You network contains an Active Directory domain named contoso.com. The domain contains an
enterprise certification authority (CA) named CA1. You have a test environment that is isolated
physically from the corporate network and the Internet. You deploy a web server to the test
environment. On CA1, you duplicate the Web Server template, and you name the template
Web_Cert_Test. For the web server, you need to request a certificate that does not contain the
revocation information of CA1. What should you do first?

Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution. After you answer a question in this section, you will NOT be able to return
to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains a
server named Server1 that runs Windows Server 2016. The computer account for Server1 is in
organizational unit (OU) named OU1. You create a Group Policy object (GPO) named GPO1 and
link GPO1 to OU1. You need to add a domain user named User1 to the local Administrators group
on Server1.
Solution: From the Computer Configuration node of GPO1, you configure the Local Users and
Groups preference.
Does this meet the goal?

Your network contains an Active Directory domain named contoso.com. The domain contains a
Group Policy object (GPO) named GPO1. You configure the Internet Settings preference in GPO1
as shown in the exhibit:

A user reports that the homepage of Internet Explorer is not set to http://www.contoso.com. You
confirm that the other settings in GPO1 are applied. You need to configure GPO1 to set the Internet
Explorer homepage. What should you do?

Your network contains an Active Directory domain named contoso.com. The domain functional
level is Windows Server 2012 R2. You need to secure several high-privilege user accounts to meet
the following requirements: What should you do?

Your network contains an Active Directory domain named contoso.com. You have an
organizational unit (OU) named OU1 that contains the computer accounts of two servers and the
user account of a user named User1. A Group Policy object (GPO) named GPO1 is linked to OU1.
You have an application named App1 that installs by using an application installer named App1.exe.
You need to publish App1 to OU1 by using Group Policy. What should you do?

Your network contains an Active Directory domain named contoso.com. You open Group Policy
Management as shown in the exhibit:

You discover that some of the settings configured in the A1 Group Policy object (GPO) fail to apply
to the users in the OU1 organizational unit (OU). You need to ensure that all of the settings in A1
apply to the users in OU1. What should you do?

Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution. After you answer a question in this section, you will NOT be able to return
to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com. The forest contains a
member server named Server1 that runs Windows Server 2016. All domain controllers run
Windows Server 2012 R2. Contoso.com has the following configuration:
PS C:\\> (Get-ADForest).ForestMode
Windows2008R2Forest
PS C:\\> (Get-ADDomain).DomainMode
Windows2008R2Domain
PS C:\\>
You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to
configure device registration. You need to configure Active Directory to support the planned
deployment.
Solution: You upgrade a domain controller to Windows Server 2016.

Does this meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution. After you answer a question in this section, you will NOT be able to return
to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com. The forest contains a
member server named Server1 that runs Windows Server 2016. All domain controllers run
Windows Server 2012 R2. Contoso.com has the following configuration:
PS C:\\> (Get-ADForest).ForestMode
Windows2008R2Forest
PS C:\\> (Get-ADDomain).DomainMode
Windows2008R2Domain
PS C:\\>
You plan to deploy an Active Directory Federation Services (AD FS) farm on Server1 and to
configure device registration. You need to configure Active Directory to support the planned
deployment.
Solution: You raise the domain functional level to Windows Server 2012 R2.
Does this meet the goal?

You deploy a new enterprise certification authority (CA) named CA1. You plan to issue certificates
based on the User certificate template. You need to ensure that the issued certificates are valid for
two years and support autoenrollment. What should you do first?

Your network contains an Active Directory domain named contoso.com. You have an
organizational unit (OU) named OU1 that contains the computer accounts of two servers and the
user account of a user named User1. A Group Policy object (GPO) named GPO1 is linked to OU1.
You have an application named App1 that installs by using an application installer named App1.exe.
You need to publish App1 to OU1 by using Group Policy. What should you do?