Your network contains an Active Directory domain.
You plan to implement a remote access solution that will contain three servers that run Windows Server
2012. The servers will be configured as shown in the following table.

Server1 will support up to 200 concurrent VPN connections.
You need to ensure that all VPN connection requests are authenticated and authorized by either Server2
or Server3. The solution must ensure that the VPN connections can be authenticated if either Server2 or
Server3 fails.
What should you do?

HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains four
servers. The servers are configured as shown in the following table.

You plan to provide users with the ability to use Workplace Join for their personal device when they
connect to the internal network.
You need to recommend a certificate configuration for the planned deployment.
What should you include in the recommendation? To answer, select the appropriate names in the
answer area.

Your network contains an Active Directory domain named contoso.com.
All client computers run either Windows 7 or Windows 8.
Some users work from customer locations, hotels, and remote sites. The remote sites often have
firewalls that limit connectivity to the Internet.You need to recommend a VPN solution for the users.
Which protocol should you include in the recommendation?

Your network contains a server named Server1 that runs Windows Server 2012. Server1 has the DHCP
Server server role installed.
All of the client computers that are in a subnet named Subnet1 receive their IP address configurations
from Server1.
You plan to add another DHCP server named Server2 to Subnet1.
You need to recommend changes to the DHCP infrastructure to ensure that the client computers
continue to receive IP addressing information if a single DHCP server fails.
What should you do?
More than one answer choice may achieve the goal. Select the BEST answer.

Your network contains an Active Directory forest that has two domains named contoso.com and
europe.contoso.com. The forest contains five servers. The servers are configured as shown in the
following table.

You plan to manage the DHCP settings and the DNS settings centrally by using IP Address Management
(IPAM).
You need to ensure that you can use IPAM to manage the DHCP and DNS settings in both domains. The
solution must use the minimum amount of administrative effort.
What should you do?

DRAG DROP
Your network contains an Active Directory forest named adatum.com. The forest contains a single
domain. All servers run Windows Server 2012 R2. All client computers run Windows 8.1.
The DNS zone of adatum.com is Active Directory-integrated.
You need to implement DNSSEC to meet the following requirements:
 Ensure that the zone is signed.
 Ensure that the zone signing key (ZSK) changes every 30 days.
 Ensure that the key signing key (KSK) changes every 365 days.
What should you do? To answer, drag the appropriate cmdlets to the correct requirements. Each cmdlet
may be used once, more than once, or not at all. You may need to drag the split bar between panes or
scroll to view content.

Your network contains a server named Server1 that runs Windows Server 2012. Server1 has the DHCP
Server server role installed. The network contains a Virtual Desktop Infrastructure (VDI).
All virtual machines run Windows 8.
You identify the following requirements for allocating IPv4 addresses to client computers:
All virtual desktops must have static IP addresses.
All laptop computers must receive dynamic IP addresses.
All virtual desktops must be prevented from obtaining dynamic address.
You need to recommend a DHCP solution that meets the requirements for allocating IPv4 addresses.
The solution must use the least amount of administrative effort.
What should you recommend?
More than one answer choice may achieve the goal. Select the BEST answer.

Your network contains an Active Directory forest named contoso.com.
You plan to add a new domain named child.contoso.com to the forest.
On the DNS servers in child.contoso.com, you plan to create conditional forwarders that point to the
DNS servers in contoso.com.
You need to ensure that the DNS servers in contoso.com can resolve names for the servers in
child.contoso.com.
What should you create on the DNS servers in contoso.com?

DRAG DROP
Your network contains an Active Directory forest named corp.contoso.com. All servers run Windows
Server 2012.
The network has a perimeter network that contains servers that are accessed from the Internet by using
the contoso.com namespace.
The network contains four DNS servers. The servers are configured as shown in the following table.

All of the client computers on the perimeter network use Server1 and Server2 for name resolution.
You plan to add DNS servers to the corp.contoso.com domain.
You need to ensure that the client computers automatically use the additional name servers. The
solution must ensure that only computers on the perimeter network can resolve names in the
corp.contoso.com domain.Which DNS configuration should you implement on Server1 and Server2?
To answer, drag the appropriate DNS configuration to the correct location in the answer area. Each DNS
configuration may be used once, more than once, or not at all. Additionally, you may need to drag the
split bar between panes or scroll to view content.

Your company has a main office, ten regional datacenters and 100 branch offices.
You are designing the site topology for an Active Directory forest named contoso.com.
The forest will contain the following servers:
* In each regional datacenter and in the main office, a domain controller that runs Windows Server 2012
* In each branch office, a file server that runs Windows Server 2012
You have a shared folder that is accessed by using the path \\\\contoso.com\\shares\\software. The folder
will be replicated to a local file server in each branch office by using Distributed File System (DFS)
replication.
You need to recommend an Active Directory site design to meet the following requirements:
* Ensure that users in the branch offices will be authenticated by a domain controller in the closest
regional datacenter.
* Ensure that users automatically connect to the closest file server when they access
\\\\contoso.com\\shares\\software.
How many Active Directory sites should you recommend?