You suspect a FSMO role failure — how do you verify and seize roles safely?
What happens if two DCs both think they’re the RID Master?
How do you handle AD replication latency between two sites with slow WAN links?
Explain what happens when replication is broken for more than the tombstone lifetime.
How do you restore a deleted OU after replication has already synced?