QUESTION 141
Your network consists of a single Active Directory domain.
All domain controllers run Windows Server 2008 R2.
You need to identify the Lightweight Directory Access Protocol (LDAP) clients that are using the largest amount of available CPU resources on a domain controller.
What should you do?

A.    Review performance data in Resource Monitor.
B.    Review the Hardware Events log in the Event Viewer.
C.    Run the Active Directory Diagnostics Data Collector Set.
Review the Active Directory Diagnostics report.
D.    Run the LAN Diagnostics Data Collector Set.
Review the LAN Diagnostics report.

Answer: C
Explanation:
http://servergeeks.wordpress.com/2012/12/31/active-directory-diagnostics/

QUESTION 142
Your company has an Active Directory forest that contains only Windows Server 2008 domain controllers.
You need to prepare the Active Directory domain to install Windows Server 2008 R2 domain controllers.
Which two tasks should you perform? (Each correct answer presents part of the solution. Choose two.)

A.    Run the adprep /domainprep command.
B.    Raise the forest functional level to Windows Server 2008.
C.    Raise the domain functional level to Windows Server 2008.
D.    Run the adprep /forestprep command.

Answer: AD
Explanation:
http://www.petri.co.il/prepare-for-server-2008-r2-domain-controller.htm

QUESTION 143
You need to identify all failed logon attempts on the domain controllers.
What should you do?

A.    View the Netlogon.log file.
B.    View the Security tab on the domain controller computer object.
C.    Run Event Viewer.
D.    Run the Security and Configuration Wizard.

Answer: C
Explanation:
http://support.microsoft.com/kb/174074

QUESTION 144
Your company has a DNS server that has 10 Active Directory integrated zones.
You need to provide copies of the zone files of the DNS server to the security department.
What should you do?

A.    Run the dnscmd /ZoneInfo command.
B.    Run the ipconfig /registerdns command.
C.    Run the dnscmd /ZoneExport command.
D.    Run the ntdsutil > Partition Management > List commands.

Answer: C
Explanation:
http://servergeeks.wordpress.com/2012/12/31/dns-zone-export/

QUESTION 145
Your company has an Active Directory forest.
The company has three locations.
Each location has an organizational unit and a child organizational unit named Sales.
The Sales organizational unit contains all users and computers of the sales department.
The company plans to deploy a Microsoft Office 2007 application on all computers within the three Sales organizational units.
You need to ensure that the Office 2007 application is installed only on the computers in the Sales organizational units.
What should you do?

A.    Create a Group Policy Object (GPO) named SalesAPP GPO.
Configure the GPO to assign the application to the computer account.
Link the SalesAPP GPO to the domain.
B.    Create a Group Policy Object (GPO) named SalesAPP GPO.
Configure the GPO to assign the application to the user account.
Link the SalesAPP GPO to the Sales organizational unit in each location.
C.    Create a Group Policy Object (GPO) named SalesAPP GPO.
Configure the GPO to assign the application to the computer account.
Link the SalesAPP GPO to the Sales organizational unit in each location.
D.    Create a Group Policy Object (GPO) named SalesAPP GPO.
Configure the GPO to publish the application to the user account.
Link the SalesAPP GPO to the Sales organizational unit in each location.

Answer: C

QUESTION 146
Your company has a main office and 10 branch offices.
Each branch office has an Active Directory site that contains one domain controller.
Only domain controllers in the main office are configured as Global Catalog servers.
You need to deactivate the Universal Group Membership Caching (UGMC) option on the domain controllers in the branch offices.
At which level should you deactivate UGMC?

A.    Server
B.    Connection object
C.    Domain
D.    Site

Answer: D
Explanation:
http://www.ntweekly.com/?p=788
http://gallery.technet.microsoft.com/scriptcenter/c1bd08d2-1440-40f8-95be-ad2050674d91

QUESTION 147
Your network consists of a single Active Directory domain.
All domain controllers run Windows Server 2003.
You upgrade all domain controllers to Windows Server 2008 R2.
You need to ensure that the Sysvol share replicates by using DFS Replication (DFS-R).
What should you do?

A.    From the command prompt, run dfsutil /addroot:sysvol.
B.    From the command prompt, run netdom /reset.
C.    From the command prompt, run dcpromo /unattend:unattendfile.xml.
D.    Raise the functional level of the domain to Windows Server 2008 R2.

Answer: D
Explanation:
http://technet.microsoft.com/en-us/library/cc794837%28v=ws.10%29.aspx
Introduction to Administering DFS-Replicated SYSVOL
SYSVOL is a collection of folders that contain a copy of the domain’s public files, including system policies, logon scripts, and important elements of Group Policy objects (GPOs). The SYSVOL directory must be present and the appropriate subdirectories must be shared on a server before the server can advertise itself on the network as a domain controller. Shared subdirectories in the SYSVOL tree are replicated to every domain controller in the domain.
Note:
For Group Policy, only the Group Policy template (GPT) is replicated through SYSVOL replication. The Group Policy container (GPC), which is stored in the domain, is replicated through Active Directory replication. For Group Policy to be effective, both parts must be available on a domain controller.
Using DFS Replication for replicating SYSVOL in Windows Server 2008
Distributed File System (DFS) Replication is a replication service that is available for replicating SYSVOL to all domain controllers in domains that have the Windows Server 2008 domain functional level.
DFS Replication was introduced in Windows Server 2003 R2. However, on domain controllers that are running Windows Server 2003 R2, SYSVOL replication is performed by the File Replication Service (FRS).

QUESTION 148
Your company has a main office and a branch office that are configured as a single Active Directory forest.
The functional level of the Active Directory forest is Windows Server 2003.
There are four Windows Server 2003 domain controllers in the main office.
You need to ensure that you are able to deploy a read-only domain controller (RODC) at the branch office.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

A.    Raise the functional level of the forest to Windows Server 2008.
B.    Deploy a Windows Server 2008 domain controller at the main office.
C.    Raise the functional level of the domain to Windows Server 2008.
D.    Run the adprep/rodcprep command.

Answer: BD
Explanation:
http://technet.microsoft.com/en-us/library/cc731243%28v=ws.10%29.aspx

QUESTION 149
Your company has an Active Directory forest that contains Windows Server 2008 R2 domain controllers and DNS servers.
All client computers run Windows XP SP3.
You need to use your client computers to edit domainbased GPOs by using the ADMX files that are stored in the ADMX central store.
What should you do?

A.    Add your account to the Domain Admins group.
B.    Upgrade your client computers to Windows 7.
C.    Install .NET Framework 3.0 on your client computers.
D.    Create a folder on PDC emulator for the domain in the PolicyDefinitions path.
Copy the ADMX files to the PolicyDefinitions folder.

Answer: B
Explanation:
http://technet.microsoft.com/en-us/library/cc709647%28v=ws.10%29.aspx

QUESTION 150
Your company has a domain controller that runs Windows Server 2008.
The domain controller has the backup features installed.
You need to perform a non-authoritative restore of the doman controller using an existing backup file.
What should you do?

A.    Restart the domain controller in Directory Services Restore Mode and use wbadmin to
restore critical volume
B.    Restart the domain controller in Directory Services Restore Mode and use the backup snap-in
to restore critical volume
C.    Restart the domain controller in Safe Mode and use wbadmin to restore critical volume
D.    Restart the domain controller in Safe Mode and use the backup snap-in to restore critical
volume

Answer: A
Explanation:
http://technet.microsoft.com/en-us/library/cc816627%28v=ws.10%29.aspx