HOTSPOT
Your network contains an Active Directory domain named adatum.com. All domain controllers run
Windows Server 2012 R2.All client computers run Windows 7. The computer accounts for all of the
client computers are located in an organizational unit (OU) named OU1.
An administrator links a Group Policy object (GPO) to OU1. The GPO contains several application
control policies.
You discover that the application control policies are not enforced on the client computers.
You need to modify the GPO to ensure that the application control policies are enforced on the
client computers.
What should you configure in the GPO?
To answer, select the appropriate service in the answer area.

Your network contains an Active Directory domain named contoso.com. You have a Group Policy
object (GPO) named GP1 that is linked to the domain. GP1 contains a software restriction policy that
blocks an application named App1.
You have a workgroup computer named Computer1 that runs Windows 8. A local Group Policy on
Computer1 contains an application control policy that allows App1.

You join Computer1 to the domain.
You need to prevent App1 from running on Computer1.
What should you do?

Your network contains an Active Directory domain named contoso.com. All client computer
accounts are in an organizational unit (OU) named AllComputers. Client computers run either
Windows 7 or Windows 8.
You create a Group Policy object (GPO) named GP1.
You link GP1 to the AllComputers OU.
You need to ensure that GP1 applies only to computers that have more than 8 GB of memory.
What should you configure?

Your network contains an Active Directory domain named contoso.com. The domain contains an
Application server named Server1. Server1 runs Windows Server 2012 R2.
Server1 is configured as an FTP server.

Client computers use an FTP Application named App1.exe. App1.exe uses TCP port 21 as the control
port and dynamically requests a data port.
On Server1, you create a firewall rule to allow connections on TCP port 21.
You need to configure Server1 to support the client connections from App1.exe.
What should you do?

Your network contains an Active Directory domain named contoso.com.
All client computers run Windows 8.
You deploy a server named Server1 that runs Windows Server 2012 R2.
You install a new client-server application named App1 on Server1 and on the client computers. The
client computers must use TCP port 6444 to connect to App1 on Server1.Server1 publishes the
information of App1 to an intranet server named Server2 by using TCP port 3080.
You need to ensure that all of the client computers can connect to App1. The solution must ensure
that the application can connect to Server2.
Which Windows Firewall rule should you create on Server1?

Your network contains an Active Directory domain named contoso.com. The domain contains two
servers named Server1 and Server2 that run Windows Server 2012 R2.
You create a security template named Template1 by using the security template snap-in.
You need to apply Template1 to Server2.
Which tool should you use?

Your network contains multiple subnets.
On one of the subnets, you deploy a server named Server1 that runs Windows Server 2012 R2.
You install the DNS Server server role on Server1, and then you create a standard primary zone
named contoso.com.
You need to ensure that client computers can resolve single-label names to IP addresses.
What should you do first?

HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains a
single location named Site1. The domain contains a server named Server1 that has the DHCP Server
server role installed.
All client computers receive their IPv4 configurations dynamically.
The domain will expand to include a second location named Site2. A server named Server2 will be
deployed to Site2. Site1 and Site2 will connect to each other by using a WAN link.
You need to ensure that the clients in both sites receive their IPv4 configurations from Server1.
In the table below, identify which actions must be performed on each server. Make only one
selection in each row. Each correct selection is worth one point.

Your network contains an Active Directory domain named contoso.com. The DNS zone for
contoso.com is Active-Directory integrated.
The domain contains 500 client computers. There are an additional 20 computers in a workgroup.
You discover that every client computer on the network can add its record to the contoso.com zone.
You need to ensure that only the client computers in the Active Directory domain can register
records in the contoso.com zone.
What should you do?

Your network contains an Active Directory domain named contoso.com. The domain contains a
domain controller named Server1 that has the DNS Server server role installed. Server1 hosts a
primary zone for contoso.com.
The domain contains a member server named Server2 that is configured to use Server1 as its
primary DNS server.
From Server2, you run nslookup.exe as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that when you run Nslookup, the correct name of the default server is displayed.
What should you do?