-
Your network contains an Active Directory domain. A user named User1 takes a leave of absence for one year. You need to restrict access to the User1 user account while User1 is away. What should you do（）
A . From the Default Domain Policy， modify the account lockout settings.
B . From the Default Domain Controller Policy， modify the account lockout settings.
C . From the properties of the user account， modify the Account options.
D . From the properties of the user account， modify the Session settings.
-
Your network contains an Active Directory domain named contoso.com. You need to create a central store for the Group Policy Administrative templates. What should you do（）
A . Run dfsrmig.exe /createglobalobjects.
B . Run adprep.exe /domainprep /gpprep.
C . Copy the %SystemRoot%\PolicyDefinitions folder to the \\contoso.com\SYSVOL\contoso.com\Policies folder.
D . Copy the %SystemRoot%\System32\GroupPolicy folder to the\\contoso.com\SYSVOL\contoso.com\Policies folder.
-
Your network contains one Active Directory domainl. You have a member server that runs Windows Server 2008. You need to immediately disable all incoming connections to the server. What should you do？（）
A . From the Services snap-in disable the IP Helpder
B . Fom the Services snap-in disable the Net Logon Service
C . From Windows Firewall， enable the Block all connections option on the Public Profile
D . From the Windows Firewall， enable the Block all connections option on the Domain Profile
-
Your network contains a server that runs Windows Server 2008. The server has the Network Policy Server （NPS） service role installed. You need to allow only members of a global group named Group1 VPN access to the network. What should you do？（）
A . Add Group1 to the RAS and IAS Servers Group
B . Add Group1 to the Network Configuration Operators group
C . Create a new network policy and define a group-based connection for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 1
D . Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access Granted. Set the processing of the policy to 3.
-
Your network contains an Active Directory forest. The forest contains multiple sites. You need to enable universal group membership caching for a site. What should you do（）
A . From Active Directory Sites and Services， modify the NTDS Settings.
B . From Active Directory Sites and Services， modify the NTDS Site Settings.
C . From Active Directory Users and Computers， modify the properties of all universal groups used in the site.
D . From Active Directory Users and Computers， modify the computer objects for the domain controllers in the site.
-
Your network contains an enterprise root certification authority （CA）. You need to ensure that a certificate issued by the CA is valid. What should you do（）
A . Run syskey.exe and use the Update option.
B . Run sigverif.exe and use the Advanced option.
C . Run certutil.exe and specify the -verify parameter.
D . Run certreq.exe and specify the -retrieve parameter.
-
Your network contains a DHCP server named DHCP1. You have a DHCP reservation for a computer named Computer1.You add a DNS server option to the reservation.You need to ensure that Computer1 immediately receives the new option.What should you do？（）
A . Run ipconfig.exe /renew.
B . Run ipconfig.exe /registerdns.
C . On DHCP1, recreate the reservation.
D . On DHCP1, delete the active lease for the reservation.
-
Your network contains a server that runs Windows Server 2008 R2. The server has the Network Policy and Access Services server role installed. You need to allow only members of a global group named Group1 VPN access to the network. What should you do? （）
A . Add Group1 to the RAS and IAS Servers group.
B . Add Group1 to the Network Configuration Operators group.
C . Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 1.
D . Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 3.
-
Your network contains a server named Server1 that runs Windows Server 2003 Service Pack (SP2). You install a new network adapter on Server1. You need to view the media access control (MAC) address for the new network adapter. What should you do? （）
A . At the command prompt, run Ipconfig /all.
B . At the command prompt, run Net view \\server1.
C . From the Device Manager snap-in, view the properties of the network adapter.
D . From the Services snap-in, view the properties on the Network Connections service.
-
Your network contains a server that runs Windows Server 2008 R2. Windows BitLocker Drive Encryption (BitLocker) is enabled for all drives. You need to perform a bare metal recovery of the server. What should you do first？（）
A . From the BIOS, disable the Trusted Platform Module.
B . From the BIOS, disable the processor's No Execute feature.
C . Start the computer in Safe Mode.
D . Start the computer from the Windows Server 2008 R2 installation media.
-
Your network contains one active directory domain. You have a member server that runs windows server 2008. You need to immediately disable all incoming connections to the server. What should you do?（）
A . From the services snap-in disable the IP helper.
B . From the services snp-in disable the net logon service.
C . From windows firewall. Enable the block all connections option on the public profile.
D . From the windows firewall, enable the block all connections option on the domain profile.
-
Your network contains a Windows Server Update Services (WSUS) server.You need to ensure that the WSUS server automatically downloads service packs. What should you do first?（）
A . From the Automatic Approvals options, modify the Update Rules list.
B . From the Automatic Approvals options, modify the Advanced settings.
C . From the Products and Classifications options, modify the Products settings.
D . From the Products and Classifications options, modify the Classifications settings.
-
Your network contains two Exchange Server 2010 Mailbox servers.You create a database availability group （DAG）.You need to ensure that the Exchange servers can replicate mailbox databases.What should you do？（）
A . Modify the membership list of the DAG
B . Add the Network Load Balancing feature on both servers
C . Add Active Directory Federation Services （AD FS） on both servers
D . Enable Datacenter Activation Coordination （DAC） mode for the DAG
-
Your network contains one Active Directory domain. You have a member server that runs Windows Server 2008 R2.You need to immediately disable all incoming connections to the server. What should you do？（）
A . From the Services snap-in, disable the IP Helper.
B . From the Services snap-in, disable the Netlogon service.
C . From Windows Firewall, enable the Block all connections option on the Public Profile.
D . From Windows Firewall, enable the Block all connections option on the Domain Profile.
-
Your network contains one Active Directory domain. You have a member server that runs Windows Server 2008.You need to immediately disable all incoming connections to the server. What should you do？（）
A . From the Services snap-in，disable the IP Helper.
B . From the Services snap-in，disable the Netlogon service.
C . From Windows Firewall，enable the Block all connections option on the Public Profile.
D . From Windows Firewall enable the Block all connections option on the Domain Profile.
-
Your network contains an Active Directory domain named contoso.com. You need to create a central store for the Group Policy Administrative templates. What should you do（）
A . Run dfsrmig.exe /createglobalobjects.
B . Run adprep.exe /domainprep /gpprep.
C . Copy the %SystemRoot%\PolicyDefinitions folder to the \\contoso.com\SYSVOL\contoso.com\Policies folder.
D . Copy the %SystemRoot%\System32\GroupPolicy folder to the \\contoso.com\SYSVOL\contoso.com\Policies folder
-
Your network contains a single Active Directory domain. You need to create an Active Directory Domain Services snapshot. What should you do（）
A . Use the Ldp tool.
B . Use the NTDSUtil tool.
C . Use the Wbadmin tool.
D . From Windows Server Backup， perform a full backup.
-
Your network contains an Active Directory domain. The domain contains a DHCP server named Server1.You create a scope named Scope1 on Server1.You need to prevent unauthorized DHCP clients from receiving addresses from Server1.What should you do？（）
A . From the DHCP console, configure filters.
B . From the Local Security Policy console, modify the network settings.
C . From the Local Users and Groups console, modify the membership of the DHCP Users group.
D . From the Netsh tool, change to the DHCP Server context, and then run the initiate auth command.
-
Your network contains an Active Directory domain. The domain contains 1000 user accounts. You have a list that contains the mobile phone number of each user You need to add the mobile number of each user to Active Directory. What should you do（）
A . Create a file that contains the mobile phone numbers， and then run ldifde.exe
B . Create a fila that contains the mobile phone numbers， and then run csvde.exe
C . From Adsiedit， select the CN=Users container， and then mofify the properties of the container.
D . From Active Directory Users and Computers， select all of the users， and then modify the properties of the users.
-
Your network contains an Active Directory domain. You need to restore a deleted computer account from the Active Directory Recycle Bin. What should you do（）
A . From the command prompt， run recover.exe.
B . From the command prompt， run ntdsutil.exe.
C . From the Active Directory Module for Windows PowerShell， run the Restore-Computer cmdlet.
D . From the Active Directory Module for Windows PowerShell， run the Restore-ADObject cmdlet.
-
Your network contains an Active Directory forest. The forest contains multiple sites. You need to enable universal group membership caching for a site. What should you do（）
A . From Active Directory Sites and Services， modify the NTDS Settings.
B . From Active Directory Sites and Services， modify the NTDS Site Settings.
C . From Active Directory Users and Computers， modify the properties of all universal groups used in the site.
D . From Active Directory Users and Computers， modify the computer objects for the domain controllers in the site.
-
Your network contains an Exchange Server 2007 Mailbox server named Server1 and an Exchange Server 2010 Mailbox server named Server2. You need to move a mailbox from Server1 to Server2. What should you do（）？
A . From Server1， run Move-Mailbox.
B . From Server2， run Move-Mailbox.
C . From Server1， run New-MoveRequest.
D . From Server2， run New-MoveRequest.
-
Your network contains an enterprise root certification authority （CA）. You need to ensure that a certificate issued by the CA is valid. What should you do（）
A . Run syskey.exe and use the Update option. T.he safer ，easier way to help you pass any IT exams. 4 / 90
B . Run sigverif.exe and use the Advanced option.
C . Run certutil.exe and specify the -verify parameter.
D . Run certreq.exe and specify the -retrieve parameter.
-
Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1 hosts a custom application named App1. App1 is accessible on TCP port 5000.You need to encrypt App1 data on the network.What should you do？（）
A . From the Local Security Policy console, configure the Security Options.
B . From the Local Security Policy console, configure the Application Control Policies.
C . From the Windows Firewall with Advanced Security console, create an inbound rule.
D . From the Windows Firewall with Advanced Security console, create a connection security rule.
-
Your network contains a single Active Directory domain. You need to create an Active Directory Domain Services snapshot. What should you do（）
A . Use the Ldp tool.
B . Use the NTDSUtil tool.
C . Use the Wbadmin tool.
D . From Windows Server Backup， perform a full backup.
