Server1 download update from microsoft update. You have Server2 that must syncronize update
from Server1. Have firewall separate between Server1 and Server2. Which port should to open on
Server2 to syncronize ?

You have a server named Server1. You enable BitLocker Drive Encryption (BitLocker) on Server1.
You need to change the password for the Trusted Platform Module (TPM) chip. What should you
run on Server1?

Your Network contains oneActive Directory domain named contoso.com. You pilot DirectAccess
on the network. During the pilot deployment, you enable DirectAccess only for a group
Contoso\\Test Computers. Ones the pilot is complete, you need to enable DirectAccess for all the
client computers in the domain. What should you do?

In this section, you’ll see one or more sets of questions with the same scenario and problem.
Each question presents a unique solution to the problem, and you must determine whether
the solution meets the stated goals. Any of the solutions might solve the problem. It is also
possible that none of the solutions solve the problem. Once you answer a question in this
section, you will NOT be able to return to it. As a result. These questions will not appear in
the review screen. Note: This question is part of a series of questions that present the same
scenario. Each question in the series contains a unique solution Determine whether the
solution meets the stated goals.
Your network contains an Active Directory forest named contoso.com. The forest contains a
member server named Server1 that runs Windows Server 2016. All domain controllers run
Windows Server 2012 R2. Contoso com has the following configuration.

You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to
configure device registration. You need to configure Active Directory to support the planned
deployment.
Solution: You raise the forest functional level to Windows Server 2012 R2.
Does this meet the goal?

In this section, you’ll see one or more sets of questions with the same scenario and problem.
Each question presents a unique solution to the problem, and you must determine whether
the solution meets the stated goals. Any of the solutions might solve the problem. It is also
possible that none of the solutions solve the problem. Once you answer a question in this
section, you will NOT be able to return to it. As a result, these questions will not appear in
the review screen. Note: This question is part of a series of questions that present the same

scenario. Each question in the series contains a unique solution. Determine whether the
solution meets the stated goals.
Your network contains an Active Directory domain named contoso.com. The domain contains a
DNS server named Server1. All client computers run Windows 10. On Server1, you have the
following zone configuration.

You need to prevent Server1 from resolving queries from DNS clients located on Subnet4. Server1
must resolve queries from all other DNS clients.
Solution: From Windows PowerShell on Server1, you run the Export-DnsServerDnsSecPublicKey
cmdlet.
Does this meet the goal?

In this section, you’ll see one or more sets of questions with the same scenario and problem.
Each question presents a unique solution to the problem, and you must determine whether
the solution meets the stated goals. Any of the solutions might solve the problem. It is also
possible that none of the solutions solve the problem. Once you answer a question in this
section, you will NOT be able to return to it. As a result, these questions will not appear in
the review screen. Note: This question is part of a series of questions that present the same
scenario. Each question in the series contains a unique solution. Determine whether the
solution meets the stated goals.
Your network contains an Active Directory domain named contoso.com. The domain contains a
DNS server named Server1. All client computers run Windows 10. On Server1, you have the
following zone configuration.

You need to prevent Server1 from resolving queries from DNS clients located on Subnet4. Server1
must resolve queries from all other DNS clients.
Solution: From Windows PowerShell on Server1, you run the Add-DnsServerTrustAnchor cmdtel.
Does this meet the goal?

In this section, you’ll see one or more sets of questions with the same scenario and problem.
Each question presents a unique solution to the problem, and you must determine whether
the solution meets the stated goals. Any of the solutions might solve the problem. It is also
possible that none of the solutions solve the problem. Once you answer a question in this
section, you will NOT be able to return to it. As a result, these questions will not appear in
the review screen. Note: This question is part of a series of questions that present the same
scenario. Each question in the series contains a unique solution. Determine whether the
solution meets the stated goals.
Your network contains an Active Directory domain named contoso.com. The domain contains a
DNS server named Server1. All client computers run Windows 10. On Server1, you have the
following zone configuration.

You need to prevent Server1 from resolving queries from DNS clients located on Subnet4. Server1
must resolve queries from all other DNS clients.
Solution: From a Group Policy object (GPO) in the domain, you modify the Network List Manager
Policies.

Does this meet the goal?

In this section, you’ll see one or more sets of questions with the same scenario and problem.
Each question presents a unique solution to the problem, and you must determine whether
the solution meets the stated goals. Any of the solutions might solve the problem. It is also
possible that none of the solutions solve the problem. Once you answer a question in this

section, you will NOT be able to return to it. As a result, these questions will not appear in
the review screen. Note: This question is part of a series of questions that present the same
scenario. Each question in the series contains a unique solution. Determine whether the
solution meets the stated goals.
Your network contains an Active Directory domain named contoso.com. The domain contains a
DNS server named Server1. All client computers run Windows 10. On Server1, you have the
following zone configuration.

You need to prevent Server1 from resolving queries from DNS clients located on Subnet4 Server1
must resolve queries from all other DNS clients.
Solution: From Windows Firewall with Advanced Security on Server1, you create an inbound rule.
Does this meet the goal?

In this section, you’ll see one or more sets of questions with the same scenario and problem.
Each question presents a unique solution to the problem, and you must determine whether
the solution meets the stated goals. Any of the solutions might solve the problem. It is also
possible that none of the solutions solve the problem. Once you answer a question in this
section, you will NOT be able to return to it. As a result, these questions will not appear in
the review screen. Note: This question is part of a series of questions that present the same
scenario. Each question in the series contains a unique solution. Determine whether the
solution meets the stated goals.
Your network contains an Active Directory domain named contoso.com. The domain contains a
DNS server named Server1. All client computers run Windows 10. On Server1, you have the
following zone configuration

You need to prevent Server1 from resolving queries from DNS clients located on Subnet4. Server1
must resolve queries from all other DNS clients.
Solution: From the Security setting of each zone on Server1, you modify the permissions.
Does this meet the goal?

In this section, you’ll see one or more sets of questions with the same scenario and problem.
Each question presents a unique solution to the problem, and you must determine whether
the solution meets the stated goals. Any of the solutions might solve the problem. It is also
possible that none of the solutions solve the problem. Once you answer a question in this
section, you will NOT be able to return to it. As a result, these questions will not appear in
the review screen. Note: This question is part of a series of questions that present the same
scenario. Each question in the series contains a unique solution. Determine whether the
solution meets the stated goals.
Your network contains an Active Directory domain named contoso.com. The domain contains a
DNS server named Server1. All client computers run Windows 10. On Server1, you have the
following zone configuration.

You need to prevent Server1 from resolving queries from DNS clients located on Subnet4. Server1
must resolve queries from all other DNS clients.
Solution: From a Group Policy object (GPO) in the domain, you modify the Network List Manager
Policies.
Does this meet the goal?