Your company has a main office and a branch office. The network contains an Active Directory  domain.  
The main office contains a writable domain controller named DC1. The branch office contains a  read- only domain controller （RODC） named DC2.  
You discover that the password of an administrator named Admin1 is cached on DC2.    
You need to prevent Admin1’s password from being cached on DC2.    
What should you do（）

单项选择题Your network contains an Active Directory domain. The domain contains two sites named Site1  and Site2. Site1 contains four domain controllers. Site2 contains a read-only domain controller  （RODC）. You add a user named User1 to the Allowed RODC Password Replication Group. The  WAN link between Site1 and Site2 fails.     User1 restarts his computer and reports that he is unable to log on to the domain. The WAN link  is restored and User1 reports that he is able to log on to the domain. You need to prevent the  problem from reoccurring if the WAN link fails.     What should you do（）

A.Create a Password Settings object （PSO） and link the PSO to User1’s user account.
B.Create a Password Settings object （PSO） and link the PSO to the Domain Users group.
C.Add the computer account of the RODC to the Allowed RODC Password Replication Group.
D.Add the computer account of User1’s computer to the Allowed RODC Password Replication Group.

单项选择题You install a read-only domain controller （RODC） named RODC1. You need to ensure that a user  named User1 can administer RODC1. The solution must minimize the number of permissions  assigned to User1.     Which tool should you use（）

A.Active Directory Administrative Center
B.Active Directory Users and Computers
C.Dsadd
D.Dsmgmt

单项选择题Your company has a main office and a branch office. The branch office contains a read-only  domain controller named RODC1.     You need to ensure that a user named Admin1 can install updates on RODC1. The solution must  prevent Admin1 from logging on to other domain controllers.     What should you do（）

A.Run ntdsutil.exe and use the Roles option.
B.Run dsmgmt.exe and use the Local Roles option.
C.From Active Directory Sites and Services， modify the NTDS Site Settings.
D.From Active Directory Users and Computers， add the user to the Server Operators group.

单项选择题Your network contains an Active Directory Rights Management Services （AD RMS） cluster. You  have several custom policy templates. The custom policy templates are updated frequently.     Some users report that it takes as many as 30 days to receive the updated policy templates. You  need to ensure that users receive the updated custom policy templates within seven days.     What should you do（）

A.Modify the registry on the AD RMS servers.
B.Modify the registry on the users’ computers.
C.Change the schedule of the AD RMS Rights Policy Template Management （Manual） scheduled task.
D.Change the schedule of the AD RMS Rights Policy Template Management （Automated） scheduled task.

单项选择题Your network contains a server named Server1. The Active Directory Rights Management  Services （AD RMS） server role is installed on Server1.   An administrator changes the password of the user account that is used by AD RMS.     You need to update AD RMS to use the new password.     Which console should you use（）

A.Active Directory Rights Management Services
B.Active Directory Users and Computers
C.Component Services
D.Services