Your company has two Active Directory forests named contoso.com and fabrikam.com. Both
forests run only domain controllers that run Windows Server 2008. The domain functional
level of contoso.com is Windows Server 2008. The domain functional level of fabrikam.com
is Windows Server 2003 Native mode.
You configure an external trust between contoso.com and fabrikam.com.
You need to enable the Kerberos AES encryption option.
What should you do?

All consultants belong to a global group named TempWorkers. You place three file servers
in a new organizational unit named SecureServers. The three file servers contain
confidential data located in shared folders.
You need to record any failed attempts made by the consultants to access the confidential
data.

Which two actions should you perform? (Each correct answer presents part of the solution.
Choose two.)

You have two servers named Server1 and Server2. Both servers run Windows Server 2008
R2. Server1 is configured as an Enterprise Root certification authority (CA).
You install the Online Responder role service on Server2.
You need to configure Server2 to issue certificate revocation lists (CRLs) for the enterprise
root CA.
Which two tasks should you perform? (Each correct answer presents part of the solution.
Choose two.)

Your company has an Active Directory forest. The forest includes organizational units
corresponding to the following four locations:
London
Chicago
New York
Madrid
Each location has a child organizational unit named Sales. The Sales organizational unit
contains all the users and computers from the sales department.
The offices in London, Chicago, and New York are connected by T1 connections. The office
in Madrid is connected by a 256-Kbps ISDN connection.
You need to install an application on all the computers in the sales department.
Which two actions should you perform? (Each correct answer presents part of the solution.
Choose two.)

Your company has a domain controller server that runs the Windows Server 2008 R2
operating system. The server is a backup server. The server has a single 500-GB hard disk
that has three partitions for the operating system, applications, and data. You perform daily backups of the server.
The hard disk fails. You replace the hard disk with a new hard disk of the same capacity.
You restart the computer on the installation media. You select the Repair your computer
option.
You need to restore the operating system and all files.
What should you do?

You need to remove the Active Directory Domain Services role from a domain controller
named DC1.
What should you do?

Your company has an Active Directory forest. The company has branch offices in three
locations. Each location has an organizational unit.
You need to ensure that the branch office administrators are able to create and apply GPOs
only to their respective organizational units.
Which two actions should you perform? (Each correct answer presents part of the solution.
Choose two.)

Your company has an Active Directory domain. A user attempts to log on to the domain from
a client computer and receives the following message: “This user account has expired. Ask
your administrator to reactivate the account.”

You need to ensure that the user is able to log on to the domain.
What should you do?

You have an existing Active Directory site named Site1. You create a new Active Directory
site and name it Site2.
You need to configure Active Directory replication between Site1 and Site2. You install a
new domain controller.
You create the site link between Site1 and Site2.
What should you do next?

Your company has an Active Directory forest. Each branch office has an organizational unit
and a child organizational unit named Sales.
The Sales organizational unit contains all users and computers of the sales department.
You need to install an Office 2007 application only on the computers in the Sales
organizational unit.

You create a GPO named SalesApp GPO.
What should you do next?