Your network contains an Active Directory forest named contoso.com.

You have an Active Directory Federation Services (AD

FS) farm. The farm contains a server named Server1 that runs Windows Server 2012 R2.

You add a server named Server2 to the farm. Server2 runs Windows Server 2016.

You remove Server1 from the farm.

You need to ensure that you can use role separation to man

age the farm.

Which cmdlet should you run?

A.

Set-AdfsFarmInformation

B.

Update-AdfsRelyingPartyTrust

C.

Set-AdfsProperties

D.

Invoke-AdfsFarmBehaviorLevelRaise

Your network contains an Active Directory forest named contoso.com

.

Your company

plans to hire 500 temporary employees for a project that will last 90 days.

You create a new user account for each employee. An organizational unit (OU) named Temp contains the user accounts for the employees.

You need to prevent the new users from acces

sing any of the resources in the domain after 90 days.

What should you do?

A. Run the

Get-ADUser

cmdlet and pipe the output to the

Set-ADUser

cmdlet.

B. Create a group that contains all of the users in the Temp OU. Create a Password Setting object (PSO)

for the new group.

C. Create a Group Policy object (GPO) and link the GPO to the Temp OU. Modify the Password Policy settings of the GPO.

D. Run the

Get-ADOrganizationalUnit

cmdlet and pipe the output to the

Set-Date

cmdlet.

Your network contains an Active Directory forest named contoso.com.

A partner company has a forest named fabrikam.com. Each forest contains one domain.

You need to provide access for a group named Research in fabrik

am.com to resources in contoso.com. The solution must use the principle of least privilege.

What should you do?

A. Create an external trust from fabrikam.com to contoso.com. Enable Active Directory split permissions in fabrikam.com.

B. Create an external

trust from contoso.com to fabrikam.com. Enable Active Directory split permissions in contoso.com.

C. Create a one-way forest trust from contoso.com to fabrikam.com that uses selective authentication.

D. Create a one-way forest trust from fabrikam.com to c

ontoso.com that uses selective authentication.