Your company has a main office and a branch office. The branch office contains a read-only domain
controller named RODC1. You need to ensure that a user named Admin1 can install updates on
RODC1. The solution must prevent Admin1 from logging on to other domain controllers. What
should you do?

Your company has a main office and 40 branch offices. Each branch office is configured as a separate
Active Directory site that has a dedicated read-only domain controller (RODC). An RODC server is
stolen from one of the branch offices. You need to identify the user accounts that were cached on
the stolen RODC server. Which utility should you use?

Active Directory Rights Management Services (AD RMS) is deployed on your network. Users who
have Windows Mobile 6 devices report that they cannot access documents that are protected by AD
RMS. You need to ensure that all users can access AD RMS protected content by using Windows
Mobile 6 devices. What should you do?

Your company has an Active Directory Rights Management Services (AD RMS) server. Users have
Windows Vista computers. An Active Directory domain is configured at the Windows Server 2003
functional level. You need to configure AD RMS so that users are able to protect their documents.
What should you do?

Your company has a server that runs Windows Server 2008 R2. The server runs an instance of Active
Directory Lightweight Directory Services (AD LDS). You need to replicate the AD LDS instance on a
test computer that is located on the network. What should you do?

Your network contains a server named Server1 that runs Windows Server 2008 R2. You create an
Active Directory Lightweight Directory Services (AD LDS) instance on Server1. You need to create an
additional AD LDS application directory partition in the existing instance. Which tool should you use?

You deploy a new Active Directory Federation Services (AD FS) federation server. You request new
certificates for the AD FS federation server. You need to ensure that the AD FS federation server can
use the new certificates. To which certificate store should you import the certificates?

Your network contains two servers named Server1 and Server2 that run Windows Server 2008 R2.
Server1 has the Active Directory Federation Services (AD FS) Federation Service role service installed.
You plan to deploy AD FS 2.0 on Server2. You need to export the token-signing certificate from
Server1, and then import the certificate to Server2. Which format should you use to export the
certificate?

Your network contains a single Active Directory domain. The domain contains five read-only domain
controllers (RODCs) and five writable domain controllers. All servers run Windows Server 2008. You
plan to install a new RODC that runs Windows Server 2008 R2. You need to ensure that you can add
the new RODC to the domain. You want to achieve this goal by using the minimum amount of
administrative effort. Which two actions should you perform? (Each correct answer presents part of
the solution. Choose two.)

Your company has an Active Directory forest that contains a single domain. The domain member
server has an Active Directory Federation Services (AD FS) server role installed. You need to
configure AD FS to ensure that AD FS tokens contain information from the Active Directory domain.
What should you do?