You administer a Microsoft Windows Server 2012 domain named AIOTestking.com. A company
Weyland Industries which has a domain named weyland.com entered into partnership with
AIOTestking.com.
During the course of the month you receive a request from Weyland Industries to configure
AIOTestking.com DNS servers to resolve requests from both weyland.com and AIOTestking.com domains
whilst ensuring administrative output is minimized and server names do not require changing.
Which of the following actions should you take?

You work as a Network Administrator at AIOTestking.com. AIOTestking.com has an Active Directory
Domain Services (AD DS) domain named AIOTestking.com. The servers on the AIOTestking.com network
run either Windows Server 2008 R2 Service Pack 1 (SP1) or Windows Server 2012 R2.
A Windows Server 2012 R2 server named TESTKING-SR27 run the DNS Server role and hosts a
primary zone for the AIOTestking.com domain.
The company has recently opened a branch office. You install a Windows Server 2012 R2 server
named TESTKING-SR56 in the branch office and install the DNS Server role.
To enable name resolution for branch office users, you want to configure TESTKING-SR56 to host
a secondary DNS zone for the AIOTestking.com domain.
How should you configure TESTKING-SR27?

You work as a Network Administrator at AIOTestking.com. AIOTestking.com has an Active Directory
Domain Services (AD DS) domain named AIOTestking.com. The servers on the AIOTestking.com network
have Windows Server 2012 R2 installed and the client computers have either Windows 7
Enterprise or Windows 8 Enterprise installed.
A server named TESTKING-SR01 is having problems connecting to a server named TESTKINGSR04.

You suspect that TESTKING-SR01 has an invalid or out of date cached DNS record for
TESTKING-SR04.
How can you view the DNS records cached on TESTKING-SR01?

You work as a Network Administrator at AIOTestking.com. AIOTestking.com has an Active Directory
Domain Services (AD DS) domain named AIOTestking.com. The servers on the AIOTestking.com network
have Windows Server 2012 R2 installed.
The AIOTestking.com domain has several Group Policy objects (GPOs) none of which are enforced
GPOs.
You need to view the setting of a GPO name DCAccess.
Which of the following actions should you take?

You work as a Network Administrator at AIOTestking.com. AIOTestking.com has an Active Directory

Domain Services (AD DS) domain named AIOTestking.com. The servers on the AIOTestking.com network
have Windows Server 2012 R2 installed.
AIOTestking.com has offices in several major cities. The Organizational Unit (OU) structure includes
top-level OUs for each office location. Each top-level OU contains child OUs for each company
department in their respective offices. Each departmental OU contains the user accounts of the
users working in that department in the relevant office.
Many Group Policy Objects (GPOs) are applied at the site level, domain level and OU level.
You create an OU named TestOU inside one of the departmental OUs. You want to ensure that
no GPOs from the site level, domain level, location OU level or department OU level are applied to
objects within TestOU.
How can you quickly achieve this goal?

You work as a Network Administrator at AIOTestking.com. AIOTestking.com has an Active Directory
Domain Services (AD DS) domain named AIOTestking.com. The servers on the AIOTestking.com network
have Windows Server 2012 R2 installed.
You need to configure the order in which three group policy objects (GPOs) that are linked to the
same Organization Unit (OU) are applied.
Which of the following actions should you take?

You work as a Network Administrator at AIOTestking.com. AIOTestking.com has an Active Directory
Domain Services (AD DS) domain named AIOTestking.com. The AIOTestking.com network has several
Group Policy objects (GPOs).
You must allow a junior technician named Rory Allen to create GPOs in the domain but he must
not be able to link GPOs to any container.
Which of the following actions should you take?

You administer a Microsoft Windows Server 2012 domain named AIOTestking.com. The AIOTestking.com
domain has a server named TESTKING-DC08 with an installation of Remote Access server role.
TESTKING-DC08 is currently making use of a network policy by the name of TestKing-Policy01.
Which of the following configurations need to be set if you are assigned the task of confirming that
TestKing-Policy01 applies only to VPN connections making use of the L2TP protocol?

You work as a Network Administrator at AIOTestking.com. AIOTestking.com has an Active Directory
Domain Services (AD DS) domain named AIOTestking.com. All servers on the network have Windows
Server 2012 R2 installed and all client computers have Windows 7 Professional installed.
The network includes a server named TESTKING-DC12 that is configured as a domain controller.
A server named TESTKING-SR27 is configured as a Network Policy Server (NPS) and a Health
Registration Authority (HRA). A server named TESTKING-SR32 runs Certificate Services and is
configured as an Enterprise Certification Authority (CA) for the AIOTestking.com domain. The CA has
been associated with the HRA on TESTKING-SR27.
The HRA has been configured with an SSL certificate and the appropriate DNS Service Locator
(SRV) records have been configured.
You want to configure HRA automatic discovery on the client computers. You configure a Group
Policy Object (GPO) to clear all trusted group configurations from the client computers.
What should you do next?

You work as a Network Administrator at AIOTestking.com. AIOTestking.com has an Active Directory
Domain Services (AD DS) domain named AIOTestking.com. All servers on the network have Windows
Server 2012 R2 installed and all client computers have Windows 8 Enterprise installed.
You plan to enable external users to connect to the network using a VPN connection.
You are deploying Network Access Protection to ensure system health compliance for users that

connect over a VPN connection.
You install a Windows Server 2012 R2 computer named TESTKING-SR32 and install the Network
Policy Server role. You want to configure TESTKING-SR32 as a Network Access Protection
(NAP) health policy server for the VPN connections.
You run the Configure NAP wizard to create a VPN Enforcement policy. However, you are unable
to complete the wizard.
How can you ensure that you are able to complete the Configure NAP wizard to configure VPN
Enforcement?