AD DS

Your network contains two Active Directory Domain Services (AD DS) forests named contoso.com and fabrikam.com.

Contoso.com contains a server named Server1. Fabrikam.com contains a user named User1.

You configure a one-way trust relationship in which contoso.com trusts fabrikam.com and set authentication mode to selective.

You need to ensure that User1 can authenticate to Server1. The solution must follow the principle of the least privilege.

What should you do?

The on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains two sites named Site1 and Site2. Site1 contains two domain controllers.

You need to deploy a domain controller to Site2. The solution must meet the following requirements:

• Minimize administrative effort.
• Maximize security.

What should you deploy to Site2?

You have an Active Directory Domain Services (AD DS) domain that contains 10 domain controllers.

You cannot create domain user accounts. You confirm that you can create organizational units and modify the Default Domain Policy Group Policy object in the domain.

You need to ensure that you can create new user accounts.

Which FSMO role holder server should you review?

Your company has a single-domain Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains one domain controller named DC1 in the main office.

You plan to deploy a second writeable domain controller named DC2 to a branch office.

You need to configure a deployment option that will minimize initial network bandwidth usage between the main office and the branch office.

Which option should you modify during the deployment of DC2?

You have an Active Directory Domain Services (AD DS) forest that contains two domains named amer.contoso.com and apac.contoso.com. Apac.contoso.com contains a domain local group named Group1. Group1 contains users in amer.contoso.com.

From Active Directory Users and Computers, you review the group membership of Group1 and notice that the entries for the group members are listed as security identifiers (SIDs).

You verify that the trust relationship between the two domains is fully operational.

You need to meet the technical requirements for Server3.

Which users can perform the required tasks?

Which groups can you add to Group3 and Group5? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
 

Overview
Contoso, Ltd. is a company that has a main office in Seattle and two branch offices in Los Angeles and Montreal.
Existing Environment
AD DS Environment
The network contains an on premises Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains two domains named contoso.com and canada.contoso.com.
The forest contains the domain controllers shown in the following table.

Overview
Contoso, Ltd. is a company that has a main office in Seattle and two branch offices in Los Angeles and Montreal.
Existing Environment
AD DS Environment
The network contains an on premises Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains two domains named contoso.com and canada.contoso.com.
The forest contains the domain controllers shown in the following table.

You need to meet the technical requirements for Server1.
Which users can currently perform the required tasks?