You work as an administrator at ABC.com. ABC.com has an Active Directory domain named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2 installed.

The ABC.com network has two servers named ABC-SR13 and ABC-SR14. Both of these servers are running Active Directory Lightweight Directory Services (AD LDS).

You have been instructed to make sure that an instance of AD LDS is replicated from ABC-SR13 to ABC-SR14.

Which of the following actions should you take?

You work as an administrator at ABC.com. The ABC.com network has an Active Directory domain named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2 installed.

The ABC.com network has a server, named ABC-SR01. After generating an Active Directory Lightweight Directory Services (AD LDS) instance, named ABCInstance, you receive instructions to generate an extra AD LDS application directory partition in ABCInstance using a command-line tool.

Which of the following actions should you take?

You work as an administrator at ABC.com. The ABC.com network has an Active Directory domain named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2 installed.

The ABC.com network has a server, named ABC-SR01. After generating an Active Directory Lightweight Directory Services (AD LDS) instance, named ABCInstance, you make use of ADSI Edit to link up to ABCInstance.

You are tasked with creating user objects in ABCInstance. When you open the Create Object wizard to carry out this task, however, you find that the User object class is not present.

It is imperative that you are able to create user objects in ABCInstance

Which of the following actions should you take?

You work as an administrator at ABC.com. ABC.com has a single Active Directory domain named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2 installed.

The ABC.com network has a server, named ABC-SR01. You have been tasked with mounting an Active Directory Lightweight Directory Services (AD LDS) snapshot from ABC-SR01.

Which of the following actions should you take?

You work as an administrator at ABC.com. The ABC.com network has an Active Directory domain named ABC.com.

The ABC.com network contains three servers named ABC-SR01, ABC-SR02, and ABC-SR03. ABC-SR01 is configured as a domain controller, and has Windows Server 2008 installed. ABC- SR02 is configured as an Enterprise root certification authority (CA), and has Windows Server 2008 R2. ABC-SR03 is configured with the Network Device Enrollment Service (NDES), and has Windows Server 2008 R2 installed.

ABC.com has released a written policy that requires the use of the MD5 hash algorithm for all device certificate requests.

You have been tasked with enforcing the policy.

Which of the following actions should you take?

You work as an administrator at ABC.com. The ABC.com network has two Active Directory forest, named eu.ABC.com and us.ABC.com, of which each has a single domain configured. Windows Server 2008 R2 has been set as the functional level for both forests.

To permit users from both forests to enroll user certificates automatically, you have configured the Active Directory Certificate Services (AD CS) in the eu.ABC.com forest.

ABC.com releases a written policy that requires all users in the us.ABC.com forest to be in possession of a user certificate from the eu.ABC.com certification authority (CA).

Which of the following actions should you take?

You work as an administrator at ABC.com. The ABC.com network has an Active Directory domain named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2 installed and all workstations have Windows 7 installed.

The ABC.com network has a server, named ABC-SR13, which is set up to be an enterprise root certification authority (CA). ABC.com has a Web site that authenticates by making use of x.509 certificates, and makes use many-to-one mapping.

After severing ties with an outside company, ABC.com instructs you to revoke the certificate that was supplied to them. After carrying out the task, you are instructed to make sure that the outside company is unable to log on to ABC.com’s Web site.

Which of the following actions should you take?

You work as the network administrator at ABC.com. The ABC.com network has a domain named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2 installed and all workstations have Windows 7 installed.

ABC.com has its headquarters located in London and branch office located in Paris. A WAN link connects the two offices.

ABC.com makes use of a computer in the London office named ABC-SR01 configured as the DNS server hosting a standard primary zone named internal.ABC.com. You install a computer named ABC-SR02 in the Paris office and configure it as a DNS server.

ABC.com wants the DNS service on ABC-SR02 to provide name resolution, even when the WAN connection is down.

Which of the following actions should you take?

You work as an administrator at ABC.com. The ABC.com network has an Active Directory domain named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2 installed and all workstations have Windows 7 installed.

The ABC.com network includes two domain controllers, named ABC-DC01 and ABC-DC02, which have been configured as DNS servers. The DNS zones hosted on ABC-DC01 and ABC-DC02 are configured to be Active Directory-integrated zones that permit dynamic updates.

You are instructed to make sure that old records are automatically deleted from the zone.

Which of the following actions should you take?

You work as the network administrator at ABC.com. The ABC.com network has a forest with a domain named ABC.com. ABC.com has its headquarters in London and branch office in Paris. All domain controllers on the ABC.com network have Windows Server 2008 R2 installed and function as DNS servers.

Two domain controllers named ABC-DC01 and ABC-DC02 are located in the London office while a Read-only Domain Controller (RODC) named ABC-DC03 is located in the Paris office. All three domain controllers are configured as Active Directory-integrated zones that support secure updates only.

What action should you take to allow ABC-DC03 to support dynamic DNS updates?