HOTSPOT
Your network contains an Active Directory domain named contoso.com. Domain controllers
run either Windows Server 2008 R2 or Windows Server 2012 R2.All client computers run
Windows 8.
All computer accounts are located in an organizational unit (OU) named OU1.
You create a Group Policy object (GPO) that contains several AppLocker rules. You link the
GPO to OU1.
You need to ensure that the AppLocker rules apply to all of the client computers.
What should you configure in the GPO?
To answer, select the appropriate service in the answer area.

Your network contains an Active Directory domain named contoso.com.
You create a software restriction policy to allow an application named App1 by using a
certificate rule.
You need to ensure that when users attempt to execute App1, the certificate for App1 is
verified against a certificate revocation list (CRL).
What should you do?

HOTSPOT
Your network contains an Active Directory forest. The forest contains a single domain named
contoso.com.
AppLocker policies are enforced on all member servers.
You view the AppLocker policy applied to the member servers as shown in the exhibit.(Click
the Exhibit button.)

To answer, complete each statement according to the information presented in the
exhibit.Each correct selection is worth one point.

Your network contains an Active Directory domain named contoso.com. The domain
contains an organizational unit (OU) named OU1.
You need to ensure that when new client computers join the domain, their computer
accounts are created in OU1 by default.
What should you do?

Your network contains an Active Directory domain named contoso.com. The domain
contains 100 user accounts that reside in an organizational unit (OU) named OU1.
You need to ensure that a user named User1 can link and unlink Group Policy objects
(GPOs) to OU1. The solution must minimize the number of permissions assigned to User1.
What should you do?

HOTSPOT
Your network contains an Active Directory domain named adatum.com.
You create an account for a temporary employee named User1.
You need to ensure that User1 can log on to the domain only between 08:00 and 18:00 from
a client computer named Computer1.
From which tab should you perform the configuration?
To answer, select the appropriate tab in the answer area.

Your network contains an Active Directory forest named contoso.com. The forest contains a
single domain. The domain contains two domain controllers named DC1 and DC2 that run
Windows Server 2012 R2.

The domain contains a user named User1 and three global security groups named Group1,
Group2 and, Group3.
You need to add User1 to Group1, Group2, and Group3.
Which cmdlet should you run?

Your network contains an Active Directory forest named contoso.com. The forest contains a
single domain. The domain contains two domain controllers named DC1 and DC2 that run
Windows Server 2012 R2.
The domain contains a user named User1 and a global security group named Group1.
User1 logs on to a client computer named Computer1.
You need to disable the computer account of Computer1.
Which cmdlet should you run?

Your network contains an Active Directory domain named contoso.com. The domain
contains a member server named Server1 and a domain controller named DC2.All servers
run Windows Server 2012 R2.All domain controllers are configured as DNS servers.
On Server1, you open Server Manager and you add DC2 as another server to manage.
From Server Manager on Server1, you right-click DC2 as shown in the exhibit. (Click the
Exhibit button.)

You need to ensure that when you right-click DC2, you see the option to run DNS Manager.
What should you do?

Your network contains an Active Directory forest. The forest functional level is Windows
Server 2012 R2. The forest contains a single domain. The domain contains a member server
named Server1.Server1 runs windows Server 2012 R2.
You purchase a network scanner named Scanned that supports Web Services on Devices
(WSD).
You need to share the network scanner on Server1.
Which server role should you install on Server1?