A company has Active Directory Domain Services (AD DS) domain controllers that run Windows Server 2012 R2.
You prepare a disaster recovery plan for Active Directory. You have the following requirements:
. The domain controller restore process must complete as quickly as possible.
. After the restore process completes, the Active Directory database on the domain controller must be brought up to date by using replication.
You need to implement the disaster recovery plan.
What should you do?
A. Authoritatively restore the domain controllers by using the ntdsutil.exe tool.
B. Restore the domain controllers by using the Active Directory Recycle Bin.
C. Back up and restore the domain controllers by using the wbadmin.exe tool.
D. Back up and restore the domain controllers by using the Idp.exe tool.
Correct Answer: C
Explanation/Reference:
Explanation:
Ref: http://technet.microsoft.com/en-us/magazine/dd767786.aspx
wbadmin: Enables you to back up and restore your operating system, volumes, files, folders, and applications from a command prompt.
http://technet.microsoft.com/en-us/library/cc754015.aspx
ntdsutil: Ntdsutil.exe is a command-line tool that provides management facilities for Active Directory Domain Services (AD DS) and Active Directory Lightweight Directory Services (AD LDS).
You can use the ntdsutil commands to perform database maintenance of AD DS, manage and control single master operations, and remove metadata left behind by domain controllers that were removed from the network without being properly uninstalled.
This tool is intended for use by experienced administrators.
http://technet.microsoft.com/en-us/library/cc753343.aspx
Active Directory Recycle Bin: Active Directory Recycle Bin helps minimize directory service downtime by enhancing your ability to preserve and restore accidentally deleted Active Directory objects without restoring Active Directory data from backups, restarting Active Directory Domain Services (AD DS), or rebooting domain controllers.
http://technet.microsoft.com/en-us/library/dd392261%28v=ws.10%29.aspx
ldp: This GUI tool is a Lightweight Directory Access Protocol (LDAP) client that allows users to perform operations (such as connect, bind, search, modify, add, delete) against any LDAP-compatible directory, such as Active Directory.
LDP is used to view objects stored in Active Directory along with their metadata, such as security descriptors and replication metadata.
http://technet.microsoft.com/en-us/library/cc772839%28v=ws.10%29.aspx