Your company recently deployed a new Active Directory forest named contoso.com. The first
domain controller in the forest runs Windows Server 2012 R2.
You need to identify the time-to-live (TTL) value for domain referrals to the NETLOGON and
SYSVOL shared folders.
Which tool should you use?

HOTSPOT
Your network contains an Active Directory forest named contoso.com that contains a single
domain. The forest contains three sites named Site1, Site2, and Site3.
Domain controllers run either Windows Server 2008 R2 or Windows Server 2012 R2. Each
site contains two domain controllers. Site1 and Site2 contain a global catalog server.
You need to create a new site link between Site1 and Site2. The solution must ensure that
the site link supports the replication of all the naming contexts.
From which node should you create the site link?
To answer, select the appropriate node in the answer area.

Your network contains two Active Directory forests named contoso.com and adatum.com.
Contoso.com contains one domain. Adatum.com contains a child domain named
child.adatum.com.
Contoso.com has a one-way forest trust to adatum.com. Selective authentication is enabled
on the forest trust.
Several user accounts are migrated from child.adatum.com to adatum.com.
Users report that after the migration, they fail to access resources in contoso.com. The users
successfully accessed the resources in contoso.com before the accounts were migrated.
You need to ensure that the migrated users can access the resources in contoso.com.
What should you do?

HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain
contains domain controllers that run either Windows Server 2003, Windows Server 2008 R2,
or Windows Server 2012 R2.
You plan to implement a new Active Directory forest. The new forest will be used for testing
and will be isolated from the production network.
In the test network, you deploy a server named Server1 that runs Windows Server 2012 R2.
You need to configure Server1 as a new domain controller in a new forest named
contoso.test.
The solution must meet the following requirements:
The functional level of the forest and of the domain must be the same as that of
contoso.com.
Server1 must provide name resolution services for contoso.test.
What should you do?
To answer, configure the appropriate options in the answer area.

Your network contains an Active Directory forest named adatum.com. The forest contains a
single domain. The domain contains four servers. The servers are configured as shown in
the following table.

You need to update the schema to support a domain controller that will run Windows Server
2012 R2.
On which server should you run adprep.exe?

HOTSPOT
Your network contains three Active Directory forests. The forests are configured as shown in
the following table.

A two-way forest trust exists between contoso.com and divisionl.contoso.com. A two-way
forest trust also exists between contoso.com and division2.contoso.com.
You plan to create a one-way forest trust from divisionl.contoso.com to
division2.contoso.com.
You need to ensure that any cross-forest authentication requests are sent to the domain
controllers in the appropriate forest after the trust is created.
How should you configure the existing forest trust settings?
In the table below, identify which configuration must be performed in each forest. Make only
one selection in each column. Each correct selection is worth one point.

Your network contains an Active Directory forest named contoso.com. The forest contains
three domains. All domain controllers run Windows Server 2012 R2.
The forest has a two-way realm trust to a Kerberos realm named adatum.com.
You discover that users in adatum.com can only access resources in the root domain of
contoso.com.
You need to ensure that the adatum.com users can access the resources in all of the
domains in the forest.
What should you do in the forest?

Your network contains an Active Directory forest named contoso.com. The forest contains
two domains named contoso.com and childl.contoso.com. The domains contain three
domain controllers.
The domain controllers are configured as shown in the following table.

You need to ensure that the KDC support for claims, compound authentication, and kerberos
armoring setting is enforced in the child1.contoso.com domain.
Which two actions should you perform? (Each correct answer presents part of the solution.
Choose two.)

Your network contains an Active Directory domain named contoso.com. All domain
controllers run Windows Server 2012 R2. The domain contains two domain controllers.
The domain controllers are configured as shown in the following table.

You configure a user named User1 as a delegated administrator of DC10.
You need to ensure that User1 can log on to DC10 if the network link between the Main site
and the Branch site fails.
What should you do?

HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain
contains two member servers named Server1 and Server2. All servers run Windows Server
2012 R2.
Server1 and Server2 have the Network Load Balancing (NLB) feature installed. The servers
are configured as nodes in an NLB cluster named Cluster1. Both servers connect to the
same switch.
Cluster1 hosts a secure web Application named WebApp1. WebApp1 saves user state
information in a central database.
You need to ensure that the connections to WebApp1 are distributed evenly between the
nodes. The solution must minimize port flooding.
What should you configure? To answer, configure the appropriate affinity and the
appropriate mode for Cluster1 in the answer area.