Your network contains an Active Directory domain named contoso.com.
You have an organizational unit (OU) named Sales and an OU named Engineering.
You have a Group Policy object (GPO) linked to the domain. The GPO is used to deploy a
number of software packages.
You need to ensure that the GPO is applied only to client computers that have sufficient free
disk space.
What should you do?

HOTSPOT

Your network contains two Active Directory forests named contoso.com and fabrikam.com.
The contoso.com forest contains a server named Server1l that has the Certification Authority
role service installed.
You need to ensure that Windows 7 client computers in the fabrikam.com forest can enroll
for certificates from Server1. The solution must minimize the number of role services
installed on Server1.
Which additional role service or role services should you install?
To answer, select the appropriate role service or role services in the answer area.

Your network contains an Active Directory forest named contoso.com. The forest contains
six domains.
You need to ensure that the administrators of any of the domains can specify a user
principal name (UPN) suffix of litwareinc.com when they create user accounts by using
Active Directory Users and Computers.
Which tool should you use?

Your network contains an Active Directory forest named contoso.com.
You need to identify whether a fine-grained password policy is applied to a specific group.
Which tool should you use?

HOTSPOT
Your network contains two Active Directory forests named contoso.com and fabrikam.com.

Each forest contains one domain. A two-way forest trust exists between the forests.
You plan to add users from fabrikam.com to groups in contoso.com.
You need to identify which group you must use to assign users in fabrikam.com access to
the shared folders in contoso.com.
To which group should you add the users?
To answer, select the appropriate group in the answer area.

Your network contains an Active Directory domain named contoso.com. The domain
contains a domain controller named DC1. DC1 has the DNS Server server role installed and
hosts an Active Directory-integrated zone for contoso.com. The no-refresh interval is set to
three days and the refresh interval is set to 10 days.
The Advanced DNS settings of DC1 are shown in the Advanced DNS Settings exhibit. (Click
the Exhibit button.)

You open the properties of a static record named Server1 as shown in the Server1 Record
exhibit. (Click the Exhibit button.)

You discover that the scavenging process ran today, but the record for Server1 was not
deleted.
You run dnscmd.exe and specify the ageallrecords parameter.
You need to identify when the record for Server1 will be deleted from the zone.
In how many days will the record be deleted?

A corporate network includes a single Active Directory Domain Services (AD D5) domain.
The domain contains 10 domain controllers. The domain controllers run Windows Server
2008 R2 and are configured as DNS servers.
You plan to create an Active Directory-integrated zone.
You need to ensure that the new zone is replicated to only four of the domain controllers.
What should you do first?

A corporate network includes an Active Directory Domain Services (AD DS) forest that
contains two domains. All servers run Windows Server 2008 R2. All domain controllers are
configured as DNS servers.
A standard primary zone for dev.contoso.com is stored on a member server.
You need to ensure that all domain controllers can resolve names from the dev.contoso.com
zone.
What should you do?

Your network contains an Active Directory domain. The domain is configured as shown in
the exhibit. (Click the Exhibit button.)

You have two Group Policy objects (GPOs) named GPO1 and GPO2. GPO1 and GPO2 are
linked to the Finance organizational unit (OU) and contain multiple settings.
You discover that GPO2 has a setting that conflicts with a setting in GPO1. When the
policies are applied, the setting in GPO2 takes effect.
You need to ensure that the settings in GPO1 supersede the settings in GPO2. The solution
must ensure that all non-conflicting settings in both GPOs are applied.
What should you do?

Your network contains an Active Directory forest. The forest contains two domains named
contoso.com and east.contoso.com. The contoso.com domain contains a domain controller
named DC1. The east.contoso.com domain contains a domain controller named DC2. DC1
and DC2 have the DNS Server server role installed.
You need to create a DNS zone that is available on DC1 and DC2. The solution must ensure
that zone transfers are encrypted.
What should you do?