Your network contains two Active Directory forests named contoso.com and adatum.com.
A two- way forest trust exists between the forests.
The contoso.com forest contains an enterprise certification authority (CA) named SERVER1.
You implement cross-forest certificate enrollment between the contoso.com forest and the adatum.com forest.
On SERVER1, you create a new certificate template named Template1.
You need to ensure that users in the adatum.com forest can request certificates that are based on Template1.
Which tool should you use?

You have a server named Server1 that has the ActiveDirectory Certificate Services server role installed.
Server1 uses a hardware security module (HSM) to protect the private key of Server1.
You need to ensure that the Active Directory Certificate Services (AD CS) database, log files, and private key
are backed up.
You perform regular backups of the HSM module by using a backup utility provided by the HSM manufacturer.
What else should you do?

Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012.
The domain contains a domain controller named DC1 that is configured as an Enterprise Root Certification
Authority (CA).
All users in the domain are issued a smart card andare required to log on to their domain-joined client
computer by using their smart card.
A user named User1 resigned and started to work fora competing company.
You need to prevent User1 immediately from logging on to any computer in the domain. The solution mustnot
prevent other users from logging on to the domain.
Which tool should you use?

Your company has a main office and a branch office.
The main office contains a file server named SERVER1.
SERVER1 has the BranchCache for Network Files role service installed.
The branch office contains a server named SERVER2.
SERVER2 is configured as a BranchCache hosted cacheserver.
You need to preload the data from the file shares on SERVER1 to the cache on SERVER2.
You generate hashes for the file shares on SERVER1.
Which cmdlet should you run next?

You have a file server named SERVER1 that runs Windows Server 2012.
Data Deduplication is enabled on drive D of SERVER1.
You need to exclude D:\Folder1 from Data Deduplication.
What should you configure?

Your network contains an Active Directory domain named contoso.com.
The network contains a file server named SERVER1 that runs Windows Server 2012.
You create a folder named Folder1.
You share Folder1 as Share1.
The NTFS permissions on Folder1 are shown in the Folder1 exhibit. (Click the Exhibitbutton.)
The Everyone group has the Full control Share permission to Folder1.
You configure a central access policy as shown in the Central Access Policy exhibit. (Click the Exhibitbutton.)
Members of the IT group report that they cannot modify the files in Folder1.
You need to ensure that the IT group members can modify the files in Folder1.
The solution must use central access policies to control the permissions.
Which two actions should you perform? (Each correctanswer presents part of the solution. Choose two.)
NTFS Permissions (exhibit):
Central Access Policy (exhibit):

Your network contains an Active Directory domain named contoso.com.
You are creating a custom Windows Recovery Environment (Windows RE) image.
You need to ensure that when a server starts from the custom Windows RE image, a drive is mapped
automatically to a network share.
What should you modify in the image?

You have a server named SERVER1 that runs Windows Server 2012.
SERVER1 has the Windows Deployment Services server role installed.
You back up SERVER1 each day by using Windows Server Backup.
The disk array on SERVER1 fails.
You replace the disk array.
You need to restore SERVER1 as quickly as possible.
What should you do?

Your network contains an Active Directory domain named contoso.com.
The domain contains a domain controller named DC1 and a member server named SERVER1.
SERVER1 has the IP Address Management (IPAM) Serverfeature installed.
On DC1, you configure Windows Firewall to allow allof the necessary inbound ports for IPAM.
On SERVER1, you open Server Manager as shown in theexhibit. (Click the Exhibitbutton.)
You need to ensure that you can use IPAM on SERVER1to manage DNS on DC1.
What should you do?
Exhibit:

Your network contains an Active Directory domain named contoso.com.
The domain contains a domain controller named DC1.
DC1 has the DNS Server server role installed.
The network has two sites named Site1 and Site2.
Site1 uses 10.10.0.0/16 IP addresses and Site2 uses10.11.0.0/16 IP addresses.
All computers use DC1 as their DNS server.
The domain contains four servers named SERVER1, SERVER2, SERVER3, and SERVER4.
All of the servers run a service named Service1.
DNS host records are configured as shown in the exhibit. (Click the Exhibitbutton.)
You discover that computers from the 10.10.1.0/24 network always resolve Service1 to the IP address of
SERVER1.
You need to configure DNS on DC1 to distribute computers in Site1 between SERVER1 and SERVER2 when
the computers attempt to resolve Service1.
What should run on DC1?
Exhibit: