Study tips 70-640

You need to ensure that the stale resource records are automatically removed from the contoso.com zone

You need to create a DNS zone that is available on DC1 and DC2

You need to ensure that users in Branch2 only authenticate to the domain controllers in Main

You need to ensure that members of Group1 can revoke certificates

You need to ensure that DNS records can only be updated by the computer that registered the record

Which command should you run?

Which Object Access audit policy should you configure?

Which two FSMO roles should you identify?

You need to ensure that the passwords for all users in Group1 are at least 10 characters long

You need to ensure that all of the computers in the domain automatically enroll for a certificate based on the certificate template