Your company has an Active Directory domain. All consultants belong to a global group named TempWorkers.
The TempWorkers group is not nested in any other groups.
You move the computer objects of three file servers to a new organizational unit named SecureServers. These file servers contain only confidential data in shared folders.
You need to prevent members of the TempWorkers group from accessing the confidential data on the file servers.
You must achieve this goal without affecting access to other domain resources.
What should you do?

• A. Create a new GPO and link it to the domain. Assign the Deny log on locally user right to the TempWorkers global group.
• B. Create a new GPO and link it to the SecureServers organizational unit. Assign the Deny log on locally user right to the TempWorkers global group.
• C. Create a new GPO and link it to the SecureServers organizational unit. Assign the Deny access to this computer from the network user right to the TempWorkers global group.
• D. Create a new GPO and link it to the domain. Assign the Deny access to this computer from the network user right to the TempWorkers global group.

You have a client computer named Computer1 that runs Windows 7.
On Computer1, you configure a source-initiated subscription.
You configure the subscription to retrieve all events from the Windows logs of a domain controller named DC1.
The subscription is configured to use the HTTP protocol.
You discover that events from the Security log of DC1 are not collected on Computer1. Events from the
Application log of DC1 and the System log of DC1 are collected on Computer1.
You need to ensure that events from the Security log of DC1 are collected on Computer1.
What should you do?

• A. Add the computer account of Computer1 to the Event Log Readers group on the domain controller.
• B. Configure the subscription to use custom Event Delivery Optimization settings.
• C. Configure the subscription to use the HTTPS protocol.
• D. Add the Network Service security principal to the Event Log Readers group on the domain.

Your network contains an Active Directory domain named fabrikam.com. The domain has one Active Directory site.
The domain contains an organizational unit (OU) named SalesOU. SalesOU contains all of the user accounts for the sales department. Some of the sales users are temporary employees.
You apply a Group Policy object (GPO) named SalesGPO to SalesOU.
You need to prevent SalesGPO from being applied to the temporary sales employees. All other sales employees must have SalesGPO applied to them.
What should you do?

• A. Link SalesGPO to the site and remove the link for SalesGPO from SalesOU.
• B. Configure the permissions of SalesGPO.
• C. Disable the computer configurations of SalesGPO.
• D. Configure the permissions on the user accounts of the temporary sales employees.

Your network contains an Active Directory domain. The domain contains two sites named Site1 and Site2. Site 1 contains five domain controllers. Site2 contains one read-only domain controller (RODC). Site1 and Site2 connect to each other by using a slow WAN link.
You discover that the cached password for a user named User1 is compromised on the RODC.
On a domain controller in Site1, you change the password for User1.
You need to replicate the new password for User1 to the RODC immediately. The solution must not replicate other objects to the RODC.
Which tool should you use?

• A. Repadmin
• B. Replmon
• C. Active Directory Sites and Services
• D. Active Directory Users and Computers