Your company has a single Active Directory directory service forest with a forest root domain and four child domains. The child domains are based on geographic location.You are designing an Active Directory delegation strategy that must meet the following requirements: The Directory Services team must have rights to all Active Directory objects in every domain in the forest.Administrators for each geographic location must have rights to all Active Directory objects in their child domain.All users must be granted the least privileges necessary to perform their job. You need to design an administrative model for your forest. Which two solutions should you add into your design? (Each correct answer presents part of the solution. Choose two.)

Your company has a main office and a single branch office. The two offices are connected through a WAN link. You have Active Directory directory service site objects for each office. Domain controllers are associated with the appropriate site objects. Users in the main office are currently authenticated by domain controllers in the branch office. You need to ensure that users in the main office are authenticated by the domain controllers in the main office. What should you do?

Your company has a single Active Directory directory service forest with three domains. You plan to modify the Active Directory schema. You need to identify the schema master for the forest. What should you do?

Your company has a single Active Directory directory service domain. The company has five Active Directory sites on the West coast and five Active Directory sites on the East coast. The West coast sites and the East coast sites are in two separate hub-and-spoke configurations that are separated by a firewall. All Active Directory replication between the West coast and East coast occurs between a single West coast domain controller named WestDC1 and a single East coast domain controller named EastDC1. You need to ensure that if WestDC1 fails, other West coast domain controllers continue to replicate with each other, but not with East coast domain controllers. What should you do?

Your company has a single Active Directory directory service forest named contoso.com. A partner organization has a forest named fabrikam.com. You create a forest trust relationship between contoso.com and fabrikam.com. You need to enable selective authentication between contoso.com and fabrikam.com. Which tool should you use?

You are the network administrator for the Baldwin Museum of Science. The network consists of a single Active Directory forest that contains one domain named baldwinmuseumofscience.com. You need to deploy a new domain named NA.baldwinmuseumofscience.com as a child domain of baldwinmuseumofscience.com. You install a new stand-alone Windows Server 2003 computer named DC1. You plan to make DC1 the first domain controller in the NA.baldwinmuseumofscience.com domain. You configure DC1 with a static IP configuration. You run the Active Directory Installation Wizard on DC1. The wizard prompts you for the network credentials to use to join the NA.baldwinmuseumofscience.com domain to the forest. You enter the appropriate credentials for an account in the baldwinmuseumofscience.com domain. You receive an error message stating that a domain controller in the baldwinmuseumofscience.com domain cannot be located. You need to be able to promote DC1 to a domain controller as the first domain controller of the child domain in the existing forest. What should you do?

You are the network administrator for your company. The network consists of a single Active Directory domain with two sites named Site1 and Site2. Site1 contains two domain controllers. Site2 contains one domain controller. Each site contains two member servers. All domain controllers are backed up every night. Each of the domain controllers is installed with a similar hardware configuration, which includes a single processor and a single hard disk. You create several user accounts on the domain controller in Site2. The hard disk on that domain controller fails. You install a new hard disk on the domain controller and restore the domain controller from the most recent backup tape. You notice that the new user accounts you created on the domain controller do not appear. The only way that you can restore the user accounts is to re-create them. You need to configure the domain controllers so that the loss of data in Active Directory is minimized during a similar hard disk failure. What should you do?

Your company has a single Active Directory directory service forest with three domains and multiple sites.You need to manually create intersite connections for a site named Site1. You need to ensure that the KCC continues to generate the intrasite replication topology within each Active Directory site. Which command should you run?

You are a network administrator for Litware, Inc. The network consists of a single Active Directory domain named sales.litwareinc.com. The Active Directory database is contained on a Windows Server 2003 domain controller named DC1. The hard disk that contains the Active Directory database fails. You restart DC1 in Directory Services Restore Mode. When prompted to log on, you type administrator@sales.litwareinc.com as your user name and enter your domain password. Your logon attempt fails. You need to log on to DC1 to complete the restore operation. What should you do?

You have a single Active Directory directory service domain. A domain controller named DC1 cannot replicate with other domain controllers. DC1 holds no FSMO roles. You notice that the time on DC1 is 11:30 AM while the time on all the other domain controllers is 11:00 AM. You need to ensure that DC1 can immediately replicate with other domain controllers. What should you do?