Your network contains an Active Directory domainnamed adatum.com.
All serversrun Windows Server 2008 R2 Enterprise.
All client computersrun Windows 7 Professional.
The network contains an enterprise certification authority(CA).
You have a custom certificate templatenamed Sales_Temp.
Sales_Temp is published to the CA.
You need to ensure that all of the members of a group named Sales can enroll for certificates that use
Sales_Temp.
Which snap-inshould you use?

Your network contains an Active Directory forestnamed adatum.com.
All domain controllerscurrently run Windows Server 2003 Service Pack 2(SP2).
The functional levelof the forestand the domainis Windows Server 2003.
You need to deploy a read-only domain controller (RODC)that runs Windows Server 2008 R2.
What should you do first?

Your network contains two Active Directory forestsnamed contoso.comand nwtraders.com.
Active Directory Rights Management Services(AD RMS) is deployed in each forest.
You need to ensure that users from the nwtraders.com forest can access AD RMS protected content in
the contoso.com forest.
What should you do?

Your company plansto open a new branch office.
The new officewill have a Iow-speed connection to the Internet.
You plan to deploya read-only domain controller (RODC) in the branch office.
You need to create an offline copy of the Active Directory database that can be used to install Active
Directory on the new RODC.
Which commandsshould you run from Ntdsutil?
To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the
correct order.

Your network contains an Active Directory forest.
All usershave a value setfor the Department attribute.
From Active Directory Users and computers, you search a domain for all users who have aDepartment
attribute value ofMarketing.
The search returns 50 users.
From Active Directory Users and Computers, you search the entire directory for all userswho have a
Department attribute valueof Marketing.
The search does not return any users.
You need to ensure that a search of the entire directory for users in the marketing department returns
all of the users who have the Marketing Department attribute.
What should you do?

A corporate network includes a single Active Directory Domain Services (AD DS) domain.
The AD DS infrastructureis shown in the following graphic:

When the Montreal site domain controlleris offline, authentication requests for Montreal branch office
users are sent to the Toronto site domain controller.
You need to ensure that when the Montreal Site domain controller is offline, authentication requests for
Montreal branch office users are sent to the Quebec City site domain controller.
What should you do?

A corporate environment includes two Active Directory Domain Services(AD DS) forests, as shown in the
following table:

You need to ensure that users in the contoso.com domaincan access resources in the eng.fabrikam.
com domain.
What should you do?

Your network contains an Active Directory domain.
You need to activate the Active Directory Recycle Bin in the domain.
Which tool should you use?

Your network contains an Active Directory domainnamed contoso.com.
You need to create a script that runs the Best Practices Analyzer (BPA) each week for all of the server
roles that BPA supports on each domain controller.
You must achieve this goal by using the minimum amount of administrative effort.
Which toolsshould you use?
(Each correct answer presents part of the solution. Choose three.)

A corporate network includes a single Active Directory Domain Services (AD DS) domain.
All regular user accountsreside in an organizational unit(OU) named Employees.
All administrator accounts reside in an OUnamed Admins.
You need to ensure that any time an administrator modifies an employee’s name in AD DS, the change
is audited.
What should you do first?