You have a Windows Server 2008 R2that has the Active Directory Certificate Servicesserver role
installed.
You need to minimize the amount of time it takes for client computers to download a certificate
revocation list (CRL).
What should you do?

You want users to log on to Active Directory by using a new Principal Name (UPN).
You need to modify the UPN suffix for all user accounts.
Which tool should you use?

Your network consists of a single Active Directory domain.
All domain controllersrun Windows Server 2008 R2.
Auditingis configured to log changes made to the Managed By attributeon group objectsin an
organizational unitnamed OU1.
You need to log changes made to the Description attribute on all group objects in OU1 only.
What should you do?

Your company uses shared folders.
Usersare granted accessto the shared foldersby usingdomain local groups.
Oneof the shared folders contains confidential data.
You need to ensure that unauthorized users are not ableto access the shared folder that contains
confidential data.
What should you do?

Your company has an Active Directory domain.
You installan Enterprise Root certification authority (CA)on a member servernamed Server1.
You need to ensure that only the Security Manager is authorized to revoke certificates that are supplied
by Server1.
What should you do?

You need to deploy a read-only domain controller (RODC)that runs Windows Server 2008 R2.
What is the minimal forest functional levelthat you should use?

Your company has three Active Directory domains in a single forest.
You installa new Active Directory enabled application.
The application ads new user attributes to the Active Directory schema.
You discover that the Active Directory replication traffic to the Global Catalogs has increased.
You need to prevent the new attributes from being replicated to the Global Catalog.
You must achieve this goal without affecting application functionality.
What should you do?

You are decommissioning one of the domain controllers in a child domain.
You need to transfer all domain operations master roleswithin the child domain to a newly installed
domain controller in the same child domain.
Which three domain operations master roles should you transfer?
(Each correct answer presents part of the solution.Choose three.)

There are 100 serversand 2000 computerspresent at your company’s headquarters.
The DHCP serviceis installed on a two-node Microsoft failover clusternamed CKMFOto ensure the high
availability of the service.
The nodes are named as CKMFON1and CKMFON2.
The cluster on CKMFO has one physical shared diskof 400 GB capacity.
A 200GB single volumeis configured on the shared disk.
The company has decided to host a Windows Internet Naming Service (WINS) on CKMFON1.
The DHCPand WINSservices will be hosted on other nodes.
Using High Availability Wizard, you begin creating the WINS service groupon the cluster available on
CKMFON1node.
The wizard shows an error “no disks are available” during configuration.
Which action should you perform to configure storage volumes on CKMFON1 to successfully add the WINS
Service group to CKMFON1?

Exhibit:

Company servers run Windows Server 2008.
It has a single Active Directory domain.
A servercalled S4has file services role installed.
You install some disks for additional storage.
The disks are configured as shown in the exhibit.
To support data striping with parity, you have to create a new drive volume.
What should you do to achieve this objective?