What should you identify?
Your network contains five Active Directory forests.
You plan to protect the resources in one of the forests by using Active Directory Rights
Management Services (AD RMS).
Users in all of the forests will access the protected resources.
You need to identify the minimum number of AD RMS clusters required for the planned
deployment.
What should you identify?
What two commands should you run?
HOTSPOT
Your network contains an Active Directory forest name fabrikam.com. The forest contains
two domains named fabrikam.com and contoso.com. All servers run Windows Server 2012 R2.
The forest contains a DHCP server named Server1 and a DNS server named Server2.
You need to recommend a solution to ensure that any computers that are neither members
of contoso.com nor fabrikam.com receive a DNS suffix of guest.fabrikam.com.
What two commands should you run? To answer, select the appropriate options in the answer area.
What should you recommend implementing on Server1?
Your network contains an Active Directory domain named contoso.com. The network
contains a perimeter network. The perimeter network and the internal network are separated
by a firewall.
On the perimeter network, you deploy a server named Server1 that runs Windows Server
2012.
You deploy Active Directory Certificate Services (AD CS).
Each user is issued a smart card.
Users report that when they work remotely, they are unable to renew their smart card
certificate.
You need to recommend a solution to ensure that the users can renew their smart card
certificate from the Internet.
What should you recommend implementing on Server1?
More than one answer choice may achieve the goal. Select the BEST answer.
Which four actions should you perform in sequence?
DRAG DROP
Your network contains an Active Directory domain named contoso.com. The domain
contains two domain controllers named DC1 and DC2. The domain contains a server named
Server1.
Server1 is a certification authority (CA). All servers run Windows Server 2012 R2.
You plan to deploy BitLocker Drive Encryption (BitLocker) to all client computers. The unique
identifier for your organization is set to Contoso.
You need to ensure that you can recover the BitLocker encrypted data by using a BitLocker
data recovery agent. You must be able to perform the recovery from any administrative computer.
Which four actions should you perform in sequence? To answer, move the appropriate
actions from the list of actions to the answer area and arrange them in the correct order.
What should you recommend?
Your company has three offices. The offices are located in Montreal, Toronto, and
Vancouver.
The network contains two Active Directory forests named contoso.com and adatum.com.
The contoso.com forest contains one domain. The adatum.com forest contains two domains.
All of the servers in adatum.com are located in the Toronto office. The servers in
contoso.com are located in the Montreal and Vancouver offices. All of the servers in both of
the forests run Windows Server 2012 R2.
A two-way, forest trusts exists between the forests.
Each office contains DHCP servers and DNS servers.
You are designing an IP Address Management (IPAM) solution to manage the network.
You need to recommend a solution for the placement of IPAM servers to manage all of the
DHCP servers and all of the DNS servers in both of the forests. The solution must minimize
the number of IPAM servers deployed.
What should you recommend?
Which technology or technologies should you identify?
Your network contains an Active Directory domain named contoso.com.
You plan to deploy an Active Directory Federation Services (AD FS) farm that will contain
eight federation servers.
You need to identify which technology or technologies must be deployed on the network
before you install the federation servers.
Which technology or technologies should you identify? (Each correct answer presents part of
the solution. Choose all that apply.)
What should you configure on Server1?
You have a server named Server1 that runs Windows Server 2012. Server1 has the DNS
Server server role installed.
You need to recommend changes to the DNS infrastructure to protect the cache from cache
poisoning attacks.
What should you configure on Server1?
You need to ensure that CA2 can issue certificates for the CA hierarchy
HOTSPOT
You plan to deploy a certification authority (CA) infrastructure that contains the following servers:
+ An offline standalone root CA named CA1
+ An enterprise subordinate CA named CA2
On all of the computers, you import the root CA certificate from CA1 to the Trusted Root
Certification Authorities Certificates store.
You need to ensure that CA2 can issue certificates for the CA hierarchy.
What should you do? To answer, select the appropriate options in the answer area.
What should you recommend?
Your network contains an Active Directory forest named contoso.com. The forest contains a
single domain and two sites named Montreal and Vancouver.
Montreal contains an IP Address Management (IPAM) server named Server1 that is used to
manage all of the DHCP servers and the DNS servers in the site.
Vancouver contains several DHCP servers and several DNS servers.
In Vancouver, you install the IP Address Management (IPAM) Server feature on a server
named Server2.
You need to recommend which configurations must be performed to ensure that the DHCP
servers and the DNS servers in Vancouver are managed by Server2.
What should you recommend?
You need to ensure that the client computers in both Contoso and Fabrikam trust each other’s email certi
Your network contains an Active Directory domain named contoso.com.
You deploy Active Directory Certificate Services (AD CS).
Your company, which is named Contoso, Ltd., has a partner company named Fabrikam, Inc.
Fabrikam also deploys AD CS.
Contoso and Fabrikam plan to exchange signed and encrypted email messages.
You need to ensure that the client computers in both Contoso and Fabrikam trust each
other’s email certificates. The solution must prevent other certificates from being trusted and
minimize administrative effort.
What should you do?
More than one answer choice may achieve the goal. Select the BEST answer.