Your network contains an Active Directory domain named contoso.com. All client computers run
Windows 8.
Your company has users who work from home. Some of the home users have desktop computers.
Other home users have laptop computers. All of the computers are joined to the domain.
All of the computer accounts are members of a group named Group1. Currently, the home users
access the corporate network by using a PPTP VPN. You implement DirectAccess by using the default
configuration and you specify Group1 as the DirectAccess client group.
The home users who have desktop computers report that they cannot use DirectAccess to access the
corporate network.
The home users who have laptop computers report that they can use DirectAccess to access the
corporate network.
You need to ensure that the home users who have desktop computers can access the network by
using DirectAccess.
What should you modify?

Your network contains an Active Directory forest. The forest contains two domains named
contoso.com and fabrikam.com. All of the DNS servers in both of the domains run Windows Server
2012 R2.
The network contains two servers named Server1 and Server2. Server1 hosts an Active Directoryintegrated zone for contoso.com. Server2 hosts an Active Directory-integrated zone for
fabrikam.com.
Server1 and Server2 connect to each other by using a WAN link. Client computers that connect to
Server1 for name resolution cannot resolve names in fabrikam.com.
You need to configure Server1 to support the resolution of names in fabrikam.com. The solution
must ensure that users in contoso.com can resolve names in fabrikam.com if the WAN link fails.
What should you do on Server1?

Your network contains an Active Directory domain named contoso.com. The domain contains more
than 100 Group Policy objects (GPOs).
Currently, there are no enforced GPOs. The domain contains a top-level organizational unit (OU) for
each department. A group named Group1 contains members from each department.

You have a GPO named GPO1 that is linked to the domain.
You need to configure GPO1 to Apply settings to Group1 only.
What should you use?

Your network contains an Active Directory domain named contoso.com. The domain contains more
than 100 Group Policy objects (GPOs). Currently, there are no enforced GPOs.
You need to prevent all of the GPOs at the site level and at the domain level from being Applied to
users and computers in an organizational unit (OU) named OU1.
You want to achieve this goal by using the minimum amount of administrative effort.
What should you use?

Your network contains an Active Directory domain named contoso.com. The domain contains two
member servers named Server1 and Server2. All servers run Windows Server 2012 R2.
Server1 and Server2 have the Network Load Balancing (NLB) feature installed. The servers are
configured as nodes in an NLB cluster named Cluster1. Cluster1 hosts a secure web Application
named WebApp1. WebApp1 saves user state information locally on each node.
You need to ensure that when users connect to WebApp1, their session state is maintained.
What should you configure?

Your network contains an Active Directory domain named contoso.com. The domain contains more
than 100 Group Policy objects (GPOs). Currently, there are no enforced GPOs. You have two GPOs
linked to an organizational unit (OU) named OU1. You need to change the precedence order of the
GPOs. What should you use?

You have a VHD that contains an image of Windows Server 2012 R2. You plan to Apply updates to
the image.
You need to ensure that only updates that can install without requiring a restart are installed.
Which DISM option should you use?

Your network contains an Active Directory domain named contoso.com. The domain contains a main
office and a branch office. An Active Directory site exists for each office. The domain contains two
servers named Server1 and Server2 that run Windows Server 2012 R2.
Both servers have the DHCP Server server role installed. Server1 is located in the main office site.
Server2 is located in the branch office site. Server1 provides IPv4 addresses to the client computers
in the main office site. Server2 provides IPv4 addresses to the client computers in the branch office
site.
You need to ensure that if either Server1 or Server2 are offline, the client computers can still obtain
IPv4 addresses. The solution must meet the following requirements:
The storage location of the DHCP databases must not be a single point of failure. Server1 must
provide IPv4 addresses to the client computers in the branch office site only if Server2 is offline.
Server2 must provide IPv4 addresses to the client computers in the main office site only if Server1 is
offline.
Which configuration should you use?

Your network contains an Active Directory domain named contoso.com. The domain contains a
server named Server1 that runs Windows Server 2012 R2. Server1 has the Active Directory
Certificate Services server role installed and is configured as an enterprise certification authority
(CA).
You need to ensure that all of the users in the domain are issued a certificate that can be used for
the following purposes:
Email security
Client authentication
Encrypting File System (EFS)
Which two actions should you perform? (Each correct answer presents part of the solution. Choose
two.)

You manage an environment that has many servers. The servers run Windows Server 2012 R2 and
use iSCSI storage. Administrators report that it is difficult to locate available iSCSI resources on the
network. You need to ensure that the administrators can locate iSCSI resources on the network by
using a central repository. Which feature should you deploy?