You need to ensure that the adatum.com users can access…
Your network contains an Active Directory forest named contoso.com. The forest contains three domains. All
domain controllers run Windows Server 2012 R2.
The forest has a two-way realm trust to a Kerberos realm named adatum.com.
You discover that users in adatum.com can only access resources in the root domain of contoso.com.
You need to ensure that the adatum.com users can access the resources in all of the domains in the forest.
What should you do in the forest?
How should you configure the existing forest trust sett…
HOTSPOT
Your network contains three Active Directory forests. The forests are configured as shown in the following table.
A two-way forest trust exists between contoso.com and divisionl.contoso.com. A two-way forest trust also exists
between contoso.com and division2.contoso.com.
You plan to create a one-way forest trust from divisionl.contoso.com to division2.contoso.com.
You need to ensure that any cross-forest authentication requests are sent to the domain controllers in the
appropriate forest after the trust is created.
How should you configure the existing forest trust settings?
In the table below, identify which configuration must be performed in each forest. Make only one selection in
each column. Each correct selection is worth one point.
Hot Area:
which server should you run adprep.exe?
Your network contains an Active Directory forest named adatum.com. The forest contains a single domain. The
domain contains four servers. The servers are configured as shown in the following table.
You need to update the schema to support a domain controller that will run Windows Server 2012 R2.
On which server should you run adprep.exe?
You need to configure Server1 as a new domain controlle…
HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains domain
controllers that run either Windows Server 2003, Windows Server 2008 R2, or Windows Server 2012 R2.
You plan to implement a new Active Directory forest. The new forest will be used for testing and will be isolated
from the production network.
In the test network, you deploy a server named Server1 that runs Windows Server 2012 R2.
You need to configure Server1 as a new domain controller in a new forest named contoso.test.
The solution must meet the following requirements:
The functional level of the forest and of the domain must be the same as that of contoso.com.
Server1 must provide name resolution services for contoso.test.
What should you do?
To answer, configure the appropriate options in the answer area.
Hot Area:
You need to ensure that the migrated users can access t…
Your network contains two Active Directory forests named contoso.com and adatum.com. Contoso.com
contains one domain. Adatum.com contains a child domain named child.adatum.com.
Contoso.com has a one-way forest trust to adatum.com. Selective authentication is enabled on the forest trust.
Several user accounts are migrated from child.adatum.com to adatum.com. Users report that after the
migration, they fail to access resources in contoso.com. The users successfully accessed the resources in
contoso.com before the accounts were migrated.
You need to ensure that the migrated users can access the resources in contoso.com.
What should you do?
which node should you create the site link?
HOTSPOT
Your network contains an Active Directory forest named contoso.com that contains a single domain. The forest
contains three sites named Site1, Site2, and Site3.
Domain controllers run either Windows Server 2008 R2 or Windows Server 2012 R2.
Each site contains two domain controllers. Site1 and Site2 contain a global catalog server.
You need to create a new site link between Site1 and Site2. The solution must ensure that the site link supports
the replication of all the naming contexts.
From which node should you create the site link?
To answer, select the appropriate node in the answer area.
Hot Area:
Which tool should you use?
Your company recently deployed a new Active Directory forest named contoso.com. The first domain controller
in the forest runs Windows Server 2012 R2.
You need to identify the time-to-live (TTL) value for domain referrals to the NETLOGON and SYSVOL shared
folders.
Which tool should you use?
Which setting should you configure in each GPO?
DRAG DROP
Your network contains an Active Directory domain named contoso.com. All client computers run Windows 8.1.
Group Policy objects (GPOs) are linked to the domain as shown in the exhibit. (Click the Exhibit button.)
GPO2 contains computer configurations only and GPO3 contains user configurations only.
You need to configure the GPOs to meet the following requirements:
Ensure that GPO2 only applies to the computer accounts in OU2 that have more than one processor.
Ensure that GPO3 only applies to the user accounts in OU3 that are members of a security group named
SecureUsers.
Which setting should you configure in each GPO?
To answer, drag the appropriate setting to the correct GPO. Each setting may be used once, more than once,
or not at all. You may need to drag the split bar between panes or scroll to view content.
Select and Place:
Which three GPOs should you identify in sequence so tha…
DRAG DROP
Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows
Server 2012 R2.
The domain contains an organizational unit (OU) named OU1. OU1 contains an OU named OU2. OU2 contains
a user named User1.
User1 is the member of a group named Group1. Group1 is in the Users container.
You create five Group Policy objects (GPO). The GPOs are configured as shown in the following table.
The Authenticated Users group is assigned the default permissions to all of the GPOs.
There are no site-level GPOs.
You need to identify which three GPOs will be applied to User1 and in which order the GPOs will be applied to
User1.
Which three GPOs should you identify in sequence so that the GPO that is processed first is at the top of the
list? To answer, move the appropriate three GPOs from the list of GPOs to the answer area and arrange them
in the correct order.
Select and Place:
What should you tell the network technician to do to en…
A technician installs a new server that runs Windows Server 2012 R2.
During the installation of Windows Server Update Services (WSUS) on the new server, the technician reports
that on the Choose Languages page of the Windows Server Update Services Configuration Wizard, the only
available language is English.
The technician needs to download updates in French and English.
What should you tell the network technician to do to ensure that the required updates are available?