You have a domain controllernamed DC1that runs Windows Server 2008 R2.
DC1is configured as aDNS Server for contoso.com.
You install theDNS Server role on amember servernamed Server1and then you create a standard
secondary zone for contoso.com.
You configure DC1as the master server for the zone.
You need to ensure that Server1 receives zone updates from DC1.
What should you do?

Your company has an Active Directory domain.
All serversrun Windows Server 2008 R2.
Your company runs an Enterprise Root certification authority (CA).
Youneed to ensure that only administrators can sign code.
Which two tasksshould you perform?
(Each correct answer presents part of the solution. Choose two.)

Your company hasan Active Directory forest.
You plan to install an Enterprise certification authority (CA) on a dedicated stand-alone server.
When you attempt to add the Active Directory Certificate Services (AD CS) role, you find that the
Enterprise CA option is not available.
You need to install the AD CS role as an Enterprise CA.
What should you do first?

Your company has an Active Directory domainnamed contoso.com.
The company networkhas two DNS serversnamed DNS1and DNS2.
The DNS servers are configured as shown in the following table.

Domain users, who are configured to use DNS2 as the preferred DNSserver, are unable to connect to
Internet Web sites.
You need to enable Internet name resolution for all client computers.
What should you do?

Your network consists of a single Active Directory domain.
All domain controllersrun Windows Server 2003.
You upgrade all domain controllers to Windows Server 2008.
You need to configure the Active Directory environment to support the application of multiple
password policies.
What should you do?

Your company has two Active Directory forestsnamed contoso.comand fabrikam.com.
The company networkhas three DNS serversnamed DNS1, DNS2, and DNS3.
The DNS servers are configured as shown in the following table:

All computers that belong to the fabrikam.com domain have DNS3 configured as thepreferred DNS server.
All other computers useDNS1 as the preferred DNS server.
Users from thefabrikam.com domain are unable to connect to theservers that belong to thecontoso.com
domain.
You need to ensure users in the fabrikam.com domain areable to resolve all contoso.com queries.
What should you do?

Your company, Contoso Ltd, has offices in North America and Europe.
Contoso has an Active Directory forestthat has three domains.
You need to reduce the time required to authenticate users from the labs.eu.contoso.com domain when
they access resources in the eng.na.contoso.com domain.
What should you do?

Your company purchases a new application to deploy on 200 computers.
The application requiresthat you modify the registry on each target computer before you install the
application.
The registry modificationsare in a file that has an .admextension.
You need to prepare the target computers for the application.
What should you do?

Your company has an Active Directory forest that contains eight linked Group Policy Objects (GPOs).
Oneof these GPOs publishes applications to user objects.
A user reportsthat the application is not available for installation.
You need to identify whether the GPO has been applied.
What should you do?

Your company has an Active Directory domain.
You plan to installthe Active Directory Certificate Services (AD CS) server roleon a member serverthat
runs Windows Server 2008 R2.
You need to ensure that members of the Account Operators group are able to issue smartcard
credentials.
They should not be able to revoke certificates.
Which three actions should you perform?
(Each correct answer presents part of the solution. Choose three.)