Your company has an Active Directory forest.
The company has three locations.
Each locationhas anorganizational unitand a child organizational unitnamed Sales.
The Sales organizational unit contains all users and computers of the sales department.
The company plans to deploy a Microsoft Office 2007 application on all computers within the three
Sales organizational units.
You need to ensure that the Office 2007 application is installed only on the computers in the Sales
organizational units.
What should you do?

Your company has a main office and 10 branch offices.
Each branch officehas an Active Directory sitethat contains one domain controller.
Only domain controllers in the main office are configured as Global Catalog servers.
You need to deactivate the Universal Group Membership Caching (UGMC) option on the domain
controllers in the branch offices.
At which level should you deactivate UGMC?

Your network consists of a single Active Directory domain.
All domain controllers run Windows Server 2003.
You upgrade all domain controllers to Windows Server 2008 R2.
You need to ensure that the Sysvol share replicates by using DFS Replication (DFS-R).
What should you do?

Your company has a main office and a branch officethat are configured as a single Active Directory
forest.
The functional levelof the Active Directory forestis Windows Server 2003.
There are four Windows Server 2003 domain controllers in the main office.
You need to ensure that you are able to deploy a read-only domain controller (RODC) at the branch
office.
Which two actions should you perform?
(Each correct answer presents part of the solution. Choose two.)

Your company has an Active Directory forestthat contains Windows Server 2008 R2 domain controllers
and DNS servers.
All client computers run Windows XP SP3.
You need to use your client computers to edit domainbased GPOs by using the ADMX files that are
stored in the ADMX central store.
What should you do?

Your company has a domain controller that runs Windows Server 2008.
The domain controller has the backup features installed.
You need to perform a non-authoritative restore of the doman controller using an existing backup file.
What should you do?

Your company has an Active Directory domain.
All servers run Windows Server.
You deploy a Certification Authority (CA) server.
You create a new global security group named CertIssuers.
You need to ensure that members of the CertIssuers group can issue, approve, and revoke certificates.
What should you do?

Your company has an Active Directory domain.
The company has purchased 100 new computers.
You want to deploy the computers as members of the domain.
You need to create the computer accounts in an OU.
What should you do?

Your network consists of a single Active Directory domain.
You have a domain controllerand a member serverthat run Windows Server 2008 R2.
Both serversare configured as DNS servers.
Client computersrun either Windows XP Service Pack 3 or Windows 7.
You have a standard primary zone on the domain controller.
The member server hosts a secondary copy of the zone.
You need to ensure that only authenticated users are allowed to update host (A) records in the DNS
zone.
What should you do first?

Your company has two domain controllersthat are configured as internal DNS servers.
All zoneson the DNS serversare Active Directory-integrated zones.
The zones allow all dynamic updates.
You discover that the contoso.com zone has multiple entries for the host names of computers that do
not exist.
You need to configure the contoso.com zone to automatically remove expired records.
What should you do?