Yournetwork contains an Active Directory domain named contoso.com.
Youdeploy a server named Server1 that runs Windows Server 2012 R2.
A local administrator installs the Active Directory Rights Management Services server role on
Server1.
Youneed to ensure that AD RMS clients can discover the AD RMS cluster automatically.
What should you do?

DRAG DROP
Yournetwork contains an Active Directory domain named adatum.com. The domain contains three
servers. The servers are configured as shown in the following table.

Server1 is configured as shown in the exhibit. (Click the Exhibit button.)

Template1 contains custom cryptography settings that are required by the corporate security team.
On Server2, an administrator successfully installs a certificate based on Template1.
The administrator reports that Template1 is not listed in the Certificate Enrollment wizard on
Server3, even after selecting the Show all templates check box.
You need to ensure that you can install a server authentication certificate on Server3. The certificate
must comply with the cryptography requirements.
Which three actions should you perform in sequence?
To answer, move the appropriate three actions from the list of actions to the answer area and
arrange them in the correct order.

Your network contains an Active Directory forest named adatum.com. The forest contains an Active
Directory Rights Management Services (AD RMS) cluster.
A partner company has an Active Directory forest named litwareinc.com. The partner company does
not have AD RMS deployed.
You need to ensure that users in litwareinc.com can consume rights-protected content from
adatum.com.
Which type of trust policy should you create?

Your network contains an Active Directory forest named adatum.com. The forest contains an Active
Directory Rights Management Services (AD RMS) cluster.
A partner company has an Active Directory forest named litwareinc.com. The partner company does
not have AD RMS deployed.
You need to ensure that users in litwareinc.com can consume rights-protected content from
adatum.com.
Which type of trust policy should you create?

Your network contains an Active Directory domain named contoso.com. The domain contains a
server named Server1 that runs Windows Server 2012 R2. Server1 has the Active Directory
Certificate Services server role installed and is configured to support key archival and recovery.
You create a new Active Directory group named Group1.
You need to ensure that the members of Group1 can request a Key Recovery Agent certificate.
The solution must minimize the permissions assigned to Group1.
Which two permissions should you assign to Group1? (Each correct answer presents part of the
solution. Choose two.)

Your network contains an Active Directory domain named contoso.com. The domain contains a
server named Server1 that runs Windows Server 2012 R2. Server1 has the Active Directory
Certificate Services server role installed and is configured to support key archival and recovery.
You create a new Active Directory group named Group1.
You need to ensure that the members of Group1 can request a Key Recovery Agent certificate.
The solution must minimize the permissions assigned to Group1.
Which two permissions should you assign to Group1? (Each correct answer presents part of the
solution. Choose two.)

HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains a
domain controller named DC1 and a member server named Server1. All servers run Windows
Server 2012 R2.
You install the IP Address Management (IPAM) Server feature on Server1.
From the Provision IPAM wizard, you select the Group Policy Based provisioning method and enter
a GPO name prefix of IPAM1.
You need to provision IPAM by using Group Policy.
What command should you run on Server1 to complete the process?
To answer, select the appropriate options in the answer area.

Yournetwork contains an Active Directory domain named contoso.com. The domain contains two
servers named Server1 and Server2. Both servers have the IP Address Management (IPAM) Server
feature installed.
You have a support technician named Tech1. Tech1 is a member of the IPAM Administrators group
on Server1 and Server2.
You need to ensure that Tech1 can use Server Manager on Server1 to manage IPAM on Server2.
To which group on Server2 should you add Tech1?

You have a server named DNS1 that runs Windows Server 2012 R2.
You discover that the DNS resolution is slow when users try to access the company intranet home
page by using the URL http://companyhome.
You need to provide single-label name resolution for CompanyHome that is not dependent on the
suffix search order.
Which three cmdlets should you run? (Each correct answer presents part of the solution. Choose
three.)

You have a server named DNS1 that runs Windows Server 2012 R2.
You discover that the DNS resolution is slow when users try to access the company intranet home
page by using the URL http://companyhome.
You need to provide single-label name resolution for CompanyHome that is not dependent on the
suffix search order.
Which three cmdlets should you run? (Each correct answer presents part of the solution. Choose
three.)