Your network contains an Active Directory domain named adatum.com. The domain contains two
domain controllers that run Windows Server 2012 R2. The domain controllers are configured as
shown in the following table.

You log on to DC1 by using a user account that is a member of the Domain Admins group, and then
you create a new user account named User1.
You need to prepopulate the password for User1 on DC2.
What should you do first?

Your network contains an Active Directory forest named contoso.com. The contoso.com domain
only contains domain controllers that run Windows Server 2012 R2.
The forest contains a child domain named child.contoso.com. The child.contoso.com domain only
contains domain controllers that run Windows Server 2008 R2. The child.contoso.com domain
contains a member server named Server1 that runs Windows Server 2012 R2.
You have access to four administrative user accounts in the forest. The administrative user accounts
are configured as shown in the following table.

You need to ensure that you can add a domain controller that runs Windows Server 2012 R2 to the
child.contoso.com domain.
Which account should you use to run adprep.exe?

Your network contains an Active Directory domain named contoso.com. The domain contains two
servers named Server1 and Server2 that run Windows Server 2012 R2. Server1 is a file server that
has the Hyper-V server role installed.
Server1 hosts several virtual machines. The virtual machine configuration files are stored on drive D
and the VHD files are stored on drive E.
You plan to replace drive E with a larger volume.
You need to ensure that the virtual machines on Server1 remain available while drive E is being
replaced.
What should you do?

Your network contains two servers named Server1 and Server2 that run Windows Server 2008 R2.
Server1 and Server2 are nodes in a failover cluster named Cluster1. The network contains two
servers named Server3 and Server4 that run Windows Server 2012 R2. Server3 and Server4 are
nodes in a failover cluster named Cluster2.
You need to move all of the applications and the services from Cluster1 to Cluster2.
What should you do first from Failover Cluster Manager?

You deploy an Active Directory Federation Services (AD FS) 2.1 infrastructure. The infrastructure
uses Active Directory as the attribute store.
Some users report that they fail to authenticate to the AD FS infrastructure.
You discover that only users who run third-party web browsers experience issues.
You need to ensure that all of the users can authenticate to the AD FS infrastructure successfully.
Which Windows PowerShell command should you run?

Your network contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the
Active Directory Certificate Services server role installed and is configured as a standalone
certification authority (CA).
You install a second server named Server2. You install the Online Responder role service on Server2.
You need to ensure that Server1 can issue an Online Certificate Status Protocol (OCSP) Response
Signing certificate to Server2.
What should you run on Server1?

DRAG DROP
Your network contains two Active Directory forests named contoso.com and adatum.com. Each
forest contains an Active Directory Rights Management Services (AD RMS) root cluster. All servers
run Windows Server 2012 R2.
You need to ensure that the rights account certificates issued in adatum.com are accepted by the AD
RMS root cluster in contoso.com.
What should you do in each forest?
To answer, drag the appropriate actions to the correct forests. Each action may be used once, more
than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Your network contains four Active Directory forests. Each forest contains an Active Directory Rights
Management Services (AD RMS) root cluster.
All of the users in all of the forests must be able to access protected content from any of the forests.
You need to identify the minimum number of AD RMS trusts required.
How many trusts should you identify?

Your network contains an Active Directory domain named contoso.com. All servers run Windows
Server 2012 R2.
The domain contains a domain controller named DC1 that is configured as an enterprise root
certification authority (CA).
All users in the domain are issued a smart card and are required to log on to their domain-joined
client computer by using their smart card.
A user named User1 resigned and started to work for a competing company.

You need to prevent User1 immediately from logging on to any computer in the domain. The
solution must not prevent other users from logging on to the domain.
Which tool should you use?

Your network contains an Active Directory domain named contoso.com. The domain contains a
server named Server1 that runs a Server Core installation of Windows Server 2012 R2.
You need to deploy a certification authority (CA) to Server1. The CA must support the autoenrollment of certificates.
Which two cmdlets should you run? (Each correct answer presents part of the solution. Choose two.)