DRAG DROP
Your company has multiple offices.
The network contains an Active Directory domain named contoso.com. An Active Directory site exists for each
office. All of the sites connect to each other by using DEFAULTIPSITELINK.
The company plans to open a new office. The new office will have a domain controller and 100 client
computers.
You install Windows Server 2016 on a member server in the new office. The new server will become a domain
controller.
You need to deploy the domain controller to the new office. The solution must ensure that the client computers
in the new office will authenticate by using the local domain controller.
Which three actions should you perform next in sequence? To answer, move the appropriate actions from the
list of actions to the answer area and arrange them in the correct order.
Select and Place:

Your network contains an Active Directory forest named contoso.com.
A partner company has a forest named fabrikam.com. Each forest contains one domain.
You need to provide access for a group named Research in fabrikam.com to resources in contoso.com. The
solution must use the principle of least privilege.What should you do?

HOTSPOT
Your network contains an Active Directory domain named contoso.com.
Some user accounts in the domain have the P.O. Box attribute set.
You plan to remove the value of the P.O. Box attribute for all of the users by using Ldifde.
You have a user named User1 who is located in the Users container.
How should you configure the LDIF file to remove the value of the P.O. Box attribute for User1? To answer,
select the appropriate options in the answer area.Hot Area:

Your network contains an Active Directory domain named contoso.com. The domain functional level is
Windows Server 2012 R2.
You need to secure several high-privilege user accounts to meet the following requirements:
Prevent authentication by using NTLM.
Use Kerberos to verify authentication request to any resources.
Prevent the users from signing in to a client computer if the computer is disconnected from the domain.
What should you do?

Your network contains an Active Directory forest. The forest contains two domains named litwarenc.com andcontoso.com. The contoso.com domain contains two domains controllers named LON-DC01 and LON-DC02.
The domain controllers are located in a site named London that is associated to a subnet of 192.168.10.0/24
You discover that LON-DC02 is not a global catalog server.
You need to configure LON-DC02 as a global catalog server.
What should you do?

Your network contains an Active Directory forest named contoso.com
Your company plans to hire 500 temporary employees for a project that will last 90 days.
You create a new user account for each employee. An organizational unit (OU) named Temp contains the user
accounts for the employees.
You need to prevent the new users from accessing any of the resources in the domain after 90 days.
What should you do?

HOTSPOT
Your network contains an Active Directory forest. The forest contains one domain named contoso.com. The
domain contains two domain controllers named DC1 and DC2. DC1 holds all of the operations master roles.
During normal network operations, you run the following commands on DC2:
Move-ADDirectoryServerOperationMasterRole -Identity “DC2” -OperationMasterRole PDCEmulator
Move- ADDirectoryServerOperationMasterRole –Identity “DC2” -OperationMasterRole RIDMaster
DC1 fails.
You remove DC1 from the network, and then you run the following command:
Move-ADDirectoryServerOperationMasterRole –Identity “DC2” -OperationMasterRole SchemaMaster
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Hot Area:

DRAG DROP
You network contains an Active Directory forest. The forest contains an Active Directory Federation Services
(AD FS) deployment.
The AD FS deployment contains the following:
An AD FS server named server1.contoso.com that runs Windows Server 2016
A WEB Application Proxy used to publish AD FS
A UPN that uses the contoso.com suffix
A namespace named adfs.contoso.com
You create a Microsoft Office 365 tenant named contoso.onmicrosoft.com. You use Microsoft Azure Active
Directory Connect (AD Connect) to synchronize all of the users and the UPNs from the contoso.com forest to
Office 365.
You need to configure federation between Office 365 and the on-premises deployment of Active Directory.Which three commands should you run in sequence from Server1? To answer, move the appropriate
commands from the list of commands to the answer area and arrange them in the correct order.
Select and Place:

HOTSPOT
You have a server named Server1 that runs Windows Server 2016. Server1 has the Web Application Proxy
role service installed.
You are publishing an application named App1 that will use Integrated Windows authentication as shown in the
following graphic.

Use the drop-down menus to select the answer area choice that completes each statement based on the
information presented in the graphic.
Hot Area:

You have a server named Server1 that runs Windows Server 2016.
You need to configure Server1 as a Web Application Proxy.
Which server role or role service should you install on Server1?