Your network contains an Active Directory domain named adatum.com. The domain contains several
thousand member servers that run Windows Server 2012 R2. All of the computer accounts for the
member servers are in an organizational unit (OU) named ServersAccounts. Servers are restarted
only occasionally.

You need to identify which servers were restarted during the last two days.
What should you do?

A.
Run dsquery computer and specify the -sra /epwc parameter.

B.
Run Get-ADComputer and specify the SearchScope parameter.

C.
Run dsquery server and specify the -o parameter.

D.
Run Get-ADComputer and specify the lastLogon property

Explanation:
http://technet.microsoft.com/en-us/library/ee617192.aspx
SearchScope Specifies the scope of an Active Directory search. Possible values for this parameter
are:
Base or 0
OneLevel or 1
Subtree or 2
A Base query searches only the current path or object.
A OneLevel query searches the immediate children of that path or object.
A Subtree query searches the current path or object and all children of that path or object.
http://technet.microsoft.com/en-us/library/cc732885%28v=ws.10%29.aspx
Dsquery server
-o {dn | rdn}
Specifies the format that dsquery uses to display the search results. A dn value displays the
distinguished name of each entry. An rdn value displays the relative distinguished name of each
entry. The default value is dn.
NB: epwc doesn’t exist for Dsquery computer so even if i’m not sure it’s the best way, the only
possible answer is using “Get-ADComputer and specify the lastLogon property”