You have a server named Server1.
You enable BitLocker Drive Encryption (BitLocker) on Server1.
You need to change the password for the trusted Platform Module (TPM) chip.
What should you run on Server1?

HOTSPOT
You have a server named Server1 that has the Network Policy and Access Services server role installed.
You plan to configure Network Policy Server (NPS) on Server1 to use certificate-based authentication for VPN
connections.
You obtain a certificate for NPS.
You need to ensure that NPS can perform certificate-based authentication.
To which store should you import the certificate? To answer, select the appropriate store in the answer area.
Hot Area:

Your network contains an Active Directory forest named contoso.com. The functional level of the forest is
Windows Server 2008 R2.
All of the user accounts in the marketing department are members of a group named Contoso\\MarketingUsers.
All of the computer accounts in the marketing department are members of a group named Contoso
\\MarketingComputers.
A domain user named User1 is a member of the Contoso\\MarketingUsers group. A computer named
Computer1 is a member of the Contoso\\MarketingComputers group.
You have four Password Settings objects (PSOs). The PSOs are defined as shown in the following table.

When User1 logs on to Computer1 and attempts to change her password, she receives an error message
indicating that her password is too short.
You need to tell User1 what her minimum password length is.
What should you tell User1?

HOTSPOT
Your network contains one Active directory forest named contoso.com. The forest contains a single domain. All
domain controllers are virtual machines that run Windows Server 2012 R2. The functional level of the domain
and the forest is Windows Server 2012 R2.
The forest contains the domain controllers configured as shown in the following table.

In the table below, select the domain controller that can be cloned by using domain controller cloning and select
the domain controller that must be online to perform domain controller cloning.
NOTE: Make only one selection in each column.
Hot Area:

Your network contains an Active Directory domain named contoso.com. The domain controllers in the domain
are configured as shown in the following table.

You deploy a new domain controller named DC3 that runs Windows Server 2012 R2.
You discover that you cannot create Password Settings objects (PSOs) by using Active Directory Administrative
Center.
You need to ensure that you can create PSOs from Active Directory Administrative Center.
What should you do?

Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. All
domain controllers run Windows Server 2012 R2.
The domain contains two domain controllers. The domain controllers are configured as shown in the following
table.

Active Directory Recycle Bin is enabled.
You discover that a support technician accidentally removed 100 users from an Active Directory group named
Group1 an hour ago.
You need to restore the membership of Group1.
What should you do?

You have a Windows Server Update Services (WSUS) server named Server1. Server1 synchronizes from
Microsoft Update.
You plan to deploy a new WSUS server named Server2. Server2 will synchronize updates from Server1.
Server2 will be separated from Server1 by a firewall.
You need to identify which port must be open on the firewall so that Server2 can synchronize the updates.
Which port should you identify?

Your network contains one Active Directory domain named contoso.com. The forest functional level is Windows
Server 2012. All servers run Windows Server 2012 R2. All client computers run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All
domain controllers and RODCs are hosted on a Hyper-V host that runs Windows Server 2012 R2.
You need to identify whether the members of the Protected Users group will be prevented from authenticating
by using NTLM.
Which cmdlet should you use?

You have a DNS server named Server1 that runs Windows Server 2012 R2.
On Server1, you create a DNS zone named contoso.com.
You need to specify the email address of the person responsible for the zone.Which type of DNS record should you configure?

Your network contains one Active Directory domain named contoso.com.
You pilot DirectAccess on the network.
During the pilot deployment, you enable DirectAccess only for a group named Contoso\\Test Computers.
Once the pilot is complete, you need to enable DirectAccess for all of the client computers in the domain. What
should you do?