Your network contains two Active Directory forests named contoso.com and fabrikam.com.
The contoso.com forest contains two domains named corp.contoso.com and contoso.com.
You establish a two-way forest trust between contoso.com and fabrikam.com.
Users from the corp.contoso.com domain report that they cannot log on to client computers in the
fabrikam.com domain by using their corp.contoso.com user account.
When they try to log on, they receive following error message:
“The computer you are signing into is protected by an authentication firewall. The specified account
is not allowed to authenticate to the computer.”
Corp.contoso.com users can log on successfully to client computers in the contoso.com domain by
using their corp.contoso.com user account credentials.
You need to allow users from the corp.contoso.com domain to log on to the client computers in the
fabrikam.com forest.
What should you do?

Yournetwork contains two servers named Server1 and Server2 that run Windows Server 2012 R2.
Both servers have the Hyper-V server role installed.
The servers have the hardware configurations shown in the following table.

Server1 hosts five virtual machines that run Windows Server 2012 R2.
You need to move the virtual machines from Server1 to Server2.
The solution must minimize downtime.
What should you do for each virtual machine?

Yournetwork contains an Active Directory domain named contoso.com.
The domain contains a main office and a branch office.
An Active Directory site exists for each office.
All domain controllers run Windows Server 2012 R2.
The domain contains two domain controllers.
DC1 hosts an Active Directory- integrated zone for contoso.com.
Youadd the DNS Server server role to DC2.
Youdiscover that the contoso.com DNS zone fails to replicate to DC2.
Youverify that the domain, schema, and configuration naming contexts replicate from DC1 to DC2.
Youneed to ensure that DC2 replicates the contoso.com zone by using Active Directory replication.
Which tool should you use?

Yournetwork contains an Active Directory domain named contoso.com.
The domain contains a file server named Server1 and a domain controller named DC1.
All servers run Windows Server 2012 R2.
A Group Policy object (GPO) named GPO1 is linked to the domain.
Server1 contains a folder named Folder1.
Folder1 is shared as Share1.
Youneed to ensure that authenticated users can request assistance when they are denied access to
the resources on Server1.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose
two.)

Yournetwork contains an Active Directory domain named adatum.com.
All domain controllers run Windows Server 2008 R2.
The domain contains a file server named Server6 that runs Windows Server 2012 R2.
Server6 contains a folder named Folder1. Folder1 is shared as Share1.
The NTFS permissions on Folder1 are shown in the exhibit. (Click the Exhibit button.)

The domain contains two global groups named Group1 and Group2.
You need to ensure that only users who are members of both Group1 and Group2 are denied access
to Folder1.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose
two.)

Your network contains two servers named Server1 and Server2 that run Windows Server 2012 R2.
Server1 and Server2 have the Hyper-V server role installed.
Server1 and Server2 are configured as Hyper-V replicas of each other.
Server1 hosts a virtual machine named VM1. VM1 is replicated to Server2.
You need to verify whether the replica of VM1 on Server2 is functional.
The solution must ensure that VM1 remains accessible to clients.
What should you do from Hyper-V Manager?

You have a test server named Server1 that is configured to dual-boot between Windows Server
2008 R2 and Windows Server 2012 R2.
You start Server1 and you discover that the boot entry for Windows Server 2008 R2 no longer
appears on the boot menu.
You start Windows Server 2012 R2 on Server1 and you discover the disk configurations shown in the
following table.

You need to restore the Windows Server 2008 R2 boot entry on Server1.
What should you do?

You have a DHCP server named Server1. Server1 has one network adapter.
Server1 is located on a subnet named Subnet1. Server1 has scope named Scope1.
Scope1 contains IP addresses for the 192.168.1.0/24 network.
Yourcompany is migrating the IP addresses on Subnet1 to use a network ID of 10.10.0.0/16.
On Server11 you create a scope named Scope2. Scope2 contains IP addresses for the 10.10.0.0/16
network.
You need to ensure that clients on Subnet1 can receive IP addresses from either scope.
What should you create on Server1?

Yournetwork contains an Active Directory domain named adatum.com.
The domain contains a domain controller named DC1 that runs Windows Server 2012 R2.
On Dc1, you open DNS Manager as shown in the exhibit. (Click the Exhibit button.)

Youneed to change the zone type of the contoso.com zone from an Active Directory-integrated
zone to a standard primary zone.
What should you do before you change the zone type?

Yournetwork contains an Active Directory domain named contoso.com.
The domain contains two servers named Server1 and Server2 that run Windows Server 2012 R2.
Server1 has the IP Address Management (IPAM) Server feature installed.
Server2 has the DHCP Server server role installed.
A user named User1 is a member of the IPAM Users group on Server1.
You need to ensure that User1 can use IPAM to modify the DHCP scopes on Server2.
The solution must minimize the number of permissions assigned to User1.
To which group should you add User1?