Your network contains an Active Directory domain named adatum.com. All servers run Windows Server 2008
R2.
The network contains an enterprise certification authority (CA).
You need to ensure that all of the members of a group named Managers can view the event log entries for
Certificate Services.
Which snap-in should you use?

Your network contains an Active Directory domain named adatum.com. All servers run Windows Server 2008
R2 Enterprise. All client computers run Windows 7 Professional.
The network contains an enterprise certification authority (CA).
You need to approve a pending certificate request.
Which snap-in should you use?

Your network contains an Active Directory domain named contoso.com.
You have an organizational unit (OU) named Sales and an OU named Engineering.
You have a Group Policy object (GPO) linked to the domain.
You need to ensure that the settings in the GPO arenot processed by user accounts or computer accounts in
the Sales OU. You must achieve this goal by using the minimum amount of administrative effort.
What should you do?

A corporate network includes a single Active Directory Domain Services (AD DS) domain. The domain contains
10 domain controllers. The domain controllers run Windows Server 2008 R2 and are configured as DNS
servers.
You plan to create an Active Directory-integrated zone.
You need to ensure that the new zone is replicated to only four of the domain controllers.
What should you do first?

Your network contains an Active Directory forest named fabrikam.com. The forest contains the following
domains:
– Fabrikam.com
– Eu.fabrikam.com
– Na.fabrikam.com
– Eu.contoso.com
– Na.contoso.com
You need to configure the forest to ensure that theadministrators of any of the domains can specify auser
principal name (UPN) suffix of contoso.com when they create user accounts from Active Directory Users and
Computers.
Which tool should you use?

A corporate network includes a single Active Directory Domain Services (AD DS) domain and two AD DS sites.
The AD DS sites are named Toronto and Montreal. Each site has multiple domain controllers.
You need to determine which domain controller holdsthe Inter-Site Topology Generator role for the Toronto
site.
What should you do?

Your network contains an Active Directory domain. The domain contains five sites. One of the sites contains a
read-only domain controller (RODC) named RODC1.
You need to identify which user accounts can have their password cached on RODC1.
Which tool should you use?

A network contains an Active Directory forest. The forest contains three domains and two sites.
You remove the global catalog from a domain controller named DC2. DC2 is located in Site1.
You need to reduce the size of the Active Directorydatabase on DC2. The solution must minimize the impact
on all users in Site1.
What should you do first?

Your network contains an Active Directory domain named adatum.com. The functional level of the domain is
Windows Server 2008. All domain controllers run Windows Server 2008 R2. All client computers run Windows
7 Enterprise.
You need to receive a notification when more than 50 Active Directory objects are deleted per second.
What should you do?

You have an enterprise subordinate certification authority (CA).
You have a custom certificate template that has a key length of 1,024 bits. The template is enabled for
autoenrollment.
You increase the template key length to 2,048 bits.
You need to ensure that all current certificate holders automatically enroll for a certificate that uses the new
template.
Which console should you use?