Your company has an Active Directory forestthat contains a single domain.
The domain member serverhas an Active Directory Federation Services (AD FS) role installed.
You need to configure AD FS to ensure that AD FS tokenscontain information from the Active Directory
domain.
What should you do?

You network consists of a single Active Directory domain.
All domain controllers run Windows Server 2008 R2.
Youneed to reset the Directory Services Restore Mode (DSRM) password on a domain controller.
What tool should you use?

Your company has a main officeand a branch office.
You deploy a read-only domain controller (RODC)that runs Microsoft Windows Server 2008to the
branch office.
You need to ensure that users at the branch office are able to log on to the domain by using the RODC.
What should you do?

Your company has a single Active Directory domainnamed intranet.adatum.com.
The domain controllersrun Windows Server 2008and the DNS server role.
All computers, including non-domain members, dynamically register their DNS records.
You need to configure the intranet.adatum.com zone to allow only domain members to dynamically
register DNS records.
What should you do?

Your network consists of a single Active Directory domain.
All domain controllersrun Windows Server 2008 R2and are configured as DNS servers.
A domain controller named DC1has a standard primary zonefor contoso.com.
A domain controller named DC2has a standard secondary zonefor contoso.com.
You need to ensure that the replication of the contoso.com zone is encrypted.
You must not lose any zone data.
What should you do?

You are decommissioning domain controllersthat hold all forest-wide operations master roles.
You need to transfer all forest-wide operations master roles to another domain controller.
Which two roles should you transfer?
(Each correct answer presents part of the solution. Choose two.)

Contoso, Ltd. has an Active Directory domainnamed ad.contoso.com.
Fabrikam, Inc. has an Active Directory domainnamed intranet.fabrikam.com.
Fabrikam’s security policy prohibitsthe transfer of internal DNS zone data outsidethe Fabrikam network.
You need to ensure that the Contoso users are able to resolve names from the intranet.fabrikam.com
domain.
What should you do?

An Active Directory databaseis installed on the C volumeof a domain controller.
Youneed to move the Active Directory database to a new volume.
What should you do?

Your company has file serverslocated in an organizational unitnamed Payroll.
Thefile serverscontain payroll fileslocated in a foldernamed Payroll.
You create a GPO.
You need to track which employees access the Payroll files on the file servers.
What should you do?

Your company uses a Windows 2008 Enterprise certificate authority (CA)to issue certificates.
You need to implement key archival.
What should you do?