Your network contains an Active Directory forest. The forest contains a member server named
Server1 that runs Windows Server 2008 R2. You configure Server1 as a VPN server. You need to
ensure that only client computers that have up-to-date virus definitions can establish VPN
connections to Server1. Which server role, role service, or feature should you install?

Your network contains an Active Directory forest. The forest contains a member server named
Server1 that runs Windows Server 2008 R2. You need to configure Server1 as a network address
translation (NAT) server. Which server role, role service, or feature should you install?

Your network contains an Active Directory domain named contoso.com. Contoso.com contains two
servers named Server1 and Server2 that run Windows Server 2008 R2. DirectAccess is deployed on
Server2. You need to configure Server1 as a network location server (NLS). Which Web Server (IIS)
role service should you install on Server1?

Your network contains two servers named Server1 and Server2 that run a Server Core installation of
Windows Server 2008 R2. Server1 and Server2 are configured as DNS servers. Server1 has an IP
address of 10.0.0.1. Server2 has an IP address of 10.0.0.2. Server1 contains a standard primary zone
named contoso.com. Zone transfers are enabled for contoso.com. You need to ensure that Server2
hosts a copy of the contoso.com zone. Which command should you run on Server2?

Your network contains three servers named Server1, Server2, and Server3 that have the Network
Policy Server (NPS) role service installed. On Server1, you configure a Remote RADIUS Server Group
that contains Server2 and Server3. On Server2 and Server3, you configure Server1 as a RADIUS
client. You configure Server2 and Server3 to authenticate remote users. You need to configure
Server1 to forward RADIUS authentication requests to Server2 and Server3. What should you create
on Server1?

HOTSPOT
Your network contains a server named Server1 that runs Windows Server 2008 R2. On Server1, you
share a folder named Share1. Users report that when they try to open some of the folders in Share1,
they receive an Access is Denied error message. You need to ensure that when the users connect to
Share1, they only see the files and the folders to which they are assigned permissions. Which
administrative tool should you use to achieve this task? To answer, select the appropriate tool in the
answer area.

Your network contains an Active Directory domain. The domain contains a file server named Server1
that runs Windows Server 2008 R2. You need to ensure that a user named User1 can back up and

restore files on Server1. The solution must minimize the number of user rights assigned to User1.
What should you do?

DRAG DROP
Your network contains a subnet named Subnet1. You add a new subnet named Subnet2 to the
network. Subnet1 and Subnet2 are connected by a router named Router1. You need to configure the
IP addresses on Router1 to ensure that IP traffic can be routed between Subnet1 and Subnet2.
Which IP addresses should you assign to Router1? To answer, drag the appropriate IP address to the
correct interface in the answer area.

HOTSPOT
Your network contains a server named Server1 that runs Windows Server 2008 R2. You configure
IPSec on Server1. You need to identify the total number of authentication failures and negotiation
failures that occurred on Server1. Which node should you use to achieve this task?
To answer, select the appropriate node in the answer area.

Your network contains a file server named Server1 that runs Windows Server 2008 R2.
You enable IPSec on Server1.
You need to identify which client computers have active IPSec associations to Server1.
Which administrative tool should you use to achieve this task?