DRAG DROP
You network contains an Active Directory domain named contoso.com.
The domain contains an enterprise certification authority (CA).A user named Admin1 is a member of the Domain Admins group.
You need to ensure that you can archive keys on the CA. The solution must use Admin1 as a key recovery
agent.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of
actions to the answer area and arrange them in the correct order.
Select and Place:

HOTSPOT
Your network contains an Active Directory domain named contoso.com.
You have an administrative computer named Computer1 that runs Windows Server 2016.
From Computer1, you edit a Group Policy object (GPO) named GPO1 as shown in the exhibit.

You receive a new administrative template named Template1.
Template1 consists of Template1.adml. Template1 is in English US.
You need to ensure that the settings of Template1 appear under the Administrative Templates node.
To where should you copy the Template1 files? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

HOTSPOT
Your network contains an Active Directory domain named contoso.com.
You need to view a list of all the domain user accounts that are enabled. But whose users have not signed in
during the last 30 days.
Which command should you run? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

HOTSPOT
Your network contains an Active Directory domain named contoso.com.
The domain contains four servers named Server1, Server2, Server3, and Server4 that run Windows Server
2016.
Server1 has IP Address Management (IPAM) installed. Server2, Server3, and Server 4 have the DHCP Server
role installed. IPAM manages Server2, Server3, and Server4.
A domain user named User1 is a member of the groups shown in the following table.

Which actions can User1 perform? To answer, select the appropriate options in the answer area.
Hot Area:

HOTSPOT
Your network contains an Active Directory domain named contoso.com.
The domain contains three servers named Server1, Server2, and Server3 that run Windows Server 2016.
Server1 has IP Address Management (IPAM) installed. Server2 and Server3 have the DHCP Server role
installed and have several DHCP scopes configured.
The IPAM server retrieves data from Server2 and Server3.
A domain user named User1 is a member of the groups shown in the following table.

On Server1, you create a security policy for User1. The policy grants the IPAM DHCP Scope Administrator Role
with the \\Global access scope to the user.
Which actions can User1 perform? To answer, select the appropriate options in the answer area.
Hot Area:

HOTSPOT
You have a server named Server1 that runs Windows Server 2016.Server1 has the Web Application Proxy role service installed.
You need to publish Microsoft Exchange Server 2013 services through the Web Application Proxy. The solution
must use preauthentication whenever possible.
How should you configure the preauthentication method for each service? To answer, select the appropriate
options in the answer area.
Hot Area:

DRAG DROP
Your network contains an Active Directory domain named contoso.com.
The domain contains a server named Server1 that runs Windows Server 2016.
You install IP Address Management (IPAM) on Server1.
You need to manually start discovery of servers that IPAM can manage in contoso.com.
Which three cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of
cmdlets to the answer area and arrange them in the correct order.
Select and Place:

HOTSPOT
Your network contains an Active Directory domain named contoso.com.
The domain contains two servers named Server1 and Server2 that run Windows Server 2016.
Server1 has IP Address Management (IPAM) installed. Server2 has the DHCP Server role installed. The IPAM
server retrieves data from Server2.
The domain has two users named User1 and User2 and a group named Group1. User1 is the only member of
Group1.
Server1 has one IPAM access policy. You edit the access policy as shown in the Policy exhibit. (Click the
Exhibit button.)

The DHCP scopes are configured as shown in the Scopes exhibit. (Click the Exhibit button.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Hot Area:

HOTSPOT
Your company has a testing environment that contains an Active Directory domain named contoso.com. The
domain contains a server named Server1 that runs Windows Server 2016. Server1 has IP Address
Management (IPAM) installed. IPAM has the following configuration.

The IPAM Overview page from Server Manager is shown in the IPAM Overview exhibit.
(Click the Exhibit button.)

The group policy configurations are shown in the GPO exhibit. (Click the Exhibit button.)
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Hot Area:

HOTSPOT
Your network contains an Active Directory forest named contoso.com.Your company has a custom application named ERP1. ERP1 uses an Active Directory Lightweight Directory
Services (AD LDS) server named Server1 to authenticate users.
You have a member server named Server2 that runs Windows Server 2016. You install the Active Directory
Federation Services (AD FS) server role on Server2 and create an AD FS farm.
You need to configure AD FS to authenticate users from the AD LDS server.
Which cmdlets should you run? To answer, select the appropriate options in the answer area.
Hot Area: