QUESTION 281
Your network contains a single Active Directory domain that has two sites named Site1 and Site2. Site1 has two domain controllers named DC1 and DC2.
Site2 has two domain controllers named DC3 and DC4.
DC3 fails.
You discover that replication no longer occurs between the sites.
You verify the connectivity between DC4 and the domain controllers in Site1.
On DC4, you run repadmin.exe /kcc.
Replication between the sites continues to fail.
You need to ensure that Active Directory data replicates between the sites.
What should you do?

A.    From Active Directory Sites and Services, configure the NTDS Site Settings of Site2.
B.    From Active Directory Sites and Services, configure DC3 so it is not a preferred bridgehead
server.
C.    From Active Directory Users and Computers, configure the NTDS settings of DC4.
D.    From Active Directory Users and Computers, configure the location settings of DC4.

Answer: B

QUESTION 282
Your network contains an Active Directory domain named contoso.com.
All domain controllers were upgraded from Windows Server 2003 to Windows Server 2008 R2 Service Pack 1 (SP1).
The functional level of the domain is Windows Server 2003.
You need to configure SYSVOL to use DFS Replication.
Which tools should you use? (Each correct answer presents part of the solution. Choose two.)

A.    Dfsrmig
B.    Frsdiag
C.    Ntdsutil
D.    Set-ADForest
E.    Repadmin
F.    Set-ADDomainMode
G.    DFS Management

Answer: AF

QUESTION 283
Drag and Drop Question
You manage an Active Directory forest named contoso.com.
The forest contains an empty root domain named contoso.com and a child domain named child.contoso.com.
All domain controllers run Windows Server 2008.
The functional level of the forest is Windows Server 2008.
You need to raise the functional level of the forest to Windows Server 2008 R2.
You must achieve this goal by using the minimum amount of administrative effort.
What should you do? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
 
Answer:
 

QUESTION 284
Your network contains an Active Directory forest.
The forest contains one domain named contoso.com.
You attempt to run adprep /domainprep and the operation fails.
You discover that the first domain controller deployed to the forest failed.
You need to run adprep /domainprep successfully.
What should you do?

A.    Move the domain naming master role.
B.    Install a read-only domain controller (RODC).
C.    Move the PDC emulator role.
D.    Move the RID master role.
E.    Move the infrastructure master role.
F.    Deploy an additional global catalog server.
G.    Move the bridgehead server.
H.    Move the schema master role.
I.    Restart the Active Directory Domain Services (AD DS) service.
J.    Move the global catalog server.

Answer: E

QUESTION 285
Your network contains an Active Directory forest.
The forest contains one domain named contoso.com.
You discover the following event in the Event log of client computers:
"The time provider NtpClient was unable to find a domain controller to use as a time source. NtpClient will try again in %1 minutes."
You need to ensure that the client computers can synchronize their clocks properly.
What should you do?

A.    Move the domain naming master role.
B.    Restart Active Directory Domain Services (AD DS) service.
C.    Move the PDC emulator role.
D.    Move the infrastructure master role.
E.    Move the global catalog server.
F.    Move the RID master role.
G.    Move the bridgehead server.
H.    Move the schema master role.
I.    Deploy an additional global catalog server.
J.    Install a read-only domain controller (RODC).

Answer: C

QUESTION 286
Your network contains an Active Directory forest named contoso.com.
The functional level of the forest is Windows Server 2008 R2.
The DNS zone for contoso.com is Active Directory-integrated.
You deploy a read-only domain controller (RODC) named RODC1.
You install the DNS Server server role on RODC1.
You discover that RODC1 does not have any application directory partitions.
You need to ensure that RODC1 has a copy of the DNS application directory partition of contoso.com.
What should you do?

A.    From DNS Manager, create secondary zones.
B.    Run Dnscmd.exe, and specify the /enlistdirectorypartition parameter.
C.    From DNS Manager, right-click RODC1 and click Update Server Data Files.
D.    Run Dnscmd.exe and specify the /createbuiltindirectorypartitions parameter.

Answer: B
Explanation:
http://technet.microsoft.com/en-us/library/cc742490.aspx

QUESTION 287
Your network contains an Active Directory forest named contoso.com.
You need to identify whether a fine-grained password policy is applied to a specific group.
Which tool should you use?

A.    Credential Manager
B.    Group Policy Management Editor
C.    Active Directory Users and Computers
D.    Active Directory Sites and Services

Answer: C

QUESTION 288
Your network contains an Active Directory domain named contoso.com.
You need to create one password policy for administrators and another password policy for all other users.
Which tool should you use?

A.    Group Policy Management Editor
B.    Group Policy Management Console (GPMC)
C.    Authorization Manager
D.    Ldifde

Answer: D
Explanation:
http://technet.microsoft.com/en-US/library/cc754461.aspx

QUESTION 289
Hotspot Question
Your network contains two Active Directory forests named contoso.com and fabrikam.com.
Each forest contains one domain. A two-way forest trust exists between the forests.
You plan to add users from fabrikam.com to groups in contoso.com.
You need to identify which group you must use to assign users in fabrikam.com access to the shared folders in contoso.com.
To which group should you add the users? To answer, select the appropriate group in the answer area.
 
Answer:
 
Explanation:
http://technet.microsoft.com/en-us/library/cc772808.aspx

QUESTION 290
Your network contains an Active Directory domain.
The domain contains 5,000 user accounts.
You need to disable all of the user accounts that have a description of Temp.
You must achieve this goal by using the minimum amount of administrative effort.
Which tools should you use? (Each correct answer presents part of the solution. Choose two.)

A.    Find
B.    Dsget
C.    Dsmod
D.    Dsadd
E.    Net accounts
F.    Dsquery

Answer: CF