Which cmdlet should you use?
Your network contains an Active Directory domain named contoso.com.
The Administrator deletes an OU named OU1 accidentally.
You need to restore OU1. Which cmdlet should you use?
You need to ensure that any time an administrator modifies an employee’s name in AD DS, the change is au
A corporate network includes a single Active Directory Domain Services (AD DS) domain. All
regular user accounts reside in an organizational unit (OU) named Employees. All
administrator accounts reside in an OU named Admins.
You need to ensure that any time an administrator modifies an employee’s name in AD DS,
the change is audited.
What should you do first?
Which tools should you use?
Your network contains an Active Directory domain named contoso.com.
You need to create a script that runs the Best Practices Analyzer (BPA) each week for all of
the server roles that BPA supports on each domain controller.
You must achieve this goal by using the minimum amount of administrative effort.
Which tools should you use? (Each correct answer presents part of the solution. Choose
three.)
Which tool should you use?
Your network contains an Active Directory domain.
You need to activate the Active Directory Recycle Bin in the domain.
Which tool should you use?
You need to ensure that when the Montreal Site domain controller is offline, authentication requests …
A corporate network includes a single Active Directory Domain Services (AD DS) domain.
The AD DS infrastructure is shown in the following graphic.
When the Montreal site domain controller is offline, authentication requests for Montreal
branch office users are sent to the Toronto site domain controller.
You need to ensure that when the Montreal Site domain controller is offline, authentication
requests forMontreal branch office users are sent to the Quebec City site domain controller.
What should you do?
You need to ensure that users in the contoso.com domain can access resources in the eng.fabrikam.com domain
Which commands should you run from Ntdsutil?
DRAG DROP
Your company plans to open a new branch office. The new office will have a low-speed
connection to the Internet.
You plan to deploy a read-only domain controller (RODC) in the branch office.
You need to create an offline copy of the Active Directory database that can be used to
install Active Directory on the new RODC.
Which commands should you run from Ntdsutil?
To answer, move the appropriate actions from the list of actions to the answer area and
arrange them in the correct order.
You need to ensure that a search of the entire directory for users in the marketing department returns all of
Your network contains an Active Directory forest.
All users have a value set for the Department attribute.
From Active Directory Users and computers, you search a domain for all users who have a
Department attribute value of Marketing.
The search returns 50 users.
From Active Directory Users and Computers, you search the entire directory for all users
who have a Department attribute value of Marketing.
The search does not return any users.
You need to ensure that a search of the entire directory for users in the marketing
department returns all of the users who have the Marketing Department attribute.
What should you do?
You need to deploy a read-only domain controller (RODC) that runs Windows Server 2008 R2
Your network contains an Active Directory forest named adatum.com. All domain controllers
currently run Windows Server 2003 Service Pack 2 (SP2). The functional level of the forest
and the domain is Windows Server 2003.
You need to deploy a read-only domain controller (RODC) that runs Windows Server 2008
R2.
What should you do first?
Sales_Temp is published to the C
Your network contains an Active Directory domain named adatum.com. All servers run
Windows Server 2008 R2 Enterprise. All client computers run Windows 7 Professional.
The network contains an enterprise certification authority (CA).
You have a custom certificate template named Sales_Temp. Sales_Temp is published to the
CA.
You need to ensure that all of the members of a group named Sales can enroll for
certificates that use Sales_Temp.
Which snap-in should you use?