Your company runs a network that is configured as a single Active Directory Domain Services (AD DS) domain with Windows Server 2012 R2 or Windows Server 2012 running on all domain controllers. Network Policy Server (NPS) role is installed and is configured as a Network Access Policy (NAP) server on a member server. This member server is running Windows Server 2012 R2. You have local 802.1x wireless clients on which you want to enforce health policies. All wireless client computers are located in the Wireless OU. Windows 8.1 or Windows 8 is run on client computers. What would you do to keep the administrative effort to the minimum? (opt any TWO)

Your company runs a network that has a domain member server. Microsoft Windows Server 2012 R2 is run on the member server. The computer is configured as a Windows Server Update Services (WSUS) server. Group Policy object is used to configure the client computers. The current configuration of GPO is set as Enabled. There are 50 locations having the client computers located in. The WSUS server is in the head office. There is dedicated internet connection for each branch. You need to reconfigure the WSUS settings for optimal usage of existing connections while still maintaining control of the updates to be approved. There should be minimum bandwidth requirements across links to branch offices. What will be your step of action?

You work for an organization as an administrator for network’s Active Directory Domain Services (AD DS) domain. The domain is named as corp.net. DC1 and DC2 are two domain controllers in the domain running Microsoft Windows Server 2012 R2. You want to perform maintenance on DC1 but before that you need to back up SYSVOL and the AD database. You want to back up to a network shared folder with as small backup file as possible. What will be your next step of action? (There could be more than one correct answer. Opt the BEST answer)

Your organization has a network that is configured as an Active Directory Domain Services (AD DS) domain. Windows Server 2012 R2 is run by all domain controllers (DCs). There is a perimeter network included in your network configuration. There is a workstation deployed, in the perimeter network, running Windows Server 2012 R2. You have configured the workstation to act as a virtual private network (VPN) endpoint and to support the Network Access Protection (NAP) role. Policies based on Windows System Health Validator (WSHV) are configured so computer access can be controlled to the network. You have already created a Network Policy that grants access to all NAP-capable computers. You want all workstations to be NAP-capable to have access to the network, and if any of is not NAP-capable, it must not be granted access until reconfigured to be NAP-capable. What would be your step of action?

Your company runs a network that is configured as an Active Directory Domain Services (AD DS) domain with Windows Server 2012 R2 running on all domain controllers (DCs). The clients request an IP address through DHCP. A computer is running the Network Access Protection (NAP) role and is used to determine the level of access allowed to those clients. You are directed to make sure non-compliant clients are not provided access to network resource servers and, if there is a possibility they must be brought into compliance as quickly as possible. What would you do in this situation keeping in mind the administrative effort is supposed to be minimum? (opt any TWO)

You organization’s network is configured as a single Active Directory Domain Services (AD DS) domain with Windows Server 2012 R2 or Windows Server 2012 running on all domain controllers. One of the DCs in your network has a Microsoft Windows Deployment Services (WDS) server installed. The WDS server is added with a custom image named CustomWin8.wim. After creating and adding the custom image to the WDS server, you come to know that Telnet Client feature needs to be added to the image. You mount the image to the cAmount folder. What would be your next step of action?

You work for an organization as an administrator for an Active Directory Domain Services (AD DS) domain. A member server named FS1 is running Microsoft Windows Server 2012 R2. On the member server FS1, File Server Resource Manager (FSRM) role is installed. Quotas on several shared folders on FS1 are required to be set with folders having different quota parameters. Which of the following would be correct to use?

You have a computer running Windows 2012 R2. It is suspected that the Trusted Platform Module (TPM) owner password (owner authorization) on the computer has been compromised. You want to avoid administrative changes to the TPM by unauthorized users. BitLocker Data Encryption (BDE) is used to protect the computer's system and data drives. You want to avoid invalidating existing keys or losing any data on the computer. What would be your step of action? (opt any TWO)

Your company is running a network that is configured as a single Active Directory Domain Services (AD DS) domain with Windows Server 2012 R2 or Windows Server 2012 running on the domain controllers. The domain function level is Windows Server 2008. There is a member server in the network. The member server is running Windows Server 2012 R2 that has the Network Policy and Access Services role installed. There is a network policy implemented according to which non-compliant client computers will be limited to a restricted network until all issues have been resolved. You need to identify the remediation servers available for this purpose. What will you do next?

Your company has a network that is an Ethernet local area network (LAN). Windows 8.1 or Windows 7 is run by the client computers. an 802.1x authenticating switch is used by the computers to connect to the network. You need to make sure that if the client computers are not running anti-virus software, they are only allowed access to two servers. You deploy a new server running Windows Server 2012 R2 to support this. What would be you next step of action? (opt any TWO)

You have a network that is running Windows Server 2012 R2. Custom DNS lookup service is deployed on three servers on the network. To keep the load balanced, you want service hosts to return to DNS clients in a random order. What would you do, keeping in mind the amount of work is minimized?

Your company is running a network configured as a single Active Directory Domain Services (AD DS) domain with Windows Server 2012 R2 or Windows Server 2012 running of all domain controllers. A Network Policy Server (NIPS) is deployed, configured as a RADIUS server and RADIUS proxy. Your company has a partner company from where users sometimes connect to the partner company’s network from your local network. You want to have domain members authenticated locally, but visitors should be authenticated by a RADIUS server in their home network. What would be your step of action?

You are working for a company as an administrator for an Active Directory Domain Services (AD DS) domain with Windows Server 2012 R2 or Windows Server 2012 running on all domain controllers. Each domain controller has a system state backup run fortnightly and a full backup once a week. Windows 8.1 or Windows 7 is run on all client computers. Various changes were made to computer policies earlier in the week through the Default Domain group policy changes. There have been many problems witnessed on the client computers after that. What would be your step of action if you want the Default Domain group policy to return back to its baseline configuration settings as soon as possible?

You work for an organization managing its Active Directory Domain Services (AD DS) domain with Windows Server 2012 or Windows Server 2012 R2 running on domain controller. There is a member server in your network. The member server is running Windows Server 2012 R2 and is configured as a Network Policy Server (NPS) RADIUS server. A private Public Key Infrastructure (PKI) is used to configure your network. Your perimeter network has a VPN installed and it is used by remote clients to connect. Remote clients are authenticated using EAP-TLS. For client computers that happen to be the domain members, you have set up an automatic certificate enrollment. Only the remote clients configured as domain members can be authenticated by the NPS server. You want users who are not domain members to be authenticated too. What would be your next step of action? (opt any TWO)

You work for an organization as an administrator for an Active Directory Domain Services (AD DS) domain with Windows Server 2012 R2 or Microsoft Windows Server 2012 running on all domain controllers. The company has many offices across the globe with head office located in New York City. Each office location is configured as a different AD site. Computers in each office that are running Windows Server 2012 R2 are installed and configured with Windows Update Services (WSUS). Updates will be downloaded from the Microsoft Updates site to the WSUS server in the New York office only. There is a hub-and-spoke configuration in which remaining WSUS servers are deployed in. What would you do to ensure updates are run after hours in each geographical location? (opt any TWO)

You work for an organization as an administrator for a small network. The network is configured as an Active Directory Domain Services (AD DS) domain named corp.net. There are member servers on the network and Microsoft Windows Server 2012 R2 is running on the member servers. The domain clients are running Windows 8 or Windows 8.1. Encrypting File System (EFS) is used by all member computers. You have been assigned the role of EFS Recovery Agent. You find a domain user who has an EFS-encrypted file on his computer and is facing issues accessing it. Upon investigating, you realize the EFS settings are creating issues for him. You log on to the user's computer with your EFS Recovery Agent account. While trying to remove the EFS encryption from the file, an error message is received. What would you do to remove the EFS encryption from the file?

You work for a company that has an Active Directory Domain Services (AD DS) domain. There are two domain controllers with both running Windows Server 2012 R2. The deployment requirements for DirectAccess are met by your internal network infrastructure. There are 20 remote users who need access to the internal network. Windows 8.1 or Windows 7 is running in remote clients computers. You deploy a server running Windows Server 2012 R2. The server is configured to support Advanced Remote Access (DirectAccess). What else would you do in this situation? (opt any TWO)

Your company has a network that is configured as a single Active Directory Domain Services (AD DS) domain with Windows Server 2012 R2 running on all domain controllers. There are several offices of your company and so the network includes a head office and various branch offices. You set up DFS replication in a hub and spoke configuration. The hub is in the main office. All servers used with DFS replication run Windows Server 2012 R2. Read/write DFS databases are supported by all replication group members. Upon looking at the the log entries for DFS you realize there is an interruption in replication because the staging folder has become a bottleneck. You decide the quota size of the staging folder must be increased. What would be your step of action? (opt any TWO)

Your company’s network is configured as an Active Directory Domain Services (AD DS) domain with Windows Server 2012 R2 running on all domain controllers. There are a few different operating systems being run on domain clients’ computers including Windows XP SP2, Windows 7, Windows 8, and Windows 8.1. Client computer objects are used in departmental organization unit (OU) and are stored in it as well. You want to set laptop computers with Windows XP to hibernate if the lid is closed. This is the only change that you want to make. The policy is only supposed to be applied to laptop computers. You want to keep the administrative effort needed to accomplish this to a minimum. What would be your step of action?

Your work for a company that has a network configured as a single Active Directory Domain Services (AD DS) domain with Windows Server 2012 R2 running on all domain controllers. A member server named RFSO4 runs Windows Server 2012 R2. RFSO4 is also a member of various different DFS replication groups. Each DFS replication database is maintained on a different volume. There was an unexpected power loss causing one of the DFS databases to corrupt. What will be your initial action(s) if you desire to have the database recovered as quickly as possible. (There could be more than one correct answers. Opt the BEST answer(s))

You work in medical services company that has a network configured as an Active Directory Domain Services (AD DS) domain with Windows Server 2012 R2 or Windows Server 2008 R2 run by all domain servers. The company has sensitive records that are are maintained on a secure file server named Serverl. Serverl is running Windows Server 2012 R2. Encrypting File Service (EFS) is used to encrypt each folder on the file server. You need to know every time there is a failed attempt to access a shared folder on Server1. Keeping the log size minimum, and the administrative effort spent as less as possible, what will be your step of action? (multiple answers could be correct. Opt the best answer(s))

Your work for a company that has a network configured as an Active Directory Domain Services (AD DS) domain. Windows Server 2003, Windows Server 2008, and Windows Server 2012 R2 is run on the computers included in the domain controllers (DCs). You need to ensure that you can quickly restore deleted AD objects, including all linked and non-linked attributes, without having to take any domain controller into Directory Services Restore Mode (DSRM). There should be minimum changes to the AD DS infrastructure. What will be your first step of action?

You work for a company that is running a network consisting of a single Active Directory domain. All the servers on the network are installed with Microsoft Windows Server 2012 R2. Windows 8.1 is run of all client computers. The marketing team travels a lot and want to access the company’s network on the go. You provide virtual private network (VPN) connectivity to remote users by installing a Network Policy Server (NPS) and enabling the Routing and Remote Access role service on the server. You want to set a time-limit in which the authorized remote users will be able to access the corporate network. Time would be between 9 A.M. to 6 P.M. Authorized remote users are all part of a security group containing only authorized remote users. What would be your step of action?