Your network contains an Active Directory domain named contoso.com. The domain contains a server named
Server1. Server1 has the DHCP Server server role and the Network Policy Server role service installed.
Server1 contains three non-overlapping scopes namedScope1, Scope2, and Scope3. Server1 currently
provides the same Network Access Protection (NAP) settings to the three
scopes.
You modify the settings of Scope1 as shown in the exhibit. (Click the Exhibit button.)

You need to configure Server1 to provide unique NAPenforcement settings to the NAP non-compliant DHCP
clients from Scope1.
What should you create?

Your network contains an Active Directory domain named contoso.com. The domain contains a server named
Server1 that runs Windows Server 2012 R2. Server1 has the Network Policy Server role service installed.
You plan to configure Server1 as a Network Access Protection (NAP) health policy server for VPN enforcement
by using the Configure NAP wizard.
You need to ensure that you can configure the VPN enforcement method on Server1 successfully.
What should you install on Server1 before you run the Configure NAP wizard?

Your network contains an Active Directory domain named contoso.com. The domain contains client computers
that run Either Windows XP, Windows 7, or Windows 8.
Network Policy Server (NPS) is deployed to the domain.
You plan to create a system health validator (SHV).
You need to identify which policy settings can be applied to all of the computers.
Which three policy settings should you identify? (Each correct answer presents part of the solution. Choose
three.)

Your network contains a single Active Directory domain named contoso.com. All domain controllers run
Windows Server 2012 R2.
The domain contains 400 desktop computers that run Windows 8 and 200 desktop computers that run
Windows Vista Service Pack 2(SP2).
All of the desktop computers are located in an organizational unit (OU) named OU1.
You create a Group Policy object (GPO) named GPO1. GPO1 contains startup script
settings. You link GPO1 to OU1.
You need to ensure that GPO1 is applied only to computers that run Windows 8.
What should you do?

Your network contains an Active Directory domain named contoso.com. The domain contains a server named
Server1 that runs Windows Server 2012. Server1 has the Remote Desktop Session Host role service installed.
The computer account of Server1 resides in an organizational unit (OU) named OU1.
You create and link a Group Policy object (GPO) named GPO1 to OU1. GPO1 is configured as shown in the
exhibit. (Click the Exhibit button.)

You need to prevent GPO1 from applying to your useraccount when you log on to Server1. GPO1 must apply
to every other user who logs on to Server1.
What should you configure?

DRAG DROP
Your network contains an Active Directory domain named contoso.com. All client computers run Windows 8.
Group Policy objects (GPOs) are linked to the domain as shown in the exhibit. (Click the Exhibit button.)

GPO2 contains computer configurations only and GPO3contains user configurations only.
You need to configure the GPOs to meet the following requirements:
Ensure that GPO2 only applies to the computer accounts in OU2 that have more than one processor.
Ensure that GPO3 only applies to the user accounts in OU3 that are members of a security group named
SecureUsers.
Which setting should you configure in each GPO?
To answer, drag the appropriate setting to the correct GPO. Each setting may be used once, more than once,
or not at all. You may need to drag the split bar between panes or scroll to view content.

HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains a server named
Print1.
Your company implements DirectAccess.
A user named User1 frequently works at a customer’soffice. The customer’s office contains a print server
named Print1.
While working at the customer’s office, User1 attempts to connect to Print1. User1 connects to the Print1 server
in contoso.com instead of the Print1 server at the customer’s office.
You need to provide User1 with the ability to connect to the Print1 server in the customer’s office.
Which Group Policy option should you configure?
To answer, select the appropriate option in the answer areA.

Your network contains an Active Directory domain named contoso.com. The domain contains a server named
Server1 that has the Remote Access server role installed.
DirectAccess is implemented on Server1 by using thedefault configuration.
You discover that DirectAccess clients do not use DirectAccess when accessing websites on the Internet.
You need to ensure that DirectAccess clients accessall Internet websites by using their DirectAccess
connection.
What should you do?

Your network contains an Active Directory domain named contoso.com. The domain contains a Web server
named www.contoso.com. The Web server is available on the Internet.
You implement DirectAccess by using the default configuration.
You need to ensure that users never attempt to connect to www.contoso.com by using DirectAccess. The
solution must not prevent the users from using DirectAccess to access other resources in contoso.com.
Which settings should you configure in a Group Policy object (GPO)?

Your network contains an Active Directory domain named contoso.com. The domain contains a member server
named Server1. Server1 runs Windows Server 2012 R2 and has the Hyper-V server role installed.
Server1 hosts 10 virtual machines. A virtual machine named VM1 runs Windows Server 2012 R2 and hosts a
processor-intensive application named App1.
Users report that App1 responds more slowly than expected.
You need to monitor the processor usage on VM1 to identify whether changes must be made to the hardware
settings of VM1.
Which performance object should you monitor on Server1?