Your network contains two Active Directory forests named contoso.com and adatum.com. All
servers run Windows Server 2012 R2. A one-way external trust exists between contoso.com and
adatum.com.
Adatum.com contains a universal group named Group1. You need to prevent Group1 from being
used to provide access to the resources in contoso.com.
What should you do?

Your network contains an Active Directory forest. The forest contains two domains named
contoso.com and corp.contoso.com. All domain controllers run Windows Server 2012 R2 and are
configured as global catalog servers. The corp.contoso.com domain contains a domain controller
named DC1.
You need to disable the global catalog on DC1.
What should you do?

You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain
named Contoso.com. All servers in the Contoso.com domain, including domain controllers, have
Windows Server 2012 installed.
You have been instructed to modify the name of the local Administrator account on all Contoso.com
workstations. You want to achieve this using as little administrative effort as possible.
Which of the following actions should you take?

Your company has a main office and four branch offices. The main office contains a server named
Server1 that runs Windows Server 2012 R2. The IP configuration of each office is configured as
shown in the following table.

You need to add a single static route on Server1 to ensure that Server1 can communicate with the
hosts on all of the subnets.
Which command should you run?

You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain
named Contoso.com. All servers in the Contoso.com domain, including domain controllers, have
Windows Server 2012 R2 installed.
You have created and linked a new Group Policy object (GPO) to an organizational unit (OU), named
ENSUREPASSServ, which host the computer accounts for servers in the Contoso.com domain.
You have been tasked with adding a group to a local group on all servers in the Contoso.com
domain. This group should not, however, be removed from the local group.
Which of the following actions should you take?

You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain
named Contoso.com. All servers in the Contoso.com domain, including domain controllers, have
Windows Server 2012 R2 installed.
You have configured a server, named ENSUREPASS-SR07, as a VPN server. You are required to
configure new firewall rules for workstation connections.
You want to achieve this using the least amount of administrative effort.
Which of the following actions should you take?

HOTSPOT
You have a Group Policy object (GPO) named Server Audit Policy. The settings of the GPO are shown
in the Settings exhibit. (Click the Exhibit button.)

The scope of the GPO is shown in the Scope exhibit. (Click the Exhibit button.)

The domain contains a group named Group1. The membership of Group1 is shown in the Group1
exhibit. (Click the Exhibit button.)

Select Yes if the statement can be shown to be true based on the available information; otherwise
select No. Each correct selection is worth one point.