Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain
Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2012.
You want to move the Active Directory logs to a different folder. You plan to use the “move logs to” statement in
ntdsutil.exe to specify the new location.
Which context should you use in ntdsutil?

Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain
Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2012.
All domain controllers in the network run a custom application that was created by developers at ABC.com.
You want to deploy additional domain controllers using domain controller cloning. You verify that the custom
application supports domain controller cloning. You run the Get-ADDCCloningExcludedApplicationList cmdlet
and it returns the name of the custom application.
You need to prepare a domain controller for cloning. You plan to create an XML file and add information about
the custom application to the file to enable the domain controller to be cloned.
What should you name the XML file?

Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain
Services (AD DS) domain named ABC.com. The domain has domain controllers that run Windows Server 2008
R2 Service Pack 1 (SP1) and Windows Server 2012. The functional level of the forest is Windows Server 2008
R2.
You have enabled the Active Directory Recycle Bin in the ABC.com domain. You discover that a user account
was deleted yesterday. You need to recover the deleted user account as quickly as possible.
Which tool should you use to recover the deleted user account?

Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain
Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2008 R2
Service Pack 1 (SP1) and Windows Server 2012. The Organizational Unit (OU) structure includes top-level
OUs for each office location. Each toplevel OU contains OUs for each company department. Each
departmental OU contains the user accounts of the users working in that department in the relevant location.
Many Group Policy Objects (GPOs) are applied at the site level, domain level and OU level. You discover thattwo GPOs applied at the domain level do not have the desired effect. You need to change the order in which
the GPOs are applied.
How can you configure the order of precedence of the GPOs?

Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain
Services (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2008 R2
Service Pack 1 (SP1) and Windows Server 2012. The Organizational Unit (OU) structure includes top-level
OUs for each office location. Each toplevel OU contains OUs for each company department. Each
departmental OU contains the user accounts of the users working in that department in the relevant location.
Many Group Policy Objects (GPOs) are applied at the site level, domain level and OU level. You create an OU
named TestOU inside one of the departmental OUs. You want to ensure that no GPOs from the site level,
domain level, location OU level or department OU level are applied to objects within TestOU.
How can you quickly achieve this goal?

Your role of Network Administrator at ABC.com includes the management of the Active Directory DomainServices (AD DS) domain named ABC.com. The network includes servers that run Windows Server 2008 R2
Service Pack 1 (SP1) and Windows Server 2012. The Organizational Unit (OU) structure includes top-level
OUs for each office location. Each toplevel OU contains OUs for each company department. Each
departmental OU contains the user accounts of the users working in that department in the relevant location.
Many Group Policy Objects (GPOs) are applied at the site level, domain level and OU level. A group named
ABC-Managers contains the user accounts of company managers from each department.
You configure a Group Policy Object (GPO) named ManagersGPO and link it to the domain. You need to apply
the ManagersGPO to the ABC-Managers group.
How can you ensure that the ManagersGPO applies only to the ABC-Managers group?

Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain
Services (AD DS) domain named ABC.com. All servers on the network run Windows Server 2012.
The corporate Web site www.ABC.com is hosted on a Windows Server 2012 Web Server hosted on the
corporate network. A public IP address is mapped to the private IP address of the Web Server to provide
Internet access to the corporate Web site. DirectAccess is enabled on the network using the default
configuration to enable external users to access resources on the corporate network when they are away from
the office. Company security policy states that all connections from outside the office to www.ABC.com must
come through the corporate firewall using the external IP address of the Web site.
How can you ensure that external users cannot connect to www.ABC.com using a DirectAccess connection?

You work for a company named ABC.com. The ABC.com network consists of a single Active Directory forest
named ABC.com. The forest contains a single Active Directory Domain Services (AD DS) domain named
ABC.com. All servers in the ABC.com domain run Windows Server 2012. ABC.com works with a partner
company named Redbridge Logistics. The Redbridge Logistics network consists of a single Active Directoryforest named RedbridgeLogistics.com. The forest contains a single Active Directory Domain Services (AD DS)
domain named RedbridgeLogistics.com. All servers in the RedbridgeLogistics.com domain run Windows
Server 2012.
A forest trust exists between the two forests. The two networks are connected by a WAN link. A server named
ABC-DNS1 hosts an Active Directory-integrated zone for ABC.com. A server named RL-DNS1 hosts an Active
Directory-integrated zone for RedbridgeLogistics.com. RedbridgeLogistics.com plans to install additional DNS
servers for the RedbridgeLogistics.com domain.
Users in the ABC.com domain need to be able to resolve names of servers in the RedbridgeLogistics.com
domain.
You need to configure a name resolution solution that will ensure that name resolution requests are
automatically forwarded to the new RedbridgeLogistics.com DNS servers when they are installed.
What should you do?

You work for a company named ABC.com. The ABC.com network consists of a single Active Directory forest
named ABC.com. The forest contains a single Active Directory Domain Services (AD DS) domain named
ABC.com. All servers in the ABC.com domain run Windows Server 2012. ABC.com works with a partner
company named Redbridge Logistics. The Redbridge Logistics network consists of a single Active Directory
forest named RedbridgeLogistics.com. The forest contains a single Active Directory Domain Services (AD DS)
domain named RedbridgeLogistics.com. All servers in the RedbridgeLogistics.com domain run Windows
Server 2012.
A forest trust exists between the two forests. The two networks are connected by a WAN link. A server named
ABC-DNS1 hosts an Active Directory-integrated zone for ABC.com. A server named RL-DNS1 hosts an Active
Directory-integrated zone for RedbridgeLogistics.com. Users in the ABC.com domain need to be able to resolve
names of servers in the RedbridgeLogistics.com domain.
You need to configure a name resolution solution that will enable name resolution in the event of a WAN link
failure.
What should you do?

Your role of Network Administrator at ABC.com includes the management of the Active Directory Domain
Services (AD DS) domain named ABC.com. All servers on the network run Windows Server 2012.
Several Sales users spend most of their time away from the office. You implement DirectAccess to enable the
Sales users to connect to the network when they are away from the office. All computers used by the Sales
users are joined to the domain. You create a DirectAccess client group named SalesDirectAccess and add all
the computer accounts for the Sales users’ computers to the SalesDirectAccess group. Some Sales usersreport that they are unable to access the network using DirectAccess. Other Sales report that they can connect
successfully.
You discover that only users using laptop computers can connect using DirectAccess. Sales users are unable
to connect when they use desktop computers. How can you enable all Sales users to access the network using
DirectAccess?