You have an Active Directory domain named contoso.com.
You need to view the account lockout threshold and duration for the domain.
Which tool should you use?

Your network contains an Active Directory forest. The forest contains two domains named contoso.com and
east.contoso.com. The contoso.com domain contains adomain controller named DC1. The east.contoso.com
domain contains a domain controller named DC2. DC1 and DC2 have the DNS Server server role installed.
You need to create a DNS zone that is available on DC1 and DC2. The solution must ensure that zone
transfers are encrypted.
What should you do?

Your network contains an Active Directory domain named adatum.com. All servers run Windows Server 2008
R2.
The network contains an enterprise certification authority (CA).
You need to ensure that all of the members of a group named Managers can view the event log entries for
Certificate Services.
Which snap-in should you use?

Your network contains an Active Directory domain named adatum.com. All servers run Windows Server 2008
R2 Enterprise. All client computers run Windows 7 Professional.
The network contains an enterprise certification authority (CA).
You need to approve a pending certificate request.
Which snap-in should you use?

Your network contains an Active Directory domain named contoso.com.
You have an organizational unit (OU) named Sales and an OU named Engineering.
You have a Group Policy object (GPO) linked to the domain.
You need to ensure that the settings in the GPO arenot processed by user accounts or computer accounts in
the Sales OU. You must achieve this goal by using the minimum amount of administrative effort.
What should you do?

A corporate network includes a single Active Directory Domain Services (AD DS) domain. The domain contains
10 domain controllers. The domain controllers run Windows Server 2008 R2 and are configured as DNS
servers.
You plan to create an Active Directory-integrated zone.
You need to ensure that the new zone is replicated to only four of the domain controllers.
What should you do first?

Your network contains an Active Directory forest named fabrikam.com. The forest contains the following
domains:
– Fabrikam.com
– Eu.fabrikam.com
– Na.fabrikam.com
– Eu.contoso.com
– Na.contoso.com
You need to configure the forest to ensure that theadministrators of any of the domains can specify auser
principal name (UPN) suffix of contoso.com when they create user accounts from Active Directory Users and
Computers.
Which tool should you use?

A corporate network includes a single Active Directory Domain Services (AD DS) domain and two AD DS sites.
The AD DS sites are named Toronto and Montreal. Each site has multiple domain controllers.
You need to determine which domain controller holdsthe Inter-Site Topology Generator role for the Toronto
site.
What should you do?

Your network contains an Active Directory domain. The domain contains five sites. One of the sites contains a
read-only domain controller (RODC) named RODC1.
You need to identify which user accounts can have their password cached on RODC1.
Which tool should you use?

A network contains an Active Directory forest. The forest contains three domains and two sites.
You remove the global catalog from a domain controller named DC2. DC2 is located in Site1.
You need to reduce the size of the Active Directorydatabase on DC2. The solution must minimize the impact
on all users in Site1.
What should you do first?