Your network contains an Active Directory domain named contoso.com. The functional level of the domainand
the forest is Windows Server 2008 R2.
All domain controllers run Windows Server 2008 R2.
You plan to deploy a new line-of-business application named App1 that uses claims-based authentication.
You need to recommend changes to the network to ensure that Active Directory can provide claims for Appl.
What should you include in the recommendation? (Each correct answer presents part of the solution. Choose
all that apply.)

Your company has two divisions named Division1 and Division2.
The network contains an Active Directory domain named contoso.com. The domain contains two child domains
named divisionl.contoso.com and division2.contoso.com.
The company sells Division1 to another company.
You need to prevent administrators in contoso.com and division2.contoso.com from gaining administrative
access to the resources in divisionl.contoso.com.
What should you recommend?

Your network contains an Active Directory forest. The forest contains two Active Directory domains named
contoso.com and child.contoso.com. The forest functional level is Windows Server 2003. The functional level of
both domains is Windows Server 2008.
The forest contains three domain controllers. The domain controllers are configured as shown in the following
table.

DC1 and DC2 have the DNS Server server role installed and are authoritative for both contoso.com and
child.contoso.com.
The child.contoso.com domain contains a server named serverl.child.contoso.com that runs Windows Server
2012.
You plan to deploy server1.child.contoso.com as a read-only domain controller (RODC).
You run the adprep.exe /rodcprep command on DC3 andreceive the following error message:

You need to identify what prevents you from successfully running Adprep /rodcprep on DC3.
What should you identify?

Your network contains an Active Directory forest named contoso.com. The forest functional level is Windows
Server 2012.
The forest contains an Active Directory domain. Thedomain contains a global security group named
GPO_Admins that is responsible for managing Group Policies in the forest.
A second forest named fabrikam.com contains three domains. The forest functional level is Windows Server
2003.
You need to design a trust infrastructure to ensurethat the GPO_Admins group can create, edit, and link Group
Policies in every domain of the fabrikam.com forest.
What should you include in the design?
More than one answer choice may achieve the goal. Select the BEST answer.

Your network contains an Active Directory domain named contoso.com. The domain contains a server named
Server1 that runs Windows Server 2008. Server1 is configured as an enterprise certification authority (CA). You
back up all of the data on Server1, and then exportthe private and public keys of the CA. You plan toreplace
Server1 with a new member server that was purchasedrecently. You need to identify which actions must be
performed on the new server to restore the certificate services of Server1. Which three actions shouldyou
identify?
To answer, move the three appropriate actions from the list of actions to the answer area and arrange them in
the correct order.

You need to ensure that NAP meets the technical requirements.
Technical Requirements
The company identifies the following technical requirements:
– Minimize the amount of administrative effort whenever possible.
– Ensure that NAP with IPSec enforcement can be configured.
– Rename boston.litwareinc.com domain to bos.htwareinc.com.
– Migrate the DHCP servers from the physical servers to a virtual server that runs Windows Server 2012.
– Ensure that the members of the Operators groups in all three domains can manage the IPAM server from
their client computer.
Which role services should you install?

You need to recommend changes to the Active Directory environment to support thevisualization
requirements.
Visualization Requirements
The company identifies the following virtualizationrequirements:
– Virtualize the application servers.
– Ensure that the additional domain controllers forthe branch offices can be deployed by using domain
controller cloning.
– Automatically distribute the new virtual machinesto Hyper-V hosts based on the current resource usage of the
Hyper-V hosts.
What should you include in the recommendation?

You deploy an Active Directory domain named contoso.com to the network. The domain is configured as an
Active Directory-integrated zone. All domain controllers run Windows Server 2012 and are DNS servers.
You plan to deploy a child domain named operations.contoso.com.
You need to recommend changes to the DNS infrastructure to ensure that users in the operations department
can access the servers in the contoso.com domain.
What should you include in the recommendation?

Your network contains a server named Server1 that runs Windows Server 2012. Server1 has the DHCP Server
server role installed.
All of the client computers that are in a subnet named Subnet1 receive their IP address configurationsfrom
Server1.
You plan to add another DHCP server named Server2 to Subnet1.
You need to recommend changes to the DHCP infrastructure to ensure that the client computers continue to
receive IP addressing information if a single DHCP server fails.
What should you do?
More than one answer choice may achieve the goal. Select the BEST answer.

Your company has a main office.
The network contains an Active Directory domain named contoso.com. The main office contains a server
named Server1 that runs Windows Server 2012. Server1 has the Remote Access server role installed and is
configured to accept incoming SSTP-based VPN connections.
All client computers run Windows 7.
The company plans to open a temporary office that will contain a server named Server2 that runs Windows
Server 2012 and has the DHCP Server server role installed. The office will also have 50 client computers and
an Internet connection.
You need to recommend a solution to provide the users in the temporary office with access to the resources in
the main office.
What should you recommend?
More than one answer choice may achieve the goal. Select the BEST answer.