A corporate environment includes a Windows Server 2008 R2 Active Directory Domain Services (AD DS) domain.

You need to enable Universal Group Membership Caching on several domain controllers in the domain.

Which tool should you use?

A.
Dsmod

B.
Dscmd

C.
Ntdsutil

D.
Active Directory Sites and Services console

Explanation:
To enable Universal Group Membership Caching in a site

Open Active Directory Sites and Services: On the Start menu, point to Administrative Tools, and then click Active Directory Sites and Services.

In the console tree, expand Sites, and then click the site in which you want to enable Universal Group Membership Caching.

In the details pane, right-click the NTDS Site Settings object, and then click Properties.

Under Universal Group Membership Caching, select Enable Universal Group Membership Caching.

In the Refresh cache from list, click the site that you want the domain controller to contact when the Universal Group membership cache must be updated, and then click OK.

http://technet.microsoft.com/en-us/library/cc816928%28v=ws.10%29