Your network contains an Active Directory forest. The forest contains one domain named
adatum.com. The domain contains three domain controllers. The domain controllers are
configured as shown in the following table.
DC2 has all of the domain-wide operations master roles. DC3 has all of the forest-wide
operation master roles.
You need to ensure that you can use Password Settings objects (PSOs) in the domain.
What should you do first?
A.
Uninstall Active Directory from DC1.
B.
Change the domain functional level.
C.
Transfer the domain-wide operations master roles.
D.
Transfer the forest-wide operations master roles.
Answer = A
http://technet.microsoft.com/en-us/library/cc770842%28v=ws.10%29.aspx
http://technet.microsoft.com/en-us/library/understanding-active-directory-functional-levels%28v=ws.10%29.aspx
Another interesting factoid. PSOs are a domain level thing. So you don’t need to increase your forest functional level.
A is correct, then you would do B
If DC1 had any FSMO roles then you would transfer them to another DC before demoting it.