You have been hired to deploy an Active Directory forest for a new company.
The company has three offices. Each office has two subnets connected by a router. Each office has 1000 employees. The three offices connect to each other using slow WAN links.
Your Active Directory design must minimize Active Directory replication traffic over the WAN links. You also need to ensure that users in each office are authenticated by a domain controller in the local office.
What should you include in your Active Directory design? (Choose two)
A. One Active Directory domain.
B. Three Active Directory domains.
C. Six Active Directory domains.
D. One Active Directory site.
E. Three Active Directory sites.
F. Six Active Directory sites.
You work as a Network Administrator for Testking.com. The network consists of a single Windows Server 2003 R2 Active Directory domain named Testking.com. All servers in the domain run Windows Server 2003 R2.
The company has a main office in London. A domain controller named TK-LonDC1 in the London office runs all the FSMO roles.
A branch office in Madrid is connected to the main office by a reliable WAN link. A server named TK-MadDC1 is configured as a domain controller in the Madrid office.
The company plans to open a branch office in Barcelona. The Barcelona office connects to the Madrid office by a reliable WAN link.
An Active Directory site exists for each of the three offices.
You plan to install a read-only domain controller (RODC) in the Barcelona office.
What would you need to do before you can deploy an RODC in the Barcelona office?
A. Replace TK-LonDC1 with a Windows Server 2012 domain controller.
B. Configure a site link between the Barcelona and London sites.
C. Replace TK-MadDC1 with a Windows Server 2012 domain controller.
D. Enable site link bridging in the Madrid site.
You work as a Network Administrator for Testking.com. The network consists of a single Windows Server 2012 Active Directory Domain Services (AD DS) domain named Testking.com. All servers in the domain run Windows Server 2012.
You are configuring a Windows Server 2012 server named TK-Branch1 for a new branch office. The branch office has a WAN connection to the main office. 20 users work in the branch office and all have Windows 8 client computers.
The branch office has four network print devices. One of the functions of TK-Branch1 will be to host shared printers for the branch office print devices.
You need to ensure that users in the branch office can still print if TK-Branch1 fails or is taken offline for maintenance.
What should you configure?
A. Internet Printing.
B. Client-Side Rendering (CSR).
C. Printer pooling.
D. Branch Office Direct Printing.
You work as a Network Administrator at Testking.com. The network consists of a single Windows Server 2012 Active Directory Domain Services (AD DS) domain named Testking.com. The company has a main office and a branch office. The two offices are connected by a slow WAN link.
All servers run Windows Server 2012 and all client computers run Windows 7 Professional. All servers are located in the main office.
The main office contains a Windows Server 2012 server named TK-File1. TK-File1 runs the File Services role and hosts shared folders for the main office users and the branch office users.
You experience problems with the WAN link due to the excessive bandwidth being used by branch office client computers accessing files on TK-File1.
Which two of the following actions should you perform to minimize the bandwidth used by branch office client computers accessing files on TK-File1? (Choose two).
A. Disable File Sharing on TK-File1.
B. Configure BranchCache on TK-File1.
C. Configure the Distributed File System (DFS) role on TK-File1.
D. Enable BranchCache is hosted cache mode on the branch office client computers.
E. Enable BranchCache is distributed cache mode on the branch office client computers.
You work for a company named Testking.com. Your role of Network Administrator includes the management of the company’s Windows 2012 Active Directory Domain Services (AD DS) domain. All servers in the network run Windows Server 2012.
You want to delegate control of a custom task on several organizational units (OUs) to a user named Mia. However you discover that the custom task that you want to delegate is not listed in the list of tasks.
How can you add the custom task to the list of available tasks to delegate?
A. By adding Mia to the Schema Admins group in the domain.
B. By modifying the Active Directory Schema by adding a new class.
C. By adding an Administrative Template to the Central Policy Definitions Store.
D. By adding the custom task to the Delegwiz.inf file.
You work as a Network Administrator at Testking.com. The network consists of a single Active Directory Domain Services (AD DS) forest. The functional level of the forest is Windows Server 2003.
The forest contains several domains. All domain controllers in the forest run Windows Server 2008 or Windows Server 2008 R2. The functional level of each domain is Windows Server 2008.
You plan to deploy Windows Server 2012 Read Only Domain Controllers (RODCs) in a domain. You run the adprep.exe /rodcprep command on a domain controller but receive the following error message:
“Adprep could not contact a replica for partition DC=DomainDnsZones,DC=Testking,DC=com Adprep failed the operation on partition DC=DomainDnsZones,DC= Testking,DC=com Skipping to next partition.
Adprep could not contact a replica for partition DC=ForestDnsZones,DC= Testking,DC=com
Adprep encountered an LDAP error. Error code: 0x0. Server extended error code: 0x0, Server error message: (null).
Adprep failed the operation on partition DC=ForestDnsZones,DC= Testking,DC=com Skipping to next partition.
Adprep completed with errors. Not all partitions are updated.”
What should you do to resolve the error message?
A. You should raise the forest functional level to Windows Server 2008.
B. You should upgrade the domain controller hosting the Schema Master FSMO role to Windows Server 2012.
C. You should raise the domain functional level of the domain in which you want to deploy the RODC to Windows Server 2008 R2.
D. You should ensure that the domain controller on which you are running the Adprep /rodcprep command can connect to the domain controller hosting the Infrastructure Master FSMO role in each domain.
You work as a Network Administrator at Testking.com. The network consists of a single Windows Server 2012 Active Directory Domain Services (AD DS) domain named Testking.com. The functional level of the Testking.com domain and forest is Windows Server 2012.
You plan to create a second Active Directory forest for development purposes. The development forest will contain several domains. The functional level of the development forest is Windows Server 2003.
You need to configure Active Directory trusts to ensure that the Domain Admins group in the Testking.com domain can manage group policy objects (GPOs) in all the domains in the development forest. The number of trusts should be minimized.
How should you configure the trusts?
A. You should configure a one-way shortcut trust between every development domain and the Testking.com domain.
B. You should configure a one-way external trust between the root domain in the development forest and the Testking.com domain.
C. You should configure a one-way forest trust where the development forest trusts the Testking.com forest.
D. You should configure a one-way forest trust where the Testking.com forest trusts the development forest.
E. You should configure a two-way forest trust.
You work for a company named Testking.com. Your role of Network Administrator includes the management of the company’s Windows 2012 Active Directory Domain Services (AD DS) domain. All servers in the network run Windows Server 2012.
Users in the domain have either portable laptop computers that they can take away from the office or desktop computers that cannot be removed from the network. All client computers have computer accounts located in an organizational unit (OU) named ClientsOU.
You need to enforce stricter security policies on the laptop computers than on the desktop computers.
You configure a group policy object (GPO) with the required security settings for the laptops.
How can you ensure that the GPO is applied only to laptop computers?
A. By applying a WMI filter.
B. By modifying the permissions of the GPO.
C. By configuring loopback processing.
D. By modifying the GPO order of precedence.
You work for a company named Testking.com. Your role of Network Administrator includes the management of the company’s Windows 2012 Active Directory Domain Services (AD DS) domain. All servers in the network run Windows Server 2012.
Users in the domain have portable laptop computers that run Windows 7. Client computers have computer accounts spread across several organizational units (OUs).
Several group policy objects (GPOs) are applied at the domain level. A GPO named AllClientsGPO contains settings that should be applied to the client computers.
The company opens a new Research department. All client computers in the Research department have computer accounts in an OU named ResearchClients.
You configure a GPO named ResearchClientsGPO that has security settings for the client computers in the Research department. You link the GPO to the Research OU.
You need to ensure that only AllClientsGPO and ResearchClientsGPO are applied to the client computers in the Research department. No other GPOs linked at the domain level should apply to the client computers in the Research department.
Which two of the following actions should you perform? (Choose two).
A. Select the Block Inheritance option on the ResearchClients OU.
B. Link ResearchClientsGPO to the domain.
C. Disable the domain-level link for AllClientsGPO and link it to the ResearchClients OU.
D. Enable the Enforced option on ResearchClientsGPO.
E. Enable the Enforced option on AllClientsGPO.
You are deploying an Active Directory network for a company named Testking.com. The company has an Internet accessible website named www.testking.com. The Testking.com domain is hosted by the company’s ISP. The Testking.com DNS zone contains many records for Internet accessible resources.
You need to design an Active Directory infrastructure. You need to plan Active Directory forest and domain names with a DNS infrastructure that enables users to resolve the names of Internet resources that use the Testking.com DNS suffix.
Administrative effort associated with the management of DNS records should be minimized.
How should you configure the Active Directory?
A. You should create a single-domain forest named Testking.com.
B. You should create a single-domain forest named Testking.local.
C. You should create a forest with a root domain named Testking.local and a subdomain named Testking.com.
D. You should create a forest with a root domain named Testking.com and a subdomain named AD.Testking.com.