Your network contains an Active Directory domain named contoso.com. The domain contains an organizational
unit (OU) named 0U1.
You have a Group Policy object (GPO) named GP01 that is linked to contoso.com. GPO1 contains custom
security settings.
You need to design a Group Policy strategy to meet the following requirements:
– The security settings in GPO1 must be applied to all client computers.
– Only GPO1 and other GPOs that are linked to OU1 must be applied to the client computers in OU1.
What should you include in the design?
More than one answer choice may achieve the goal. Select the BEST answer.

A new company registers the domain name of contoso.com. The company has a web presence on the Internet.
All Internet resources have names that use a DNS suffix of contoso.com.
A third-party hosts the Internet resources and is responsible for managing the contoso.com DNS zone onthe
Internet. The zone contains several hundred records.
The company plans to deploy an Active Directory forest.
You need to recommend an Active Directory forest infrastructure to meet the following requirements:
– Ensure that users on the internal network can resolve the names of the company’s Internet resources.
– Minimize the amount of administrative effort associated with the addition of new Internet servers.
What should you recommend?

Your network contains an internal network and a perimeter network. The internal network contains an Active
Directory forest named contoso.com. The forest contains a Microsoft Exchange Server 2010 organization.All of
the domain controllers in contoso.com run Windows Server 2012.
The perimeter network contains an Active Directory forest named litware.com.
You deploy Microsoft Forefront Unified Access Gateway (UAG) to litware.com. All of the domain controllers in
litware.com run Windows Server 2012.
Some users connect from outside the network to use Outlook Web App.
You need to ensure that external users can authenticate by using client certificates.
What should you do?
More than one answer choice may achieve the goal. Select the BEST answer.

Your company, which is named Contoso, Ltd., has a main office and two branch offices. The main office is
located in North America. The branch offices are located in Asia and Europe.
You plan to design an Active Directory forest and domain infrastructure.
You need to recommend an Active Directory design tomeet the following requirements:
– The contact information of all the users in the Europe office must not be visible to the users in the other
offices.
– The administrators in each office must be able tocontrol the user settings and the computer settings of the
users in their respective office.
The solution must use the least amount of administrative effort.
What should you include in the recommendation?

You plan to deploy multiple servers in a test environment by using Windows Deployment Services (WDS).
You need to identify which network services must beavailable in the test environment to deploy the servers.
Which network services should you identify? (Each correct answer presents part of the solution.
Choose ail that apply.)

Your network contains an Active Directory forest named contoso.com. The forest is managed by using
Microsoft System Center 2012.
Web developers must be able to use a self-service portal to request the deployment of virtual machinesbased
on predefined templates. The requests must be approved by an administrator before the virtual machinesare
deployed.
You need to recommend a solution to deploy the virtual machines.
What should you include in the recommendation?
More than one answer choice may achieve the goal. Select the BEST answer.

Your network contains an Active Directory forest named contoso.com.
You plan to add a new domain named child.contoso.com to the forest.
On the DNS servers in child.contoso.com, you plan to create conditional forwarders that point to the DNS
servers in contoso.com.
You need to ensure that the DNS servers in contoso.com can resolve names for the servers in
child.contoso.com.
What should you create on the DNS servers in contoso.com?

You have a server named Server1 that runs Windows Server 2012. Server1 has the DNS Server server role
installed.
You need to recommend changes to the DNS infrastructure to protect the cache from cache poisoning attacks.
What should you configure on Server1?

Your network contains a server named Server1 that runs Windows Server 2012. Server1 has the Network
Policy Server server rote installed.
You configure Server1 as part of a Network Access Protection (NAP) solution that uses the 802.lx enforcement
method.
You add a new switch to the network and you configure the switch to use 802.lx authentication.
You need to ensure that only compliant client computers can access network resources through the new
switch.
What should you do on Server1?

Your network contains an Active Directory domain named contoso.com. All client computers run either
Windows 7 or Windows 8.
Some users work from customer locations, hotels, and remote sites. The remote sites often have firewalls that
limit connectivity to the Internet.
You need to recommend a VPN solution for the users.
Which protocol should you include in the recommendation?