Which tool should you use?
Your network contains an Active Directory domain named contoso.com. The domain
contains a server named Server1 that runs Windows Server 2012.
Server1 is the enterprise root certification authority (CA) for contoso.com.
You need to enable CA role separation on Server1.
Which tool should you use?
What should you modify?
Your network contains an Active Directory domain named corp.contoso.com.
You deploy Active Directory Rights Management Services (AD RMS).
You have a rights policy template named Template1. Revocation is disabled for the
template.
A user named User1 can open content that is protected by Template1 while the user is
connected to the corporate network.
When User1 is disconnected from the corporate network, the user cannot open the protected
content even if the user previously opened the content.
You need to ensure that the content protected by Template1 can be opened by users who
are disconnected from the corporate network.
What should you modify?
Which two components should you identify?
You are a network administrator for a company named Contoso, Ltd.
You install the Active Directory Rights Management Services server role on a server. The Active
Directory Rights Management Services (AD RMS) server uses an internal certification authority (CA)
for all certificates.
You plan to provide users with the ability to use AD RMS to protect all of the email messages sent to
a partner company named
A Datum Corporation.
A Datum does not have AD RMS deployed.
You need to identify which components from the Contoso network must be accessible to A. Datum
to ensure that the users at A. Datum can open protected messages.
Which two components should you identify? (Each correct answer presents part of the solution.
Choose two.)
You need to ensure that User10 can read the contents of the Data folder on Server5 in the adatum.com domain
Your network contains two Active Directory forests named contoso.com and adatum.com. All
of the domain controllers in both of the forests run Windows Server 2012 R2. The
adatum.com domain contains a file server named Servers.
Adatum.com has a one-way forest trust to contoso.com.
A contoso.com user name User10 attempts to access a shared folder on Servers and
receives the error message shown in the exhibit. (Click the Exhibit button.)
You verify that the Authenticated Users group has Read permissions to the Data folder.
You need to ensure that User10 can read the contents of the Data folder on Server5 in the
adatum.com domain.
What should you do?
You need to ensure that all users from the Internet are pre-authenticated before they can access Appl
DRAG DROP
Your network contains an Active Directory domain named contoso.com. The domain
contains two servers named Server1 and Server3. The network contains a standalone
server named Server2.
All servers run Windows Server 2012 R2. The servers are configured as shown in the
following table.
Server3 hosts an application named App1. App1 is accessible internally by using the URL
https://app1.contoso.com. App1 only supports Integrated Windows authentication.
You need to ensure that all users from the Internet are pre-authenticated before they can
access Appl.
What should you do?
To answer, drag the appropriate servers to the correct actions. Each server may be used
once, more than once, or not at all. You may need to drag the split bar between panes or
scroll to view content.
You need to ensure that you can use Password Settings objects (PSOs) in the domain
Your network contains an Active Directory forest. The forest contains one domain named
contoso.com. The domain contains three domain controllers. The domain controllers are
configured as shown in the following table.
DC1 has all of the operations master roles installed.
You transfer all of the operations master roles to DC2, and then you uninstall Active
Directory from DC1.
You need to ensure that you can use Password Settings objects (PSOs) in the domain.
What should you do?
Which cmdlets should you run?
You have an Exchange Server organization. The organization contains servers that have either
Exchange Server 2010 or Exchange Server 2013 installed.
You hire a junior administrator named Admin5. Admin5 is a member of the Recipient Management
management role group.
You discover that Admin5 created two new mailbox-enabled users by using the New-Mailbox
command.
You need to identify which management role provides Admin5 with the permissions to create new
mailbox-enabled users.
Which cmdlets should you run?
You need to ensure that the users in Site2 are authenticated by both DC2 and DC3
Your network contains an Active Directory domain named adatum.com. The domain
contains two sites named Site1 and Site2 and two domain controllers named DC1 and DC2.
DC1 is located in Site1 and DC2 is located in Site2.
You install an additional domain controller named DC3 in Site1 and you ship DC3 to Site2.
A technician connects DC3 to Site2.
You discover that users in Site2 are authenticated only by DC2.
You need to ensure that the users in Site2 are authenticated by both DC2 and DC3.
What should you do?
Which three actions should you perform?
You have an Exchange Server 2013 organization that contains one Client Access server named EX1
and one Mailbox server named EX2.
You have a perimeter network and an internal network. The perimeter network contains an Edge
Transport server named EX3 that has Exchange Server 2010 installed.
You need to ensure that all of the email messages sent to and received from the Internet are routed
through the EX3. Which three actions should you perform? (Each correct answer presents part of the
solution. Choose three.)
You need to ensure that the SiteC users are authenticated by the domain controllers in SiteB, unless all of th
Your network contains an Active Directory forest named contoso.com. The forest contains a
single domain. The forest contains three Active Directory sites named SiteA, SiteB, and
SiteC. The sites contain four domain controllers. The domain controllers are configured as
shown in the following table.
An IP site link exits between each site.
You discover that the users in SiteC are authenticated by the domain controllers in SiteA and
SiteB.
You need to ensure that the SiteC users are authenticated by the domain controllers in
SiteB, unless all of the domain controllers in SiteB are unavailable.
What should you do?