This question is part of a series of questions that present the same scenario. Each question in the
series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.
After your answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com.
You need to identify which server is the schema master.
Solution: From a command prompt, you run netdom query fsmo.
Does this meet the goal?

Your network contains an Active Directory forest named contoso.com.
You need to identify which server is the schema master.
Solution: You open Active Directory Users and Computers, right-click contoso.com in the console tree, and then
click Operations Master.
Does this meet the goal?

You have two servers named Server1 and Server2. A firewall exists between Server1 and Server2.
Both servers run Windows Server Update Services (WSUS). Server1 downloads updates from Microsoft
update.
Server2 must synchronize updates from Server1.
Which port should to open on the firewall?

You have a server named Server1.
You enable BitLocker Drive Encryption (BitLocker) on Server1.
You need to change the password for the Trusted Platform Module (TPM) chip.
What should you run on Server1?

Your Network contains one Active Directory domain named contoso.com.
You pilot DirectAccess on the network.
During the pilot deployment, you enable DirectAccess only for a group Contoso\\Test Computers.
Once the pilot is complete, you need to enable DirectAccess for all the client computers in the domain.
What should you do?

Your network contains an Active Directory domain named contoso.com. The domain contains a DNS servernamed Server1. All client computers run Windows 10.
On Server1, you have the following zone configuration

You need to prevent Server1 from resolving queries from DNS clients located on Subnet4.
Server1 must resolve queries from all other DNS clients.
Solution: From Windows PowerShell on Server1, you run the Export-DnsServerDnsSecPublicKey cmdlet.
Does this meet the goal?

Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server
named Server1. All client computers run Windows 10.
On Server1, you have the following zone configuration.

You need to prevent Server1 from resolving queries from DNS clients located on Subnet4. Server1 must
resolve queries from all other DNS clients.
Solution: From windows PowerShell on Server1, you run the Add-DnsServerTrust Anchor cmdtel.
Does this meet the goal?

Active Directory Recycle Bin is enabled. You discover that a support technician accidentally removed 100 users
from an Active Directory group named Group1 an hour ago. You need to restore the membership of Group1.
What should you do?

You deploy a Hyper-V server named Server1 in an isolated test environment. The test environment is prevented from accessing the Internet. Server1 runs the Datacenter edition of Windows Server 2016.
You plan to deploy the following guest virtual machines on the server:

Which activation model should you use for the virtual machines?

DRAG DROP
You have a Hyper-V host named Server1 that runs Windows Server 2016.
The installation source files for Windows Server 2016 are located in D:\\Source.
You need to create a Nano Server image.
Which cmdlets should you run? To answer, drag the appropriate cmdlets to the correct targets. Each cmdlet may be used once, more than once, or not at all. You may need to drag the split bat between panes or scroll to view content.
Select and Place: