DRAG DROP
Your network contains an Active Directory domain named contoso.com. The domain contains an IP
Address Management (IPAM) server.
You plan to delegate the administration of IPAM as shown in the following table.

You need to recommend which IPAM security group must be used for each department. The solution
must minimize the number of permissions assigned to each group.
What should you recommend?
To answer, drag the appropriate group to the correct department in the answer area. Each group may be
used once, more than once, or not at all. Additionally, you may need to drag the split bar between panes
or scroll to view content.

Your company has two main offices and 10 branch offices. Each office is configured as a separate Active
Directory site.
The main offices sites are named Site1 and Site2. Each office connects to Site1 and Site2 by using a WAN
link. Each site contains a domain controller that runs Windows Server 2008.
You are redesigning the Active Directory infrastructure.
You plan to implement domain controllers that run Windows Server 2012 and decommission all of the
domain controllers that run Windows Server 2008.
You need to recommend a placement plan for the Windows Server 2012 domain controllers to meet the
following requirements:
 Ensure that users can log on to the domain if a domain controller or a
WAN link fails.
 Minimize the number of domain controllers implemented.
What should you include in the recommendation? (Each correct answer presents part of the solution.
Choose all that apply.)

Your network contains a Hyper-V host named Host1 that runs Windows Server 2012. Host1 contains a
virtual machine named DC1. DC1 is a domain controller that runs Windows Server 2012.
You plan to clone DC1.You need to recommend which steps are required to prepare DC1 to be cloned.
What should you include in the recommendation? (Each correct answer presents part of the solution.
Choose all that apply.)

A new company registers the domain name of contoso.com. The company has a web presence on the
Internet. All Internet resources have names that use a DNS suffix of contoso.com.
A third-party hosts the Internet resources and is responsible for managing the contoso.com DNS zone on
the Internet. The zone contains several hundred records.
The company plans to deploy an Active Directory forest.
You need to recommend an Active Directory forest infrastructure to meet the following requirements:
 Ensure that users on the internal network can resolve the names of the
company’s Internet resources.
 Minimize the amount of administrative effort associated with the
addition of new Internet servers.
What should you recommend?

HOTSPOT
You run the ldifde command and receive the following output:

The command completes successfully.
Use the drop-down menus to select the answer choice that completes each statement.

Your network contains an Active Directory domain named contoso.com. The functional level of the
domain and the forest is Windows Server 2008 R2.
All domain controllers run Windows Server 2008 R2.
You plan to deploy a new line-of-business application named App1 that uses claims-based
authentication.You need to recommend changes to the network to ensure that Active Directory can provide claims for
App1.
What should you include in the recommendation? (Each correct answer presents part of the solution.
Choose all that apply.)

Your company has a main office and 20 branch offices. All of the offices connect to each other by using a
WAN link.
The network contains an Active Directory forest named contoso.com. The forest contains a domain for
each office. The forest root domain contains all of the server resources.
Each branch office contains two domain controllers for the branch office domain and one domain
controller for the contoso.com domain.
Each branch office has a support technician who is responsible for managing the accounts of their
respective office only.
You recently updated all of the WAN links to high-speed WAN links.
You need to recommend changes to the Active Directory infrastructure to meet the following
requirements: Reduce the administrative overhead of moving user accounts between the
offices.
 Ensure that the support technician in each office can manage the user accounts
of their respective office.
What should you include in the recommendation? More than one answer choice may achieve the goal.
Select the BEST answer.

You plan to deploy serverl.child.contoso.com as a read-only domain controller (RODC).
You run the adprep.exe /rodcprep command on DC3 and receive the following error message:

You need to identify what prevents you from successfully running Adprep /rodcprep on DC3.
What should you identify?

Your network contains an Active Directory domain named contoso.com.
You deploy several servers that have the Remote Desktop Session Host role service installed.
You have two organizational units (OUs). The OUs are configured as shown in the following table.

GPO1 contains the Folder Redirection settings for all of the users.
You need to recommend a solution to prevent the sales users’ folders from being redirected when the
users log on to a Remote Desktop session.
What should you include in the recommendation?

Your network contains an Active Directory domain named contoso.com. The domain contains an
organizational unit (OU) named OU1.
You have a Group Policy object (GPO) named GPO1 that is linked to contoso.com. GPO1 contains custom
security settings.
You need to design a Group Policy strategy to meet the following requirements:
 The security settings in GPO1 must be applied to all client computers.
 Only GPO1 and other GPOs that are linked to OU1 must be applied to
the client computers in OU1.
What should you include in the design?
More than one answer choice may achieve the goal. Select the BEST answer.