You are the network administrator for Contoso, Ltd. The network consists of a single Active Directory forest
that contains a single domain named contoso.com. The functional level of the forest is Windows Server
2003. Your company purchases a company named Fabrikam, Inc. The Fabrikam, Inc., network consists of
one Windows NT 4.0 account domain and two Windows NT 4.0 resource domains, as shown in the exhibit.

All file resources are stored on file servers in the contoso.com domain and in the
FABRESOURCE1 domain. You need to accomplish the following goals: You need to minimize the number
of trust relationships that must be maintained in the network environment. Users in each company must be
able to access the file resources on the file servers in the other company’s domain.Which two actions
should you take? (Each correct answer presents part of the solution. Choose two.)

You are a network administrator for your company. The network consists of a single Active Directory
domain. All client computers run Windows XP Professional. The company’s main office is located in Dallas.
You are a network administrator at the company’s branch office in Mexico City. You create a Group Policy
object (GPO) that redirects the Start menu for users in the Mexico City branch office to a shared folder on a
file server. Several users in Mexico City report that many of the programs that they normally use are missing
from their Start menus. The programs were available on the Start menu the previous day, but did not appear
when the users logged on today. You log on to one of the client computers. All of the required programs
appear on the Start menu. You verify that users can access the shared folder on the server. You need to
find out why the Start menu changed for these users. What are two possible ways to achieve this goal?
(Each correct answer presents a complete solution. Choose two.)

You are the network administrator for your company. The network consists of a single Active Directory domain that contains four domain controllers. All servers run Windows Server 2003. All user accounts are located in an organizational unit (OU) named CompanyUsers. A written company policy requires all users to use strong passwords. User passwords must contain a mixture of letters, numbers, or special characters. Passwords must be at least 10 characters long. Passwords must be changed at least every 60 days, and the new password cannot be the same as the old one. To enforce this requirement, you create a Group Policy object (GPO) named Password Policies and link the GPO to the CompanyUsers OU. The settings in the Password Policy section of the Password Policies GPO are shown in the exhibit.

You discover that users are creating simple passwords that do not meet the complexity requirements. You need to ensure that the company password requirements are enforced. What should you do?

You have a single Active Directory directory service domain. All domain controllers run Windows Server 2003. All client computers run Windows Vista. Computer accounts and user accounts are located in several organizational units (OUs). You plan to deploy a new software application to an OU named Sales. You need to ensure that the application is available for installation by only users in the Sales OU. What should you do?

You have a single Active Directory directory service domain. Your company has multiple kiosk computers. The computer accounts for the kiosk computers are located in an organizational unit (OU) named Kiosks. Your companys user accounts are located in an OU named CorpUsers. A Group Policy object (GPO) named CorpUsers is linked to the CorpUsers OU. You create a GPO named Secure Kiosks and link it to the Kiosks OU. You define several user and computer settings within the Secure Kiosks GPO. You need to ensure that the user settings from the Secure Kiosks GPO are enforced when a user logs on to a kiosk computer. What should you do?

You have a single Active Directory directory service domain. You have 10 Active Directory sites. Each site contains multiple domain controllers. Active Directory replication is failing between all of the sites. You need to view the status of Active Directory intersite replication. What should you do?

Your company has offices in three locations. You have an Active Directory directory service domain with three Active Directory sites named Site1, Site2, and Site3. Each site represents a physical location with multiple subnets. There is one domain controller in each site. All sites are connected through site links. The domain controller in Site1 is not accessible. You need to ensure that clients in Site1 are authenticated by the domain controller in Site3. What should you do?

You have a single Active Directory directory service domain. Users each have a primary client computer but also frequently use shared client computers. You use a Group Policy object (GPO) to publish an application to the users in the marketing department. The users can remove the application when they no longer need it. Some users report that when they log on to a shared client computer on which the application has been removed, the application is no longer available to install. You need to ensure that the application is available for all users on each client computer, even if another user removes the application. What should you do?

Your network consists of Windows Vista computers joined to an Active Directory directory service domain. All client computers are located in an organizational unit (OU) named Clients. A Group Policy object (GPO) is linked to the Clients OU. This GPO assigns a new application to all computers in the Clients OU and uses the Uninstall the application when it falls out of the scope of management Group Policy setting. You need to remove this application from only a specific group of computers. What should you do?

You are the network administrator for your company. The network consists of a single Active Directory domain that contains two domain controllers. Both domain controllers run Windows Server 2003. All client computers run Windows XP Professional. The only account in the Domain Admins security group is the Administrator account in the domain. Each night, a full backup is made of the hard disks in each domain controller. You disable the local Administrator account in the Default Domain Policy Group Policy object (GPO). You discover that you are no longer able to log on to either domain controller as the Administrator from the domain. You need to ensure that you can log on to both domain controllers as the Administrator from the domain. What should you do?