Your network contains one Active Directory domain named contoso.com. The forest functional level is Windows
Server 2012. All servers run Windows Server 2012 R2. All client computers run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All
domain controllers and RODCs are hosted on a Hyper-V host that runs Windows Server 2012 R2.
You need to identify whether the members of the Protected Users group will be prevented from authenticating
by using NTLM.
Which cmdlet should you use?

You have a DNS server named Server1 that runs Windows Server 2012 R2.
On Server1, you create a DNS zone named contoso.com.
You need to specify the email address of the person responsible for the zone.Which type of DNS record should you configure?

Your network contains one Active Directory domain named contoso.com.
You pilot DirectAccess on the network.
During the pilot deployment, you enable DirectAccess only for a group named Contoso\\Test Computers.
Once the pilot is complete, you need to enable DirectAccess for all of the client computers in the domain. What
should you do?

HOTSPOT
Your network contains one Active Directory forest named contoso.com.
All client computers for the sales department are in an organizational unit (OU) named Sales. All of the sales
department computers run Windows 8.1.
You plan to use Group Policy preferences to map several drives on the sales department computers.
You need to perform the following actions:
Create a drive mapping on all of the sales department computers for drive X. If drive X already exists, the
current drive mapping should NOT be modified.
Create a drive mapping on all of the sales department computers for drive Y. If drive Y already exists, the
UNC path must be modified, but all other settings must be maintained.
Which action should you use for each drive mapping? To answer, select the appropriate options in the answer
area.
Hot Area:

DRAG DROP
Your network contains a production Active Directory forest named contoso.com and a test Active Directory
forest named test.contoso.com. There is no network connectivity between contoso.com and test.contoso.com.
The test.contoso.com domain contains a Group Policy object (GPO) named GPO1.
You need to apply the settings in GPO1 to the contoso.com domain.
Which four actions should you perform?
To answer, move the four appropriate actions from the list of actions to the answer area and arrange them in
the correct order.
Select and Place:

Your network contains an Active Directory domain named contoso.com. The domain contains an organizational
unit (OU) named AllServers_OU.
You create and link a Group Policy object (GPO) named GPO1 to AllServer_OU. GPO1 is configured as shown
in the exhibit. (Click the Exhibit button.)

You need to ensure that GPO1 only applies to servers that have Remote Desktop Services (RDS) installed.
What should you configure?

Your network contains one Active Directory forest named contoso.com.
You create a starter Group Policy Object (GPO) named Starter_GPO1.
From the Delegation tab of Starter_GPO1, you add a group named GPO_Admins and you assign the Edit
settings permissions to the group.
You create a new GPO named GPO1 from Starter_GPO1.
You need to identify which action can be performed by the members of the GPO_Admins group.
What should you identify?

HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains a file server
named Server1. All servers run Windows Server 2012 R2.
You have two user accounts named User1 and User2. User1 and User2 are members of a group named
Group1. User1 has the Department value set to Sales. User2 has the Department value set to Marketing.
User1 has the Employee Type value set to Full Time Employee. User2 has the Employee Type value set to
Contract Employee.
You create the auditing entry as shown in the exhibit. (Click the Exhibit button.)

Use the drop-down menus to select the answer choice that completes each statement based on the information
presented in the exhibit.
Note: Each correct selection is worth one point.
Hot Area:

HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains servers named
Server1 and Server2. Both servers have the DFS Replication role service installed.
You need to configure the DFS Replication environment to meet the following requirements:
• Increase the quota limit of the staging folder.
• Prevent.exe files from being replicated to all folders in a replication group.
Which cmdlets should you use to meet each requirement? To answer, select the appropriate options in the
answer area.
Hot Area:

Your network contains one Active Directory domain named controso.com. The domain contains a file server
named Server01 that runs Windows Server 2012 R2. Server01 has an operating system drive and a data drive.
Server01 has a Trusted Platform Module (TPM).
You need to enable BitLocker Drive Encryption (BitLocker) for the data drive on Server01.
Which cmdlet should you run first?