Your network contains an Active Directory forest named contoso.com. The forest contains four computers. The computers are configured as shown in the following table.

An administrator creates a script that contains the following commands:

You need to identity which computers can successfully run all of the commands in the script.
Which two computers should you identify? (Each correct answer presents part of the solution. Choose two.)

• A. Computer2
• B. Server1
• C. Computer1
• D. Server2

A company has an Active Directory forest. You plan to install an offline Enterprise root certification authority (CA) on a server named CA1. CA1 is a member of the PerimeterNetwork workgroup and is attached to a hardware security module for private key storage.
You attempt to add the Active Directory Certificate Services (AD CS) server role to CA1. The Enterprise CA option is not available.
You need to install the AD CS server role as an Enterprise CA on CA1.
What should you do first?

• A. Add the Active Directory Lightweight Directory Services (AD LDS) server role to CA1.
• B. Join CA1 to the domain.
• C. Add the Web Server (IIS) server role and the AD CS server role to CA1.
• D. Add the DNS Server server role to CA1.

HOTSPOT
Your network contains an Active Directory domain named contoso.com.
You create two global groups named Group1 and Group2. The group membership of each group is shown in the following table.

You create the Password Settings objects (PSOs) shown in the following table.

In the table below, identify which PSOs will apply to User1 and User2. Make only one selection in each column.

You have an Active Directory domain named contoso.com.
You have a domain controller named Server1 that is configured as a DNS server.
Server1 hosts a standard primary zone for contoso.com. The Zone Aging/Scavenging
Properties of the contoso.com zone are shown in the exhibit. (Click the Exhibit button.)

You discover that stale resource records are not automatically removed from the contoso.com zone.
You need to ensure that the stale resource records are automatically removed from the contoso.com zone.
What should you do?

• A. Convert the contoso.com zone to an Active Directory-integrated zone.
• B. Modify the Server Aging/Scavenging properties.
• C. Configure the aging properties for the contoso.com zone.
• D. set the scavenging period of Server1 to 0 days.

Your company has a main office and a branch office. The branch office has an Active Directory site that contains a read-only domain controller (RODC).
A user from the branch office reports that his account is locked out.
From a writable domain controller in the main office, you discover that the user's account is
not locked out. You need to ensure that the user can log on to the domain.
What should you do?

• A. Run the Knowledge Consistency Checker (KCC) on the ROD
• B. Modify the Password Replication Policy.
• C. Restore network communication between the branch office and the main office.
• D. Reset the password of the user account.