HOTSPOT
Your network contains an Active Directory domain named contoso.com.
You need to create a certificate template for the BitLocker Drive Encryption (BitLocker) Network Unlock feature.
Which Cryptography setting of the certificate template should you modify?
To answer, select the appropriate setting in the answer area.
Hot Area:

HOTSPOT
Your network contains 25 Web servers that run Windows Server 2012 R2.
You need to configure auditing policies that meet the following requirements:
Generate an event each time a new process is created.
Generate an event each time a user attempts to access a file share.
Which two auditing policies should you configure? To answer, select the appropriate two auditing policies in the
answer area.
Hot Area:

HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains 30 user accounts
that are used for network administration. The user accounts are members of a domain global group named
Group1.
You identify the security requirements for the 30 user accounts as shown in the following table.

You need to identify which settings must be implemented by using a Password Settings object (PSO) and which
settings must be implemented by modifying the properties of the user accounts.
What should you identify? To answer, configure the appropriate settings in the dialog box in the answer area.
Hot Area:

HOTSPOT
Your network contains 25 Web servers that run Windows Server 2012 R2.
You need to configure auditing policies that meet the following requirements:
Generate an event each time a new process is created.
Generate an event each time a user attempts to access a file share.
Which two auditing policies should you configure?
To answer, select the appropriate two auditing policies in the answer area.Hot Area:

Your network contains an Active Directory domain named contoso.com. The domain contains a domain
controller named DC1.
You run ntdsutil as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that you can access the contents of the mounted snapshot.
What should you do?

You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the File Server Resource
Manager role service installed.
Server1 has a folder named Folder1 that is used by the human resources department. You need to ensure that
an email notification is sent immediately to the human resources manager when a user copies an audio file or a
video file to Folder1.
What should you configure on Server1?

Your network contains an Active Directory domain named contoso.com. The domain contains five servers. The
servers are configured as shown in the following table.

All desktop computers in contoso.com run Windows 8 and are configured to use BitLocker Drive Encryption
(BitLocker) on all local disk drives.
You need to deploy the Network Unlock feature. The solution must minimize the number of features and serverroles installed on the network.
To which server should you deploy the feature?

HOTSPOT
Your network contains an Active Directory domain named contoso.com.
You create an organizational unit (OU) named OU1 and a Group Policy object (GPO) named GPO1. You link
GPO1 to OU1.
You move several file servers that store sensitive company documents to OU1. Each file server contains more
than 40 shared folders.
You need to audit all of the failed attempts to access the files on the file servers in OU1. The solution must
minimize administrative effort.
Which two audit policies should you configure in GPO1? To answer, select the appropriate two objects in the
answer area.
Hot Area:

HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains three servers
named Server2, Server3, and Server4.
Server2 and Server4 host a Distributed File System (DFS) namespace named Namespace1.
You open the DFS Management console as shown in the exhibit. (Click the Exhibit button.)

To answer, complete each statement according to the information presented in the exhibit. Each correct
selection is worth one point.
Hot Area:

Your network contains an Active Directory forest named contoso.com.
The domain contains three servers. The servers are configured as shown in the following table.

You need to identify which server role must be deployed to the network to support the planned implementation.
Which role should you identify?