多选题Your network contains a single Active Directory domain. A domain controller named DC2 fails.     You need to remove DC2 from Active Directory.     Which two actions should you perform（）AAt the command prompt， run dcdiag.exe /fix.BAt the command prompt，

第1题：

Your network contains an internal network and a perimeter network. The internal network contains an Active Directory forest. The forest contains a single domain.  You plan to deploy 10 Edge Transport servers on the perimeter network.  You need to recommend a solution for the Edge Transport server deployment. The solution must meet the following requirements： .Allow administrators to apply a single security policy to all Edge Transport servers .Reduce the administrative overhead that is required to manage servers .Minimize the attack surface of the internal network What should you recommend？（）

• A、Implement Network Policy and Access Services （NPAS）.
• B、Implement Active Directory Federation Services （AD FS）.
• C、Create a new Active Directory domain in the internal forest， and then join all Edge Transport servers to the new domain.
• D、Create an Active Directory forest in the perimeter network， and then join all Edge Transport servers to the new domain.

第2题：

Your network contains a single Active Directory domain. A domain controller named DC2 fails.     You need to remove DC2 from Active Directory.     Which two actions should you perform（）

• A、At the command prompt， run dcdiag.exe /fix.
• B、At the command prompt， run netdom.exe remove dc2.
• C、From Active Directory Sites and Services， delete DC2.
• D、From Active Directory Users and Computers， delete DC2.

第3题：

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2003 Service Pack 2 (SP2). You have an organizational unit (OU) that contains 1,000 computer accounts. You need to move the computer accounts to a new OU. Which tool should you use? （）

• A、Active Directory Domains and Trusts
• B、Active Directory Users and Computers
• C、Csvde.exe
• D、Dsmod.exe

第4题：

Your network contains an internal network and a perimeter network. The internal network contains an Active Directory forest. The forest contains a single domain.  You plan to deploy 10 Edge Transport servers on the perimeter network.  You need to recommend a solution for the Edge Transport server deployment. The solution must meet the following requirements： .Allow administrators to apply a single security policy to all Edge Transport servers .Reduce the administrative overhead that is required to manage servers .Minimize the attack surface of the internal network  What should you recommend？（）

• A、Implement Network Policy and Access Services （NPAS）.
• B、Implement Active Directory Federation Services （AD FS）.
• C、Create a new Active Directory domain in the internal forest， and then join all EdgeTransport servers to the new domain.
• D、Create an Active Directory forest in the perimeter network， and then join all Edge Transport servers to the new domain.

第5题：

Your network contains a single Active Directory domain. The functional level of the forest is  Windows Server 2008. The functional level of the domain is Windows Server 2008 R2. All DNS servers run Windows Server 2008. All domain controllers run Windows Server 2008 R2. You need to ensure that you can enable the Active Directory Recycle Bin. What should you do（）

• A、Change the functional level of the forest.
• B、Change the functional level of the domain.
• C、Modify the Active Directory schema.
• D、Modify the Universal Group Membership Caching settings.

第6题：

Your network consists of a single Active Directory domain. The domain contains 10 domain controllers. The domain controllers run Windows Server 2008 and are configured as DNS servers. You plan to create a new Active Directory-integrated zone. You need to ensure that the new zone is only replicated to four of your domain controllers. What should you do first（）

• A、Create a new delegation in the ForestDnsZones application directory partition.
• B、Create a new delegation in the DomainDnsZones application directory partition.
• C、From the command prompt， run dnscmd and specify the /enlistdirectorypartition parameter.
• D、From the command prompt， run dnscmd and specify the /createdirectorypartition parameter.

第7题：

Your network contains a single Active Directory domain. The functional level of the forest is Windows  Server 2008 R2.   You need to enable the Active Directory Recycle Bin.   What should you use（）

• A、the Dsmod tool
• B、the Enable-ADOptionalFeature cmdlet
• C、the Ntdsutil tool
• D、the Set-ADDomainMode cmdlet

第8题：

Your network contains an Active Directory forest. The forest contains a single domain. You want  to access resources in a domain that is located in another forest.     You need to configure a trust between the domain in your forest and the domain in the other  forest.     What should you create（）

• A、an incoming external trust
• B、an incoming realm trust
• C、an outgoing external trust
• D、an outgoing realm trust

第9题：

Your network contains a single Active Directory domain.   You need to create an Active Directory Domain Services snapshot. What should you do（）

• A、Use the Ldp tool.
• B、Use the NTDSUtil tool.
• C、Use the Wbadmin tool.
• D、From Windows Server Backup， perform a full backup.

第10题：