Your company has an Active Directory forest that contains a single domain. The domain member server has an
Active Directory Federation Services (AD FS) role installed.
You need to configure AD FS to ensure that AD FS tokens contain information from the Active Directory
domain.
What should you do?

You network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2.
You need to reset the Directory Services Restore Mode (DSRM) password on a domain controller.
What tool should you use?

Your company has a main office and a branch office.You deploy a read-only domain controller (RODC) that
runs Microsoft Windows Server 2008 to the branch office.
You need to ensure that users at the branch office are able to log on to the domain by using the RODC.
What should you do?

Your company has a single Active Directory domain named intranet.adatum.com. The domain controllers run
Windows Server 2008 and the DNS server role. All computers, including non-domain members, dynamically
register their DNS records.
You need to configure the intranet.adatum.com zone to allow only domain members to dynamically register
DNS records.
What should you do?

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2
and are configured as DNS servers. A domain controller named DC1 has a standard primary zone for contoso.
com. A domain controller named DC2 has a standard secondary zone for contoso.com.
You need to ensure that the replication of the contoso.com zone is encrypted.
You must not lose any zone data.
What should you do?

You are decommissioning domain controllers that hold all forest-wide operations master roles.
You need to transfer all forest-wide operations master roles to another domain controller.
Which two roles should you transfer? (Each correct answer presents part of the solution. Choose two.)

Contoso, Ltd. has an Active Directory domain named ad.contoso.com. Fabrikam, Inc. has an Active Directory
domain named intranet.fabrikam.com. Fabrikam’s security policy prohibits the transfer of internal DNS zone
data outside the Fabrikam network.
You need to ensure that the Contoso users are able to resolve names from the intranet.fabrikam.com domain.
What should you do?

An Active Directory database is installed on the C volume of a domain controller.
You need to move the Active Directory database to anew volume.
What should you do?

Your company has file servers located in an organizational unit named Payroll. The file servers contain payroll
files located in a folder named Payroll.
You create a GPO.
You need to track which employees access the Payroll files on the file servers.
What should you do?

Your company uses a Windows 2008 Enterprise certificate authority (CA) to issue certificates.
You need to implement key archival.
What should you do?