单项选择题 You deploy an Active Directory Federation Services （AD FS） Federation Service Proxy on a server  named Server1.   You need to configure the Windows Firewall on Server1 to allow external users to authenticate by using  AD FS.   Which inbound TCP port should you allow on Server1（）

多项选择题 Your network contains a single Active Directory domain. The domain contains five read-only domain   controllers （RODCs） and five writable domain controllers. All servers run Windows Server 2008.  You plan to install a new RODC that runs Windows Server 2008 R2.   You need to ensure that you can add the new RODC to the domain. You want to achieve this goal by using the minimum amount of administrative effort.   Which two actions should you perform（）

单项选择题 Your company has a main office and a branch office. The branch office has an Active Directory site that contains a read-only domain controller （RODC）.   A user from the branch office reports that his account is locked out.   From a writable domain controller in the main office， you discover that the users account is not locked  out.   You need to ensure that the user can log on to the domain.   What should you do（）