CORRECTED (Previously A) Your network contains a perimeter network and an internal network. The internal
network contains an Active Directory Federation Services (AD FS) 2.1 infrastructure. The infrastructure uses
Active Directory as the attribute store.
You plan to deploy a federation server proxy to a server named Server2 in the perimeter network.
You need to identify which value must be included in the certificate that is deployed to Server2.
What should you identify?

CORRECTED (Previously B) Your network contains an Active Directory domain named contoso.com. The
domain contains a server named Server1 that runs Windows Server 2012 R2. The system properties of
Server1 are shown in the exhibit. (Click the Exhibit button.)

You need to configure Server1 as an enterprise subordinate certification authority (CA).
What should you do first?

CORRECTED (Previously BD)Your network contains an Active Directory forest named contoso.com. The forest
contains two domains named contoso.com and childl.contoso.com. The domains contain three domain
controllers.
The domain controllers are configured as shown in the following table.

You need to ensure that the KDC support for claims, compound authentication, and kerberos armoring setting
is enforced in the child1.contoso.com domain.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. The
forest contains three Active Directory sites named SiteA, SiteB, and SiteC. The sites contain four domain
controllers. The domain controllers are configured as shown in the following table.

An IP site link exits between each site.
You discover that the users in SiteC are authenticated by the domain controllers in SiteA and SiteB.
You need to ensure that the SiteC users are authenticated by the domain controllers in SiteB, unless all of the
domain controllers in SiteB are unavailable.
What should you do?

Your network contains an Active Directory domain named adatum.com. The domain contains two sites named
Site1 and Site2 and two domain controllers named DC1 and DC2. DC1 is located in Site1 and DC2 is located in
Site2.
You install an additional domain controller named DC3 in Site1 and you ship DC3 to Site2.
A technician connects DC3 to Site2.
You discover that users in Site2 are authenticated only by DC2.
You need to ensure that the users in Site2 are authenticated by both DC2 and DC3.
What should you do?

Your network contains an Active Directory forest. The forest contains one domain named contoso.com. The
domain contains three domain controllers. The domain controllers are configured as shown in the following
table.

DC1 has all of the operations master roles installed.
You transfer all of the operations master roles to DC2, and then you uninstall Active Directory from DC1.
You need to ensure that you can use Password Settings objects (PSOs) in the domain.
What should you do?

Your network contains two Active Directory forests named contoso.com and adatum.com. All of the domain
controllers in both of the forests run Windows Server 2012 R2. The adatum.com domain contains a file server
named Servers.
Adatum.com has a one-way forest trust to contoso.com.
A contoso.com user name User10 attempts to access a shared folder on Servers and receives the error
message shown in the exhibit. (Click the Exhibit button.)

You verify that the Authenticated Users group has Read permissions to the Data folder.
You need to ensure that User10 can read the contents of the Data folder on Server5 in the adatum.com
domain.
What should you do?

Your network contains an Active Directory domain named adatum.com. You create a new Group Policy object
(GPO) named GPO1.
You need to verify that GPO1 was replicated to all of the domain controllers.Which tool should you use?

Your network contains an Active Directory forest named contoso.com. The contoso.com domain only contains
domain controllers that run Windows Server 2012 R2.The forest contains a child domain named child.contoso.com. The child.contoso.com domain only contains
domain controllers that run Windows Server 2008 R2. The child.contoso.com domain contains a member
server named Server1 that runs Windows Server 2012 R2.
You have access to four administrative user accounts in the forest. The administrative user accounts are
configured as shown in the following table.

You need to ensure that you can add a domain controller that runs Windows Server 2012 R2 to the
child.contoso.com domain.
Which account should you use to run adprep.exe?

Your network contains an Active Directory domain named adatum.com. The domain contains two domain
controllers that run Windows Server 2012 R2. The domain controllers are configured as shown in the following
table.

You log on to DC1 by using a user account that is a member of the Domain Admins group, and then you create
a new user account named User1.
You need to prepopulate the password for User1 on DC2.
What should you do first?