Your network contains an Active Directory domain named contoso.com. The domain contains three
VLANs. The VLANs are configured as shown in the following table.

All client computers run either Windows 7 or Windows 8.
Goal: You need to implement a solution to ensure that only the client computers that have all of the
required security updates installed can connect to VLAN 1. The solution must ensure that all other client
computers connect to VLAN 3.
Solution: You implement the 802.1x Network Access Protection (NAP) enforcement method.
Does this meet the goal?

Your network contains an Active Directory domain named contoso.com. The domain contains three
VLANs. The VLANs are configured as shown in the following table.

All client computers run either Windows 7 or Windows 8.
The corporate security policy states that all of the client computers must have the latest security updates
installed.
You need to implement a solution to ensure that only the client computers that have all of the required
security updates installed can connect to VLAN 1. The solution must ensure that all other client
computers connect to VLAN 3.
Solution: You implement the VPN enforcement method.
Does this meet the goal?

Your network contains an Active Directory domain named contoso.com. The domain contains three
VLANs. The VLANs are configured as shown in the following table.

All client computers run either Windows 7 or Windows 8.
The corporate security policy states that all of the client computers must have the latest security updates
installed.
You need to implement a solution to ensure that only the client computers that have all of the required
security updates installed can connect to VLAN 1. The solution must ensure that all other client
computers connect to VLAN 3.
Solution: You implement the DHCP Network Access Protection (NAP) enforcement method.
Does this meet the goal?

Your network contains a server named Server1 that runs Windows Server 2012. Server1 has the Network
Policy Server server role installed.
You configure Server1 as part of a Network Access Protection (NAP) solution that uses the 802.lx
enforcement method,
You add a new switch to the network and you configure the switch to use 802.lx authentication.
You need to ensure that only compliant client computers can access network resources through the new
switch.
What should you do on Server1?

Your network contains an Active Directory domain named contoso.com.
Your company has 100 users in the sales department. Each sales user has a domain-joined laptop
computer that runs either Windows 7 or Windows 8. The sales users rarely travel to the company’s
offices to connect directly to the corporate network.
You need to recommend a solution to ensure that you can manage the sales users’ laptop computers
when the users are working remotely.
What solution should you include in the recommendation?

HOTSPOT
Your network contains an Active Directory domain named contoso.com.
The domain has a certification authority (CA). You create four certificate templates. The templates are
configured as shown in the following table:

You install the Remote Access server role in the domain.
You need to configure DirectAccess to use one-time password (OTP) authentication.
What should you do? To answer, select the appropriate options in the answer area,

Your network contains an Active Directory domain. All servers run Windows Server 2012 R2.
The domain contains the servers shown in the following table.

You need to recommend which servers will benefit most from implementing data deduplication.
Which servers should you recommend?

DRAG DROP
Your network contains an Active Directory domain named contoso.com. The domain contains a server
named Server1 that runs Windows Server 2012. Server1 resides in the perimeter network and has the
Remote Access server role installed.
Some users have laptop computers that run Windows 7 and are joined to the domain. Some users work
from home by using their home computers. The home computers run either Windows XP, Windows
Vista/ Windows 7, or Windows 8.
You need to configure the computers for remote access.
Which three actions should you perform?
To answer, move the three appropriate actions from the list of actions to the answer area and arrange
them in the correct order.

DRAG DROP
Your network contains an Active Directory domain named contoso.com. The domain contains five
servers. The servers are configured as shown in the following table.

You plan to implement Network Access Protection (NAP) with IPSec enforcement on all client computers.
You need to identify on which servers you must perform the configurations for the NAP deployment.
Which servers should you identify? To answer, drag the appropriate servers to the correct actions. Each
server may be used once, more than once, or not at all. You may need to drag the split bar between
panes or scroll to view content.)

DRAG DROP
Your company plans to deploy a remote access solution to meet the following requirements:
 Ensure that client computers that are connected to the Internet can be
managed remotely without requiring that the user log on.
 Ensure that client computers that run Windows Vista or earlier can
connect remotely.
 Ensure that non-domain-joined computers can connect remotely by
using TCP port 443.
You need to identify which remote access solutions meet the requirements.
Which solutions should you identify?
To answer, drag the appropriate solution to the correct requirement in the answer area. Each solution
may be used once, more than once, or not at all. Additionally, you may need to drag the split bar
between panes or scroll to view content.