HOTSPOT
Your network contains an Active Directory forest named contoso.com. The forest contains
one domain. All domain controllers run Windows Server 2012. The functional level of the
forest and the domain is Windows Server 2012.
The domain contains three domain controllers. The domain controllers are configured as
shown in the following table.

In the forest, you plan to add a new domain controller that runs Windows Server 2012 R2.
You need to prepare the environment before you add the new domain controller.
Which domain controllers must be available to run each command? To answer, select the
appropriate domain controllers in the answer area.

You are designing an Active Directory forest for a company named Contoso, Ltd. Contoso
identifies the following administration requirements for the design:
User account administration and Group Policy administration will be performed by network
technicians. The technicians will be added to a group named OUAdmins.
IT staff who are responsible for backing up servers will have user accounts that are
members of the Backup Operators group in the domain.
All user accounts will be located in an organizational unit (OU) named AllEmployees.
You run the Delegation of Control Wizard and assign the OUAdmins group full control to all
of the objects in the AllEmployeesOU.
After delegating the required permissions, you discover that the user accounts of some of
the IT staff have inconsistent permissions on the objects in AllEmployees.
You need to recommend a solution to ensure that the members of OUAdmins can manage
all of the objects in AllEmployees.
What should you include in the recommendation?

Your network contains an Active Directory forest named contoso.com. The forest contains
one domain.
Your company plans to open a new division named Division1. A group named
Division1Admins will administer users and groups for Division1.
You identify the following requirements for Division1:
All Division1 users must have a complex password that is 14 characters.
Division1Admins must be able to manage the user accounts for Division1.
Division1Admins must be able to create groups, and then delete the groups that they create.
Division1Admins must be able to reset user passwords and force a password change at the
next logon for all Division1 users.
You need to recommend changes to the forest to support the Division1 requirements.
What should you recommend?
More than one answer choice may achieve the goal. Select the BEST answer.

Your company, which is named Contoso, Ltd., has a main office and two branch offices. The
main office is located in North America. The branch offices are located in Asia and Europe.
You plan to design an Active Directory forest and domain infrastructure.
You need to recommend an Active Directory design to meet the following requirements:
The contact information of all the users in the Europe office must not be visible to the users
in the other offices.
The administrators in each office must be able to control the user settings and the computer
settings of the users in their respective office.
The solution must use the least amount of administrative effort.
What should you include in the recommendation?

Your network contains 50 servers that run Windows Server 2003 and 50 servers that run
Windows Server 2008.
You plan to implement Windows Server 2012 R2.
You need to create a report that includes the following information:
The servers that run applications and services that can be moved to Windows Server 2012
R2
The servers that have hardware that can run Windows Server 2012 R2
The servers that are suitable to be converted to virtual machines hosted on Hyper-V hosts
that run Windows Server 2012 R2
Solution: From an existing server, you run the Microsoft Application Compatibility Toolkit
(ACT).
Does this meet the goal?

Your network contains an Active Directory domain named contoso.com. The domain
contains multiple sites.
You plan to deploy DirectAccess.
The network security policy states that when client computers connect to the corporate
network from the Internet, all of the traffic destined for the Internet must be routed through
the corporate network.
You need to recommend a solution for the planned DirectAccess deployment that meets the
security policy requirement.
Solution: You enable force tunneling.
Does this meet the goal?

Your network contains an Active Directory domain named contoso.com. The domain
contains three VLANs. The VLANs are configured as shown in the following table.

All client computers run either Windows 7 or Windows 8.
The corporate security policy states that all of the client computers must have the latest
security updates installed.
You need to implement a solution to ensure that only the client computers that have all of the
required security updates installed can connect to VLAN 1. The solution must ensure that all
other client computers connect to VLAN 3.
Solution: You implement the IPsec enforcement method.
Does this meet the goal?

Your network contains an Active Directory forest named contoso.com.
You plan to deploy 200 Hyper-V hosts by using Microsoft System Center 2012 Virtual
Machine Manager (VMM) Service Pack 1 (SP1).
You add a PXE server to the fabric.
You need to identify which objects must be added to the VMM library for the planned
deployment.
What should you identify? (Each correct answer presents part of the solution. Choose all that
apply.)

You plan to deploy multiple servers in a test environment by using Windows Deployment
Services (WDS).
You need to identify which network services must be available in the test environment to
deploy the servers.
Which network services should you identify? (Each correct answer presents part of the
solution. Choose all that apply.)

You have a System Center 2012 R2 Virtual Machine Manager (VMM) infrastructure that
manages five Hyper-V hosts. The Hyper-V hosts are not clustered.
You have a virtual machine template that deploys a base image of Windows Server 2012
R2. No role services or features are enabled in the base image.
You need to deploy a virtual machine named VM1 that is based on the virtual machine
template.
VM1 will be deployed as part of a service. VM1 must have the Web Server (IIS) server role
installed. The solution must not require modifications to the virtual machine template or the
base image.
What are two possible profile types that achieve the goal? Each correct answer presents a
complete solution.