Q1. HOTSPOT - (Topic 2) 

Your network contains an Active Directory domain named contoso.com. The domain 

contains a server named Server that runs Windows Server 2012 R2. 

You perform a Server Core Installation of Windows Server 2012 R2 on a new server. 

You need to ensure that you can add the new server to Server Manager on Server1. 

What should you configure on the new server? To answer, select the appropriate setting in 

the answer area. 

View Answer

Q2. HOTSPOT - (Topic 2) 

Your network contains an Active Directory domain named contoso.com. The domain contains 25 servers. All servers run Windows Server 2012 R2. 

You need to create a Windows Firewall rule to prevent administrators from using Internet Explorer to access the Internet while they are logged on interactively to the servers. The solution must not prevent administrators from accessing websites on the internal network. 

How should you configure the rule? 

To answer, select the appropriate options in the answer area. 

View Answer

Q3. - (Topic 1) 

In an isolated test environment, you deploy a server named Server1 that runs a Server Core Installation of Windows Server 2012 R2. The test environment does not have Active Directory Domain Services (AD DS) installed. 

You install the Active Directory Domain Services server role on Server1. 

You need to configure Server1 as a domain controller. 

Which cmdlet should you run? 

A. Install-ADDSDomainController 

B. Install-ADDSDomain 

C. Install-ADDSForest 

D. Install-WindowsFeature 

View Answer

Q4. - (Topic 3) 

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2 and has the Web Server (US) server role installed. 

Server1 has a web site named Web1. Web1 is configured to use digest authentication. 

You need to ensure that a user named User1 can access Web1. 

What should you do from Active Directory Users and Computers? 

A. From the properties of User1, select Store password using reversible encryption. 

B. From the properties of User1, select Use Kerberos DES encryption types for this account. 

C. From the properties of Server1, select Trust this computer for delegation to any service (Kerberos only). 

D. From the properties of Server1, assign the Allowed to Authenticate permission to User1. 

View Answer

Q5. - (Topic 3) 

You have a server named Server1 that runs a Server Core installation of Windows Server 2012 R2 Standard. You establish a Remote Desktop session to Server1. 

You need to identify which task can be performed on Server1 from within the Remote Desktop session. 

What should you identify? 

A. Install a feature by using Server Manager. 

B. Modify the network settings by using Sconfig. 

C. Disable services by using Msconfig. 

D. Join a domain by using the System Properties. 

View Answer

Q6. - (Topic 2) 

Your network contains an Active Directory domain named adatum.com. The domain contains a member server named Server1 and a domain controller named DC2.All servers run Windows Server 2012 R2. 

On DC2, you open Server Manager and you add Server1 as another server to manage. 

From Server Manager on DC2, you right-click Server1 as shown in the exhibit. (Click the Exhibit button.) 

You need to ensure that when you right-click Server1, you see the option to run the DHCP console. 

What should you do? 

A. In the domain, add DC2 to the DHCP Administrators group. 

B. On Server1, install the Feature Administration Tools 

C. On DC2 and Server1, run winrmquickconfig. 

D. On DC2, install the Role Administration Tools. 

View Answer

Q7. - (Topic 1) 

You have a server named Server1 that runs Windows Server 2012 R2. 

On Server1, you open Computer Management as shown in the exhibit. (Click the Exhibit button.) 

You need to ensure that you can create a 3-TB volume on Disk 1. 

What should you do first? 

A. Create a storage pool. 

B. Convert the disk to a GPT disk. 

C. Create a VHD, and then attach the VHD. 

D. Convert the disk to a dynamic disk. 

View Answer

Q8. HOTSPOT - (Topic 1) 

A printer named Printer1 is configured as shown in the exhibit. (Click the Exhibit button.) 

To answer, complete each statement according to the information presented in the exhibit. Each correct selection is worth one point. 

View Answer

Q9. - (Topic 1) 

Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012 R2. A server named Server1 is configured to encrypt all traffic by using IPSec. 

You need to ensure that Server1 can respond to ping requests from computers that do not support IPSec. 

What should you do? 

A. From a command prompt, run netsh set global 

autotuninglevel = highlyrestrictedcongestionprovider=none. 

B. From a command prompt, run netsh set global autotuninglevel = restricted congestionprovider = ctcp. 

C. From Windows Firewall with Advanced Security, allow unicast responses for the Domain Profile. 

D. From Windows Firewall with Advanced Security, exempt ICMP from IPSec. 

View Answer

Q10. - (Topic 1) 

Your network contains an Active Directory domain named contoso.com. 

You log on to a domain controller by using an account named Admin1.Admin1 is a member of the Domain Admins group. 

You view the properties of a group named Group1 as shown in the exhibit. (Click the Exhibit button.) 

Group1 is located in an organizational unit (OU) named OU1. 

You need to ensure that users from Group1 can modify the Security settings of OU1 only. 

What should you do from Active Directory Users and Computers? 

A. Modify the Managed By settings on OU1. 

B. Right-click contoso.com and select Delegate Control. 

C. Right-click OU1 and select Delegate Control. 

D. Modify the Security settings of Group1. 

View Answer