Your network contains an internal network and a perimeter network. The internal network contains an
Active Directory forest named contoso.com. The forest contains a Microsoft Exchange Server 2010
organization. All of the domain controllers in contoso.com run Windows Server 2012.
The perimeter network contains an Active Directory forest named litware.com.
You deploy Microsoft Forefront Unified Access Gateway (UAG) to litware.com. All of the domain
controllers in litware.com run Windows Server 2012.
Some users connect from outside the network to use Outlook Web App.
You need to ensure that external users can authenticate by using client certificates.
What should you do?
More than one answer choice may achieve the goal. Select the BEST answer.

DRAG DROP
Your network contains an Active Directory forest. The forest contains two domains named contoso.com
and fabrikam.com.
You plan to decommission the fabrikam.com domain.
You need to perform the following migration tasks:
 Copy user accounts from the fabrikam.com domain to the contoso.com
domain.
 Move the client computers from fabrikam.com to contoso.com.
The solution must ensure that all of the user profiles are associated to the migrated user accounts.
Which tool should you use to perform each task?
To answer, drag the appropriate tool to the correct migration task in the answer area. Each tool may be
used once, more than once, or not at all. Additionally, you may need to drag the split bar between panes
or scroll to view content.

HOTSPOT
Your network contains an Active Directory forest named contoso.com. The forest contains one domain.
All domain controllers run Windows Server 2012. The functional level of the forest and the domain is
Windows Server 2012.
The domain contains three domain controllers. The domain controllers are configured as shown in the
following table.

In the forest, you plan to add a new domain controller that runs Windows Server 2012 R2.
You need to prepare the environment before you add the new domain controller.
Which domain controllers must be available to run each command? To answer, select the appropriate
domain controllers in the answer area.

You are designing an Active Directory forest for a company named Contoso, Ltd. Contoso identifies the
following administration requirements for the design:
 User account administration and Group Policy administration will be
performed by network technicians. The technicians will be added to a group
named OUAdmins.
 IT staff who are responsible for backing up servers will have user
accounts that are members of the Backup Operators group in the domain.
 All user accounts will be located in an organizational unit (OU) named
AllEmployees.
You run the Delegation of Control Wizard and assign the OUAdmins group full control to all of the objects
in the AllEmployeesOU.
After delegating the required permissions, you discover that the user accounts of some of the IT staff
have inconsistent permissions on the objects in AllEmployees.
You need to recommend a solution to ensure that the members of OUAdmins can manage all of the
objects in AllEmployees.
What should you include in the recommendation?

Your network contains an Active Directory forest named contoso.com. The forest contains one domain.
Your company plans to open a new division named Division1. A group named Division1Admins will
administer users and groups for Division1.
You identify the following requirements for Division1:
 All Division1 users must have a complex password that is 14 characters.
 Division1Admins must be able to manage the user accounts for
Division1.
 Division1Admins must be able to create groups, and then delete the
groups that they create.
 Division1Admins must be able to reset user passwords and force a
password change at the next logon for all Division1 users.
You need to recommend changes to the forest to support the Division1 requirements.
What should you recommend?
More than one answer choice may achieve the goal. Select the BEST answer.

Your company, which is named Contoso, Ltd., has a main office and two branch offices. The main office is
located in North America. The branch offices are located in Asia and Europe.You plan to design an Active Directory forest and domain infrastructure.
You need to recommend an Active Directory design to meet the following requirements:
* The contact information of all the users in the Europe office must not be visible to the users in the
other offices.
* The administrators in each office must be able to control the user settings and the computer settings
of the users in their respective office.
The solution must use the least amount of administrative effort.
What should you include in the recommendation?

Your network contains 50 servers that run Windows Server 2003 and 50 servers that run Windows Server
2008.
You plan to implement Windows Server 2012 R2.
You need to create a report that includes the following information:
 The servers that run applications and services that can be moved to
Windows Server 2012 R2
 The servers that have hardware that can run Windows Server 2012 R2
 The servers that are suitable to be converted to virtual machines hosted
on Hyper-V hosts that run Windows Server 2012 R2Solution: From an existing server, you run the Microsoft Application Compatibility Toolkit (ACT).
Does this meet the goal?

Your network contains an Active Directory domain named contoso.com. The domain contains multiple
sites.
You plan to deploy DirectAccess.
The network security policy states that when client computers connect to the corporate network from
the Internet, all of the traffic destined for the Internet must be routed through the corporate network.
You need to recommend a solution for the planned DirectAccess deployment that meets the security
policy requirement.
Solution: You enable force tunneling.
Does this meet the goal?

Your network contains an Active Directory domain named contoso.com. The domain contains three
VLANs. The VLANs are configured as shown in the following table.

All client computers run either Windows 7 or Windows 8.
The corporate security policy states that all of the client computers must have the latest security updates
installed.
You need to implement a solution to ensure that only the client computers that have all of the required
security updates installed can connect to VLAN 1. The solution must ensure that all other client
computers connect to VLAN 3.
Solution: You implement the IPsec enforcement method.
Does this meet the goal?

Your network contains an Active Directory forest named contoso.com.
You plan to deploy 200 Hyper-V hosts by using Microsoft System Center 2012 Virtual Machine Manager
(VMM) Service Pack 1 (SP1).
You add a PXE server to the fabric.
You need to identify which objects must be added to the VMM library for the planned deployment.
What should you identify? (Each correct answer presents part of the solution. Choose all that apply.)