Your company has two domain controllers that are configured 

第1题：

Your network contains an Active Directory domain that has two sites.    You need to identify whether logon scripts are replicated to all domain controllers.   Which folder should you verify（）

• A、GroupPolicy
• B、NTDS
• C、SoftwareDistribution
• D、SYSVOL

第2题：

Your company， A. Datum Corporation， has a single Active Directory domain named intranet.adatum.com. The  domain has two domain controllers that run Windows Server 2008 R2 operating system. The  domain controllers also run DNS servers.   The intranet.adatum.com DNS zone is configured as an Active Directory-integrated zone with the  Dynamic updates setting configured to Secure only. A new corporate security policy requires that  the intranet.adatum.com DNS zone must be updated only by domain controllers or member  servers.   You need to configure the intranet.adatum.com zone to meet the new security policy requirement.     Which two actions should you perform（）

• A、Remove the Authenticated Users account from the Security tab of the intranet.adatum.com DNS zone properties.
• B、Assign the SELF Account Deny on Write permission on the Security tab of the intranet.adatum.com DNS zone prop
• C、Assign the server computer accounts the Allow on Write All Properties permission on the Security tab of the intrane
• D、Assign the server computer accounts the Allow on Create All Child Objects permission on the Security tab of the int

第3题：

第4题：

第5题：

Your company has a main office and three branch offices. The company has an Active Directory forest that has a single domain. Each office has one domain controller. Each office is configured as an Active Directory site. All sites are connected with the DEFAULTIPSITELINK object. You need to decrease the replication latency between the domain controllers. What should you do（）

• A、Decrease the cost between the connection objects.
• B、Decrease the replication interval for all connection objects.
• C、Decrease the replication interval for the DEFAUL TIPSITELINK object.
• D、Decrease the replication schedule for the DEFAUL TIPSITELINK object.

第6题：

Your company has an Active Directory forest that contains only Windows Server 2008 domain  controllers.   You need to prepare the Active Directory domain to install Windows Server 2008 R2 domain controllers.   Which two tasks should you perform（）

• A、Run the adprep /forestprep command.
• B、Run the adprep /domainprep command.
• C、Raise the forest functional level to Windows Server 2008.
• D、Raise the domain functional level to Windows Server 2008.

第7题：

Your company has a main office and a branch office. The company has a single-domain Active Directory forest. The main office has two domain controllers named DC1 and DC2 that run Windows Server 2008. The branch office has a Windows Server 2008 read-only domain controller （RODC） named DC3. All domain controllers hold the DNS Server role and are configured as Active Directory-integrated zones. The DNS zones only allow secure updates. You need to enable dynamic DNS updates on DC3. What should you do（）

• A、Run the Ntdsutil.exe > DS Behavior commands on DC3.
• B、Run the Dnscmd.exe /ZoneResetType command on DC3.
• C、Reinstall Active Directory Domain Services on DC3 as a writable domain controller.
• D、Create a custom application directory partition on DC1. Configure the partition to store Active Directory- integrated zones.

第8题：

Your company has an Active Directory domain. The company has a main office and a branch office. Both the offices have domain controllers that run Active Directory-integrated DNS zones. All client computers are configured to use the local domain controllers for DNS resolution. The domain controllers at the branch office location are configured as Read-Only Domain Controllers （RODC）. You change the IP address of an exisiting server named SRV2 in the main office. You need the branch office DNS servers to reflect the change immediately. What should you do？（） 

• A、 Run the dnscmd /ZoneUpdateFromDs command on the branch office servers.
• B、 Run the dnscmd /ZoneUpdateFromDs command on a domain controller in the main office.
• C、 Change the domain controllers at the branch offices from RODCs to standard domain controllers.
• D、 Decrease the Minimum （default） TTL option to 15 minutes on the Start of Authority （SOA） record for thezone.

第9题：

第10题：