Your network contains an Active Directory forest named fabrikam.com. The forest contains
the following domains:
• Fabrikam.com
• Eu.fabrikam.com
• Na.fabrikam.com
• Eu.contoso.com
• Na.contoso.com
You need to configure the forest to ensure that the administrators of any of the domains can
specify a user principal name (UPN) suffix o contoso.com when they create user accounts
from Active Directory Users and Computers.
Which tool should you use?

Your network contains an Active Directory forest. The forest contains a single domain.
You want to provide users from a domain that is located in another forest access to
resources in your domain.
You need to configure a trust between the domain in your forest and the domain in the other
forest.
What should you create?

HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain
contains two domain controllers named Serverl and Server2.
DNS Manager on Server2 is shown in the exhibit. (Click the Exhibit button.)

To answer, complete each statement according to the information presented in the exhibit.
Each correct selection is worth one point.

Your company, Contoso, Ltd., has a main office and a branch office. The offices are
connected by a WAN link. Contoso has an Active Directory forest that contains a single
domain named ad.contoso.com.
The ad.contoso.com domain contains one domain controller named DC1 that is located in
the main office. DC1 is configured as a DNS server for the ad.contoso.com DNS zone. This
zone is configured as a standard primary zone.
You install a new domain controller named DC2 in the branch office. You install DNS on
DC2.
You need to ensure that DC2 can resolve DNS queries for ad.contoso.com in the event that
a WAN link fails. The solution must prevent DC2 from updating records in ad.contoso.com.
What should you do?

HOTSPOT
Your network contains an Active Directory domain named contoso.com. The network
contains 10 subnets.
You install a Web server on three different subnets. Each Web server hosts a web
application accessed by using an FQDN of webl.contoso.com.
For webl.contoso.com, you create three host (A) records that each points to one of the Web
servers.
You need to configure the DNS settings to meet the following requirements:
Users who access webl.contoso.com from a subnet that contains one of the Web servers
must connect to the server on their local subnet.
When users connect from a subnet that does not contain a Web server hosting the web
application, the connections must be balanced between the three Web servers.
Which two settings should you modify? (To answer, select the two appropriate settings in the
answer area.)

HOTSPOT
Your network contains an Active Directory forest named contoso.com. The forest contains
two domains named contoso.com and fabrikam.com. The relevant domain controllers are
configured as shown in the following table.

You need to configure the zone storage settings for each zone. The solution must meet the
following requirements:
The contoso.com zone must be replicated to all of the domain controllers in the domain.
The fabrikam.com zone must be replicated to all of the domain controllers in the forest that
have the DNS Server server role installed.
In the table below, identify in which partition each zone must be stored. Make only one
selection in each column. Each correct selection is worth one point.

HOTSPOT
Your network contains an Active Directory domain named contoso.com.
The Zone Transfers settings of contoso.com are configured as shown in the Zone Transfers
exhibit. (Click the Exhibit button.)

The Name Servers settings ofcontoso.com are configured as shown in the Name Servers
exhibit. (Click the Exhibit button.)

To answer, complete each statement according to the information presented in the exhibits.
Each correct selection is worth one point.

Your network contains an Active Directory forest named fabrikam.com.
You perform a test installation of an enterprise certification authority (CA).
After the installation, you discover that the Issuer Statement option on every certificate
issued by the CA is unavailable.
You need to ensure that the Issuer Statement option is available when you install the
enterprise CA to the production environment.
What should you do?

Your network contains an Active Directory domain named contoso.com.
The domain contains an enterprise certification authority (CA).
You plan to deploy certificates to all of the domain users. The certificates will be based on a
custom Smartcard Logon template.
You need to recommend a solution to ensure that the users can log on to the domain by
using smart cards.
What should you include in the recommendation?

Your network contains an Active Directory domain named adatum.com.
The domain contains an enterprise certification authority (CA).
When submitting a request for a certificate based on the EnrollmentAgent template, you
receive the error message shown in the exhibit. (Click the Exhibit button.)

You need to ensure that you can enroll for the certificate successfully.
What should you modify?