You are the network administrator for your company. The company consists of two subsidiaries named Contoso, Ltd., and Fabrikam, Inc. The network consists of two Active Directory forests. The WAN connections that connect some domain controllers are unreliable. The domain and trust configuration is shown in the Network Diagram exhibit. (Click the Exhibit button.) You create shared folders on Windows Server 2003 member servers in both forests. Some of the shared folders are accessible to users from both forests. For each of the shared folders, you create a domain local group. You add global groups from domains in either forest to the domain local group. The Fabrikam, Inc., division is sold to a different company. You delete the trust relationship between the two forests. You notice that after the trust relationship is deleted, the membership lists for some of the domain local groups are no longer accurate. When you view a membership list, it contains entries without user-friendly names. A sample is shown in the Membership List exhibit. (Click the Exhibit button.) You need to delete all the unknown groups from the membership list for the domain local groups. You want to achieve this goal by using the minimum amount of administrative effort, and without modifying the access to resources for users in the contoso.com forest. What should you do?

You are a network administrator for your company. The company has offices in Paris and New York. Thenetwork consists of a single Active Directory domain that contains six domain controllers, as shown in the exhibit.

The Paris and New York offices are connected by an IP site link. The six domain controllers are configured as shown in the following table.

You notice that at regular intervals the CPU utilization on some of the file and print servers increases to 100 percent for a period of time. During this time, the servers become unresponsive to user requests. You discover that this problem occurs during Active Directory replication.

You need to ensure that the file and print servers are responsive to user requests during Active Directory replication.

What should you do?

You are the network administrator for your company. The network consists of a single Active Directory domain. The relevant portion of the organizational unit (OU) structure is shown in the exhibit.

The company’s sales division consists of an inside sales department, a mobile sales department, and a telemarketing department. User objects for users in these departments are stored in the Inside, Mobile, and Telemarket OUs respectively. User objects for all junior managers and senior managers
are stored in the Managers OU. The company decides to train junior managers to perform basic administrative tasks. Junior managers are responsible for enabling and disabling accounts for all sales
users except junior managers and senior managers. You need to enable junior managers to perform the assigned administrative tasks. You must not affect any existing permissions.

What should you do?

You are a network administrator for your company. The network consists of a single Active Directory domain. The company has offices in 25 cities. Each office is configured as a single site. You are responsible for one site that is configured as shown in the exhibit. (Click the Exhibit button.) An IP site link connects your site and the site at the company’s main office. The company replaces your router with a firewall device. The firewall is configured to allow HTTP, SMTP, FTP, NNTP, global catalog queries, and VPN packets to pass. You discover that replication with other sites is not occurring. You need to ensure that you can replicate with other sites. You need to achieve this goal without removing or reconfiguring the firewall. What should you do?

You are the network administrator for Northwind Traders. The network consists of a single Active Directory forest that contains one root domain and one child domain. The forest also contains three separate sites, as shown in the Network Diagram exhibit. (Click the Exhibit button.) The network is not fully routed and there is no direct physical connection between Site1 and Site3. Site links are not bridged. You discover that the domain controllers for namerica.northwindtraders.com located in Site1 have additional accounts that are not on the domain controllers for namerica.northwindtraders.com located in Site3. You examine the directory service log in Event Viewer on a domain controller for namerica.northwindtraders.com. You discover the error message shown in the Error Message exhibit. (Click the Exhibit button.) You need to resolve the condition that is causing this error. What should you do?

You are the network administrator for Contoso, Ltd. The network consists of a single Active Directory forest that contains a single domain named contoso.com. You have a user account named CONTOSOadmin that is a member of the Domain Admins global group. You need to create a new child domain named NA.contoso.com in the forest. You install a stand-alone Windows Server 2003 computer named DC3. You use the Active Directory Installation Wizard to promote DC3 to a domain controller in the new domain. You choose to create a domain controller for a new child domain in an existing domain tree.
You enter the user name and password for CONTOSOadmin. You choose contoso.com as the parent domain, and you type NA as the name of the child domain. You receive the error message shown in the exhibit. (Click the Exhibit button.) You need to be able to create the new child domain. What should you do?

You are a network administrator for your company. The network consists of a single Active Directory
domain. All client computers run Windows XP Professional. The company’s main office is located in Dallas.
You are a network administrator at the company’s branch office in Mexico City. You create a Group Policy
object (GPO) that redirects the Start menu for users in the Mexico City branch office to a shared folder on a
file server. Several users in Mexico City report that many of the programs that they normally use are missing
from their Start menus. The programs were available on the Start menu the previous day, but did not appear
when the users logged on today. You log on to one of the client computers. All of the required programs
appear on the Start menu. You verify that users can access the shared folder on the server. You need to
find out why the Start menu changed for these users. What are two possible ways to achieve this goal?
(Each correct answer presents a complete solution. Choose two.)

You have a single Active Directory directory service domain. Your company has multiple kiosk computers. The computer accounts for the kiosk computers are located in an organizational unit (OU) named Kiosks. Your companys user accounts are located in an OU named CorpUsers. A Group Policy object (GPO) named CorpUsers is linked to the CorpUsers OU. You create a GPO named Secure Kiosks and link it to the Kiosks OU. You define several user and computer settings within the Secure Kiosks GPO. You need to ensure that the user settings from the Secure Kiosks GPO are enforced when a user logs on to a kiosk computer. What should you do?