Which two components should you install?

Every question we can find

1)
Your network contains two Active Directory forests named contoso.com and adatum.com. All domain controllers run Windows 2012 R2.
The Adatum.com domain contains a Group Policy object (GPO) named GPO1. An Administrator from the Adatum.com back up to a USB flash drive.
You have a domain controller named dc1.contoso.com You insert USB flash drive in dc1.contoso.com.
You need to identify the domain-specific reference in GPO1
What should you do?

A) From the Migration Table Editor, click Populate from GPO.
B) From the Migration Table Editor, click Populate from Backup. <– Answer
C) From Group Policy Management, run the Group Policy Results Wizard.
D) From Group Policy Management, run the Group Policy Modelling Wizard.
———————————————————————————————

2)
You deploy a windows Server Update (WSUS) server named Server01.
You need to prevent the WSUS service on Server01 from being updated automatically.
What should you do from the update service console?

A. From the Product and Classification options, modify the Products setting.
B. From the Automatic Approvals options, modify the advanced settings. <- Answer
C. From the Product and Classification options, modify the Classifications setting
D. From the Automatic Approvals options, modify the Default Automatic Approval rule.

————————————————————————————————————————————–

3)
You deploy a windows Server Update (WSUS) server named Server01.
You need to ensure that you can view update reports and computer reports on server01.
Which two components should you install? Each correct answer presents part of the solution.

A. Microsoft Report Viewer 2008 Redistributable Package <-Answer
B. Microsoft .Net Framework 2.0 <- Answer
C. Microsoft SQL Server 2008 R2 Builder 3.0
D. Microsoft XPS Viewer
E. Microsoft SQL Server 2012 reporting Services (SSRS)
————————————————————————————————————————————–
4)
You have a group managed Service Account name Account01. Only three servers named Server01, Server02 and Server03 are allowed to use Account01 service account.
You plan to decommission Server01.
You need to prevent Server01 from using the Account01 service account. The solution must ensure that Server02 and Server03 continue to use the Account01 service account
What command should you run? To answer, select the appropriate options in the answer area.

Answer Area Account01
Remove-ADServiceAccount -DNSHostName Server01
Reset-ADServiceAccount -PrincipalsAllowedToReteriveMamagedPassword Server01$
Set-ADServiceAccount -SAMAccountNAme Server02,Server03
-Server Server02$,Server03$ Unistall-Addsserviceaccount

Set-ADServiceAccount -Name Account01 -PrincipalsAllowedToRetrieveManagedPassword Server02 Server03

5)
Your Company is testing DirectAccess on Windows Server 2012 R2.
Users report that when they connect to the corporate network by using DirectAccess, access to Internet websites and Internet hosts is slow.
The users report that when they disconnect from DirectAccess, acces to the internet websites and the internet hosts is much faster.
You need to identify the most likely cause of the performance issue.
What should you identify?

A. DirectAccess uses a self-signed certificate.
B. The corporate firewall blocks TCP port 8080.
C. Force tunneling is enabled New-AdServiceAccount service01 –DNSHostName service01.contoso.com New-ADServiceAccount : Key does not exist
At line : 1 char : 1
+ New-ADServicAccount service01
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: {CN=service01,CN… =contoso,DC=com:String} [New-ADServiceAccount], ADException
+FullyQualifiedErrorId :
ActiveDirectoryserver : -2146893811,Microsoft. ActiveDirectory . Management . Commands . NewADServiceAccount

You need to create a Managed service Account.
What should you do?

A. Run Set-KDSConfiguration and then run New-ADServiceAccount –Name “service01” –DNSHostName service01.contoso.com <- Answer

B. Run New-AuthenticationPolicySilo, and then run New-ADServiceAccount – Name “service01” – DNSHostName

C. Run New-ADServiceAccount – Name “service01” – DNSHostName service01.contoso.com – RestrictToSingleComputer <– Answer

D. Run New-ADServiceAccount – Name “service01” – DNSHostName service01.contoso.com – SAMAccountName service01.
————————————————————————————————————————————–

8)
ACL
Which command to list global object access auditing entries for file and folder on Server1 (Drop-Down)

First Down-Drop option Second Down-Drop option /type:File /view
auditpol.exe /get
can't remember /list
Get-ACL /resourceSACL
secedit.exe can't remember

auditpol.exe /resourceSACL
Refer, technet.microsoft.com/en-us/library/ff625687.aspx
————————————————————————————————————————————–
9)
FSMO roles (Hotspot)
You plan to transferring DC that holding FSMO roles.
You need to select which tools can use to transfer domain naming master role and Operations master roles.
Role need to transfer
Tool Domain naming master Operations master
AD Domains and Trust x
AD User and Computers x
Schmeca MMC

————————————————————————————————————————————–

10)
Server1 download update from microsoft update. You have Server2 that must syncronize update from Server1. Have firewall separate between Server1 and Server2.
Which port should to open on Server2 to syncronize ?

A. 80
B. 443
C. 3389
D. 8530 <– Answer
————————————————————————————————————————————–
11)
gMSA (Drag and Drop)
You have DC run Windows Server 2008 R2. You deploy new DC run Windows Server 2012 R2.
new DC have configured to running Load balance of application App1, show as below table
Server1 WS2012 R2 can't remember
Load Balance
Server2 WS2012 R2 can't remember
Load Balance
You need to use group Managed Services Accounts to identify on App1.
Need to drag-drop 3 process with correct in sequence steps.

Add-KdsRootKey
New-ADServiceAccount
Set-ADServiceAccount
Install-ADServiceAccount
Add modify to App1

Choose Add-KdsRootKey, New-ADServiceAccount, Add modify to App1

————————————————————————————————————————————–
13)
12)
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the File Server Resource Manager role service installed.
You need to configure Server1 to meet the following requirements:

– Ensure that old files in a folder named Folder1 are archived automatically to a folder named Archive1.
– Ensure that all JPG files can always be saved to a local computer, even when a file screen exists.

Which two nodes should you configure?
To answer, select the appropriate two nodes in the answer area.

File Screens – Here you can set a "file screen exception for JPG's"
File Management Tasks – Set a new task to archive data

————————————————————————————————————————————–

14)
Your network contains two servers named server1 and Server2. Both servers run the Windows Server 2012 R2.
On Server1, you create a Data Collector set (DCS) named Data1
You need to export Data1 to Server2.

A) Right-click Data1 and click Properties
B) Right-click Data1 and click Data manager
C) Right-click Data1 and click Export List
D) Right-click Data1 and click Save Template <— Answer

————————————————————————————————————————————–
15)
You have two Windows Server Update Services (WSUS) servers named Server1 and Server2. Server01 synchronizes from Microsoft Update. Server2 synchronizes updates from Server1.
Both servers are members of the same Active Directory domain.
You configure Server1 to require SSL for all WSUS metadata by using a certificate issued by an enterprise root certification authority (CA).
You need to ensure that Server2 synchronizes updates from Server1. What should you do on Server2?

A. From the Update Services console, modify the Update Source and Proxy Server options.
B. From a command prompt, run wsusutil.exe configuresslproxy server2 443.
C. From a command prompt, run wsusutil.exe configuressl server1. <– Answer
D. From a command prompt, run wsusutil.exe configuresslproxy server1 443.

————————————————————————————————————————————–

16)
You have three Windows Server Update Services (WSUS) Servers named Server01 Server02 and Server03. Server01 synchronizes form Microsoft Update. You need to ensure that only Server02 and Server03 can Synchronize updates from Server01.

What should you do?

A) Modify %ProgramFiles%\Update Services\WebServices\Serversyncgwevservice\SimpleAuth.asmx
B) From the Update Services console, modify the Update Source and Proxy Server options.
C) From the Update Services console, modify the Automatic Approvals Options.
D) Modify %ProgramFiles%\Update Services\WebServices\Serversyncgwevservice\Web.config ^– Answer
————————————————————————————————————————————–
17)
You have a DNS server that runs Windows Server 2012 R2. The server hosts the zone for contoso.com and is accessible from the internet.
You need to create a DNS record for the Sender Policy Framework (SPF) to list that are authorized ti send email for contoso.com
Which type of record should you create?

A) Name Server (NS)
B) Mail.exchanger (MX)
C) Resource record signature (RRSIG)
D) Text (TXT) <– Answer

————————————————————————————————————————————–

18)
You have a group Managed Service Account named Service01, Three server’s names Server01, Server02 and Server03 currently use Service01 Service account.

You plan to decommission Server01.

You need to remove the cached password of the Service01 service account from Server01.

The solution must ensure that Server02 and Server03 continues to use Service02.

A) Uninstall-ADServiceAccount
B) Set-ADServiceAccount
C) Remove- ADServiceAccount <– Answer
D) Reset-ADServiceAccountPassword

————————————————————————————————————————————–
19)
Create a starter gpo call Starter_GPO, and assign edit permission to a group Group1
Create a new gpo called GPO1
which the following answer is correct
A.*** in GPO1

B.change Administrative Template in GPO1

C.change the Group policy preference of Starter_GPO <– Answer

D.change the permission of Starter_GPO

————————————————————————————————————————————–

20)
One user needed a mapped drive but if they had it already you weren't to replace it.
Another user had a mapped drive. You need to update the UNC but not any other settings.
Options were

If X already exists, it must NOT make any changes
If Y already exists, change the UNC path, but leave the contents of it
Create, <— Answer
replace,
delete and
update <—- Answer

————————————————————————————————————————————–
 
21)

File1 has been encrypted by Contoso\admin1
File2 has been encrypted by Server1\admin1
File3 has been encrypted by Server1\administrator

You need to back up the DRA agents.
Who is the owner of each of the agents.

There is a selection of drop down boxes. You should to select one in every file
File1 : Contoso\admin
Contoso\administrator < Answer
Server1\admin1
Server1\administrator

File2 : Contoso\admin
Contoso\administrator
Server1\admin1
Server1\administrator < Answer

File3 : Contoso\admin
Contoso\administrator
Server1\admin1
Server1\administrator < Answer

https://technet.microsoft.com/en-us/library/cc512680.aspx

————————————————————————————————————————————–

22)
You have a windows Server update services (WSUS) server01 and Server02. Server01 synchronizes from Microsoft Update. Server02 Synchronizes updates from Server01. Both Servers are members of the same Active Directory domain.

You configure Server01 to require SSL for all WSUS metadata by using certificate issued by an enterprise root certification authority (CA)

You need to ensure that server02 synchronizes updates from Server01

What should you do?

A) From the update Services console, modify the Automatic Approvals options

B) From command prompt run wsusutil.exe configuredns server02.

C) From Internet Information Services (IIS) Manager, import certificate

D) From the update services console, modify the Update Source and Proxy Server Options. <– Answer

————————————————————————————————————————————–

23)

You have two Windows Server Update Services (WSUS) servers named Server01 and Server02. Server01 synchronizes from Microsoft Update. Server02 synchronizes updates from Server01. Both servers are members of the same Active Directory domain.

You configure Server01 to require SSL for all WSUS metadata by using a certificate issued by an enterprise root certification authority (CA).

You need to ensure that Server02 synchronizes updates from Server01.

What should you do on Server02?

A. From a command prompt, run wsusutil.exe configuresslproxy server02 443.
B. From a command prompt, run wsusutil.exe configuressl server01. <– Answer
C. From a command prompt, run wsusutil.exe configuresslproxy server01 443.
D. From the Update Services console, modify the Update Source and Proxy Server options.

————————————————————————————————————————————–
24)
you want to encypt a drive without TPM.

Allow enhanced PINs for startup
Allow network unlock at startup
Allow Secure Boot for integrity validation
Choose how BitLocker-protected operating system drives can be recovered
Configure minimum PIN length for startup
Configure TPM platform validation profile (Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2)
Configure TPM platform validation profile for BIOS-based firmware configurations
Configure TPM platform validation profile for native UEFI firmware configurations
Configure use of hardware-based encryption for operating system drives
Configure use of passwords for operating system drives
Disallow standard users from changing the PIN or password
Enable use of BitLocker authentication requiring preboot keyboard input on slates
Enforce drive encryption type on operating system drives
Require additional authentication at startup <– Answer
Require additional authentication at startup (Windows Server 2008 and Windows Vista)
Reset platform validation data after BitLocker recovery
Use enhanced Boot Configuration Data validation profile
————————————————————————————————————————————–
25)
You network contains one Active Directory domain named contoso.com. The forest functional level is Windows Server 2012.
All servers run Windows Server 2012 R2. All client computer run Windows 8.1.
The domain contains 10 domain controllers and a read-only domain controller (RODC) named RODC01. All domain controllers and RODCs are hosted on a Hyper-V host that runs Windows Server 2012 R2.
You need to identify whether deleted objects can be recovered from the Active Directory Recycle Bin.
Which cmdlet should you use?

A. Get-ADGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
H. Get-ADAuthenticationPolicy

Answer: E
————————————————————————————————————————————–

26)
You need to identify whether the members of the protected Users group will be prevented from authenticating by using NTLM.
Which cmdlet should you use?

A. Get-ADGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
H. Get-ADAuthenticationPolicy

Answer: D
————————————————————————————————————————————–
27)
You need to identify which user accounts were authenticated by RODC1. Which cmdlet should you use?

A. Get-ADGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
H. Get-ADAuthenticationPolicy

Answer: C

————————————————————————————————————————————–
28)
You need to identify whether the members of the protected Users group will be prevented from authenticating by using NTLM.
Which cmdlet should you use?

A. Get-ADGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
H. Get-ADAuthenticationPolicy

Answer: D
————————————————————————————————————————————–
29)
You need to identify which security principals are authorized to have their passwords cached on RODC1

A. Get-ADGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
H. Get-ADAuthenticationPolicy

Answer:C Get-ADDomainControllerPasswordReplicationPolicyUsage
————————————————————————————————————————————–

30)
You need to identify which domain controllers are authorized to be cloned using virtual domain controller cloning.
A. Get-ADGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
H. Get-ADAuthenticationPolicy

Answer :A Get-ADGroupMember
————————————————————————————————————————————–
31)
You need to identify which domain controller must be online when cloning a domain controller.

A. Get-ADGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
H. Get-ADAuthenticationPolicy

d: Get-ADDomain
————————————————————————————————————————————–

32)
Determine what domain controller needs to be online to promote a RODC.

A. Get-ADGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
H. Get-ADAuthenticationPolicy

D: Get-ADDomain

————————————————————————————————————————————–
33)
What accounts are allowed to replicate their password with the RODC?

A. Get-ADGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
H. Get-ADAuthenticationPolicy

C: Get-ADDomainControllerPasswordReplicationPolicy

————————————————————————————————————————————–

34)
You need to identify whose passwords can be stored, view stored passwords.

A. Get-ADGroupMember
B. Get-ADDomainControllerPasswordReplicationPolicy
C. Get-ADDomainControllerPasswordReplicationPolicyUsage
D. Get-ADDomain
E. Get-ADOptionalFeature
F. Get-ADAccountAuthorizationGroup
G. Get-ADAuthenticationPolicySlio
H. Get-ADAuthenticationPolicy

Get-ADDomainControllerPasswordReplicationPolicyUsage

 
35) You have a server named Server1 that runs Windows Server 2012 R2. You discover that the performance of Server1 is poor. The results of a performance report generated on Server1 are shown in the following table.

Counter | Value
Processor(Total)\% DPC Time 35
Processor(Total)\% Interupt Time 2
Processor(Total)\% User time 12
System\Processor Queue Length 6
Processor Information(_Total)\% 98
Processor Time
Memory\Available Bytes 7,341,024,329
Memory\ Pages/Sec 125

A. Driver malfunction
B. Insufficient ram,
C. Insufficient processors <– Answer
D. Excessive paging.

Processor\% Processor Time This measures the percentage of elapsed time the processor spends executing a non-idle thread.
If the percentage is greater than 85 percent, the processor is overwhelmed and the server may require a faster processor

System\Processor Queue Length This indicates the number of threads in the processor queue.
The server doesn't have enough processor power if the value is more than two times the number of CPUs for an extended period of time.

36)
Your network contains one Active Directory domain named contoso.com. The domain contains a file server named Server01 that runs Windows Server 2012 R2. Server01 has an operating system drive and a data drive. Server01 has a trusted Platform Module (TPM).
Which cmdlet should you run first?

A. Enable-TPMAutoProvisioning
B. Unblock-TPM
C. Install-WindowsFeature <- Answer
D. Lock-BitLocker
————————————————————————————————————————————–

37)
DFS Replication
What command do you user to replicate files
Robocopy.exe
What command do you user to replicate the database
ExportDFSRClone
————————————————————————————————————————————–
38)
Created admx File and copied to central store. Trying to edit settings a warning pops up: "An appropriate resource file could not be found for file \\domainname.com\sysvol\domainname.com\Policies\PolicyDefinitions\anyfile.admx (error = 2): The system cannot find the file specified" What is wrong?
ADML File is missing
————————————————————————————————————————————–
39)

You Create Service Account: Service NT\Service1. You see the Service1 Properties Popup. The question is: What kind of Account is the service Account used on the computer?
"virtual Account" ,
Which account is used when this Serviceaccount gets into Network? – If a service accesses the network while running as a virtual account, it accesses resources as the
“computer account” (DOMAIN\Computername$).
————————————————————————————————————————————–

40)
You have a group policy. You need to add a comment into the group policy. How do you do this?
You edit the GPO Object
————————————————————————————————————————————–