You need to ensure that all of the computers in the domain automatically enroll for a certificate based on the
You have Active Directory Certificate Services (AD CS) deployed.
You have a Version 1 certificate template.
You need to ensure that all of the computers in the domain automatically enroll for a
certificate based on the certificate template.
What should you do?
complete each statement according to the information presented in the exhibit.
HOTSPOT
Your network contains an Active Directory domain that has the password policy shown in the
following exhibit. (Click the Exhibit button.)
To answer, complete each statement according to the information presented in the exhibit.
You need to ensure that users in Branch2 only authenticate to the domain controllers in Branch1
Your network contains an Active Directory domain. The domain is configured as shown in
the following table.
Users in Branch2 sometimes authenticate to a domain controller in Main.
You need to ensure that users in Branch2 only authenticate to the domain controllers in
Branch1.
What should you do?
Which domain controller should you identify?
Your network contains an Active Directory forest named contoso.com. The forest contains
two domains. All domain controllers are configured as global catalog servers.
The forest root domain contains five domain controllers. The domain controllers are
configured as shown in the following table.
You plan to create a custom attribute in Active Directory that will replicate to all of the global
catalog servers.
You need to identify which domain controller must be online to perform the planned action.
Which domain controller should you identify?
You need to move the infrastructure master role from DC1 to DC2
Your network contains an Active Directory forest named contoso.com. The forest contains a
single domain. The domain contains two domain controllers named DC1 and DC2 that run
Windows Server 2008 R2. DC1 is configured as the infrastructure master for contoso.com.
You need to move the infrastructure master role from DC1 to DC2.
What should you do?
You need to raise the domain functional level of all the domains to Windows Server 2008 R2
Your network contains an Active Directory forest named contoso.com. The forest contains
10 domains. Each domain contains 50 domain controllers that run Windows Server 2008 R2.
The domain functional level is Windows Server 2008.
You need to raise the domain functional level of all the domains to Windows Server 2008
R2.
What should you do?
You need to pre-create the computer accounts of the RODCs
Your company has two offices. The offices are located in Miami and London.
The network contains an Active Directory forest named contoso.com. The forest contains
two child domains named miami.contoso.com and london.contoso.com. The domain
contains 50 domain controllers that run Windows Server 2008 R2. Each office is configured
as an Active Directory site.
You plan to deploy several read-only domain controllers (RODCs) to the Miami site.
You need to pre-create the computer accounts of the RODCs.
What should you do?
You need to update the Host (A) record for a domain controller in the domain
Your network contains an Active Directory domain named contoso.com.
The properties of the contoso.com DNS zone are configured as shown in the exhibit. (Click
the Exhibit button.)
You need to update the Host (A) record for a domain controller in the domain.
What should you do?
Which utility should you use?
Your company has a main office and 40 branch offices. Each branch office is configured as
a separate Active Directory site that has a dedicated read-only domain controller (RODC).
You need to identify the user accounts that can be cached on the RODC server.
Which utility should you use?
Which command should you run?
Your network contains an Active Directory domain. The domain contains eight domain
controllers.
You need to verify that all the domain controllers can connect to the time server.
Which command should you run?