16. Your company has a single Active Directory domain. All domain controllers run Windows Server 2003.
You install Windows Server 2008 on a server.
You need to add the new server as a domain controller in your domain.
What should you do first?
A. On the new server, run dcpromo /adv.
B. On the new server, run dcpromo /createdcaccount.
C. On a domain controller run adprep /rodcprep.
D. On a domain controller, run adprep /forestprep.
Answer: D
17. Your company, Contoso, Ltd., has offices in North America and EuropE. Contoso has an Active Directory
forest that has three domains.
You need to reduce the time required to authenticate users from the labs.eu.contoso.com domain when they access
resources in the eng.na.contoso.com domain.
What should you do?
A. Decrease the replication interval for all Connection objects.
B. Decrease the replication interval for the DEFAULTIPSITELINK site link.
C. Set up a one-way shortcut trust from eng.na.contoso.com to labs.eu.contoso.com.
D. Set up a one-way shortcut trust from labs.eu.contoso.com to eng.na.contoso.com.
Answer: C
18. Your company has two Active Directory forests named contoso.com and fabrikam.com. Both forests run only
domain controllers that run Windows Server 2008.
The domain functional level of contoso.com is Windows Server 2008. The domain functional level of
fabrikam.com is Windows Server 2003 Native mode.
You configure an external trust between contoso.com and fabrikam.com.
You need to enable the Kerberos AES encryption option.
What should you do?
A. Create a new forest trust and enable forest-wide authentication.
B. Raise the forest functional level of contoso.com to Windows Server 2008.
C. Raise the forest functional level of fabrikam.com to Windows Server 2008.
D. Raise the domain functional level of fabrikam.com to Windows Server 2008.
Answer: D
19. Contoso, Ltd. has an Active Directory domain named ad.contoso.com. Fabrikam, Inc. has an Active Directory
domain named intranet.fabrikam.com.
Fabrikam s security policy prohibits the transfer of internal DNS zone data outside the Fabrikam network.
You need to ensure that the Contoso users are able to resolve names from the intranet.fabrikam.com domain.
What should you do?
A. Create a new stub zone for the intranet.fabrikam.com domain.
B. Configure conditional forwarding for the intranet.fabrikam.com domain.
C. Create a standard secondary zone for the intranet.fabrikam.com domain.
D. Create an Active Directory integrated zone for the intranet.fabrikam.com domain.
Answer: B
20. Your company has an Active Directory domain named ad.contoso.com. The domain has two domain
controllers named DC1 and DC2. Both domain controllers have the DNS Server server role installed.
You install a new DNS server named DNS1.contoso.com on the perimeter network. You configure DC1 to
forward all unresolved name requests to DNS1.contoso.com.
You discover that the DNS forwarding option is unavailable on DC2.
You need to configure DNS forwarding on the DC2 server to point to the DNS1.contoso.com server.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. Clear the DNS cache on DC2.
B. Delete the Root zone on DC2.
C. Configure conditional forwarding on DC2.
D. Configure the Listen On address on DC2.
Answer: B AND C