Your network contains an Active Directory domain named contoso.com. The domain contains a
main office and a branch office. An Active Directory site exists for each office.
All domain controllers run Windows Server 2012 R2.
The domain contains two domain controllers.
DC1 hosts an Active Directory- integrated zone for contoso.com.
You add the DNS Server server role to DC2.
You discover that the contoso.com DNS zone fails to replicate to DC2.
You verify that the domain, schema, and configuration naming contexts replicate from DC1 to
DC2.
You need to ensure that DC2 replicates the contoso.com zone by using Active Directory
replication.
Which tool should you use?

Your network contains an Active Directory forest named contoso.com.
The forest contains four domains. All servers run Windows Server 2012 R2.
Each domain has a user named User1.
You have a file server named Server1 that is used to synchronize user folders by using the
Work Folders role service.

Server1 has a work folder named Sync1.
You need to ensure that each user has a separate folder in Sync1.
What should you do?

You have a server named Server1 that runs Windows Server 2012 R2.
From Server Manager, you install the Active Directory Certificate Services server role on
Server1.
A domain administrator named Admin1 logs on to Server1.
When Admin1 runs the Certification Authority console, Admin1 receive the following error message.

You need to ensure that when Admin1 opens the Certification Authority console on Server1, the
error message does not appear.
What should you do?

Hotspot Question
Your network contains an Active Directory domain named contoso.com.

The domain contains a domain controller named DC1 and a server named Server1.
Both servers run Windows Server 2012 R2.
You configure the classification of a share on Server1 as shown in the Share1 Properties exhibit.
(Click the Exhibit button.)

You configure the resource properties in Active Directory as shown in the Resource Properties
exhibit. (Click the Exhibit button.)
You need to ensure that the Impact classification can be assigned to Share1 immediately.
Which cmdlet should you run on each server? To answer, select the appropriate cmdlet for each
server in the answer area.

Your network contains an Active Directory domain named contoso.com. The domain contains a
domain controller named DC1 that runs Windows Server 2012 R2. DC1 has the DHCP Server
server role installed. DHCP is configured as shown in the exhibit. (Click the Exhibit button.)

You discover that client computers cannot obtain IPv4 addresses from DC1.
You need to ensure that the client computers can obtain IPv4 addresses from DC1.
What should you do?

Your network contains an Active Directory domain named contoso.com. The domain contains a file
server named Server1 and a domain controller named DC1. All servers run Windows Server 2012
R2. A Group Policy object (GPO) named GPO1 is linked to the domain.
Server1 contains a folder named Folder1. Folder1 is shared as Share1.
You need to ensure that authenticated users can request assistance when they are denied access
to the resources on Server1.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose
two.)

Your network contains an Active Directory domain named adatum.com. All domain controllers run
Windows Server 2008 R2. The domain contains a file server named Server6 that runs Windows
Server 2012 R2. Server6 contains a folder named Folder1. Folder1 is shared as Share1.
The NTFS permissions on Folder1 are shown in the exhibit. (Click the Exhibit button.)

The domain contains two global groups named Group1 and Group2.
You need to ensure that only users who are members of both Group1 and Group2 are denied
access to Folder1.

Which two actions should you perform? (Each correct answer presents part of the solution.
Choose two.)

Drag and Drop Question
Your network contains an Active Directory forest. The forest contains a single domain named
contoso.com. The forest contains two Active Directory sites named Main and Branch1. The sites
connect to each other by using a site link named Main-Branch1. There are no other site links.
Each site contains several domain controllers. All domain controllers run Windows Server 2012
R2. Your company plans to open a new branch site named Branch2.
The new site will have a WAN link that connects to the Main site only.
The site will contain two domain controllers that run Windows Server 2012 R2.
You need to create a new site and a new site link for Branch2.
The solution must ensure that the domain controllers in Branch2 only replicate to the domain
controllers in Branch1 if all of the domain controllers in Main are unavailable.
Which three actions should you perform? To answer, move the three appropriate actions from the
list of actions to the answer area and arrange them in the correct order.

Drag and Drop Question
Your network contains an Active Directory domain named contoso.com.
The domain contains two servers named Server1 and Server3.
The network contains a standalone server named Server2.
All servers run Windows Server 2012 R2.
The servers are configured as shown in the following table.

Server3 hosts an application named App1. App1 is accessible internally by using the URL
https://appl.contoso.com. App1 only supports Integrated Windows authentication.
You need to ensure that all users from the Internet are pre-authenticated before they can access
App1.
What should you do? To answer, drag the appropriate servers to the correct actions. Each server
may be used once, more than once, or not at all. You may need to drag the split bar between panes
or scroll to view content.

You have a failover cluster named Cluster1 that contains four nodes.
All of the nodes run Windows Server 2012 R2.
You need to force every node in Cluster1 to contact immediately the Windows Server Update
Services (WSUS) server on your network for updates.
Which tool should you use?