Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain
Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2008 R2
Service Pack 1 (SP1) and Windows Server 2012. A Windows Server 2012 server named ABC-DNS1 run the
DNS Server role and hosts a primary zone for the ABC.com domain.
The company has recently opened a branch office. You install a Windows Server 2012 server named ABCDNS6 in the branch office and install the DNS Server role. To enable name resolution for branch office users,
you want to configure ABC-DNS6 to host a secondary DNS zone for the ABC.com domain.
How should you configure ABC-DNS1?

Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain
Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2012.A Windows Server 2012 server named ABC-NPS1 and is configured as a Network Policy Server (NPS) server.
ABC-NPS1 also runs the DHCP server role and has a DHCP scope for local subnet.
You need to ensure that Network Access Protection (NAP) health requirement checks are performed on only
the computers that send a Statement of Health (SoH). You configure a health policy to define the computer
health requirements. How can you ensure that only the computers that send an SoH are checked?

Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain
Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2008 R2
Service Pack 1 (SP1) and Windows Server 2012. A Windows Server 2012 Web server is named ABC-Web1.
ABC-Web1 hosts a company Intranet site with the URL: http://intranet.ABC.com.
You want to configure the Intranet site to use HTTPS. You purchase an SSL certificate for intranet.ABC.com.
You run the import certificate wizard and select the option to specify which certificate store to import the
certificate into.
You need the certificate to be selectable in the bindings of the Intranet site in IIS Manager. Which certificate
store should you import the SSL certificate into?

Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain
Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2012. All
client computers run Windows 7 Professional.The network includes a server named ABC-NPS1. ABC-NPS1 is
configured as a Network Policy Server (NPS) and a Health Registration Authority (HRA). A server named ABCCA1 runs Certificate Services and is configured as an Enterprise Certification Authority (CA) for the ABC.com
domain. The CA has been associated with the HRA on ABC-NPS1. The HRA has been configured with an SSL
certificate and the appropriate DNS Service Locator (SRV) records have been configured.
You want to configure HRA automatic discovery on the client computers. You configure a Group Policy Object
(GPO) to clear all trusted group configurations from the client computers.
What should you do next?

Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain
Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2012.
The domain controller that hosts the PDC emulator FSMO role suffers a complete hardware failure.
You need to seize the PDC emulator role on another domain controller. You log in to the domain controller and
open ntdsutil.exe.
Which context should you use in ntdsutil to seize an FSMO role?

Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain
Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2012.
You want to move the Active Directory logs to a different folder. You plan to use the “move logs to” statement in
ntdsutil.exe to specify the new location.
Which context should you use in ntdsutil?

Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain
Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2012.
All domain controllers in the network run a custom application that was created by developers at ABC.com.
You want to deploy additional domain controllers using domain controller cloning. You verify that the custom
application supports domain controller cloning. You run the Get-ADDCCloningExcludedApplicationList cmdlet
and it returns the name of the custom application.
You need to prepare a domain controller for cloning. You plan to create an XML file and add information about
the custom application to the file to enable the domain controller to be cloned.
What should you name the XML file?

Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain
Services (AD DS) domain named ABC.com. The domain has domain controllers that run Windows Server 2008
R2 Service Pack 1 (SP1) and Windows Server 2012. The functional level of the forest is Windows Server 2008
R2.
You have enabled the Active Directory Recycle Bin in the ABC.com domain. You discover that a user account
was deleted yesterday. You need to recover the deleted user account as quickly as possible.
Which tool should you use to recover the deleted user account?

Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain
Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2008 R2
Service Pack 1 (SP1) and Windows Server 2012. The Organizational Unit (OU) structure includes top-level
OUs for each office location. Each toplevel OU contains OUs for each company department. Each
departmental OU contains the user accounts of the users working in that department in the relevant location.
Many Group Policy Objects (GPOs) are applied at the site level, domain level and OU level. You discover thattwo GPOs applied at the domain level do not have the desired effect. You need to change the order in which
the GPOs are applied.
How can you configure the order of precedence of the GPOs?

Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain
Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2008 R2
Service Pack 1 (SP1) and Windows Server 2012. The Organizational Unit (OU) structure includes top-level
OUs for each office location. Each toplevel OU contains OUs for each company department. Each
departmental OU contains the user accounts of the users working in that department in the relevant location.
Many Group Policy Objects (GPOs) are applied at the site level, domain level and OU level. You create an OU
named TestOU inside one of the departmental OUs. You want to ensure that no GPOs from the site level,
domain level, location OU level or department OU level are applied to objects within TestOU.
How can you quickly achieve this goal?