Your company has an Active Directory forest. The company has branch offices in three locations.  Each location has an organizational unit.    
You need to ensure that the branch office administrators are able to create and apply GPOs only  to their respective organizational units.    
Which two actions should you perform（）

Your company has an Active Directory domain that has an organizational unit named Sales. The  Sales organizational unit contains two global security groups named sales managers and sales  executives.    
You need to apply desktop restrictions to the sales executives group.    
You must not apply these desktop restrictions to the sales managers group. 
You create a GPO  named DesktopLockdown and link it to the Sales organizational unit.    
What should you do next（）

Your company has an organizational unit named Production. The Production organizational unit  has a child organizational unit named R&D. You create a GPO named Software Deployment and  link it to the Production organizational unit.    
You create a shadow group for the R&D organizational unit. You need to deploy an application to  users in the Production organizational unit. You also need to ensure that the application is not  deployed to users in the R&D organizational unit.    
What are two possible ways to achieve this goal（）

You are installing an application on a computer that runs Windows Server 2008 R2. During  installation， the application will need to add new attributes and classes to the Active Directory  database.    
You need to ensure that you can install the application.    
What should you do（）

You want users to log on to Active Directory by using a new User Principal Name （UPN）. 
You  need to modify the UPN suffix for all user accounts.    
Which tool should you use（）

You need to relocate the existing user and computer objects in your company to different  organizational units.    
What are two possible ways to achieve this goal（）

Your company hires 10 new employees. You want the new employees to connect to the main  office through a VPN connection. You create new user accounts and grant the new employees  the Allow Read and Allow Execute permissions to shared resources in the main office.    
The new employees are unable to access shared resources in the main office. You need to  ensure that users are able to establish a VPN connection to the main office.    
What should you do（）

Your company’s security policy requires complex passwords.  
You have a comma delimited file named import.csv that contains user account information. You  need to create user accounts in the domain by using the import.csv file.  
You also need to ensure that the new user accounts are set to use default passwords and are  disabled.    
What should you do（）

A user in a branch office of your company attempts to join a computer to the domain， but the  attempt fails.    
You need to enable the user to join a single computer to the domain. 
You must ensure that the  user is denied any additional rights beyond those required to complete the task.    
What should you do（）

Your company has a main office and 40 branch offices. Each branch office is configured as a  separate Active Directory site that has a dedicated read-only domain controller （RODC）. An  RODC server is stolen from one of the branch offices.    
You need to identify the user accounts that were cached on the stolen RODC server.    
Which utility should you use（）

Your company has an Active Directory forest that runs at the functional level of Windows Server  2008.    
You implement Active Directory Rights Management Services （AD RMS）. You install Microsoft  SQL Server 2005.  
When you attempt to open the AD RMS administration Web site， you receive the following error  message： "SQL Server does not exist or access denied." You need to open the AD RMS  administration Web site.    
Which two actions should you perform（）