Your network contains an Active Directory domain named contoso.com. The domain contains 100 servers. The
servers are contained in a organizational unit (OU)named ServersOU.
You need to create a group named Group1 on all of the servers in the domain. You must ensure that Group1 is
added only to the servers.
What should you configure?

A.
a Local Users and Groups preferences setting in aGroup Policy linked to the Domain Controllers OU
Open the %windir%\system32\config\netlogon.dns file.

B.
a Restricted Groups setting in a Group Policy linked to the domain
This would affect the whole domain and would effect member of the group C. allows you to centrally manage
local users and groups on domain member computers and is this isthe correct OU for the GPO change
Run dcdiag /test:dns.

C.
a Local Users and Groups preferences setting in aGroup Policy linked to ServersOU
Open the %windir%\system32\dns\backup\adatum.com.dns file.

D.
a Restricted Groups setting in a Group Policy linked to ServersOU
Restricted Groups defines what member or groups should exist as part of a group Why use Group Policy
preferences?
Unlike Group Policy settings, which App1y to both local computer policy and Active Directory policy,
GroupPolicy preferences only App1y to Active Directory policy. You use preferences to configure many areas of
theOS, including:
System devices, such as USB ports, floppy drives and removable media Network shares and mapping network
shares to drive letters System and user environmentvariables
User and group accounts for the local computer
VPN and dial-up networking connections
Printer configuration and mapping
Registry settings, schedule tasks and system services Settings for Folder Options, Internet Options and
Regional and Language Options Settings for power schemes and power management
Start Menu properties and menu items

http://www.grouppolicy.biz/2010/01/how-to-use-group-policy-preferences-to-secure-local- administrator-groups/
http://technet.microsoft.com/en-us/magazine/hh848751.aspx http://technet.microsoft.com/en-us/library/
cc957640.aspx http://technet.microsoft.com/en-us/library/cc731972.aspx
QUESTION 34
Your network contains an Active Directory domain named adatum.com. The domain contains three domain
controllers. The domain controllers are configured as shown in the following table.

DC3 loses network connectivity due to a hardware failure.
You plan to remove DC3 from the domain.
You log on to DC3.
You need to identify which service location (SRV) records are registered by DC3.
What should you do?
Run ipconfig /displaydns.

B.
a Restricted Groups setting in a Group Policy linked to the domain
This would affect the whole domain and would effect member of the group C. allows you to centrally manage
local users and groups on domain member computers and is this isthe correct OU for the GPO change
Run dcdiag /test:dns.

D.
a Restricted Groups setting in a Group Policy linked to ServersOU
Restricted Groups defines what member or groups should exist as part of a group Why use Group Policy
preferences?
Unlike Group Policy settings, which App1y to both local computer policy and Active Directory policy,
GroupPolicy preferences only App1y to Active Directory policy. You use preferences to configure many areas of
theOS, including:
System devices, such as USB ports, floppy drives and removable media Network shares and mapping network
shares to drive letters System and user environmentvariables
User and group accounts for the local computer
VPN and dial-up networking connections
Printer configuration and mapping
Registry settings, schedule tasks and system services Settings for Folder Options, Internet Options and
Regional and Language Options Settings for power schemes and power management
Start Menu properties and menu items

http://www.grouppolicy.biz/2010/01/how-to-use-group-policy-preferences-to-secure-local- administrator-groups/
http://technet.microsoft.com/en-us/magazine/hh848751.aspx http://technet.microsoft.com/en-us/library/
cc957640.aspx http://technet.microsoft.com/en-us/library/cc731972.aspx
QUESTION 34
Your network contains an Active Directory domain named adatum.com. The domain contains three domain
controllers. The domain controllers are configured as shown in the following table.

DC3 loses network connectivity due to a hardware failure.
You plan to remove DC3 from the domain.
You log on to DC3.
You need to identify which service location (SRV) records are registered by DC3.
What should you do?
Run ipconfig /displaydns.

A.
a Local Users and Groups preferences setting in aGroup Policy linked to the Domain Controllers OU
Open the %windir%\\system32\\config\\netlogon.dns file.

B.
a Restricted Groups setting in a Group Policy linked to the domain
This would affect the whole domain and would effect member of the group C. allows you to centrally manage
local users and groups on domain member computers and is this isthe correct OU for the GPO change
Run dcdiag /test:dns.

C.
a Local Users and Groups preferences setting in aGroup Policy linked to ServersOU
Open the %windir%\\system32\\dns\\backup\\adatum.com.dns file.

D.
a Restricted Groups setting in a Group Policy linked to ServersOU
Restricted Groups defines what member or groups should exist as part of a group Why use Group Policy
preferences?
Unlike Group Policy settings, which App1y to both local computer policy and Active Directory policy,
GroupPolicy preferences only App1y to Active Directory policy. You use preferences to configure many areas of
theOS, including:
System devices, such as USB ports, floppy drives and removable media Network shares and mapping network
shares to drive letters System and user environmentvariables
User and group accounts for the local computer
VPN and dial-up networking connections
Printer configuration and mapping
Registry settings, schedule tasks and system services Settings for Folder Options, Internet Options and
Regional and Language Options Settings for power schemes and power management
Start Menu properties and menu items

http://www.grouppolicy.biz/2010/01/how-to-use-group-policy-preferences-to-secure-local- administrator-groups/
http://technet.microsoft.com/en-us/magazine/hh848751.aspx http://technet.microsoft.com/en-us/library/
cc957640.aspx http://technet.microsoft.com/en-us/library/cc731972.aspx
QUESTION 34
Your network contains an Active Directory domain named adatum.com. The domain contains three domain
controllers. The domain controllers are configured as shown in the following table.

DC3 loses network connectivity due to a hardware failure.
You plan to remove DC3 from the domain.
You log on to DC3.
You need to identify which service location (SRV) records are registered by DC3.
What should you do?
Run ipconfig /displaydns.

Explanation:
A: This would add the group to the wrong OU

A: Netlogon service creates a log file that contains all the locator resource records and places the logfile in the
following location:
B: Analyzes the state of domain controllers in a forest or enterprise and reports any problems to help
introubleshooting.
C: dns backup file
D: used to display current resolver cache content
You can verify SRV locator resource records by viewing netlogon.dns, located in the %systemroot%\System32
\Config folder.
The SRV record is a Domain Name System (DNS) resource record that is used to identify computers that
hostspecific services.
SRV resource records are used to locate domain controllers for Active Directory.
You can use Notepad, to view this file.
The first record in the file is the domain controller’s Lightweight Directory Access Protocol (LDAP) SRV record.
This record should appear similar to the following:
_ldap._tcp.Domain_Name
C:\Documents and Settings\usernwz1\Desktop\1.JPG
http://support.microsoft.com/kb/816587/en-us
http://technet.microsoft.com/en-us/library/cc959303.aspx http://technet.microsoft.com/en-us/library/cc731968
(v=ws.10).aspx