only to client computers that run Windows 7.
What should you do?

Your network contains an Active Directory domain named contoso.com.

You need to audit changes to a service account. The solution must ensure that the audit logs
contain the before and after values of all the changes.
Which security policy setting should you configure?

Your network contains two Active Directory forests named contoso.com and nwtraders.com.
Active Directory Rights Management Services (AD RMS) is deployed in each forest.
You need to ensure that users from the nwtraders.com forest can access AD RMS protected
content in the contoso.com forest.
What should you do?