HOTSPOT
Your network contains an Active Directory domain named contoso.com.
The Zone Transfers settings of contoso.com are configured as shown in the Zone Transfers
exhibit. (Click the Exhibit button.)

The Name Servers settings ofcontoso.com are configured as shown in the Name Servers
exhibit. (Click the Exhibit button.)

To answer, complete each statement according to the information presented in the exhibits.
Each correct selection is worth one point.

HOTSPOT
Your network contains an Active Directory forest named contoso.com. The forest contains
two domains named contoso.com and fabrikam.com. The relevant domain controllers are
configured as shown in the following table.

You need to configure the zone storage settings for each zone. The solution must meet the
following requirements:
The contoso.com zone must be replicated to all of the domain controllers in the domain.
The fabrikam.com zone must be replicated to all of the domain controllers in the forest that
have the DNS Server server role installed.
In the table below, identify in which partition each zone must be stored. Make only one
selection in each column. Each correct selection is worth one point.

Your network contains an Active Directory forest named fabrikam.com.
You perform a test installation of an enterprise certification authority (CA).
After the installation, you discover that the Issuer Statement option on every certificate
issued by the CA is unavailable.
You need to ensure that the Issuer Statement option is available when you install the
enterprise CA to the production environment.
What should you do?

Your network contains an Active Directory domain named contoso.com.
The domain contains an enterprise certification authority (CA).
You plan to deploy certificates to all of the domain users. The certificates will be based on a
custom Smartcard Logon template.
You need to recommend a solution to ensure that the users can log on to the domain by
using smart cards.
What should you include in the recommendation?

Your network contains an Active Directory domain named adatum.com.
The domain contains an enterprise certification authority (CA).
When submitting a request for a certificate based on the EnrollmentAgent template, you
receive the error message shown in the exhibit. (Click the Exhibit button.)

You need to ensure that you can enroll for the certificate successfully.
What should you modify?

DRAG DROP
Your network contains an Active Directory domain named contoso.com.
You need to create a Group Policy object (GPO) that contains all of the settings included in
the Windows Server 2008 R2 Security Baseline. The solution must minimize administrative
effort.
Which three actions should you perform in sequence? (To answer, move the appropriate
three actions from the list of actions to the answer area and arrange them in the correct
order.)

Your network contains an Active Directory forest named contoso.com.
You need to identify the Password Setting object (PSO) applied to a user named User1.
Which cmdlet should you run?

Your network contains an Active Directory forest named contoso.com. The domain contains
two domain controllers named DC1 and DC2 that run Windows Server 2008 R2. DC2 holds
the PDC emulator role.
The power supply on DC2 fails.
You seize the PDC emulator role to DC1.
You replace the power supply on DC2.
You need to bring DC2 back online as the PDC emulator as soon as possible. The solution
must minimize the disruption of services for users.
What should you do?

Your network contains an Active Directory domain.
You need to activate the Active Directory Recycle Bin in the domain.
Which tool should you use?

Your network contains an Active Directory domain named adatum.com. The functional level
of the domain is Windows Server 2008. All domain controllers run Windows Server 2008 R2.
All client computers run Windows 7 Enterprise.
You need to create a snapshot of Active Directory.
What should you do?