A corporate network includes a single Active Directory Domain Services (AD DS) domain. All regular user
accounts reside in an organizational unit (OU) named Employees. All administrator accounts reside in an OU
named Admins.
You need to ensure that any time an administrator modifies an employee’s name in AD DS, the change is
audited.
What should you do first?

Your network contains an Active Directory domain named contoso.com.
The Administrator deletes an OU named OU1 accidentally.
You need to restore OU1. Which cmdlet should you use?

Your network contains an Active Directory domain. The domain is configured as shown in the exhibit.

You have a Group Policy Object (GPO) linked to the domain.
You need to ensure that the settings in the GPO arenot processed by user accounts or computer accounts in
the Finance organizational unit (OU). You must achieve this goal by using the minimum amount of
administrative effort.
What should you do?

Your network contains an Active Directory domain named contoso.com.
You have an organizational unit (OU) named Sales and an OU named Engineering.
You have two Group Policy objects (GPOs) named GP01and GPO2. GP01 and GP02 are linked to the Sales
OU and contain multiple settings.
You discover that GPO2 has a setting that conflictswith a setting in GP01. When the policies are applied, the
setting in GPO2 takes effect.
You need to ensure that the settings in GP01 supersede the settings in GP02. The solution must ensure that all
non-conflicting settings in both GPOs are applied.

Your network contains an Active Directory forest.
All users have a value set for the Department attribute.
From Active Directory Users and Computers, you search a domain for all users who have a Department
attribute value of Marketing. The search returns 50users.
From Active Directory Users and Computers, you search the entire directory for all users who have a
Department attribute value of Marketing.
The search does not return any users.
You need to ensure that a search of the entire directory for users in the marketing department returnsall of the
users who have the Marketing Department attribute.
What should you do?

Your network contains an Active Directory forest. The forest contains one domain named contoso.com.
You discover the following event in the Event log of domain controllers: “The request for a new account-identifier pool failed. The operation will be retried until the request succeeds. The error is ” %1 “”
You need to ensure that the domain controllers can acquire new account-identifier pools successfully.
What should you do?

Your network contains an Active Directory forest named contoso.com.
You need to identify whether a fine-grained password policy is applied to a specific group.
Which tool should you use?

Your network contains an Active Directory forest named contoso.com. The forest contains two domains named
contoso.com and child.contoso.com. The forest contains two sites named Seattle and Denver. Both sites
contain users, client computers, and domain controllers from both domains.
The Seattle site contains the first domain controller deployed to the forest. The Seattle site also contains the
primary domain controller (PDC) emulator for both domains. All of the domain controllers are configured as
DNS servers. All DNS zones are replicated to all ofthe domain controllers in the forest.
The users in the Denver site report that is takes along time to log on to their client computer when they use
their user principal name (UPN). The users in the Seattle site do not experience the same issue.
You need to reduce the amount of time it takes for the Denver users to log on to their client computerby using
their UPN.
What should you do?

Your network contains two Active Directory forests named contoso.com and fabrikam.com. Each forest
contains a single domain.
A two-way forest trust exists between the forests. Selective authentication is enabled on the trust.
Contoso.com contains a group named Group 1.
Fabrikam.com contains a server named Server1.
You need to ensure that users in Group1 can access resources on Server1.
What should you modify?

Your network contains an Active Directory domain named contoso.com.
You have an organizational unit (OU) named Sales and an OU named Engineering.
Users in the Sates OU frequently log on to client computers in the Engineering OU.
You need to meet the following requirements:
– All of the user settings in the Group Policy objects (GPOs) linked to both the Sales OU and the Engineering
OU must be applied to sales users when they log on to client computers in the Engineering OU.
– Only the policy settings in the GPOs linked to the Sales OU must be applied to sales users when theylog on
to client computers in the Sales OU.
– Policy settings in the GPOs linked to the Sales OU must not be applied to users in the Engineering OU.
What should you do?