Drag and Drop Question
Your company has multiple offices. The network contains an Active Directory domain named
contoso.com. An Active Directory site exists for each office. All of the sites connect to each other
by using DEFAULTIPSITELINK. The company plans to open a new office. The new office will have
a domain controller and 100 client computers. You install Windows Server 2016 on a member
server in the new office. The new server will become a domain controller. You need to deploy the
domain controller to the new office. The solution must ensure that the client computers in the new
office will authenticate by using the local domain controller. Which three actions should you perform
next in sequence? To answer, move the appropriate actions from the list of actions to the answer
area and arrange them in the correct order.

Note: This question is part of a series of questions that present the same scenario. Each question
in the series contains a unique solution that might meet the stated goals. Some question sets might
have more than one correct solution, while others might not have a correct solution. After you
answer a question in this section, you will NOT be able to return to it. As a result, these questions
will not appear in the review screen. Your network contains an Active Directory forest named
contoso.com. The forest contains a member server named Server1 that runs Windows Server 2016.
All domain controllers run Windows Server 2012 R2. Contoso.com has the following configuration:
PS C:\\> (Get-ADForest).ForestMode
Windows2008R2Forest
PS C:\\> (Get-ADDomain).DomainMode
Windows2008R2Domain
PS C:\\>
You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to
configure device registration. You need to configure Active Directory to support the planned
deployment. Solution: You upgrade a domain controller to Windows Server 2016. Does this meet
the goal?

You network contains an Active Directory domain named contoso.com. The domain contains 1,000
desktop computers and 500 laptops. An organizational unit (OU) named OU1 contains the
computer accounts for the desktop computers and the laptops. You create a Windows PowerShell
script named Script1.ps1 that removes temporary files and cookies. You create a Group Policy
object (GPO) named GPO1 and link GPO1 to OU1. You need to run the script once weekly only
on the laptops. What should you do?

Your network contains an Active Directory forest named contoso.com. The forest contains a single
domain. The domain contains a server named Server1. An administrator named Admin01 plans to
configure Server1 as a standalone certification authority (CA). You need to identify to which group
Admin01 must be a member to configure Server1 as a standalone CA. The solution must use the
principle of least privilege. To which group should you add Admin01?

Note: This question is part of a series of questions that present the same scenario. Each question
in the series contains a unique solution that might meet the stated goals. Some question sets might
have more than one correct solution, while others might not have a correct solution. After you
answer a question in this section, you will NOT be able to return to it. As a result, these questions
will not appear in the review screen. Your network contains an Active Directory forest named
contoso.com. The forest contains a member server named Server1 that runs Windows Server 2016.
All domain controllers run Windows Server 2012 R2. Contoso.com has the following configuration:
PS C:\\> (Get-ADForest).ForestMode
Windows2008R2Forest
PS C:\\> (Get-ADDomain).DomainMode
Windows2008R2Domain
PS C:\\>
You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to
configure device registration. You need to configure Active Directory to support the planned
deployment. Solution: You raise the domain functional level to Windows Server 2012 R2. Does this
meet the goal?

You have a server named Server1 that runs Windows Server 2016. You need to configure Server1
as a Web Application Proxy. Which server role or role service should you install on Server1?