You need to ensure that the settings in GPO1 supersede the settings in GPO2
Your network contains an Active Directory domain named contoso.com.
You have an organizational unit (OU) named Sales and an OU named Engineering.
You have two Group Policy Objects (GPOs) named GPO1and GPO2. GPO1 and GPO2 are linked to the Sales
OU and contain multiple settings.
You discover that GPO2 has a setting that conflictswith a setting in GPO1. When the policies are applied, the
setting in GPO2 takes effect.
You need to ensure that the settings in GPO1 supersede the settings in GPO2. The solution must ensure that
all non-conflicting settings in both GPOs are applied.
What should you do?
Which two actions should you perform?
All vendors belong to a global group named vendors.
You place three file servers in a new organizational unit (OU) named ConfidentialFileServers. The three file
servers contain confidential data located in sharedfolders.
You need to record any failed attempts made by the vendors to access the confidential data.
Which two actions should you perform? (Each correctanswer presents part of the solution. Choose two.)
You need to ensure that, the next time HR department employees change their passwords, the passwords are requi
A corporate network includes a single Active Directory Domain Services (AD DS) domain.
The HR department has a dedicated organizational unit (OU) named HR. The HR OU has two sub-OUs: HR
Users and HR Computers. User accounts for the HR department reside in the HR Users OU. Computer
accounts for the HR department reside in the HR Computers OU. All HR department employees belong to a
security group named HR Employees. All HR department computers belong to a security group named HR
PCs.
Company policy requires that passwords are a minimum of 6 characters.
You need to ensure that, the next time HR department employees change their passwords, the passwords are
required to have at least 8 characters. The password length requirement should not change for employees of
any other department.
What should you do?
You need to ensure that any time an administrator modifies an employee’s name in AD DS, the change is au
A corporate network includes a single Active Directory Domain Services (AD DS) domain. All regular user
accounts reside in an organisational unit (OU) named Employees. All administrator accounts reside in an OU
named Admins.
You need to ensure that any time an administrator modifies an employee’s name in AD DS, the change is
audited.
What should you do first?
You need to provide a user named User1 with the ability to create and manage subnet objects
Your network contains an Active Directory forest named contoso.com.
You need to provide a user named User1 with the ability to create and manage subnet objects. The solution
must minimize the number of permissions assigned toUser1.
What should you do?
What tool should you use?
A corporate network contains a Windows Server 2008 R2 Active Directory forest.
You need to add a User Principle Name (UPN) suffix to the forest.
What tool should you use?
You need to ensure that Active Directory data replicates between the sites
Your network contains a single Active Directory domain that has two sites named Site1 and Site2. Site1has two
domain controllers named DC1 and DC2. Site2 has twodomain controllers named DC3 and DC4.
DC3 fails.
You discover that replication no longer occurs between the sites.
You verify the connectivity between DC4 and the domain controllers in Site1.
On DC4, you run repadmin.exe /kcc.
Replication between the sites continues to fail.
You need to ensure that Active Directory data replicates between the sites.
What should you do?
Which tools should you use?
Your network contains an Active Directory domain named contoso.com.
All domain controllers were upgraded from Windows Server 2003 to Windows Server 2008 R2 Service Pack 1
(SP1). The functional level of the domain is Windows Server 2003.
You need to configure SYSVOL to use DFS Replication.
Which tools should you use? (Each correct answer presents part of the solution. Choose two.)
You need to run adprep /domainprepsuccessfully
Your network contains an Active Directory forest. The forest contains one domain named contoso.com.
You attempt to run adprep /domainprepand the operation fails.
You discover that the first domain controller deployed to the forest failed.
You need to run adprep /domainprepsuccessfully.
What should you do?
You need to ensure that the client computers can synchronize their clocks properly
Your network contains an Active Directory forest. The forest contains one domain named contoso.com.
You discover the following event in the Event log of client computers: “The time provider NtpClient was unable
to find a domain controller to use as a time source. NtpClient will try again in %1 minutes.”
You need to ensure that the client computers can synchronize their clocks properly.
What should you do?