Your company has an office in New York.
Many users connect to the office from home by using the Internet.
You deploy an Active Directory Certificate Services (AD CS) infrastructure that contains an
enterprise certification authority (CA) named CA1. CA1 is only available from hosts on the
internal network.
You need to ensure that the certificate revocation list (CRL) is available to all of the users.
What should you do? (Each correct answer presents part of the solution. Choose all that
apply.)

HOTSPOT
Your network contains an Active Directory forest named contoso.com. All servers run
Windows Server 2012 R2. The forest contains two servers.
The servers are configured as shown in the following table.

You prepare the forest to support Workplace Join and you enable the Device Registration
Service (DRS) on Server1.
You need to ensure that Workplace Join meets the following requirements:
Application access must be based on device claims.
Users who attempt to join their device to the workplace through Server2 must be prevented
from locking out their Active Directory account due to invalid credentials.
Which cmdlet should you run to achieve each requirement? To answer, select the cmdlet for
each requirement in the answer area.

Your network contains the following roles and applications:
Microsoft SQL Server 2012
Distributed File System (DFS) Replication
Active Directory Domain Services (AD DS)
Active Directory Rights Management Services (AD RMS)
Active Directory Lightweight Directory Services (AD LDS)
You plan to deploy Active Directory Federation Services (AD FS).

You need to identify which deployed services or applications can be used as attribute stores
for the planned AD FS deployment.
What should you identify? (Each correct answer presents a complete solution. Choose all
that apply.)

Your company has 10,000 users located in 25 different sites.
All servers run Windows Server 2012. All client computers run either Windows 7 or Windows
8.
You need to recommend a solution to provide self-service password reset for all of the
users.
What should you include in the recommendation?

Your network contains an Active Directory domain named contoso.com. The domain
contains 200 servers that run either Windows Server 2012 R2, Windows Server 2012, or
Windows Server 2008 R2. The servers run the following enterprise applications:
Microsoft Exchange Server 2013
Microsoft SQL Server 2014
System Center 2012 R2 Operations Manager is deployed to the domain. Operations
Manager monitors all of the servers in the domain. Audit Collection Services (ACS) is
installed.
You need to recommend a monitoring strategy for the domain that meets the following
requirements:
A group of administrators must be notified when an error is written to the System log on the
servers that run Exchange Server 2013.
A group of administrators must be notified when a specific event is written to The Application
log on the servers that run SQL Server 2014.
What is the best approach to achieve the goal? More than one answer choice may achieve
the goal. Select the BEST answer.

Your company has three main offices named Main1, Main2, and Main3.
The network contains an Active Directory domain named contoso.com.
Each office contains a help desk group.

You plan to deploy Microsoft System Center 2012 Configuration Manager to meet the
following requirements:
The members of the Domain Admins group must be able to manage all of the Configuration
Manager settings.
The help desk groups must be able to manage only the client computers in their respective
office by using Configuration Manager.
You need to recommend a Configuration Manager infrastructure to meet the requirements.
Which infrastructure should you recommend?

Your network contains the following:
20 Hyper-V hosts
100 virtual machines
2,000 client computers
You need to recommend an update infrastructure design to meet the following requirements:
Deploy updates to all of the virtual machines and the client computers from a single console.
Generate reports that contain a list of the applied updates.
What should you recommend?
More than one answer choice may achieve the goal. Select the BEST answer.

Your network contains an Active Directory domain named contoso.com. The domain
contains a Microsoft System Center 2012 infrastructure.
All client computers have a custom application named App1 installed. App1 generates an
Event ID 42 every time the application runs out of memory.
Users report that when App1 runs out of memory, their client computer runs slowly until they
manually restart App1.
You need to recommend a solution that automatically restarts App1 when the application
runs out of memory. The solution must use the least amount of administrative effort.
What should you include in the recommendation?

Your company has a human resources department and a finance department.
You are planning an administrative model for both departments to meet the following
requirements:
Provide human resources managers with the ability to view the audit logs for the files of their
department.
Ensure that only domain administrators can view the audit logs for the files of the finance
department.
You need to recommend a solution for the deployment of file servers for both departments.
What should you recommend?
More than one answer choice may achieve the goal. Select the BEST answer.

###BeginCaseStudy###
Case Study: 1
Contoso, Ltd
Overview
Contoso, Ltd., is a recruiting and staffing company that has offices throughout North
America.
The company has a main office and six branch offices. The main office is located in Miami.
The branch offices are located in New York. Seattle, Los Angeles, Montreal, Toronto, and
Vancouver.
Existing Environment
Network Infrastructure
The network contains one Active Directory domain named contoso.com.
The main office has the following servers:
• One file server that maintains multiples shares
• Two domain controllers configured as DNS servers
• One Windows Server Update Services (WSUS) server
• Two DHCP servers that each have a scope for all of the subnets
• Two servers that have Failover Clustering configured and are used as virtualization
hosts
• One server that has Microsoft SQL Server 2012 installed and maintains a customer
relationship management (CRM) database
Each branch office has the following servers:
• One domain controller configured as a DNS server
• One DHCP server that has a signals scope for its respective office
Each office has a single subnet. The network speed of the local area network (LAN) is 1
gigabit per second. All of the offices have a high-speed connection to the Internet. The
offices connect to each other by using VPN appliances.
Current Issues
Users report that it can take a long time to download files from network shares in the main
office.
A root cause analysis identifies that network traffic peaks when the users experience this
issue.
Requirements
Planned Changes
The company plans to implement the following changes:
• Replace all of the domain controllers with new servers that run Windows Server 2012.
• Upgrade the CRM application to use a web-based application that connects to the
current CRM database. The web application will store session data in the memory of
each web server.
• Initially, deploy two front-end web servers to two virtual machines. Additional virtual
web servers will be deployed in the future.

• Monitor the availability of the CRM application and create alerts when the overall
availability is less than 99 percent.
• Implement Microsoft System Center 2012 to manage the new environment.
Business Requirements
The company identifies the following business requirements:
• Minimize hardware costs and software costs whenever possible.
• Minimize the amount of network traffic over the VPN whenever possible.
• Ensure that the users in the branch offices can access files currently on the main office
file server if an Internet link fails.
Technical Requirements
The company identifies the following technical requirements:
• Provide a highly available DHCP solution.
• Maintain a central database that contains the security events from all of the servers.
The database must be encrypted.
• Ensure that an administrator in the main office can manage the approval of Windows
updates and updates to third-party applications for all of the users.
• Ensure that all of the domain controllers have the ReliableTimeSource registry value
in HKEY_LOCAL_MACHINE
\SYSTEM\CurrentControlSet\Services\W32Time\Parameters set to 1, even if an
administrator changes that value manually.
Virtualization Requirements
The company identifies the following virtualization requirements:
• Minimize the number of permissions and privileges assigned to users.
• Ensure that the members of a group named Group2 can add a WSUS server to the
fabric.
• Ensure that a diagram view of the virtualization environment can be generated
dynamically.
• Minimize the amount of administrative effort required to manage the virtualization
environment.
• Prevent the failure of a front-end web server from affecting the availability of the
CRM application.
• Ensure that the members of a group named Group1 can create new virtual machines in
the Los Angeles office only.
• Only create virtual machine templates by using objects that already exist in the
System Center 2012 Virtual Machine Manager (VMM) library.
• On the failover cluster in the main office, apply limited distribution release (LDR)
updates to the virtualization hosts without disrupting the virtual machines hosted on
the virtualization hosts.
###EndCaseStudy###

You need to recommend a solution that manages the security events. The solution must
meet the technical requirements.
Which configuration should you include in the recommendation?