What should you configure?
Your network contains a server named Server1 that runs Windows Server 2012 R2.Server1 has the
Hyper-V server role installed.
Server1 hosts four virtual machines named VM1, VM2, VM3, and VM4.
Server1 is configured as shown in the following table.
You need to ensure that VM1 can use more CPU time than the other virtual machines when the
CPUs on Server1 are under a heavy load.
What should you configure?
Which Group Policy Object (GPO) should you configure?
HOTSPOT
Your network contains an Active Directory domain named contoso.com.
Computer accounts for the marketing department are in an organizational unit (OU) named
Departments\\Marketing\\Computers. User accounts for the marketing department are in an OU
named Departments\\Marketing\\Users.
Marketing users can only log on to the client computers in the Departments\\Marketing\\Computers
OU.
You need to apply an application control policy to all of the marketing users.
Which Group Policy Object (GPO) should you configure?
To answer, select the appropriate GPO in the answer area.
What should you configure in the GPO?
HOTSPOT
Your network contains an Active Directory domain named adatum.com. All domain controllers run
Windows Server 2012 R2.All client computers run Windows 7. The computer accounts for all of the
client computers are located in an organizational unit (OU) named OU1.
An administrator links a Group Policy object (GPO) to OU1. The GPO contains several application
control policies.
You discover that the application control policies are not enforced on the client computers.
You need to modify the GPO to ensure that the application control policies are enforced on the
client computers.
What should you configure in the GPO?
To answer, select the appropriate service in the answer area.
You configure GPO1 to prohibit access to Control Panel.
HOTSPOT
Your network contains an Active Directory domain named contoso.com.
The domain contains an organizational unit (OU) named OU1 as shown in the OU1 exhibit. (Click the
Exhibit button.)
The membership of Group1 is shown in the Group1 exhibit. (Click the Exhibit button.)
You configure GPO1 to prohibit access to Control Panel. GPO1 is linked to OU1 as shown in the GPO1
exhibit. (Click the Exhibit button.)
Select Yes if the statement can be shown to be true based on the available information; otherwise
select No. Each correct selection is worth one point.
You need to prevent App1 from running on Computer1
Your network contains an Active Directory domain named contoso.com. You have a Group Policy
object (GPO) named GP1 that is linked to the domain. GP1 contains a software restriction policy that
blocks an application named App1.
You have a workgroup computer named Computer1 that runs Windows 8. A local Group Policy on
Computer1 contains an application control policy that allows App1.
You join Computer1 to the domain.
You need to prevent App1 from running on Computer1.
What should you do?
What should you configure?
Your network contains an Active Directory domain named contoso.com. All client computer
accounts are in an organizational unit (OU) named AllComputers. Client computers run either
Windows 7 or Windows 8.
You create a Group Policy object (GPO) named GP1.
You link GP1 to the AllComputers OU.
You need to ensure that GP1 applies only to computers that have more than 8 GB of memory.
What should you configure?
You need to configure Server1 to support the client connections from App1.exe
Your network contains an Active Directory domain named contoso.com. The domain contains an
Application server named Server1. Server1 runs Windows Server 2012 R2.
Server1 is configured as an FTP server.
Client computers use an FTP Application named App1.exe. App1.exe uses TCP port 21 as the control
port and dynamically requests a data port.
On Server1, you create a firewall rule to allow connections on TCP port 21.
You need to configure Server1 to support the client connections from App1.exe.
What should you do?
Which Windows Firewall rule should you create on Server1?
Your network contains an Active Directory domain named contoso.com.
All client computers run Windows 8.
You deploy a server named Server1 that runs Windows Server 2012 R2.
You install a new client-server application named App1 on Server1 and on the client computers. The
client computers must use TCP port 6444 to connect to App1 on Server1.Server1 publishes the
information of App1 to an intranet server named Server2 by using TCP port 3080.
You need to ensure that all of the client computers can connect to App1. The solution must ensure
that the application can connect to Server2.
Which Windows Firewall rule should you create on Server1?
Which tool should you use?
Your network contains an Active Directory domain named contoso.com. The domain contains two
servers named Server1 and Server2 that run Windows Server 2012 R2.
You create a security template named Template1 by using the security template snap-in.
You need to apply Template1 to Server2.
Which tool should you use?
You need to ensure that client computers can resolve single-label names to IP addresses
Your network contains multiple subnets.
On one of the subnets, you deploy a server named Server1 that runs Windows Server 2012 R2.
You install the DNS Server server role on Server1, and then you create a standard primary zone
named contoso.com.
You need to ensure that client computers can resolve single-label names to IP addresses.
What should you do first?