单项选择题 You deploy an Active Directory Federation Services （AD FS） Federation Service Proxy on a  server named Server1.   You need to configure the Windows Firewall on Server1 to allow external users to authenticate by  using AD FS.     Which inbound TCP port should you allow on Server1（）

多项选择题 YournetworkcontainsasingleActiveDirectorydomain.Thedomaincontainsfiveread-onlydomaincontrollers（RODCs）andfivewritabledomaincontrollers.AllserversrunWindowsServer2008.YouplantoinstallanewRODCthatrunsWindowsServer2008R2. YouneedtoensurethatyoucanaddthenewRODCtothedomain.Youwanttoachievethisgoalbyusingtheminimumamountofadministrativeeffort. Whichtwoactionsshouldyouperform（）

单项选择题 Your company has a main office and a branch office. The branch office has an Active Directory  site that contains a read-only domain controller （RODC）.   A user from the branch office reports that his account is locked out. From a writable domain  controller in the main office， you discover that the user’s account is not locked out.     You need to ensure that the user can log on to the domain.     What should you do（）