You deploy an Active Directory Federation Services (AD FS) Federation Service Proxy on a
server namedServer1.
You need to configure the Windows Firewall on Server1 to allow external users to
authenticate by using AD FS.
Which protocol should you allow on Server1?

Your network contains an Active Directory domain named contoso.com.
The network has a branch office site that contains a read-only domain controller (RODC)
named RODC1.
RODC1 runs Windows Server 2008 R2.
A user logs on to a computer in the branch office site.
You discover that the user’s password is not stored on RODC1.
You need to ensure that the user’s password is stored on RODC1 when he logs on to a
branch office site computer.
What should you do?

Your network contains an Active Directory domain named contoso.com. The contoso.com
domain contains a domain controller named DC1.
You create an Active Directory-integrated GlobalNames zone. You add an alias (CNAME)
resource record named Server1 to the zone. The target host of the record is
server2.contoso.com.
When you ping Server1, you discover that the name fails to resolve. You are able to
successfully ping server2.contoso.com.
You need to ensure that you can resolve names by using the GlobalNames zone.
Which command should you run?

Your network contains an Active Directory forest named adatum.com.
You need to create an Active Directory Rights Management Services (AD RMS) licensingonly cluster.
What should you install before you create the AD RMS root cluster?

Your network contains an Active Directory forest named adatum.com.
All client computers used by the marketing department are in an organizational unit (OU)
named Marketing Computers. All user accounts for the marketing department are in an OU
named Marketing Users.

You purchase a new application.
You need to ensure that every user in the domain who logs on to a marketing department
computer can use the application. The application must only be available from the marketing
department computers.
What should you do?

Your network contains two forests named adatum.com and litwareinc.com. The functional
level of all the domains is Windows Server 2003. The functional level of both forests is
Windows 2000.
You need to create a forest trust between adatum.com and litwareinc.com.
What should you do first?

You install an Active Directory domain in a test environment.
You need to reset the passwords of all the user accounts in the domain from a domain
controller.
Which two Windows PowerShell commands should you run? (Each correct answer presents
part of the solution, choose two.)

Your network contains two Active Directory forests named contoso.com and nwtraders.com.
The functional level of both forests is Windows Server 2003. Contoso.com contains one
domain. Nwtraders.com contains two domains.
You need to ensure that users in contoso.com can access the resources in all domains. The
solution must require the minimum number of trusts.
Which type of trust should you create?

Your company has a single Active Directory forest with a single domain. Consultants in
different departments of the company require access to different network resources. The
consultants belong to a global group named TempWorkers.
Three file servers are placed in a new organizational unit named SecureServers. The file
servers contain confidential data in shared folders.
You need to prevent the consultants from accessing the confidential data.
What should you do?

Your network contains an Active Directory domain. All DNS servers are domain controllers.
You view the properties of the DNS zone as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that only domain members can register DNS records in the zone.
What should you do first?