Your company has a main office. The main office is configured as an Active Directory site. The network
consists of one Active Directory domain.
All domain controllers run Windows Server 2008.
All DNS zones are Active Directory-integrated. Administrators frequently join new client computers to the
domain.
You plan to deploy a new site in a new branch office. The new branch office is connected to the main office
by using a single wide area network (WAN) link.
You need to enable branch office administrators to successfully join computers to the domain if a WAN link fails. The solution must provide the highest level of security for the domain controllers.
What should you do?

• A. Deploy a read-only domain controller (RODC) in the new site. Configure a stub zone in the main site.
• B. Deploy a writable domain controller in the branch office site.
• C. Deploy an additional writable domain controller in the main site.
• D. Deploy a read-only domain controller (RODC) in the new site. Configure a primary read-only zone in the branch office site.

You are evaluating implementing a solution for the internal auditors.
You need to recommend a solution to delegate the appropriate rights to the auditors.
What should you include in the recommendation?

• A. Restricted Groups.
• B. Selective authentication.
• C. Access-Based Enumeration (ABE).
• D. Active Directory delegation.

You work as an IT professional in an international company which is named Contoso. Your major job is to translate business goals into technology decisions and plan mid-range to long-term strategies. And you are experienced in network infrastructure, security policy and business continuity. In your company, you are responsible for infrastructure design and global configuration changes.
Two servers named Server1 and Server2 are contained by the network.
Server1 is a reverse proxy. Windows Server 2008 is run by Server2.
And the Web server (IIS) server role installed in Server2. A secure Web site is hosted by Server2.
You want users to utilize the https://www.contoso.com URL to connect to Server2.
Since you are the technical support, you are required to have the environment for the deployment of server
certificates prepared to satisfy the following requirements.
-First, users connecting from the local network must only connect directly to Server2.
-Second, users must be able to get access to the Web site on Server2 when they are connected to the Internet or the internal network.
Which action should be performed to achieve the goal?

• A. A server certificate for the name Server1.Contoso.com should be installed on Server1. And then, a server certificate for the name www.Contoso.com should be installed on Server2.
• B. A server certificate for the name www.contoso.com should be installed on Server1 and Server2.
• C. A server certificate for the name Server1.Contoso.com should be installed on Server1 and Server2.
• D. A server certificate for the name www.contoso.com should be installed on Server1. And then, a server certificate for the name Server2.Contoso.com should be installed on Server2.

Your network consists of one Active Directory domain.
You have a single site. You deploy a new Active Directory-integrated application on a server that runs
Windows Server 2008.
The application sends a large number of LDAP queries to the domain controllers.
You plan to install a new domain controller to respond to the LDAP queries.
You need to reduce the number of authentication requests client computers send to the new domain controller.
What should you do?

• A. Create a new organizational unit (OU). Move the application server and the new domain controller to the new OU.
• B. Create a new site and disable the Bridge all site links option.
• C. Create a new site. Move the application server and the new domain controller to the new site.
• D. Create two new sites. Move the application server to one site and the new domain controller to another site. Create a new site link that connects the two sites.

Your network consists of one Active Directory domain that contains domain controllers that run Windows
Server 2008.
The relative identifier (RID) operations master role for the domain fails and cannot be restored.
You need to restore the RID master role on the network.
What should you do?

• A. Force replication between all domain controllers, and then run the Server Manager.
• B. Run netdom query /d:contoso.com fsmo.
• C. Force replication between all domain controllers, and then run the File Server Resource Manager (FSRM).
• D. From another domain controller, seize the RID operations master role.