Your company Datum Corporation, has a single Active Directory domainnamed intranet.adatum.com.
The domain has two domain controllersthat run Windows Server 2008 R2operating system.
The domain controllersalso run DNS servers.
The intranet.adatum.com DNS zoneis configured as an Active Directory-integrated zonewith the
Dynamic updates setting configured to Secure only.
A new corporate security policy requiresthat the intranet.adatum.com DNS zone must be updated only
by domain controllers or member servers.
You need to configure the intranet.adatum.com zone to meet the new security policy requirement.
Which two actionsshould you perform?
(Each correct answer presents part of the solution. Choose two.)

Your company has two Active Directory forestsas shown in the following table.

The forests are connectedby using a two-way forest trust.
Eachtrust directionis configured with forest-wide authentication.
The new security policyof the company prohibits users fromthe eng.fabrikam.comdomain to access
resources inthe contoso.comdomain.
You need to configure the forest trust to meet the new security policy requirement.
What should you do?

Your company has an Active Directory Rights Management Services (AD RMS) server.
Usershave Windows Vista computers.
An Active Directory domainis configuredat the Windows Server 2003 functional level.
You need to configure AD RMS so that users are able to protect their documents.
What should you do?

Your company has an Active Directory domain.
All consultants belongto a global groupnamed TempWorkers.
The TempWorkers groupis not nested in any other groups.
You move the computer objectsof three file serversto a new organizational unitnamed SecureServers.
These file servers contain only confidential data in shared folders.
You need to prevent members of the TempWorkers group from accessing the confidential data on the
file servers.
You must achieve this goal without affecting access to other domain resources.
What should you do?

Your network consists of a single Active Directory domain.
User accountsfor engineering departmentare located in an OUnamed Engineering.
You need to create a password policy for the engineering department that is different from your domain
password policy.
What should you do?

Your network contains an Active Directory domain.
The domain contains two domain controllers named DC1and DC2.
DC1 hostsa standard primary DNS zonefor the domain.
Dynamic updates are enabled on the zone.
DC2 hostsa standard secondary DNS zonefor the domain.
You need to configure DNS to allow only secure dynamic updates.
What should you do first?

Your network contains a domain controllerthat has two network connectionsnamed Internaland Private.
Internalhas an IP address of 192.168.0.20.
Privatehas an IP address of 10.10.10.5.
You need to prevent the domain controller from registering Host (A) records for the 10.10.10.5 IP
address.
What should you do?

Your network contains an Active Directoryforest named contoso.com.
You plan to adda new domainnamed nwtraders.com to the forest.
All DNS servers are domain controllers.
You need to ensure that the computers in nwtraders.com can update their Host (A) records on any of
the DNS servers in the forest.
What should you do?

Your network containsan Active Directory domainnamed contoso.com.
The domain contains a domain controllernamed DC1.
DC1 hosts a standard primary zone for contoso.com.
You discover that non-domain member computers register records in the contoso.com zone.
You need to prevent the non-domain member computers from registering records in the contoso.com
zone.
All domain member computers must be allowed to register records in the contoso.com zone.
What should you do first?

Your network contains an Active Directory domainnamed contoso.com.
You createa GlobalNames zone.
You addan alias (CNAME) resource recordnamed Server1 to the zone.
The target host of the recordis server2.contoso.com.
When you ping Server1, you discover that the name fails to resolve.
You successfully resolve server2.contoso.com.
You need to ensure that you can resolve names by using the GlobalNames zone.
What should you do?