FSMO

You have an Active Directory Domain Services (AD DS) domain that contains 10 domain controllers.

You cannot create domain user accounts. You confirm that you can create organizational units and modify the Default Domain Policy Group Policy object in the domain.

You need to ensure that you can create new user accounts.

Which FSMO role holder server should you review?

You have an Active Directory Domain Services (AD DS) forest that contains two domains named amer.contoso.com and apac.contoso.com. Apac.contoso.com contains a domain local group named Group1. Group1 contains users in amer.contoso.com.

From Active Directory Users and Computers, you review the group membership of Group1 and notice that the entries for the group members are listed as security identifiers (SIDs).

You verify that the trust relationship between the two domains is fully operational.

Your network contains a two-domain on-premises Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains the domain controllers shown in the following table.

All domain controllers are backed up by using Azure Backup.
You create an Active Directory site named Site3. Site1, Site2, and Site3 each has a dedicated site link to the Hub site.

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the domain controllers shown in the following table.

You need to ensure that if an attacker compromises the computer account of RODC1, the attacker cannot view the Employee-Number AD DS attribute.

Which partition should you modify?

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains the domain controllers shown in the following table.



You need to configure DC3 to be the authoritative time server for the domain.

Which operations master role should you transfer to DC3, and which console should you use? To answer, select the appropriate options in the answer area.

You need to ensure that DC2 is the schema master for contoso.com.

To complete this task, sign in the required computer or computers.

A failure of which domain controller will prevent you from creating application partitions?