Your network contains an Active Directory domain named contoso.com. The domain contains a
domain controller named DC1 that runs Windows Server 2012 R2. DC1 is backed up daily.
The domain has the Active Directory Recycle Bin enabled.
During routine maintenance, you delete 500 inactive user accounts and 100 inactive groups. One of
the deleted groups is named Group1. Some of the deleted user accounts are members of some of
the deleted groups.
For documentation purposes, you must provide a list of the members of Group1 before the group
was deleted.
You need to identify the names of the users who were members of Group1 prior to its deletion. You
want to achieve this goal by using the minimum amount of administrative effort.
What should you do first?

Your network contains an Active Directory domain named contoso.com. The domain contains a
domain controller named DC1 that runs Windows Server 2012 R2.
You mount an Active Directory snapshot on DC1.
You need to expose the snapshot as an LDAP server.
Which tool should you use?

Your network contains an Active Directory domain named contoso.com. The domain contains a
domain controller named DC1 and a member server named Server1. Server1 has the IP Address
Management (IPAM) Server feature installed.
On DC1, you configure Windows Firewall to allow all of the necessary inbound ports for IPAM.
On Server1, you open Server Manager as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that you can use IPAM on Server1 to manage DNS on DC1.
What should you do?

Your network contains an Active Directory forest named contoso.com. All servers run Windows
Server 2012 R2. The domain contains four servers. The servers are configured as shown in the
following table.

You need to deploy IP Address Management (IPAM) to manage DNS and DHCP.
On which server should you install IPAM?

HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains a
domain controller named DC1 and a member server named Server1. All servers run Windows Server
2012 R2.
You install the IP Address Management (IPAM) Server feature on Server1.
From the Provision IPAM wizard, you select the Group Policy Based provisioning method and enter a
GPO name prefix of IPAM1.
You need to provision IPAM by using Group Policy.
What command should you run on Server1 to complete the process?
To answer, select the appropriate options in the answer area.

Your network contains an Active Directory domain named contoso.com. The network contains a file
server named Server1 that runs Windows Server 2012 R2.
You are configuring a central access policy for temporary employees.
You enable the Department resource property and assign the property a suggested value of Temp.
You need to configure a target resource condition for the central access rule that is scoped to
resources assigned to Temp only.
Which condition should you use?

DRAG DROP
Your network contains an Active Directory domain named contoso.com. All file servers in the
domain run Windows Server 2012 R2.
The computer accounts of the file servers are in an organizational unit (OU) named OU1. A Group
Policy object (GPO) named GPO1 is linked to OU1.
You plan to modify the NTFS permissions for many folders on the file servers by using central access
policies.
You need to identify any users who will be denied access to resources that they can currently access
once the new permissions are implemented.
In which order should you Perform the five actions?

You have a server named FS1 that runs Windows Server 2012 R2.
You install the File and Storage Services server role on FS1.
From Windows Explorer, you view the properties of a shared folder named Share1 and you discover
that the Classification tab is missing.
You need to ensure that you can assign classifications to Share1 from Windows Explorer manually.
What should you do?

DRAG DROP
Your network contains an Active Directory domain named contoso.com. The domain contains a file
server named Server1. All servers run Windows Server 2012 R2.
All domain user accounts have the Division attribute automatically populated as part of the user
provisioning process. The Support for Dynamic Access Control and Kerberos armoring policy is
enabled for the domain.
You need to control access to the file shares on Server1 based on the values in the Division attribute
and the Division resource property.
Which three actions should you perform in sequence?

Your network contains an Active Directory domain named contoso.com. The domain contains two
servers named Node1and Node2. Node1and Node2 run Windows Server 2012 R2. Node1and Node2
are configured as a two-node failover cluster named Cluster2.
The computer accounts for all of the servers reside in an organizational unit (OU) named Servers.
A user named User1 is a member of the local Administrators group on Node1and Node2.
User1 creates a new clustered File Server role named File1 by using the File Server for general use
option. A report is generated during the creation of File1 as shown in the exhibit. (Click the Exhibit
button.)

File1 fails to start.
You need to ensure that you can start File1.
What should you do?