Your network contains an Active Directory forest. The forest schema contains a custom attribute for user
objects.
You need to generate a file that contains the last logon time and the custom attribute values for eachuser in the
forest.
What should you use?

A domain controller named DC4 runs Windows Server 2008 R2. DC4 is configured as a DNS server for
fabrikam.com.
You install the DNS Server server role on a member server named DNS1 and then you create a standard
secondary zone for fabrikam.com. You configure DC4 as the master server for the zone.
You need to ensure that DNS1 receives zone updates from DC4.
What should you do?

A company has an Active Directory forest. You plan to install an offline Enterprise root certificationauthority
(CA) on a server named CA1. CA1 is a member of the PerimeterNetwork workgroup and is attached to a
hardware security module for private key storage.
You attempt to add the Active Directory CertificateServices (AD CS) server role to CA1. The Enterprise CA
option is not available.
You need to install the AD CS server role as an Enterprise CA on CA1.
What should you do first?

Your company has an Active Directory forest. Each regional office has an organizational unit (OU) named
Marketing. The Marketing OU contains all users and computers in the region’s Marketing department.
You need to install a Microsoft Office 2007 application only on the computers in the Marketing OUs.
You create a GPO named MarketingApps.
What should you do next?

Your network contains an Active Directory domain named contoso.com.
The Active Directory sites are configured as shown in the Sites exhibit. (Click the Exhibit button.)
You need to ensure that DC1 and DC4 are the only servers that replicate Active Directory changes between the
sites.
What should you do?
Exhibit:

Your network contains an Active Directory domain named contoso.com. The domain contains a domain
controller named DC1. DC1 has the DNS Server serverrole installed and hosts an Active Directory-integrated
zone for contoso.com. The no-refresh interval and the refresh interval are both set to three days.
The Advanced DNS settings of DC1 are shown in the Advanced DNS Settings exhibit. (Click the Exhibit
button.)

You open the properties of a static record named Server1 as shown in the Server1 Record exhibit.
(Click the Exhibit button.)

You discover that the scavenging process ran today,but the record for Server1 was not deleted.
You run dnscmd.exe and specify the ageallrecords parameter.
You need to identify when the record for Server1 will be deleted from the zone.
In how many days will the record be deleted?

Your network contains an Active Directory domain. The domain is configured as shown in the exhibit. (Click the
Exhibit button.)
Each organizational unit (OU) contains over 500 user accounts.
The Finance OU and the Human Resources OU contain several user accounts that are members of a universal
group named Group1.
You have a Group Policy object (GPO) linked to the domain.
You need to prevent the GPO from being applied to the members of Group1 only.
What should you do?
Exhibit:

Your network contains an Active Directory forest named contoso.com.
You plan to migrate all user accounts to a new forest named litwareinc.com.
The functional level of the contoso.com forest is Windows Server 2003. Contoso.com contains four servers.
The servers are configured as shown in the following table.

The functional level of the litwareinc.com forest is Windows Server 2008. Litwareinc.com contains fourservers.
The servers are configured as shown in the following table.

You need to identify on which server in the litwareinc.com forest you must install Active Directory Migration Tool
version 3.2 (ADMT v3.2).
Which server should you identify?

Your network contains an Active Directory domain.
The password policy for the domain is configured asshown in the Current Policy exhibit, (Click the Exhibit
button.)

You change the password policy for the domain as shown in the New Policy exhibit. (Click the Exhibit button.)

You need to provide users with examples of a valid password.
Which password examples should you provide to the users? (Each correct answer presents a complete
solution. Choose three.)

Your network contains an Active Directory forest named contoso.com. The functional level of the forestis
Windows Server 2008 R2. The forest contains a single domain.
You need to ensure that objects can be restored from the Active Directory Recycle Bin.
Which tool should you use?