Q1. DRAG DROP - (Topic 7) 

You need to design the DNS zone for App1. 

What should you do? To answer, drag the appropriate resource record to the correct DNS se Each resource record may be used once, more than once, or not at all. You may need to drag split bar between panes or scroll to view content. 

View Answer

Q2. - (Topic 8) 

Your network contains an Active Directory forest. The forest contains two Active Directory domains named contoso.com and child.contoso.com. The forest functional level is Windows Server 2003. The functional level of both domains is Windows Server 2008. 

The forest contains three domain controllers. The domain controllers are configured as shown in the following table. 

DC1 and DC2 have the DNS Server server role installed and are authoritative for both contoso.com and child.contoso.com. 

The child.contoso.com domain contains a server named serverl.child.contoso.com that runs Windows Server 2012. 

You plan to deploy server1.child.contoso.com as a read-only domain controller (RODC). 

You run the adprep.exe /rodcprep command on DC3 and receive the following error message: 

You need to identify what prevents you from successfully running Adprep /rodcprep on DC3. 

What should you identify? 

A. The domain functional level of child.contoso.com is set to the wrong level. 

B. DC3 cannot connect to the infrastructure master on DC2. 

C. DC3 cannot connect to the domain naming master on DC1. 

D. The forest functional level is set to the wrong level. 

View Answer

Q3. HOTSPOT - (Topic 5) 

You need to design the acquisition strategy for Margie's Travel. 

What should you do? To answer, select the appropriate option for each action in the answer area. 

View Answer

Q4. - (Topic 8) 

You have a server named Server1 that runs Windows Server 2012. Server1 has the DNS Server server role installed. 

You need to recommend changes to the DNS infrastructure to protect the cache from cache poisoning attacks. 

What should you configure on Server1? 

A. DNS cache locking 

B. The global query block list 

C. DNS Security Extensions (DNSSEC) 

D. DNS devolution 

View Answer

Q5. - (Topic 8) 

Your company is a hosting provider that provides cloud-based services to multiple customers. 

Each customer has its own Active Directory forest located in your company's datacenter. 

You plan to provide VPN access to each customer. The VPN solution will use RADIUS for authentication services and accounting services. 

You need to recommend a solution to forward authentication and accounting messages from the perimeter network to the Active Directory forest of each customer. 

What should you recommend? 

More than one answer choice may achieve the goal. Select the BEST answer. 

A. One RADIUS proxy for each customer and Active Directory Federation Services (AD FS) 

B. A RADIUS server for each customer and one RADIUS proxy 

C. One RADIUS proxy and one Active Directory Lightweight Directory Services (AD LDS) instance for each customer 

D. A RADIUS server for each customer and a RADIUS proxy for each customer 

View Answer

Q6. - (Topic 8) 

Your network contains an Active Directory forest named contoso.com. The forest contains 

a single domain and two sites named Montreal and Vancouver. 

Montreal contains an IP Address Management (IPAM) server named Server1 that is used to manage all of the DHCP servers and the DNS servers in the site. 

Vancouver contains several DHCP servers and several DNS servers. 

In Vancouver, you install the IP Address Management (IPAM) Server feature on a server named Server2. 

You need to recommend which configurations must be performed to ensure that the DHCP servers and the DNS servers in Vancouver are managed by Server2. 

What should you recommend? 

A. Replicate the IPAM database from Server1 to Server2. On Server2, change the manageability status of the DNS servers and the DHCP servers in Vancouver. 

B. Replicate the IPAM database from Server1 to Server2. On Server1, change the manageability status of the DNS servers and the DHCP servers in Vancouver. 

C. From Server2, run the Invoke-IpamGpoProvisioning cmdlet On Server2, change the manageability status of the DNS servers and the DHCP servers in Vancouver. 

D. From Server1, run the Invoke-IpamGpoProvisioning cmdlet. On Server1, change the manageability status of the DNS servers and the DHCP servers in Vancouver. 

View Answer

Q7. - (Topic 7) 

You need to generate the required report 

Which tool should you use? 

A. Microsoft Deployment Toolkit (MDT) 

B. Microsoft Desktop Optimization Pack (MDOP) 

C. Microsoft Assessment and Planning Toolkit (MAP) 

D. Application Compatibility Toolkit (ACT) 

View Answer

Q8. - (Topic 8) 

Your company, which is named Contoso, Ltd., has a main office and two branch offices. The main office is located in North America. The branch offices are located in Asia and Europe. 

You plan to design an Active Directory forest and domain infrastructure. 

You need to recommend an Active Directory design to meet the following requirements: 

* The contact information of all the users in the Europe office must not be visible to the users in the other offices. 

* The administrators in each office must be able to control the user settings and the computer settings of the users in their respective office. 

The solution must use the least amount of administrative effort. 

What should you include in the recommendation? 

A. One forest that contains three domains 

B. Three forests that each contain one domain 

C. Two forests that each contain one domain 

D. One forest that contains one domain 

View Answer

Q9. - (Topic 8) 

Your network contains an Active Directory domain named contoso.com. The domain contains multiple sites. 

You plan to deploy DirectAccess. 

The network security policy states that when client computers connect to the corporate network from the Internet, all of the traffic destined for the Internet must be routed through the corporate network. 

You need to recommend a solution for the planned DirectAccess deployment that meets the security policy requirement. 

Solution: You enable force tunneling. 

Does this meet the goal? 

A. Yes 

B. No 

View Answer

Q10. - (Topic 4) 

You need to recommend a solution for GPO1. 

What is the best approach to achieve the goal? More than one answer choice may achieve the goal. Select the BEST answer. 

A. In west.northwindtraders.com, create a copy of GPO1 and link the new GPO to Site2. Apply a WMI filter to the new GPO. 

B. In west.northwindtraders.com, create a copy of GPO1 and link the new GPO to west.northwindtraders.com. Configure security filtering on the new GPO. 

C. Link GPO1 to west.northwindtraders.com and configure security filtering on GPO1. 

D. Link GPO1 to Site2 and apply a WMI filter to GPO1. 

View Answer