You are hired by AIOTestking.com to administrate an Active Directory domain named AIOTestking.com.
AIOTestking.com utilizes a server named TESTKING-DC01 running Windows Server 2012.

Your senior network administrator authorizes the use of Routing and Remote Access (RRAS) and
configures it on TESTKING-DC01, thereafter you create a user account for a new AIOTestking.com
employee.
Which of the following actions need to be taken if you are assigned the task of confirming that a
specified AIOTestking.com employee is capable of establishing VPN connections to TESTKINGDC01?

You work as a Network Administrator at AIOTestking.com. AIOTestking.com has a forest with a single an
Active Directory Domain Services (AD DS) domain named AIOTestking.com. All servers in the
AIOTestking.com domain have Microsoft Windows Server 2012 R2 installed.
AIOTestking.com works with a partner company named Redbridge Logistics. The Redbridge Logistics
network consists of a single Active Directory forest named RedbridgeLogistics.com. The forest
contains a single Active Directory Domain Services (AD DS) domain named
RedbridgeLogistics.com. All servers in the RedbridgeLogistics.com domain have Windows Server
2012 R2 installed.
A forest trust exists between the two forests. The two networks are connected by a WAN link.
A server named TESTKING-SR08 hosts an Active Directory-integrated zone for AIOTestking.com. A
server named REDBRIDGE-SR25 hosts an Active Directory-integrated zone for
RedbridgeLogistics.com
Users in the AIOTestking.com domain need to be able to resolve names of servers in the
RedbridgeLogistics.com domain.
You need to configure a name resolution solution that will enable name resolution in the event of a
WAN link failure.
What should you do?

You work as a Network Administrator at AIOTestking.com. AIOTestking.com has an Active Directory
Domain Services (AD DS) domain named AIOTestking.com. All servers in the AIOTestking.com domain
have Microsoft Windows Server 2012 R2 installed.
AIOTestking.com has a main office and a branch office. The two offices are connected by a WAN
link.
A server in the main office named TESTKING-SR22 runs the DNS Server role and hosts a primary
zone for AIOTestking.com. A server named TESTKING-SR22 in the branch office hosts a secondary
zone for AIOTestking.com.
You change several DNS records on TESTKING-SR22. You need to immediately replicate the
AIOTestking.com zone to TESTKING-SR22.
Which two of the following actions should you take to force replication of the AIOTestking.com DNS
zone? (Choose two)

You work as a Network Administrator at AIOTestking.com. AIOTestking.com has an Active Directory
Domain Services (AD DS) domain named AIOTestking.com. All domain controllers in the AIOTestking.com

domain have Microsoft Windows Server 2012 R2 installed.
Several Sales users spend most of their time away from the office.
You implement DirectAccess to enable the Sales users to connect to the network when they are
away from the office. All computers used by the Sales users are joined to the domain.
You create a DirectAccess client group named SalesDirectAccess and add all the computer
accounts for the Sales users’ computers to the SalesDirectAccess group.
Some Sales users report that they are unable to access the network using DirectAccess. Other
Sales report that they can connect successfully.
You discover that only users using laptop computers can connect using DirectAccess. Sales
users are unable to connect when they use desktop computers.
How can you enable all Sales users to access the network using DirectAccess?

You work as a Network Administrator at AIOTestking.com. AIOTestking.com has an Active Directory
Domain Services (AD DS) domain named AIOTestking.com. All servers in the AIOTestking.com domain
have Microsoft Windows Server 2012 R2 installed.
Sales users often work away from the office. The Sales users have portable computers that have
Windows 7, Windows Vista or Windows XP installed. All client computers are members of the
AIOTestking.com domain.
You have been asked to implement a remote access solution to enable the Sales users to connect
to the network when they are working away from the office.

The remote access solution must ensure that all Sales users can connect to the network.
Which VPN solution should you implement?

You are hired by AIOTestking.com to administrate a DNS server named TESTKING-SR08 which is
currently equipped with a Server Core Installation on Windows Server 2012.
Which of the following commands will need to be run if you are required to have the time-to-live
(TTL) value of a name server (NS) record displayed, taking into account that the time-to-live (TTL)
value is currently being cached by the DNS Server service on TESTKING-SR08?

You work as a Network Administrator at AIOTestking.com. AIOTestking.com has an Active Directory
Domain Services (AD DS) domain named AIOTestking.com. All servers in the AIOTestking.com domain
have Microsoft Windows Server 2012 R2 installed.
AIOTestking.com has a main office and a branch office. The two offices are connected by a slow
WAN link.
A server in the main office named TESTKING-SR21 runs the File and Storage Services and
Distributed File System roles. A server in the branch office named TESTKING-SR22 also runs the

File and Storage Services and Distributed File System roles.
Shared folders on TESTKING-SR21 and TESTKING-SR22 are replicated to each other using DFS
Replication (DFSR).
You discover that DFS replication between the two servers is using too much bandwidth over the
WAN link.
How can you limit the amount of bandwidth used by DFS replication?

You work as a Network Administrator at AIOTestking.com. AIOTestking.com has an Active Directory
Domain Services (AD DS) domain named AIOTestking.com. All servers in the AIOTestking.com domain
have Microsoft Windows Server 2012 R2 installed.
AIOTestking.com has a Research department.
A server in the Research department named TESTKING-SR25 runs the File and Storage Services
role and the File Server Resource Manager role service.
Sensitive information is stored in shared folders on TESTKING-SR25.
You want to be notified by e-mail when an executable file is stored in a shared folder on
TESTKING-SR25. The notification must include information about the user who stored the file and
the exact location of the file.
What should you do?

You work as a Network Administrator at AIOTestking.com. AIOTestking.com has an Active Directory
Domain Services (AD DS) domain named AIOTestking.com. All servers in the AIOTestking.com domain
have Microsoft Windows Server 2012 R2 installed.
AIOTestking.com has a Research department. All user and computer accounts in the Research
department are located in an organizational unit (OU) named ResearchOU.
A server in the Research department named TESTKING-SR23 runs the File and Storage Services
role and the File Server Resource Manager role service. Sensitive information is stored in shared
folders on TESTKING-SR23.
All users in the Research department are members of a global security group named
ResearchUsers.
The ResearchUsers group has full control access to a folder named D:\Data which is shared as
\\TESTKING-SR23\Data.
You link a group policy object (GPO) to the ResearchOU. The GPO configures the Audit File
System and Audit File Share settings to Success and Failure.
You need to ensure that all file deletions in \\TESTKING-SR23\Data by members of the
ResearchUsers group are logged.
You delete a test file in the shared folder and verify that an event log entry is added.
You discover that when a user in the ResearchUsers group deletes a file, no event log entry is
added.
What should you modify?

Your role of Network Administrator at AIOTestking.com includes the management of the Active
Directory Domain Services (AD DS) domain named AIOTestking.com. All servers in the AIOTestking.com
domain have Microsoft Windows Server 2012 R2 installed.
AIOTestking.com has a Sales department and a Production department. An OU exists for each
department. The OUs contain the user and computer accounts for the respective departments.
A shadow group named SalesSG is configured for the Sales OU and contains all objects within the
Sales OU. A password settings object (PSO) named SalesPSO is applied to the SalesSG group
and applies a minimum password length of 6 characters.
You want to modify the PSO to require a minimum password length of 8 characters.
Which of the following cmdlets should you use?