Your network contains an Active Directory domain named contoso.com.
Network Policy Server (NPS) is deployed to the domain.
You plan to deploy Network Access Protection (NAP).
You need to configure the requirements that are validated on the NPS client computers.
What should you do?

Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012
R2. The domain contains two servers. The servers are configured as shown in the following table.

All client computers run Windows 8 Enterprise.
You plan to deploy Network Access Protection (NAP) by using IPSec enforcement.
A Group Policy object (GPO) named GPO1 is configured to deploy a trusted server group to all of the client
computers.
You need to ensure that the client computers can discover HRA servers automatically.
Which three actions should you perform? (Each correct answer presents part of the solution. Choose three.)

Your network contains an Active Directory domain named adatum.com. The domain contains a server named
Server1 that runs WindowsServer 2012 R2. Server1 isconfigured as a Network Policy Server (NPS) serverand
as a DHCP server.
You need to ensure that only computers that send a statement of health are checked for Network Access
Protection (NAP) health requirements.
Which two settings should you configure? (Each correct answer presents part of the solution. Choose two.)

DRAG DROP
Your network contains a single Active Directory domain named contoso.com. The domain contains an Active
Directory site named Site1 and an organizational unit (OU) named OU1.
The domain contains a client computer named Client1that is located in OU1 and Site1.
You create five Group Policy objects (GPO). The GPOs are configured as shown in the following table.

You need to identify in which order the GPOs will be applied to Client1. In which order should you arrange the
listed GPOs?
To answer, move all GPOs from the list of GPOs to the answer area and arrange them in the correct order.

Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows
Server 2012 R2.
On all of the domain controllers, Windows is installed in C:\Windows and the Active Directory databaseis
located in D:\Windows\NTDS\.
All of the domain controllers have a third-party application installed.
The operating system fails to recognize that the application is compatible with domain controller cloning.
You verify with the application vendor that the application supports domain controller cloning.
You need to prepare a domain controller for cloning.
What should you do?

Your network contains an Active Directory domain named contoso.com. The domain contains a domain
controller named DC1 that runs Windows Server 2012 R2. DC1 is backed up daily.
The domain has the Active Directory Recycle Bin enabled.
During routine maintenance, you delete 500 inactiveuser accounts and 100 inactive groups. One of the deleted
groups is named Group1. Some of the deleted user accounts are members of some of the deleted groups.
For documentation purposes, you must provide a listof the members of Group1 before the group was deleted.
You need to identify the names of the users who were members of Group1 prior to its deletion. You wantto
achieve this goal by using the minimum amount of administrative effort.
What should you do first?

Your network contains an Active Directory domain named contoso.com. The domain contains a domain
controller named DC1 that runs Windows Server 2012 R2.
You mount an Active Directory snapshot on DC1.
You need to expose the snapshot as an LDAP server.
Which tool should you use?

Your network contains an Active Directory domain named contoso.com. The domain
contains a domain controller named DC1 and a memberserver named Server1. Server1 has the IP Address
Management (IPAM) Server feature installed.
On DC1, you configure Windows Firewall to allow allof the necessary inbound ports for IPAM.
On Server1, you open Server Manager as shown in theexhibit. (Click the Exhibit button.)

You need to ensure that you can use IPAM on Server1to manage DNS on DC1.
What should you do?

Your network contains an Active Directory forest named contoso.com. All servers run Windows Server 2012
R2. The domain contains four servers. The servers are configured as shown in the following table.

You need to deploy IP Address Management (IPAM) to manage DNS and DHCP.
On which server should you install IPAM?

HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains a domain
controller named DC1 and a member server named Server1. All servers run Windows Server 2012 R2.
You install the IP Address Management (IPAM) Serverfeature on Server1.
From the Provision IPAM wizard, you select the Group Policy Based provisioning method and enter a GPO
name prefix of IPAM1.
You need to provision IPAM by using Group Policy.
What command should you run on Server1 to complete the process?
To answer, select the appropriate options in the answer area.