单项选择题
A.Create a Paasword Settings object （PSO）.
B.Modify the Partial-Attribute-Set attribute of the forest.
C.Add the users accounts of the remote site users to the Allowed RODC Password Replication Group.
D.Add the users accounts of users who are not in the remote site to the Denied RODC Password Replication Group.
多项选择题 Active Directory Rights Management Services （AD RMS） is deployed on your network. You need to configure AD RMS to use Kerberos authentication. Which two actions should you perform（）
单项选择题 Your network contains a single Active Directory domain named contoso.com. An administrator accidentally deletes the _msdsc.contoso.com zone. You recreate the _msdsc.contoso.com zone. You need to ensure that the _msdsc.contoso.com zone contains all of the required DNS records. What should you do on each domain controller（）
单项选择题 Your network contains an Active Directory forest. The forest contains two domain controllers. The domain controllers are configured as shown in the following table. All client computers run Windows 7. You need to ensure that all client computers in the domain keep the same time as an external time server. What should you do（）