Your network contains an Active Directory forest. The forest contains two domain controllers. The domain
controllers are configured as shown in the following table.

All client computers run Windows 7.
You need to ensure that all client computers in thedomain keep the same time as an external time server.
What should you do?

Your network contains an Active Directory domain named contoso.com. Contoso.com contains two domain
controllers. The domain controllers are configured as shown in the following table.

All client computers have IP addresses in the 10.1.2.1 to 10.1.2.240 range.
You need to minimize the number of client authentication requests sent to DC2.
What should you do?

Active Directory Rights Management Services (AD RMS) is deployed on your network.
You need to configure AD RMS to use Kerberos authentication.
Which two actions should you perform? (Each correctanswer presents part of the solution. Choose two.)

Your network contains an Active Directory forest. The forest contains an Active Directory site for a remote
office. The remote site contains a read-only domaincontroller (RODC).
You need to configure the RODC to store only the passwords of users in the remote site.
What should you do?

Your company has four offices. The network containsa single Active Directory domain. Each office has a
domain controller. Each office has an organizational unit (OU) that contains the user accounts for theusers in
that office. In each office, support technicians perform basic troubleshooting for the users in their respective
office.
You need to ensure that the support technicians canreset the passwords for the user accounts in their
respective office only. The solution must prevent the technicians from creating user accounts.
What should you do?

Your network contains a single Active Directory domain. Client computers run either Windows XP ServicePack
3 (SP3) or Windows 7. All of the computer accounts for the client computers are located in an organizational
unit (OU) named OU1.
You link a new Group Policy object (GPO) named GPO10 to OU1.
You need to ensure that GPO10 is applied only to client computers that run Windows 7.
What should you do?

Your network contains an Active Directory domain named contoso.com.
You need to audit changes to a service account. Thesolution must ensure that the audit logs contain the before
and after values of all the changes.
Which security policy setting should you configure?

Your network contains two Active Directory forests named contoso.com and nwtraders.com. Active Directory
Rights Management Services (AD RMS) is deployed in each forest.
You need to ensure that users from the nwtraders.com forest can access AD RMS protected content in the
contoso.com forest.
What should you do?

Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 is configured as
an Active Directory Federation Services (AD FS) 2.0standalone server.
You plan to add a new token-signing certificate to Server1.
You import the certificate to the server as shown in the exhibit. (Click the Exhibit button.)

When you run the Add Token-Signing Certificate wizard, you discover that the new certificate is unavailable.
You need to ensure that you can use the new certificate for AD FS.
What should you do?

You need to purge the list of user accounts that were authenticated on a read-only domain controller (RODC).
What should you do?