You work as an administrator at Contoso.com. The Contoso.com network consists of an Active
Directory forest that contains a root domain, named Contoso.com, and two child domains, named
us.Contoso.com and uk.Contoso.com. All servers on the Contoso.com network have Windows Server
2012 R2 installed.
The root domain hosts a domain local distribution group, named ENSUREPASSGroup. You are
preparing to issue ENSUREPASSGroup read-only access to a shared folder hosted by the
us.Contoso.com domain.
You want to make sure that ENSUREPASSGroup is able to access the shared folder in the
us.Contoso.com domain.
Which of the following actions should you take?

You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain
named Contoso.com.
Contoso.com has a domain controller, named ENSUREPASS-DC01, which has Windows Server 2012
R2 installed. Another Contoso.com domain controller, named ENSUREPASS-DC02, has Windows
Server 2008 R2 installed.
You have deployed a server, named ENSUREPASS-SR15, on Contoso.com’s perimeter network.
ENSUREPASSSR15 is running a Server Core Installation of Windows Server 2012 R2.
You have been instructed to make sure that ENSUREPASS-SR15 is part of the Contoso.com domain.
Which of the following actions should you take?

You work as an administrator at Contoso.com. The Contoso.com network consists of two Active
Directory forests, named Contoso.com and test.com. There is no trust relationship configured
between the forests.
A backup of Group Policy object (GPO) from the test.com domain is stored on a domain controller in
the Contoso.com domain.
You are informed that a GPO must be created in the Contoso.com domain, and must be based on
the settings of the GPO in the test.com domain.
You start by creating the new GPO using the New-GPO Windows PowerShell cmdlet. You want to
complete the task via a Windows PowerShell cmdlet.
Which of the following actions should you take?

You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain
named Contoso.com. All servers in the Contoso.com domain, including domain controllers, have
Windows Server 2012 R2 installed.
Contoso.com has a server, named ENSUREPASS-SR15, which is configured as a file server.
You have received instructions to make sure that a user, named Mia Hamm, has the ability to
generate a complete backup of ENSUREPASS-SR15 via Windows Server Backup.
Which of the following actions should you take?

You work as a senior administrator at Contoso.com. The Contoso.com network consists of a single
domain named Contoso.com. All servers on the Contoso.com network have Windows Server 2012
R2 installed.
You are running a training exercise for junior administrators. You are currently discussing the
Windows Firewall with Advanced Security feature.
Which of the following is TRUE with regards to Windows Firewall with Advanced Security? (Choose
all that apply.)

You work as a senior administrator at Contoso.com. The Contoso.com network consists of a single
domain named Contoso.com. All servers on the Contoso.com network have Windows Server 2012
R2 installed.
You are running a training exercise for junior administrators. You are currently discussing connection
security rules.
Which of the following is TRUE with regards to connection security rules? (Choose all that apply.)

You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain
named Contoso.com. All servers in the Contoso.com domain, including domain controllers, have
Windows Server 2012 R2 installed.
You have been instructed to make sure that Contoso.com users are not able to install a Windows
Store application. You then create a rule for packaged apps.
Which of the following is the rule based on? (Choose all that apply.)

You work as a senior administrator at Contoso.com. The Contoso.com network consists of a single
domain named Contoso.com. All servers on the Contoso.com network have Windows Server 2012
R2 installed.
You are running a training exercise for junior administrators. You are currently discussing Group
Policy preference.
Which of the following is TRUE with regards to Group Policy preference?

You work as an administrator at ABC.com. The ABC.com network consists of a single domain named
ABC.com. All servers in the ABC.com domain, including domain controllers, have Windows Server
2012 R2 installed.
ABC.com has a domain controller, named ABC-DC01, which contains the ABC.com domain’s primary
DNS zone. ABC.com’s workstations refer to ABC-DC01 as their primary DNS server.
You have been instructed to make sure that any DNS requests that are not for the ABC.com domain,
is resolved by ABC-DC01 querying the DNS server of ABC.com’s Internet Service Provider (ISP).
Which of the following actions should you take?

You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain
named Contoso.com. All servers on the Contoso.com network have Windows Server 2012 R2
installed.
Contoso.com has a server, named ENSUREPASS-SR13, which is configured as the primary DNS server
in the Contoso.com domain. Contoso.com has another server, named ENSUREPASS-SR14, which
makes use of ENSUREPASSSR13 for DNS queries.
You want to make sure that running nslookup.exe from ENSUREPASS-SR14 produces a result that
shows the proper name of the default server.
Which of the following actions should you take?