You work as the enterprise administrator at ABC.com. The ABC.com network has a domain named ABC.com that operates at the Windows Server 2008 R2.

How can you configure the network so that it allows the users of ABC.com to have multiple password policies?

You work as an enterprise administrator at ABC.com. The ABC.com network has a domain named ABC.com. The ABC.com network has a Windows Server 2008 R2 computer named ABC-SR03 that functions as an Enterprise Root certificate authority (CA).

A new ABC.com security policy requires that revoked certificate information should be available for examination at all times.

What action should you take adhere to the new policy?

You work as an administrator at ABC.com. The ABC.com network is made up of a single Active Directory domain named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2 installed and all workstations have Windows 7 installed.

The ABC.com network is configured in a two tier public key infrastructure (PKI). This PKI infrastructure configuration hosts an offline Root certification authority (CA), as well as an online Issuing certification authority (CA).

ABC.com users need to have the ability to enroll new certificates.

Which combination of the following actions should you take? (Choose two.)

You work as the network administrator at ABC.com. The ABC.com network has a domain named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2 installed and all workstations have Windows 7 installed.

The ABC.com network has two servers named ABC-SR01 and ABC-SR02.

ABC-SR01 – Enterprise Root certificate authority (CA).

ABC-SR02 – Hosts the Online Responder role.

What step you can perform to make sure that ABC-SR02 is issuing the certificate revocation lists (CRL).

You work as an administrator at ABC.com. The ABC.com network has an Active Directory domain named ABC.com. All servers, including domain controllers, on the ABC.com network have Windows Server 2008 R2 installed.

ABC.com has its headquarters in London, and a satellite office in Milan. A writable domain controller named ABC-DC01 is located in London, and a read only domain controller (RODC) named ABC-DC02 is located in Milan.

All domain controllers in the ABC.com domain are configured as DNS servers. The DNS zone for the ABC.com zone is Active Directory-integrated, and configured o replicate to all domain controllers.

You have received instructions from the CIO to make sure that the DNS server role is removed from ABC-DC02, and that no DNS records are replicated to it.

Which of the following actions should you take?

You work as an administrator at ABC.com. The ABC.com network has a single Active Directory domain named ABC.com. All workstations on the ABC.com network have Windows 7 Enterprise installed. The functional level of both the domain and the forest is set at Windows Server 2003.

The ABC.com domain has two domain controllers, named ABC-DC01 and ABC-DC02. The ABC.com domain also has two DNS servers, named ABC-SR01 and ABC-SR02. ABC-DC01 and ABC-SR01 has Windows Server 2008 installed, while ABC-DC02 and ABC-SR02 has Windows Server 2008 R2 installed. The ABC.com zone is hosted by both ABC-SR01 and ABC-SR02.

You have been instructed to configure the use of DNSSEC to secure all names in the ABC.com zone.

Which of the following actions should you take?

You work as an administrator at ABC.com. ABC.com has an Active Directory domain named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2 installed and all workstations have Windows 7 installed.

You have configured a child domain, named us.ABC.com, which has two domain controllers named ABC-DC05 and ABC-DC06. ABC-DC05 and ABC-DC06 are configured as DNS servers.

You then create a DNS delegation.

Which of the following describes a reason for doing this?

You work as an administrator at ABC.com. The ABC.com network has an Active Directory domain named ABC.com. All servers, including domain controllers, on the ABC.com network have Windows Server 2008 R2 installed.

The ABC.com domain has two domain controllers named ABC-DC01 and ABC-DC02. ABC-DC01 is configured to contain a primary zone for ABC.com, while ABC-DC02 is configured to contain the secondary zone.

After modifying the zone to an Active Directory-integrated zone on ABC-DC01, you change the settings of the zone to only allow dynamic updates that are secure.

You have been instructed to make sure that secure dynamic updates to the ABC.com zone are allowed on ABC-DC02.

Which of the following actions should you take?

You work as an administrator at ABC.com. The ABC.com network has a single Active Directory domain named ABC.com. All servers, including domain controllers, on the ABC.com network have Windows Server 2008 R2 installed.

The ABC.com domain’s DNS zone is configured as an Active Directory-integrated zone.

You have been tasked with verifying that DNS records used Active Directory replication is registered accurately.

Which of the following actions should you take?

You work as an administrator at ABC.com. The ABC.com network has an Active Directory forest with two domains, named eu.ABC.com, and us.ABC.com.

Each domain has two domain controllers that have Windows Server 2008 R2 installed. The domain controllers in the eu.ABC.com domain are named ABC-DC01 and ABC-DC02, and are each configured to host the eu.ABC.com DNS zone. The domain controllers in the us.ABC.com domain are named ABC-DC03 and ABC-DC04, and are each configured to host the us.ABC.com DNS zone. The zones have been configured as Active Directory-integrated zones.

You have received instructions to make sure that data from the eu.ABC.com domain is accessible on ABC-DC03.

Which of the following actions should you take?