QUESTION NO: 1
DRAG DROP
You have a server named Server1 that runs Windows Server 2012 R2. You are asked to test Windows Azure Online
Backup to back up Server1. You need to back up Server1 by using Windows Azure Online Backup.
Which four actions should you perform in sequence? To answer, move the appropriate four actions from the list of
actions to the answer area and arrange them in the correct order.
DRAG DROP
You have a server named Server1 that runs Windows Server 2012 R2. You are asked to test Windows Azure Online
Backup to back up Server1. You need to back up Server1 by using Windows Azure Online Backup.
Which four actions should you perform in sequence? To answer, move the appropriate four actions from the list of
actions to the answer area and arrange them in the correct order.
Correct Answer:
QUESTION NO: 2
Which of the following reasons justifies why you should audit failed events?
Which of the following reasons justifies why you should audit failed events?
Correct Answer: D
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 3
HOTSPOT
Your network contains an Active Directory domain named fabrikam.com. You implement DirectAccess and an IKEv2
VPN. You need to view the properties of the VPN connection. Which connection properties should you view? To
answer, select the appropriate connection properties in the answer area.
HOTSPOT
Your network contains an Active Directory domain named fabrikam.com. You implement DirectAccess and an IKEv2
VPN. You need to view the properties of the VPN connection. Which connection properties should you view? To
answer, select the appropriate connection properties in the answer area.
Correct Answer:
QUESTION NO: 4
HOTSPOT
Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. All domain
controllers run Windows Server 2012 R2 and are configured as DNS servers. All DNS zones are Active Directory-
integrated. Active Directory Recycle Bin is enabled.
You need to modify the amount of time deleted objects are retained in the Active Directory Recycle Bin.
Which naming context should you use?
To answer, select the appropriate naming context in the answer area.
HOTSPOT
Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. All domain
controllers run Windows Server 2012 R2 and are configured as DNS servers. All DNS zones are Active Directory-
integrated. Active Directory Recycle Bin is enabled.
You need to modify the amount of time deleted objects are retained in the Active Directory Recycle Bin.
Which naming context should you use?
To answer, select the appropriate naming context in the answer area.
Correct Answer:
Starting in Windows Server 2008 R2, Active Directory now implements a true recycle bin. No longer will you need an
authoritative restore to recover deleted users, groups, OU's, or other objects. Instead, it is now possible to use
PowerShell commands to bring back objects with all their attributes, backlinks, group memberships, and metadata.
The amount of time that an object can be recovered is controlled by the Deleted Object Lifetime (DOL). This time
range can be set on the msDS-deletedObjectLifetime attribute. By default, it will be the same number of days as the
Tombstone Lifetime (TSL). The TSL set for a new forest since Windows Server 2003 SP1 has been 180 days*, and since
by default DOL = TSL, the default number of days that an object can be restored is therefore 180 days. If
tombstoneLifetime is NOT SET or NULL, the tombstone lifetime is that of the Windows default: 60 days. This is all
configurable by the administrator.
Set-ADObject -Identity "CN=Directory Service,CN=Windows NT,CN=Services,CN=Configuration,DC=contoso,DC=com" -
Partition "CN=Configuration,DC=contoso,DC=com" -Replace: @("msDS-DeletedObjectLifetime" = 365)
msDS-deletedObjectLifetime
New to Windows Server 2008 R2
Is set on the "CN=Directory Service,CN=Windows NT, CN=Services, CN=Configuration, DC=COMPANY,DC=COM"
container
Describes how long a deleted object will be restorable
To modify the deleted object lifetime by using Ldp.exe
To open Ldp.exe, click Start, click Run, and then type ldp.exe.
To connect and bind to the server hosting the forest root domain of your Active Directory environment, under
Connections, click Connect, and then click Bind.
In the console tree, right-click the CN=Directory Service,CN=Windows NT,CN=Services,CN=Configuration container,
and then click Modify.
In the Modify dialog box, in Edit Entry Attribute, type msDS-DeletedObjectLifeTime.
In the Modify dialog box, in Values, type the number of days that you want to set for the tombstone lifetime value.
(The minimum is 3 days.)
In the Modify dialog box, under Operation click Replace, click Enter, and then click Run.
http: //technet. microsoft. com/en-us/library/dd392260%28v=ws. 10%29.aspx
http: //blogs. technet. com/b/askds/archive/2009/08/27/the-ad-recycle-bin-understanding-implementing-best-
practices-and-troubleshooting. aspx
QUESTION NO: 5
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1.
Server1 runs Windows Server 2012 R2 and has the Hyper-V server role installed.
You have a virtual machine named VM1. VM1 has a checkpoint.You need to modify the Checkpoint File Location of
VM1.
What should you do first?
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1.
Server1 runs Windows Server 2012 R2 and has the Hyper-V server role installed.
You have a virtual machine named VM1. VM1 has a checkpoint.You need to modify the Checkpoint File Location of
VM1.
What should you do first?
Correct Answer: D
Vote an answer
QUESTION NO: 6
Your network contains two DNS servers named DNS1 and DNS2 that run Windows Server 2012 R2. DNS1 has a
primary zone named contoso.com. DNS2 has a secondary copy of the contoso.com zone.
You need to log the zone transfer packets sent between DNS1 and DNS2.
What should you configure?
Your network contains two DNS servers named DNS1 and DNS2 that run Windows Server 2012 R2. DNS1 has a
primary zone named contoso.com. DNS2 has a secondary copy of the contoso.com zone.
You need to log the zone transfer packets sent between DNS1 and DNS2.
What should you configure?
Correct Answer: D
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 7
Your network contains an Active Directory domain named contoso.com.
All user accounts reside in an organizational unit (OU) named OU1.
All of the users in the marketing department are members of a group named Marketing.
All of the users in the human resources department are members of a group named HR.
You create a Group Policy object (GPO) named GPO1.
You link GPO1 to OU1.
You configure the Group Policy preferences of GPO1 to add two shortcuts named Link1 and Link2 to the desktop of
each user.
You need to ensure that Link1 only appears on the desktop of the users in Marketing and that Link2 only appears on
the desktop of the users in HR.
What should you configure?
Your network contains an Active Directory domain named contoso.com.
All user accounts reside in an organizational unit (OU) named OU1.
All of the users in the marketing department are members of a group named Marketing.
All of the users in the human resources department are members of a group named HR.
You create a Group Policy object (GPO) named GPO1.
You link GPO1 to OU1.
You configure the Group Policy preferences of GPO1 to add two shortcuts named Link1 and Link2 to the desktop of
each user.
You need to ensure that Link1 only appears on the desktop of the users in Marketing and that Link2 only appears on
the desktop of the users in HR.
What should you configure?
Correct Answer: B
Vote an answer
QUESTION NO: 8
Your network contains an Active Directory domain named adatum.com. The domain contains a member server
named Server1 and a domain controller named DC2. All servers run Windows Server 2012 R2.
On DC2, you open Server Manager and you add Server1 as another server to manage.
From Server Manager on DC2, you right-click Server1 as shown in the exhibit. (Click the Exhibit button.)
You need to ensure that when you right-click Server1, you see the option to run the DHCP console.
What should you do?
Your network contains an Active Directory domain named adatum.com. The domain contains a member server
named Server1 and a domain controller named DC2. All servers run Windows Server 2012 R2.
On DC2, you open Server Manager and you add Server1 as another server to manage.
From Server Manager on DC2, you right-click Server1 as shown in the exhibit. (Click the Exhibit button.)
You need to ensure that when you right-click Server1, you see the option to run the DHCP console.
What should you do?
Correct Answer: A
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 9
Your network contains three Active Directory forests. Each forest contains an Active Directory Rights Management
Services (AD RMS) root cluster.
All of the users in all of the forests must be able to access protected content from any of the forests.
You need to identify the minimum number of AD RMS trusts required.
How many trusts should you identify?
Your network contains three Active Directory forests. Each forest contains an Active Directory Rights Management
Services (AD RMS) root cluster.
All of the users in all of the forests must be able to access protected content from any of the forests.
You need to identify the minimum number of AD RMS trusts required.
How many trusts should you identify?
Correct Answer: A
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 10
HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains a member server
named Server1. Server1 runs Windows Server 2012 R2.
You enable the EventLog-Application event trace session.
You need to set the maximum size of the log file used by the trace session to 10 MB.
From which tab should you perform the configuration? To answer, select the appropriate tab in the answer area.
HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains a member server
named Server1. Server1 runs Windows Server 2012 R2.
You enable the EventLog-Application event trace session.
You need to set the maximum size of the log file used by the trace session to 10 MB.
From which tab should you perform the configuration? To answer, select the appropriate tab in the answer area.
Correct Answer:
Explanation:
Note: By default, logging stops only if you set an expiration date as part of the logging schedule. Using the options on
the Stop Condition tab, you can configure the log file to stop automatically after a specified period of time, such as
seven days, or when the log file is full (if you've set a maximum size limit).
http: //technet. microsoft. com/en-us/magazine/ff458614. aspx
QUESTION NO: 11
Your network contains an Active Directory forest named adatum.com. All servers run Windows Server 2012 R2. The
domain contains four servers.
The servers are configured as shown in the following table.
You need to deploy IP Address Management (IPAM) to manage DNS and DHCP.
On which server should you install IPAM?
Your network contains an Active Directory forest named adatum.com. All servers run Windows Server 2012 R2. The
domain contains four servers.
The servers are configured as shown in the following table.
You need to deploy IP Address Management (IPAM) to manage DNS and DHCP.
On which server should you install IPAM?
Correct Answer: D
Vote an answer
QUESTION NO: 12
You create a new virtual disk in a storage pool by using the New Virtual Disk Wizard.
You discover that the new virtual disk has a write-back cache of 1 GB.
You need to ensure that the virtual disk has a write-back cache of 5 GB.
What should you do?
You create a new virtual disk in a storage pool by using the New Virtual Disk Wizard.
You discover that the new virtual disk has a write-back cache of 1 GB.
You need to ensure that the virtual disk has a write-back cache of 5 GB.
What should you do?
Correct Answer: D
Vote an answer
QUESTION NO: 13
Your network contains an Active Directory domain named contoso.com. The domain contains a file server named
Server1 and a domain controller named DC1. All servers run Windows Server 2012 R2.
A Group Policy object (GPO) named GPO1 is linked to the domain.
Server1 contains a folder named Folder1. Folder1 is shared as Share1.
You need to ensure that authenticated users can request assistance when they are denied access to the resources on
Server1.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
Your network contains an Active Directory domain named contoso.com. The domain contains a file server named
Server1 and a domain controller named DC1. All servers run Windows Server 2012 R2.
A Group Policy object (GPO) named GPO1 is linked to the domain.
Server1 contains a folder named Folder1. Folder1 is shared as Share1.
You need to ensure that authenticated users can request assistance when they are denied access to the resources on
Server1.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
Correct Answer: B,D
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 14
Your network contains an Active Directory domain named contoso.com. The domain contains three servers. The
servers are configured as shown in the following table.
You need to ensure that end-to-end encryption is used between clients and Server2 when the clients connect to the
network by using DirectAccess.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
Your network contains an Active Directory domain named contoso.com. The domain contains three servers. The
servers are configured as shown in the following table.
You need to ensure that end-to-end encryption is used between clients and Server2 when the clients connect to the
network by using DirectAccess.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
Correct Answer: C,E
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 15
Your network contains an Active Directory forest. The forest contains a single domain named contoso.com. The
domain contains four domain controllers.
The domain controllers are configured as shown in the following table.
All domain controllers are DNS servers.
You plan to deploy a new domain controller named DC5 in the contoso.com domain.
You need to identify which domain controller must be online to ensure that DC5 can be promoted successfully to a
domain controller.
Which domain controller should you identify?
Your network contains an Active Directory forest. The forest contains a single domain named contoso.com. The
domain contains four domain controllers.
The domain controllers are configured as shown in the following table.
All domain controllers are DNS servers.
You plan to deploy a new domain controller named DC5 in the contoso.com domain.
You need to identify which domain controller must be online to ensure that DC5 can be promoted successfully to a
domain controller.
Which domain controller should you identify?
Correct Answer: A
Vote an answer