Your network contains an Active Directory domain named contoso.com.
The domain contains a domain controller named DC1 and a member server named Server1.
Server1 has the IP Address Management (IPAM) Server feature installed.
On Dc1, you configure Windows Firewall to allow all of the necessary inbound ports for IPAM.
On Server1, you open Server Manager as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that you can use IPAM on Server1 to manage DNS on DC1.
What should you do?

Your network contains an Active Directory domain named contoso.com.
The domain contains servers named Server1 and Server2 that run Windows Server 2012 R2.
Server1 has the IP Address Management (IPAM) Server feature installed.
You install the IPAM client on Server2.
You open Server Manager on Server2 as shown in the exhibit. (Click the Exhibit button.)

You need to manage IPAM from Server2.
What should you do first?

Your network contains an Active Directory domain named contoso.com. The domain contains a
domain controller named Dc1. DC1 has the DNS Server server role installed.
The network has two sites named Site1 and Site2. Site1 uses 10.10.0.0/16 IP addresses and
Site2 uses 10.11.0.0/16 IP addresses. All computers use DC1 as their DNS server.
The domain contains four servers named Server1, Server2, Server3, and Server4.
All of the servers run a service named Service1.
DNS host records are configured as shown in the exhibit. (Click the Exhibit button.)

You discover that computers from the 10.10.1.0/24 network always resolve Service1 to the [P
address of Server1.
You need to configure DNS on DC1 to distribute computers in Site1 between Server1 and
Server2 when the computers attempt to resolve Service1.
What should run on DC1?

Your network contains an Active Directory domain named contoso.com. The domain contains a

main office and a branch office. An Active Directory site exists for each office. The domain
contains two servers named Server1 and Server2 that run Windows Server 2012 R2.
Both servers have the DHCP Server server role installed.
Server1 is located in the main office site. Server2 is located in the branch office site.
Server1 provides IPv4 addresses to the client computers in the main office site.
Server2 provides IPv4 addresses to the client computers in the branch office site.
You need to ensure that if either Server1 or Server2 are offline, the client computers can still
obtain IPv4 addresses.
The solution must meet the following requirements:
– The storage location of the DHCP databases must not be a single point
of failure.
– Server1 must provide IPv4 addresses to the client computers in the
branch office site only if Server2 is offline.
– Server2 must provide IPv4 addresses to the client computers in the
main office site only if Server1 is offline.
Which configuration should you use?

You have a DHCP server named Server1. Server1 has an IP address 192.168.1.2 is located on a
subnet that has a network ID of 192.168.1.0/24.
On Server1, you create the scopes shown in the following table.

You need to ensure that Server1 can assign IP addresses from both scopes to the DHCP clients
on the local subnet.
What should you create on Server1?

Your network contains servers that run Windows Server 2012 R2.
The network contains a large number of iSCSI storage locations and iSCSI clients.
You need to deploy a central repository that can discover and list iSCSI resources on the network
automatically.
Which feature should you deploy?

Your network contains an Active Directory domain named contoso.com. The domain contains a
file server named Server1. All servers run Windows Server 2012 R2. All domain user accounts
have the Division attribute automatically populated as part of the user provisioning process.
The Support for Dynamic Access Control and Kerberos armoring policy is enabled for the
domain.
You need to control access to the file shares on Server1 based on the values in the Division
attribute and the Division resource property.
Which three actions should you perform in sequence?

Your network contains two Active Directory forests named contoso.com and fabrikam.com.
The contoso.com forest contains two domains named corp.contoso.com and contoso.com.
You establish a two-way forest trust between contoso.com and fabrikam.com. Users from the
corp.contoso.com domain report that they cannot log on to client computers in the fabrikam.com

domain by using their corp.contoso.com user account.
When they try to log on, they receive following error message:
“The computer you are signing into is protected by an authentication
firewall. The specified account is not allowed to authenticate to the
computer.”
Corp.contoso.com users can log on successfully to client computers in the contoso.com domain
by using their corp.contoso.com user account credentials.
You need to allow users from the corp.contoso.com domain to log on to the client computers in
the fabrikam.com forest.
What should you do?

Your network contains two servers named Server1 and Server2 that run Windows Server 2012
R2. Both servers have the Hyper-V server role installed.
The servers have the hardware configurations shown in the following table.

Server1 hosts five virtual machines that run Windows Server 2012 R2.
You need to move the virtual machines from Server1 to Server2.
The solution must minimize downtime.
What should you do for each virtual machine?

Your network contains an Active Directory domain named contoso.com. The domain contains two
servers named Server1 and Server2. Both servers have the Hyper-V server role installed.
You plan to replicate virtual machines between Server1 and Server2.
The replication will be encrypted by using Secure Sockets Layer (SSL).
You need to request a certificate on Server1 to ensure that the virtual machine replication is
encrypted.
Which two intended purposes should the certificate for Server1 contain? (Each correct answer
presents part of the solution. Choose two.)