Active Directory Recycle Bin is enabled. You discover that a support technician accidentally
removed 100 users from an Active Directory group named Group1 an hour ago. You need to restore
the membership of Group1. What should you do?

In this section, you’ll see one or more sets of questions with the same scenario and problem. Each
question presents a unique solution to the problem, and you must determine whether the solution
meets the stated goals. Any of the solutions might solve the problem. It is also possible that none
of the solutions solve the problem. Once you answer a question in this section, you will NOT be
able to return to it. As a result, these questions will not appear in the review screen.
Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution. Determine whether the solution meets the
stated goals.
Your network contains an Active Directory domain named contoso.com. The domain contains a
DNS server named Server1. All client computers run Windows 10. On Server1, you have the
following zone configuration.

You need to prevent Server1 from resolving queries from DNS clients located on Subnet4. Server1
must resolve queries from all other DNS clients. Solution: From a Group Policy object (GPO) in the
domain, you modify the Network List Manager Policies. Does this meet the goal?

Note: This question is part of a series of questions that use the same similar answer choices.
An answer choice may be correct for more than one question in the series. Each question
is independent of the other questions in this series. Information and details provided in a
question apply only to that question.
You have a Hyper-V host named Server1 that runs Windows Server 2016 and a two-node scaleout file server cluster named Cluster1. A virtual machine named VM1 runs on Server1. You need

to migrate the storage on VM1 to Cluster1. Which tool should you use?

Hotspot Question
Your network contains an Active Directory forest named contoso.com. The forest contains an Active
Directory Federation Services (AD FS) farm. You install Windows Server 2016 on a server named
Server2. You need to configure Server2 as a node in the federation server farm. Which cmdlets
should you run? To answer, select the appropriate options in the answer area.

In this section, you’ll see one or more sets of questions with the same scenario and problem. Each
question presents a unique solution to the problem, and you must determine whether the solution
meets the stated goals Any of the solutions might solve the problem. It is also possible that none
of the solutions solve the problem. Once you answer a question in this section, you will NOT be
able to return to it. As a result, these questions will not appear in the review screen.
Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution Determine whether the solution meets the
stated goals.
Your network contains an Active Directory forest named contoso.com. The forest contains a
member server named Server1 that runs Windows Server 2016. All domain controllers run
Windows Server 2012 R2. contoso.com has the following configuration.

You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to
configure device registration. You need to configure Active Directory to support the planned
deployment. Solution: You raise the domain functional level to Windows Server 2012 R2. Does this
meet the goal?

In this section, you’ll see one or more sets of questions with the same scenario and problem. Each
question presents a unique solution to the problem, and you must determine whether the solution
meets the stated goals Any of the solutions might solve the problem. It is also possible that none
of the solutions solve the problem. Once you answer a question in this section, you will NOT be
able to return to it. As a result, these questions will not appear in the review screen.
Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution Determine whether the solution meets the
stated goals.
Your network contains an Active Directory forest named contoso.com. The forest contains a
member server named Server1 that runs Windows Server 2016. All domain controllers run
Windows Server 2012 R2. contoso.com has the following configuration.

You plan to deploy an Active Directory Federation Services (AD FS) farm on Served and to
configure device registration. You need to configure Active Directory to support the planned
deployment. Solution: You upgrade a domain controller to Windows Server 2016. Does this meet
the goal?

Note: This question is part of a series of questions that use the same similar answer choices.
An answer choice may be correct for more than one question in the series. Each question
is independent of the other questions in this series. Information and details provided in a
question apply only to that question.
You have two servers named Server1 and Server2 that run Windows Server 2016 Server1 and
Server2 have the Hyper-V server role installed. An iSCSI SAN connects to the network. You create
a LUN on the SAN and configure both servers to connect to the iSCSI target. You create a failover
cluster and add Server1 and Server2 to the cluster. You connect both servers to the iSCSI target
and format the shared storage. You need to add the shared storage to the cluster. The solution
must ensure that virtual machines running on both nodes can access the shared storage
simultaneously. Which tool should you use?

Note: This question is part of a series of questions that use the same similar answer choices.
An answer choice may be correct for more than one question in the series. Each question
is independent of the other questions in this series. Information and details provided in a
question apply only to that question.
You have three servers named Server1, Server2. Server3 that run Windows Server 2016 Server1
and Server2 have the Hyper-V server role installed. Server3 has the iSCSI Target Server role
service installed. You need to create a Hyper-V cluster. Which tool should you use first?

Your network contains an Active Directory forest named contoso.com. The forest contains a
member server named Server1 that runs Windows Server 2016 Server1 is located in the perimeter
network. You install the Active Directory Federation Services server role on Server1. You create
an Active Directory Federation Services (ADFS) farm by using a certificate that has a subject name
of sts.contoso.com. You need to enable certificate authentication from the Internet on Server1.
Which two inbound TCP ports should you open on the firewall? Each correct answer presents part
of the solution?

Hotspot Question
You have a server named Server1 that runs Windows Server 2016. Server1 has the Windows
Application proxy role service installed. You plan to deploy Remote Desktop Gateway (RD Gateway)
services. Clients will connect to the RD Gateway services by using various types of devices
including Windows, iOS and Android devices. You need to publish the RD Gateway services
through the Web Application Proxy. Which command should you run? To answer, select the
appropriate options in the answer area.