Your network contains an Active Directory domain named contoso.com.

You have an organizational unit (OU) named TestOU that contains test computers.

You need to enable a technician named Tech1 to create Group Policy objects (GPOs) and to link

the GPOs to TestOU. The solution must use the principle of least privilege.

Which two actions should you perform? Each correct answer presents part of the solution.

A. Add Tech1 to the Group Policy Creator Owners group.

B. From Group Policy Management, m

odify the Delegation settings of the TestOU OU.

C. Add Tech1 to the Protected Users group.

D. From Group Policy Management, modify the Delegation settings of the contoso.com container.

E. Create a new universal security group and add Tech1 to the group.

A

Your network contains an Active Directory domain named contoso.com.

You have an organizational unit (OU) named OU

1 that contains the computer accounts of two servers and the user account of a user named User1. A Group Policy object (GPO) named GPO1 is linked to OU1.

You have an application named App1 that installs by using an application installer named App1.exe.

You need to publish App1 to OU1 by using Group Policy.

What should you do?

A. Create a Config.zap file and add a file to the File System node to the Computer Configuration node of GPO1.

B. Create a Config.xml file and add a software installation package

to the User Configuration node of GPO1.

C. Create a

Config.zap file and add a software installation package to the User

Configuration node of GPO1.

D. Create a Config.xml file and add a software installation package to the Computer Configuration node of GP

O1.

Your network contains an Active Directory domain named contoso.com.

You have a Group Policy object (GPO) named GPO1. GPO1 is linked to an

organizational unit (OU) named OU1.

GPO1 contains several corporate desktop restrictions that apply to all computers.

You plan to deploy a printer to the computers in OU1.

You need to ensure that any user who signs in to a computer that runs Windows 10 in

OU1 receives the new printer. All of the computers in OU1 must continue to apply the corporate desktop restrictions from GPO1.

What should you configure?

A. a user preference and a WMI filter on GPO1.

B. a computer preference that uses item-level target

ing

C. a computer preference and WMI filter on GPO1

D. a user preference that uses item-level targeting

Your network contains an Active Directory domain named contoso.com.

Domain users use smart cards to sign in to their client computer.

Some users report that it takes a long time to sign in to their computer and that the logon attempt times out, so they must restart the sign in process.

You discover that the issues to chec

king the certificate revocation list (CRL) of the smart card certificates.

You need to resolve the issue without diminishing the security of the smart card logons.

What should you do?

A. From the properties of the smart cards certificate template, modi

fy the Request Handling settings.

B. From the properties of the smart cards certificate template, modify the Issuance Requirements settings.

C. Deactivate certificate revocation checks on the computers.

D. Implement an Online Certification Status Protocol

(OCSP) responder.

Your network contains an Active Directory domain named contoso.com.

The domain contains an enterprise certification authority

(CA) named CA1.

You duplicate the Computer certificate template, and you name the template Cont_Computers.

You need to ensure that all of the certificates issued based on Cont_Computers have a key size of 4,096 bits.

What should you do?

A. From the pro

perties of CA1, modify the Security settings.

B. From the properties of CA1, modify the Request Handling settings.

C. From the properties of the Computer template, modify the Key Attestation settings.

D. From the properties of Cont_Computers, modify the Cr

yptography settings.

Your network contains an Active Directory domain named contoso.com.

The domain contains a user named User1 and an organizational unit (OU) named OU1.

You create a Group Policy object (GP

O) named GPO1.

You need to ensure that User1 can link GPO1 to OU1.

What should you do?

A. Modify the security setting of User1.

B. Add User1 to the Group Policy Creator Owner group.

C. Modify the security setting of OU1.

D. Modify the security setting of

GPO1.

Your network contains an Active Directory domain named contoso.com.

The domain contains five domain controllers.

You have a branch office that has a local support technician named Tech1.

Te

ch1 installs Windows Server 2016 on a server named RODC1 in a workgroup.

You need Tech1 to deploy RODC1 as a read-only domain controller (RODC) in the contoso.com domain.

Which three actions should you perform? Each correct answer presents part of the so

lution.

A. Instruct Tech1 to run the Active Directory Domain Services Configuration Wizard.

B. Create an RODC computer account by using Active Administrative Center.

C. Instruct Tech1 to run

dcpromo.exe

on RODC1.

D. Instruct Tech1 to install the Active

Directory Domain Services server role on RODC1.

E. Modify the permissions of the Domain Controllers organizational unit (OU).

Your network contains an Active Directory domain named contoso.com.

The domain contains a server named Server1 that runs Windows Server 201

6.

Server1 has IP Address Management (IPAM) installed. IPAM is configured to use the Group Policy based provisioning method.

The prefix for the IPAM Group Policy objects (GPOs) is IP.

From Group Policy Management, you manually rename the IPAM GPOs to hav

e a prefix of IPAM.

You need to modify the GPO prefix used by IPAM.

What should you do?

A. Click Configure server discovery in Server Manager.

B. Run the

Set-IpamConfiguration

cmdlet.

C. Run the

Invoke-IpamGpoProvisioning

cmdlet.

D. Click Provision the

IPAM server in Server Manager.

Explanation:

The Set-IpamConfiguration cmdlet modifies the configuration for the computer that runs the IPAM server.

The -GpoPrefix parameter specifies the unique Group Policy object (GPO) prefix name that

IPAM uses to create the group policy objects. Use this parameter only when the value of the ProvisioningMethod parameter is set to Automatic.

References: https://technet.microsoft.com/en-us/library/jj590816.aspx

Your network contains an

Active Directory domain named contoso.com.

You need to create a central store for Group Policy administrative templates.

What should you use?

A. Server Manager

B. File Explorer

C. Dcgpofix.exe

D. Group Policy Management Console (GPMC)

QUES

Your network contains an Active Directory domain named contoso.com.

A Group Policy object (GPO) named GPO1 is linked to contoso.com.

GPO1 has computer configuration policie

s, user configuration policies, and user preferences configured.

You need to ensure that the user preferences in GPO1 apply only to users who sign in to computers that runs Windows 10. All the other settings in GPO1 must be applied, regardless of the comp

uter to which the users sign in.

What should you configure?

A. WMI Filtering

B. Item-level targeting

C. Security Settings

D. Security Filtering

Your network contains an Active Directory domain named contoso.com.

You

discover that users can use passwords that contain only numbers.

You need to ensure that all the user passwords in the domain contain at least three of the following types of characters:

Numbers

Uppercase letters

Lowercase letters

Special characters

What

should you edit?

A. The Default Domain Controllers Policy

B. The local policy on each client computer

C. The Default Domain Policy

D. The local policy on each domain controller

Your network contains an Active Directory domain named contoso.com.

You need to create a central store for Group Policy administrative

templates.

What should you use?

A. File Explorer

B. Server Manager

C.

Gpfixup.exe

D.

Copy-GPO

Your network contains an Active Directory domain named contoso.com.

The network contains several IP subnets. One of the subnets uses a network ID if 192.168.10.0/24.

You link a Group Policy object (GPO) named GPO1 to the domain.

You need to map a drive to a specific file share on the computers in the 192.168.10.0/24 netw

ork only.

What should you do?

A. From the User Configuration node of GPO1, configure the Folder Redirection settings. Link a WMI filter to GPO1.

B. From the Computer Configuration mode of GPO1, configure the Network Connections settings. Link a WMI filte

r to GPO1.

C. From the User Configuration node of GPO1, create a Group Policy preference that uses item-level targeting.

D. From the Computer Configuration node of GPO1, create a Group Policy preference that uses item-level targeting.

QUESTION

Your network contains an Active Directory domain named contoso.com.

All users are in an or

ganizational unit (OU) named Corp_Users.

You plan to modify the description of all the users who have a string of 514 in their mobile phone number.

You need to view a list of the users that will be modified.

What should you run?

A.

Get-ADOrganizational

Unit-Filter -mobilePhone-Like -*514*- –

B.

Get-ADUser-LDAPFilter -(mobilePhone= -*514*-)-

C.

Get-ADUser-Filter -mobilePhone-Like -*514*- –

D.

Get-ADOrganizationalUnit-LDAPFilter -(mobilePhone= -*5514*-)-

Your network contains an Active Directory domain named contoso.com.

You have three top-level organizational units (OUs) named OU1, OU2 and OU3. OU1 contains user accounts. OU2 c

ontains the computer accounts for shared public computers. OU3 contains the computer accounts for laptops.

You have two Group Policy objects (GPOs) named GPO1 and GPO2. GPO1 is linked to OU1. GPO2 is linked to OU2.

You need to prevent the user settings

in GPO1 from being applied when a user signs in to a shared public computer. If a user signs in to a laptop, the user settings in GPO1 must be applied.

A. Loopback processing

B. GPO link enforcement

C. Security Filtering

D. Inheritance blocking

Your net

work contains an Active Directory domain named contoso.com.

The user account for a user named User1 is in an organizational unit (OU) named OU1.

You need to enable User1 to sign in as user1@adatum.com.

Solution: From Active Directory Domains and Trusts,

you configure an alternative UPN suffix. From Active Directory Administrative Center, you configure the User UPN logon property of User1.

Does this meet the goal?

A. Yes

B. No