You are the systems administrator of a large organization that has recently implemented
Windows Server 2008 R2.
You have a few remote sites that do not have very tight security.
You have decided to implement read-only domain controllers (RODC).
What forest functional levels does the network need for you to do the install? (Choose
Three)

What is the maximum number of domains that a Windows Server 2008 R2 computer,
configured as a domain controller, may participate in at one time?

You are one of two network administrators for your organization.
Your IT partner does most of the work in Active Directory.
While working in Active Directory, your partner accidently deleted a user from the Sales OU.
You recover the user from tape backup but you want to help prevent this from happening
again in the future.

What can you do?

You are the network administrator for an organization that has all Windows Server 2008 R2
domain controllers.
You need to capture all replication errors that occur between all domain controllers.
What should you do?

You are the systems administrator for a medium-sized Active Directory domain.
Currently, the environment supports many different domain controllers, some of which are
running Windows NT 4 and others that are running Windows 2003 and Server 2008 R2.
When you are running domain controllers in this type of environment, which of the following
types of groups can you not use? (Choose Two)

You work for an organization with a single Windows Server 2008 R2 Active Directory
domain.
The domain has OUs for Sales, Marketing, Admin, R&D and Finance.
You need only the users in the Finance OU to get Windows Office 2010 installed
automatically onto their computers.
You create a GPO named OfficeApp.
What is the next step in getting all the Finance users Office 2010?

You are the administrator of an organization with a single Active Directory domain.
One of your senior executives tries to log onto a machine and receives the error “This user
account has expired. Ask your administrator to reactivate your account”.
You need to make sure this doesn’t happen again to this user.
What do you do?

You are the administrator of an organization with a single Active Directory domain.
A user who left the company returns after 16 weeks.
The user tries to log onto their old computer and receives an error stating that authentication
has failed.
The user’s account has been enabled.
You need to ensure that the user is able to log onto the domain using that computer.
What do you do?

You are the network administrator for your organization.
Your company uses a Windows Server 2008 R2 Enterprise Root CA.
The company has issued a new policy that prevents port 443 and port 80 from being opened
on domain controllers and on issuing CAs.
Your users need to request certificates from a web interface.
You have already installed the AD CS role.
What do you need to do next?

You are the network administrator for the ABC Company.
The ABC Company has all Windows Server 2008 R2 Active Directory domains and uses an
Enterprise Root certificate server.
You need to verify that revoked certificate data is highly available.
What should you do?