Your company has one main office and 20 branch offices. Each office is configured as an Active
Directory site. The network consists of one Active Directory domain. All servers run Windows Server
2008 R2 and all client computers run Windows 7. The main office contains three domain controllers.
You need to deploy one domain controller in each branch office to meet the following requirements:
Authentication to a main office domain controller must only occur if a local domain controller
fails.
Client computers in the main office must not authenti cate to a domain controller in a branch
office.
Client computers in a branch office must not authenticate to a domain controller in another
branch office.
Client computers in each branch office must attempt to authenticate to the domain controller at
their local site first.
What should you do first?
A.
Associate the IP subnet of each branch office to the Active Directory site of the main office.
B.
Select the read-only domain controller (RODC) option and the Global Catalog option when
deploying the branch office domain controllers.
C.
Create a Group Policy object (GPO) that applies to all branch office domain controllers and
controls the registration of DNS service location (SRV) records.
D.
Configure only the main office domain controllers as global catalog servers. Enable Universal
Group Membership Caching in the Active Directory site for each branch office.
Explanation:
To deploy domain controllers in the branch offices and make sure that the client computers in each
branch office must attempt to authenticate to the domain controller at their local site first and the
authentication to a main office domain controller must only occur if a local domain controller fails
and to meet other specified requirements, you need to create a Group Policy object (GPO) for all
branch office domain controllers to control the registration of DNS service location (SRV) records.
SRV records are used by Windows Server to locate domain controllers in specific domains, domain
controllers in the same site, global catalogue servers, and key distribution centers.
DNS Service Records and Locating Domain Controllers
http://www.2000trainers.com/windows-2000/dns-service-records/