Your network contains two Active Directory forests named contoso.com and dev.contoso.com. The
contoso.com forest contains a domain controller named DC1. The dev.contoso.com forest contains a domain
controller named DC2. Each domain contains an organizational unit (OU) named OU1.
Dev.contoso.com has a Group Policy object (GPO) named GPO1. GPO1 contains 200 settings, including
several settings that have network paths. GPO1 is linked to OU1.
You need to copy GPO1 from dev.contoso.com to contoso.com.
What should you do first on DC2?

Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows
Server 2012 R2. The domain contains 500 client computers that run Windows 8 Enterprise.
You implement a Group Policy central store.
You have an application named App1. App1 requires that a custom registry setting be deployed to all of the
computers.
You need to deploy the custom registry setting. The solution must minimize administrator effort.
What should you configure in a Group Policy object (GPO)?

DRAG DROP
Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows
Server 2012 R2.
The domain contains an organizational unit (OU) named OU1. OU1 contains an OU named OU2. OU2 containsa user named user1.
User1 is the member of a group named Group1. Group1 is in the Users container.
You create five Group Policy objects (GPO). The GPOs are configured as shown in the following table.

The Authenticated Users group is assigned the default permissions to all of the GPOs.
There are no site-level GPOs.
You need to identify which three GPOs will be applied to User1 and in which order the GPOs will be applied to
User1.
Which three GPOs should you identify in sequence? To answer, move the appropriate three GPOs from the list
of GPOs to the answer area and arrange them in the correct order.
Select and Place:

Your network contains an Active Directory domain named adatum.com.A network administrator creates a Group Policy central store.
After the central store is created, you discover that when you create new Group Policy objects (GPOs), the
GPOs do not contain any Administrative Templates.
You need to ensure that the Administrative Templates appear in new GPOs.
What should you do?

Your network contains four Network Policy Server (NPS) servers named Server1, Server2, Servers, and
Server4.
Server1 is configured as a RADIUS proxy that forwards connection requests to a remote RADIUS server group
named Group1.
You need to ensure that Server2 and Server3 receive connection requests. Server4 must only receive
connection requests if both Server2 and Server3 are unavailable.
How should you configure Group1?

Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012
R2.
The domain contains a server named Server1 that has the Network Policy Server server role and the Remote
Access server role installed. The domain contains a server named Server2 that is configured as a RADIUS
server.
Server1 provides VPN access to external users.
You need to ensure that all of the VPN connections to Server1 are logged to the RADIUS server on Server2.
What should you run?

Your network contains an Active Directory domain named contoso.com. The domain contains a server named
Server1 that runs Windows Server 2012 R2 and has the Network Policy Server role service installed.
An administrator creates a RADIUS client template named Template1.
You create a RADIUS client named Client1 by using Template 1.
You need to modify the shared secret for Client1.
What should you do first?

HOTSPOT
Your network contains a RADIUS server named Server1.
You install a new server named Server2 that runs Windows Server 2012 R2 and has Network Policy Server
(NPS) installed.
You need to ensure that all accounting requests for Server2 are forwarded to Server1.
On Server2, you configure a Connection Request Policy.
What else should you configure on Server2? To answer, select the appropriate node in the answer area.
Hot Area:

You are a network administrator of an Active Directory domain named contoso.com.
You have a server named Server1 that runs Windows Server 2012 R2. Server1 has the DHCP Server server
role and the Network Policy Server role service installed.
You enable Network Access Protection (NAP) on all of the DHCP scopes on Server1. You need to create a
DHCP policy that will apply to all of the NAP non-compliant DHCP clients.
Which criteria should you specify when you create the DHCP policy?

HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains two servers
named Server1 and Server2. Server1 has the Network Policy Server server role installed. Server2 has the
DHCP Server server role installed. Both servers run Windows Server 2012 R2.
You are configuring Network Access Protection (NAP) to use DHCP enforcement.
You configure a DHCP scope as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that non-compliant NAP clients receive different DHCP options than compliant NAP clients.
What should you configure on each server? To answer, select the appropriate options for each server in the
answer area.
Hot Area: