You work as a Network Administrator at AIOTestking.com. AIOTestking.com has an Active Directory
Domain Services (AD DS) domain named AIOTestking.com. All servers in the AIOTestking.com domain
have Microsoft Windows Server 2012 R2 installed.
AIOTestking.com has a Sales department, a Human Resources (HR) department and a Production
department. All user accounts in the AIOTestking.com domain are contained in an organizational unit
(OU) named TK-Users.
All users in the Sales department are members of a global group named SalesGroup. All users in
the HR department are members of a global group named HRGroup. All users in the Production
department are members of a global group named ProductionGroup.
A server named TESTKING-SR21 runs the File Services role and hosts shared folders named
Sales, HR and Production.
You configure a group policy object (GPO) named DrivesGPO and link it to the TK-Users OU.
You want to configure the GPO to map drives on the user’s computers to the shared folders. You
want all members of SalesGroup to have their H: drive mapped to \\TESTKING-SR21\Sales, all
members of HRGroup to have their H: drive mapped to \\TESTKING-SR21\HR and all members of
ProductionGroup to have their H: drive mapped to \\TESTKING-SR21\Production.
What should you configure the GPO?

You work as a Network Administrator at AIOTestking.com. AIOTestking.com has an Active Directory
Domain Services (AD DS) domain named AIOTestking.com. All servers in the AIOTestking.com domain
have Microsoft Windows Server 2012 R2 installed.
A technician has created a vhd file containing a Windows Server 2012 R2 installation image. The
vhd image is offline. You must use DISM to apply updates to the vhd image. You need to mount
the vhd image.
Which of the following actions should you take?

You work as a Network Administrator at AIOTestking.com. AIOTestking.com has an Active Directory
Domain Services (AD DS) domain named AIOTestking.com. All the domain controllers on the
AIOTestking.com network have Windows Server 2012 R2 installed.
You have an Active Directory snapshot that you mount on a domain controller named TESTKINGDC07. You want to configure the snapshot so that it can be used as an LDAP server.

Which of the following can you use?

You work as a Network Administrator at AIOTestking.com. AIOTestking.com has an Active Directory
Domain Services (AD DS) domain named AIOTestking.com. All servers in the AIOTestking.com domain
have Microsoft Windows Server 2012 R2 installed and all client computers have Windows 8
Enterprise installed.
BitLocker Drive Encryption (Bitlocker) is enabled on all client computers. You are using a client
computer named TESTKING-WS38 that has a BitLocker recovery key on drive C.
When you return from a meeting you discover that drive D is locked. When you attempt to unlock
drive D using the recovery key you receive an error message stating: “A valid USB key wasn’t
detected …”
Which of the following actions should you take to access drive D?

You work as a Network Administrator at AIOTestking.com. AIOTestking.com has an Active Directory

Domain Services (AD DS) domain named AIOTestking.com. All servers on the network have Windows
Server 2012 R2 installed.
You plan to enable external users to connect to the network using a VPN connection.
You are deploying Network Access Protection to ensure system health compliance for users that
connect over a VPN connection.
You install a Windows Server 2012 R2 computer named TESTKING-SR16 and install the Network
Policy Server role. You want to configure TESTKING-SR16 as a Network Access Protection
(NAP) health policy server for the VPN connections.
You run the Configure NAP wizard to create a VPN Enforcement policy. However, you are unable
to complete the wizard.
How can you ensure that you are able to complete the Configure NAP wizard to configure VPN
Enforcement?

You work as a Network Administrator at AIOTestking.com. AIOTestking.com has an Active Directory
Domain Services (AD DS) domain named AIOTestking.com. All servers on the network have Windows
Server 2012 R2 installed.
DirectAccess is enabled on the network using the default configuration. You want the
DirectAccess clients to use DirectAccess whenever they access the Internet.
Which of the following actions should you take?

You work as a Network Administrators at AIOTestking.com. All servers on the AIOTestking.com network
have Windows Server 2012 R2 installed. The network has a server named TESTKING-SR34 that
is configured as a Network Policy Server (NPS).
The network contains several wireless access points (WAPs). You want to secure the wireless
network by using certificate-based mutual authentication.
Which action should you take?

You work as a Network Administrator at AIOTestking.com. AIOTestking.com has an Active Directory
Domain Services (AD DS) domain named AIOTestking.com. The AIOTestking.com network has two
domain controllers named TESTKING-SR01 and TESTKING SR02 that have Windows Server
2008 installed.
You add a new Windows Server 2012 R2 domain controller named TESTKING-SR06 to the
network. You now want to use Active Directory Administrative Center on TESTKING-SR06 to
implement Password Settings objects (PSOs). However, you are unable to create a PSO.
Which of the following actions do you need to take before you can create PSOs?

You work as a Network Administrator at AIOTestking.com. AIOTestking.com has an Active Directory
Domain Services (AD DS) domain named AIOTestking.com. All servers in the AIOTestking.com domain
have Microsoft Windows Server 2012 R2 installed and all client computers have Windows 8 Pro
installed.
You connect a new client computer named TESTKING-WS43 to the domain and want to ping a
domain controller named TESTKING-DC07 from TESTKING-WS43. However, when you attempt
to run the ping testking-dc07 command from the command prompt, you receive “Request timed
out” messages.
How can you resolve this problem and allow TESTKING-WS43 to ping TESTKING-DC07
successfully?