From the configuration directory partition of the forest， modify the tombstone lifetime.
From the configuration directory partition of the forest， modify the garbage collection interval.
From the aging properties of the zone， modify the no-refresh interval and the refresh interval.
From the start of authority （SOA） record of the zone， modify the refresh interval and the expire interval.
第1题：
Your network contains a domain controller that has two network connections named Internal and Private. Internal has an IP address of 192.168.0.20. Private has an IP address of 10.10.10.5. You need to prevent the domain controller from registering Host (A) records for the 10.10.10.5 IP address. What should you do（）
第2题：
Your company has a main office and a branch office. The network contains an Active Directory domain. The main office contains a writable domain controller named DC1. The branch office contains a read-only domain controller （RODC） named DC2. You discover that the password of an administrator named Admin1 is cached on DC2. You need to prevent Admin1s password from being cached on DC2. What should you do（）
第3题：
Your network consists of an Active Directory forest that contains two domains. All servers run Windows Server 2008 R2. All domain controllers are configured as DNS servers. You have a standard primary zone for dev.contoso.com that is stored on a member server. You need to ensure that all domain controllers can resolve names from the dev.contoso.com zone. What should you do（）
第4题：
Your network consists of an Active Directory forest that contains two domains. All servers run WindowsServer 2008. All domain controllers are configured as DNS Servers. You have a standard primary zone for dev.contoso.com that is stored on a member server. You need to ensure that all domain controllers can resolve names from the dev.contoso.com zone. What should you do（）
第5题：
Your network consists of a single Active Directory forest that contains two domains named contoso.com and litwareinc.com. All domain controllers for contoso.com are in an office located in Singapore. All domain controllers for litwareinc.com are in an office located in Los Angeles. There is a single 128-Kbps WAN link between the two offices.All domain controllers run Windows Server 2003 Service Pack 2 （SP2） and are configured as DNS servers. Each domain controller contains a standard DNS zone for its respective domain.You need to ensure that users in the Singapore office can resolve IP addresses for servers in the Los Angeles office. The solution must minimize replication traffic over the WAN link. What should you do？（）
第6题：
Your network contains an Active Directory domain that contains five domain controllers. You have a management computer that runs Windows 7. From the Windows 7 computer， you need to view all account logon failures that occur in the domain. The information must be consolidated on one list. Which command should you run on each domain controller（）
第7题：
You are the network administrator for Your network consists of a single Active Directory domain named All domain controllers run Windows Server 2003. TestKing consists of a main office and two branch offices. The company expands to an additional branch office. This branch office has very little available network bandwidth. You need to install a new domain controller named DC9 at the new branch office. Your installation must minimize costs and network traffic. What should you do?（）
第8题：
Your network contains an Active Directory domain. The domain contains three domain controllers. One of the domain controllers fails. Seven days later， the help desk reports that it can no longer create user accounts. You need to ensure that the help desk can create new user accounts. Which operations master role should you seize（）
第9题：
Your company has an Active Directory forest. Not all domain controllers in the forest are configured as Global Catalog Servers. Your domain structure contains one root domain and one child domain. You modify the folder permissions on a file server that is in the child domain. You discover that some Access Control entries start with S-1-5-21 and that no account name is listed. You need to list the account names. What should you do？（）
第10题：
On the member server， create a stub zone.
On the member server， create a NS record for each domain controller.
On one domain controller， create a conditional forwarder. Configure the conditional forwarder to replicate to all DNS
On one domain controller， create conditionals forwarder. Configure the conditional forwarder to replicate to all DNS