Your company is testing DirectAccess on Windows Server 2012 R2.
Users report that when they connect to the corporate network by using DirectAccess, access to Internet
websites and Internet hosts is slow. The users report that when they disconnect from DirectAccess, access to
the Internet websites and the Internet hosts is much faster.
You need to identify the most likely cause of the performance issue.
What should you identify?

HOTSPOT
Your network contains one Active Directory domain named contoso.com. The domain contains two domain
controllers named DC01 and DC02 that run Windows Server 2012 R2.
On DC02, you open C:\\Windows\\PolicyDefinitions as shown in the DC02 PolicyDefinitions exhibit. (Click the
Exhibit button.)

From a client computer, you open the SYSVOL share as shown in the SYSVOL exhibit. (Click the Exhibit
button.)

From DC01, you open a Group Policy object (GPO) named GPO1 as shown in the GPO1 exhibit. (Click the
Exhibit button.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Hot Area:

Your network contains an Active Directory domain named contoso.com.
You create a new user account named Admin5.
You need to ensure that Admin5 can create Group Policy objects (GPOs) and link the GPOs to all of the
organizational units (OUs) in the domain. Admin5 must be prevented from modifying GPOs created by other
administrators.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

You have a server named Server1.
You enable BitLocker Drive Encryption (BitLocker) on Server1.
You need to change the password for the trusted Platform Module (TPM) chip.
What should you run on Server1?

HOTSPOT
You have a server named Server1 that has the Network Policy and Access Services server role installed.
You plan to configure Network Policy Server (NPS) on Server1 to use certificate-based authentication for VPN
connections.
You obtain a certificate for NPS.
You need to ensure that NPS can perform certificate-based authentication.
To which store should you import the certificate? To answer, select the appropriate store in the answer area.
Hot Area:

Your network contains an Active Directory forest named contoso.com. The functional level of the forest is
Windows Server 2008 R2.
All of the user accounts in the marketing department are members of a group named Contoso\\MarketingUsers.
All of the computer accounts in the marketing department are members of a group named Contoso
\\MarketingComputers.
A domain user named User1 is a member of the Contoso\\MarketingUsers group. A computer named
Computer1 is a member of the Contoso\\MarketingComputers group.
You have four Password Settings objects (PSOs). The PSOs are defined as shown in the following table.

When User1 logs on to Computer1 and attempts to change her password, she receives an error message
indicating that her password is too short.
You need to tell User1 what her minimum password length is.
What should you tell User1?

HOTSPOT
Your network contains one Active directory forest named contoso.com. The forest contains a single domain. All
domain controllers are virtual machines that run Windows Server 2012 R2. The functional level of the domain
and the forest is Windows Server 2012 R2.
The forest contains the domain controllers configured as shown in the following table.

In the table below, select the domain controller that can be cloned by using domain controller cloning and select
the domain controller that must be online to perform domain controller cloning.
NOTE: Make only one selection in each column.
Hot Area:

Your network contains an Active Directory domain named contoso.com. The domain controllers in the domain
are configured as shown in the following table.

You deploy a new domain controller named DC3 that runs Windows Server 2012 R2.
You discover that you cannot create Password Settings objects (PSOs) by using Active Directory Administrative
Center.
You need to ensure that you can create PSOs from Active Directory Administrative Center.
What should you do?

Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. All
domain controllers run Windows Server 2012 R2.
The domain contains two domain controllers. The domain controllers are configured as shown in the following
table.

Active Directory Recycle Bin is enabled.
You discover that a support technician accidentally removed 100 users from an Active Directory group named
Group1 an hour ago.
You need to restore the membership of Group1.
What should you do?

You have a Windows Server Update Services (WSUS) server named Server1. Server1 synchronizes from
Microsoft Update.
You plan to deploy a new WSUS server named Server2. Server2 will synchronize updates from Server1.
Server2 will be separated from Server1 by a firewall.
You need to identify which port must be open on the firewall so that Server2 can synchronize the updates.
Which port should you identify?