Your company has an Active Directory forest that contains eight linked Group Policy Objects
(GPOs). One of these GPOs publishes applications to user objects. A user reports that the
application is not available for installation.
You need to identify whether the GPO has been applied.
What should you do?

Your company has an Active Directory domain.
You plan to install the Active Directory Certificate Services (AD CS) server role on a member
server that runs Windows Server 2008 R2.
You need to ensure that members of the Account Operators group are able to issue
smartcard credentials.They should not be able to revoke certificates.
Which three actions should you perform? (Each correct answer presents part of the solution.
Choose three.)

You create 200 new user accounts. The users are located in six different sites. New users
report that they receive the following error message when they try to log on: “The username
or password is incorrect.” You confirm that the user accounts exist and are enabled. You
also confirm that the user name and password information supplied are correct.
You need to identify the cause of the failure. You also need to ensure that the new users are
able to log on.
Which utility should you run?

Your network contains an Active Directory forest. All domain controllers run Windows Server
2008 R2 and are configured as DNS servers.
You have an Active Directory-integrated zone for contoso.com.
You have a Unix-based DNS server.
You need to configure your Windows Server 2008 R2 environment to allow zone transfers of
the contoso.com zone to the Unix-based DNS server.
What should you do in the DNS Manager console?

Your company has an Active Directory domain.
You log on to the domain controller. The Active Directory Schema snap-in is not available in
the Microsoft Management Console (MMC).
You need to access the Active Directory Schema snap-in.
What should you do?

Your company has a server that runs Windows Server 2008 R2. Active Directory Certificate
Services (AD CS) is configured as a standalone Certification Authority (CA) on the server.
You need to audit changes to the CA configuration settings and the CA security settings.
Which two tasks should you perform? (Each correct answer presents part of the solution.
Choose two.)

Your company has a single-domain Active Directory forest. The functional level of the
domain is Windows Server 2008.
You perform the following activities:
Create a global distribution group.
Add users to the global distribution group.
Create a shared folder on a Windows Server 2008 member server.
Place the global distribution group in a domain local group that has access to the shared
folder.
You need to ensure that the users have access to the shared folder.
What should you do?

Your company hires 10 new employees.
You want the new employees to connect to the main office through a VPN connection.
You create new user accounts and grant the new employees they Allow Read and Allow
Execute permissions to shared resources in the main office.
The new employees are unable to access shared resources in the main office.
You need to ensure that users are able to establish a VPN connection to the main office.
What should you do?

Your network consists of a single Active Directory domain. All domain controllers run
Windows Server 2008 R2.
You need to identify the Lightweight Directory Access Protocol (LDAP) clients that are using
the largest amount of available CPU resources on a domain controller.

What should you do?

Your company has an Active Directory forest that contains only Windows Server 2008
domain controllers.
You need to prepare the Active Directory domain to install Windows Server 2008 R2 domain
controllers.
Which two tasks should you perform? (Each correct answer presents part of the solution.
Choose two.)