HOTSPOT
Your network contains two Active Directory forests named contoso.com and adatum.com.
A two-way forest trust exists between the forests.
You have custom starter Group Policy objects (GPOs) defined in contoso.com.
You need to ensure that the same set of custom starter GPOs are available in adatum.com.
In the table below, identify which action must be performed for the starter GPOs container in each forest. Make only one selection in two of the rows. Each correct
selection is worth one point.
Hot Area:

HOTSPOT
You have a server named Server1 that runs windows Server 2016 R2. Server1 is a member of a workgroup.
You need to ensure that only members of the Administrators group and members of a group named Group1 can log on locally to Server1.
Which settings should you modify from the Local Security Policy? To answer, select the appropriate settings in the answer area.

Hot Area:

Your network contains two Active Directory forests named contoso.com and adatum.com. All servers run windows Server 2016 R2.
A one-way external trust exists between contoso.com and adatum.com.
Adatum.com contains a universal group named Group1. You need to prevent Group1 from being used to provide access to the resources in contoso.com.
What should you do?

DRAG DROP
You have two servers named Server1 and Server2 that run windows Server 2016 R2. Server1 has the Hyper-V server role installed. Server1 hosts a virtual
machine named VM1. VM1 is currently running. VM1 has a snapshot that was created two weeks ago.
You plan to use Server2 to perform a forensic analysis of the contents of the disk of VM1 from two weeks ago.

You need to ensure that you can view the contents of the disk of VM1 from two weeks ago from Server2.
Which three actions should you perform in sequence? (To answer, move the appropriate three actions from the list of actions to the answer area and arrange them
in the correct order.)
Select and Place:

HOTSPOT
Your network contains an Active Directory domain named contoso.com. The network contains two subnets. The subnets are configured as shown in the following
table:

The network contains a member server named Server1 that runs windows Server 2016 R2. Server1 has the DHCP Server server role installed.
Server1 is configured to lease IP addresses to the two subnets. You add three new printers to the Warehouse subnet. The printers have static IP addresses. The IP
addresses are consecutive.
You need to create an exclusion range that contains the IP addresses of the printers.
From which node should you configure the exclusion range? To answer, select the appropriate node in the answer area.
Hot Area:

Your network contains two Active Directory forests named contoso.com and adatum.com. All servers run windows Server 2016 R2. A one-way external trust exists
between contoso.com and adatum.com.
Adatum.com contains a universal group named Group1. You need to prevent Group1 from being used to provide access to the resources in contoso.com.

What should you do?

Your network contains an Active Directory forest. The forest contains two domains named contoso.com and corp.contoso.com. All domain controllers run windows
Server 2016 R2 and are configured as global catalog servers. The corp.contoso.com domain contains a domain controller named DC1.
You need to disable the global catalog on DC1.
What should you do?

You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers in the Contoso.com
domain, including domain controllers, have windows Server 2016 installed.
You have been instructed to modify the name of the local Administrator account on all Contoso.com workstations. You want to achieve this using as little
administrative effort as possible.
Which of the following actions should you take?

Your company has a main office and four branch offices. The main office contains a server named Server1 that runs Windows Server 2016 R2. The IP
configuration of each office is configured as shown in the following table.

You need to add a single static route on Server1 to ensure that Server1 can communicate with the hosts on all of the subnets.
Which command should you run?

You work as an administrator at Contoso.com. The Contoso.com network consists of a single domain named Contoso.com. All servers in the Contoso.com
domain, including domain controllers, have windows Server 2016 R2 installed.
You have created and linked a new Group Policy object (GPO) to an organizational unit (OU), named ENSUREPASSServ, which host the computer accounts for
servers in the Contoso.com domain.
You have been tasked with adding a group to a local group on all servers in the Contoso.com domain. This group should not, however, be removed from the local
group.
Which of the following actions should you take?