You need to ensure that the stale DNS records are deleted from contoso.com
Your network contains an Active Directory domain named contoso.com. Contoso.com contains two domain
controllers named DC1 and DC2. DC1 and DC2 are configured as DNS servers and host the Active Directory-integrated zone for contoso.com.
From DNS Manager on DC1, you enable scavenging for the contoso.com zone.
You discover stale DNS records in the zone.
You need to ensure that the stale DNS records are deleted from contoso.com.
What should you do?
You need to ensure that the domain controllers can acquire new account-identifier pools successfully
Your network contains an Active Directory forest. The forest contains one domain named contoso.com.
You discover the following event in the Event log of domain controllers: The request for a new account-identifier pool failed. The operation will be retried until the request succeeds. The error is ” %1 “”
You need to ensure that the domain controllers can acquire new account-identifier pools successfully.
What should you do?
Which snap-in should you use?
Your network contains an Active Directory domain named adatum.com. All servers run Windows Server 2008
R2 Enterprise. All client computers run Windows 7 Professional.
The network contains an enterprise certification authority (CA).
You enable key archival on the CA. The CA is configured to use custom certificate templates for Encrypted File
System (EFS) certificates.
All users plan to encrypt files by using EFS.
You need to ensure that the private keys for all new EFS certificates are archived.
Which snap-in should you use?
Sales_Temp is published to the C
Your network contains an Active Directory domain named adatum.com. All servers run Windows Server 2008
R2 Enterprise. All client computers run Windows 7 Professional.
The network contains an enterprise certification authority (CA).
You have a custom certificate template named Sales_Temp. Sales_Temp is published to the CA.
You need to ensure that all of the members of a group named Sales can enroll for certificates that use
Sales_Temp.
Which snap-in should you use?
You need to deploy a read-only domain controller (RODC) that runs Windows Server 2008 R2
Your network contains an Active Directory forest named adatum.com. All domain controllers currently run
Windows Server 2003 Service Pack 2 (SP2). The functional level of the forest and the domain is Windows
Server 2003.
You need to deploy a read-only domain controller (RODC) that runs Windows Server 2008 R2.
What should you do first?
You need to ensure that a search of the entire directory for users in the marketing department returnsall of t
Your network contains an Active Directory forest.
All users have a value set for the Department attribute.
From Active Directory Users and computers, you search a domain for all users who have a Department
attribute value of Marketing.
The search returns 50 users.
From Active Directory Users and Computers, you search the entire directory for all users who have a
Department attribute value of Marketing.
The search does not return any users.
You need to ensure that a search of the entire directory for users in the marketing department returnsall of the
users who have the Marketing Department attribute.
What should you do?
You need to ensure that when the Montreal Site domain controller is offline, authentication requests for Montr
A corporate network includes a single Active Directory Domain Services (AD DS) domain. The AD DS
infrastructure is shown in the following graphic.
When the Montreal site domain controller is offline, authentication requests for Montreal branch office users are
sent to the Toronto site domain controller.
You need to ensure that when the Montreal Site domain controller is offline, authentication requests for
Montreal branch office users are sent to the Quebec City site domain controller.
What should you do?
You need to ensure that users in the contoso.com domain can access resources in the eng.fabrikam.com domain
A corporate environment includes two Active Directory Domain Services (AD DS) forests, as shown in the
following table.
You need to ensure that users in the contoso.com domain can access resources in the eng.fabrikam.com
domain.
What should you do?
Which tool should you use?
Your network contains an Active Directory domain.
You need to activate the Active Directory Recycle Bin in the domain.
Which tool should you use?
Which tools should you use?
Your network contains an Active Directory domain named contoso.com.
You need to create a script that runs the Best Practices Analyzer (BPA) each week for all of the server roles
that BPA supports on each domain controller.
You must achieve this goal by using the minimum amount of administrative effort.
Which tools should you use? (Each correct answer presents part of the solution. Choose three.)