Your network contains an Active Directory domain named fabrikam.com. The domain contains five
domain controllers named DC1, DC2, DC3, DC4, and DC5. All domain controllers run Windows Server
2008 R2 and have the DNS server role installed. On DC5, you create a new Active Directoryintegrated DNS zone named adatum.com. You need to ensure that the adatum.com DNS zone is only
replicated to DC5 and DC2. The solution must ensure that all zone replication traffic is encrypted.
What should you do first?

HOTSPOT
Your network contains a server named Server1 that runs Windows Server 2008 R2. You enable IPSec
on Server1. You need to identify which client computers have active IPSec associations to Server1.
Which administrative tool should you use to achieve this task? To answer, select the appropriate
tool from the answer area.

Your network contains a server named Server1 that runs Windows Server 2008 R2. On Server1, you
run route add 192.168.10.0 mask 255.255.255.0 172.23.1.2 metric 10. You restart Server1, and then
run the route command as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that after you restart Server1, Server1 routes all of the traffic for
192.168.10.0/24 by using the router that has an IP address of 172.23.1.2. Which command should
you run on Server1?

Your company has 10 servers that run Windows Server 2008 R2. The servers have Remote Desktop
Protocol (RDP) enabled for server administration. RDP is configured to use default security settings.
All administrators’ computers run Windows 7. You need to ensure the RDP connections are as secure
as possible. Which two actions should you perform? (Each correct answer presents part of the
solution. Choose two.)

Your network contains a server that runs Windows Server 2008 R2 named Server1. You install a new
application on Server1. After the installation, you discover that Server1 frequently becomes
unavailable. You need to identify whether the issues on Server1 coincide with the installation of the
application. What should you do?

DRAG DROP
Your network contains an Active Directory domain. The domain contains a server named Server1
that runs Windows Server 2008 R2. Server1 contains a folder named Folder1. A domain user named
User1 does not have NTFS Read permission for Folder1. You need User1 to create a backup copy of
Folder1. User1 must NOT be able to restore the backup copy on Server1. What should you do?
To answer, move the appropriate actions from the Possible Actions list to the Necessary Actions area
and arrange them in the correct order.

Your network contains a file server named Server1 that runs Windows Server 2008 R2. Users report
that when they try to open some of the folders in \\server1\folder1, they receive an Access is Denied
error message. You need to ensure that when the users connect to \\server1\folder1, they only see
the files and the folders to which they are assigned permissions. Which tool should you use?

Your network contains an Active Directory domain named contoso.com. All server run Windows
Server 2008 R2. The topology of the Active Directory site is configured as shown in the exhibit. (Click
the Exhibit button.)

Server1 and Server2 host a Distributed File System (DFS) replica named \\contoso.com\dfs\Folder1.
You discover that client computers in Site3 and Site4 always contact Server1 when they access files
in \\contoso.com\dfs\Folder1. You need to ensure that client traffic from Site3 and Site4 is
distributed between Server1 and Server2. What should you do?

Your company’s corporate network uses Network Access Protection (NAP). Users are able to connect
to the corporate network remotely. You need to ensure that data transmissions between remote
client computers and the corporate network are as secure as possible. What should you do?

You configure a full server backup on a server as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that a full server backup runs each day at 23:45 and that a custom script runs
when the backup completes. Which tool should you use?