Your network contains an Active Directory domain named adatum.com.
The domain contains four servers. The servers are configured as shown in the following table.

You plan to deploy an enterprise certification authority (CA) on a server named Server5. Server5 will be used to
issue certificates to domain-joined computers and workgroup computers.
You need to identify which server you must use as the certificate revocation list (CRL) distribution point for
Server5.
Which server should you identify?

Your network contains an Active Directory forest. The forest contains two domains named contoso.com and
fabrikam.com. The forest functional level is Windows 2000. The contoso.com domain contains domain
controllers that run either Windows Server 2008 or Windows Server 2008 R2. The domain functional level is
Windows Server 2008. The fabrikam.com domain contains domain controllers that run either Windows 2000
Server or Windows Server 2003.
The domain functional level is Windows 2000 native. The contoso.com domain contains a member server
named Server1 that runs Windows Server 2012 R2.
You need to add Server1 as a new domain controller in the contoso.com domain.
What should you do first?

Your network contains an Active Directory forest. The forest contains two domains named contoso.com and
fabrikam.com. The functional level of the forest is Windows Server 2003. The contoso.com domain contains
domain controllers that run either Windows Server 2008 or Windows Server 2008 R2. The functional level of
the domain is Windows Server 2008. The fabrikam.com domain contains domain controllers that run either
Windows Server 2003 or Windows Server 2008. The functional level of the domain is Windows Server 2003.
The contoso.com domain contains a member server named Server1 that runs Windows Server 2012 R2. You
install the Active Directory Domain Services server role on Server1.
You need to add Server1 as a new domain controller in the contoso.com domain.
What should you do?

Your network contains an Active Directory domain named contoso.com. The domain contains a main office and
a branch office. An Active Directory site exists for each office.
All domain controllers run Windows Server 2012 R2. The domain contains two domain controllers. The domain
controllers are configured as shown in the following table.
DC1 hosts an Active Directory-integrated zone for contoso.com.
You add the DNS Server server role to DC2.
You discover that the contoso.com DNS zone fails to replicate to DC2.
You verify that the domain, schema, and configuration naming contexts replicate from DC1 to DC2.
You need to ensure that DC2 replicates the contoso.com zone by using Active Directory replication.
Which tool should you use?

Your network contains an Active Directory forest. The forest contains two domains named contoso.com and
fabrikam.com. The functional level of the forest is Windows Server 2003.
You have a domain outside the forest named adatum.com.
You need to configure an access solution to meet the following requirements:
– Users in adatum.com must be able to access resources in contoso.com.
– Users in adatum.com must be prevented from accessing resources in fabrikam.com.
– Users in both contoso.com and fabrikam.com must be prevented from accessing resources in adatum.com.
What should you create?

Your network contains an Active Directory domain named contoso.com. The domain contains two servers
named Server1 and Server2 that run Windows Server 2012 R2. Server1 has the DHCP Server server role
installed. Server2 has the Hyper-V server role installed. Server2 has an IP address of 192.168.10.50. Server1
has a scope named Scope1 for the 192.168.10.0/24 network.
You plan to deploy 20 virtual machines on Server2 that will be connected to the external network.
The MAC addresses for the virtual machines will begin with 00-15-SD-83-03.
You need to configure Server1 to offer the virtual machines IP addresses from 192.168.10.200 to
192.168.10.219. Physical computers on the network must be offered IP addresses outside this range.
You want to achieve this goal by using the minimum amount of administrative effort.
What should you do from the DHCP console?

You have a server named DC2 that runs Windows Server 2012 R2. DC2 contains a DNS zone namedadatum.com. The adatum.com zone is shown in the exhibit. (Click the Exhibit button.)

You need to configure DNS clients to perform DNSSEC validation for the adatum.com DNS domain.
What should you configure?

Your network contains an Active Directory domain named contoso.com. The domain contains two servers
named Server1 and Server2 that run Windows Server 2012 R2. Server1 has the IP Address Management
(IPAM) Server feature installed. Server2 has the DHCP Server server role installed. A user named User1 is a
member of the IPAM Users group on Server1.
You need to ensure that User1 can use IPAM to modify the DHCP scopes on Server2.
The solution must minimize the number of permissions assigned to User1.
To which group should you add User1?

Your network contains an Active Directory domain named adatum.com. The domain contains a domain
controller named DC1 that runs Windows Server 2012 R2. On Dc1, you open DNS Manager as shown in the
exhibit. (Click the Exhibit button.)

You need to change the zone type of the contoso.com zone from an Active Directory-integrated zone to a
standard primary zone.
What should you do before you change the zone type?

You have a DHCP server named Server1. Server1 has one network adapter. Server1 is located on a subnet
named Subnet1. Server1 has scope named Scope1. Scope1 contains IP addresses for the 192.168.1.0/24
network. Your company is migrating the IP addresses on Subnet1 to use a network ID of 10.10.0.0/16. On
Server11 you create a scope named Scope2.
Scope2 contains IP addresses for the 10.10.0.0/16 network.
You need to ensure that clients on Subnet1 can receive IP addresses from either scope.
What should you create on Server1?