Information Technology Reference
In-Depth Information
Correct answer:
B
2.
Incorrect
. This command has the source domain controller in the Identity
parameter; it should be the target. And it is moving the Infrastructure Master role,
which is a domain-wide role.
A.
Correct
. This command moves the two forest-wide roles to server trey-dc-04.
B.
Incorrect
. This command has the source domain controller in the Identity
parameter, it should be the target.
C.
Incorrect
. This command has the correct target domain controller, but is moving
the Infrastructure master role, which is a domain-wide role, not a forest-wide role.
D.
Correct answer:
C
3.
Incorrect
. This command doesn't exist.
A.
Incorrect
. This command is used to do an online install of a domain controller,
including an RODC controller. It is not used with a staged RODC.
B.
Correct
. This is the correct command to create a new staging account for
an RODC.
C.
Incorrect
. This command doesn't exist.
D.
Objective 5.3: thought experiment
The full server backup of a domain controller can be restored as a non-authoritative
restore when it doesn't hold the operations master roles. You can do a full, bare-metal
restore of the server and let normal replication complete the restoration by updating
any Active Directory objects that have changed since the backup was made. If the
server holds operations master roles, especially if you have had to seize the roles since
the backup was made, you should rebuild the server from scratch and promote it to a
domain controller again. You should never try to restore a server that has had the roles
seized.
1.
The easiest solution is an authoritative restore of the domain controller, in which you
restore the subtree of Active Directory that was deleted. Alternately, restoring from the
Active Directory Recycle Bin is a good alternative if it is enabled.
2.
For individual objects, using the Active Directory Recycle Bin is the easiest solution if
you've enabled it in your environment. If you haven't enabled the Recycle Bin, you can
use Ldp.exe or the ADObject cmdlets. Use Get-Help ADObject to get a list of the avail-
able ADObject cmdlets.
3.
