You need to recommend a solution to ensure that all branch office users can log on by using their smart cards after the RODCs are deployed.
What should you recommend?

• A. Deploy an issuing CA in each branch office.
• B. Modify the certificate templates.
• C. Enable password cashing for each branch office user.
• D. Modify the RODC filtered attribute set.

Your network consists of one Active directory domain. The functional level of the domain is Windows Server 2008 R2. You have one organizational unit (OU) named AllUsers that contains all user accounts for the domain.
Your company has two departments named Sales and Engineering. Each department has a department manager. Each department has a global security group that contains all department users.
You need to prepare the environment to manage all user accounts.
The solution must meet the following requirements:
-Sales department users must be required to reset their passwords every 30 days.
-Department managers must administer only users in their respective departments.
-Engineering department users must be required to reset their passwords every 45 days.
The solution must be achieved by using the minimum amount of administrative effort.
What should you do?

• A. Create a new OU for each department. Delegate administration to the department manager of each new OU. Create a new Group Policy object. Configure the password policy for the new GPO and link it to the OUs.
• B. Delegate administration of the AllUsers OU to the department manager of each department. Modify the password policy for the domain.
• C. Create a new OU for each department. Delegate administration to the department manager of each OU. Create a new password policy for each global security group.
• D. Create a child domain for each department. Delegate administration to the department manager of each domain. Create a new password policy for each domain.

Your company has a main office and 10 branch offices.
The network consists of one Active Directory domain. All domain controllers run Windows Server 2008 and are located in the main office.
You need to plan the deployment of one Windows Server 2008 domain controller in each branch office. The solution must meet the following requirements:
Branch office domain controllers must be able to log users on to the domain.
Branch office domain controllers must be able to store the passwords of only some domain users.
Users must be able to download Group Policy objects (GPOs) from the branch office domain controllers.
What should your plan include?

• A. Install Active Directory Domain Services (AD DS). Select the read-only domain controller (RODC) option during installation.
• B. Install Active Directory Lightweight Directory Services (AD LDS).
• C. Install Active Directory Domain Services (AD DS). Create a new Password Settings object (PSO). Link the PSO to user objects in the respective branch office.
• D. Install Active Directory Domain Services (AD DS) on a Server Core installation of Windows Server 2008.

All servers in an Active Directory Domain Services (AD DS) domain run Windows Server 2008 R2. All Remote Desktop Services (RDS) servers are in an organizational unit (OU) named RDS Servers. All computer security policy settings are configured in a Group Policy object (GPO) named Security Policy. The Security Policy GPO is linked to the domain.
A new GPO named RDS Security is linked to the RDS Servers OU.
You need to ensure that domain-linked GPOs are not applied to the RDS Servers OU.
What should you recommend? (More than one answer choice may achieve the goal. Select the BEST answer.)

• A. Link the Security Policy GPO to the RDS Servers OU.
• B. Configure the RDS Servers OU to block inheritance.
• C. Enable loopback processing in the RDS GPO.
• D. Configure the Security Policy GPO to be enforced.
• E. Configure the domain to block inheritance.