You have an Active Directory domain named contoso.com. You have a domain controller named Server1 that is configured as a DNS server. Server1 hosts a standard primary zone for contoso.com. The DNS configuration of Server1 is shown in the exhibit. (Click the Exhibit button.)

You discover that stale resource records are not automatically removed from the contoso.com zone. You need to ensure that the stale resource records are automatically removed from the contoso.com zone.
What should you do?

Your company has an Active Directory forest that runs at the functional level of Windows Server 2008.
You implement Active Directory Rights Management Services (AD?RMS). You install Microsoft SQL Server 2005.
When you attempt to open the AD?RMS administration Web site, you receive the following error message: "SQL Server does not exist or access denied." You need to open the AD?RMS administration Web site. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

Your company has two Active Directory forests as shown in the following table.
Forest name Forest functional level Domain(s)
contoso.com Windows Server 2008 contoso.com
fabrikam.com Windows Server 2008 fabrikam.com eng.fabrikam.com The forests are connected by using a two-way forest trust. Each trust direction is configured with forest-wide authentication. The new security policy of the company prohibits users from the eng.fabrikam.com domain to access resources in the contoso.com domain. You need to configure the forest trust to meet the new security policy requirement.
What should you do?

Your company has an Active Directory domain named contoso.com. The company network has two DNS servers named DNS1 and DNS2.
The DNS servers are configured as shown in the following table.
DNS1 DNS2
.(root)
_msdcs.contoso.com
_msdcs.contoso.com
contoso.com
contoso.com
Domain users, who are configured to use DNS2 as the preferred DNS server, are unable to connect to Internet Web sites.

You need to enable Internet name resolution for all client computers.
What should you do?

Your network contains an Active Directory domain. The relevant servers in the domain are configured as shown in the following table.
Server name Operating system Server role
Server1 Windows Server 2008 Domain controller
Server2 Windows Server 2008 R2 Enterprise root certification authority (CA) Server3 Windows Server 2008 R2 Network Device Enrollment Service (NDES) You need to ensure that all device certificate requests use the MD5 hash algorithm.
What should you do?

Your network contains an Active Directory domain. The domain is configured as shown in the following table.
Active Directory site Domain controllers
Main DC1 and DC2
Branch1 DC3
Branch2 None
Users in Branch2 sometimes authenticate to a domain controller in Branch1. You need to ensure that users in Branch2 only authenticate to the domain controllers in Main.
What should you do?

Your network contains a single Active Directory forest. The forest contains two domains named contoso.com and sales.contoso.com. The domain controllers are configured as shown in the following table.
Server name Domain DNS zones hosted
DC1 contoso.com contoso.com
DC2 contoso.com contoso.com
DC3 sales.contoso.com sales.contoso.com
DC4 sales.contoso.com sales.contoso.com
All domain controllers run Windows Server 2008 R2. All zones are configured as Active Directory- integrated zones.
You need to ensure that contoso.com records are available on DC3.
Which command should you run?

Your company has an Active Directory domain.
A user attempts to log on to the domain from a client computer and receives the following message:
"This user account has expired. Ask your administrator to reactivate the account." You need to ensure that the user is able to log on to the domain.
What should you do?