The organization you work for requires you to configure a Network Load Balancing (NLB) cluster to work as a web server for the organization’s internet. There are three servers running Microsoft Windows Server 2012 R2 and you configure them to act as hosts in the cluster. To share HTTP traffic among all the hosts, port rules are configured. Client PCs in a handful amount were tested so it could be ensured that the traffic among all servers is balanced. Another web application is added to the cluster, and that application deals with personal data of employees. Secure connections to the cluster need to be established, for which the application is configured to use Secure Sockets Layer (SSL). Upon testing the load balance, it is discovered that only one of the host servers is receiving all the traffic. What must you do to make sure the traffic is balanced among all the host servers?

There are two Active Directory Domain Services (AD DS) forests that are named as fi-print.com and stayandsleep.com. You are working for an organization as an administrator looking after these two forests. To successfully manage both the forests, you plan on deploying IP Address Management (IPAM). This will also include managing various child domains in both the forests. There is a one-way trust between fi-print.com and stayandsleep.com. An IPAM server is now deployed on a site in fi-print.com. You could not find resources in stayandsleep.com, but in fi-print.com you could easily discover domain controllers, DHCP servers and DNS server. What would be your next step of action if you want to manage resources in stayandsleep.com?

You work for an organization running an Active Directory Domain Services (AD DS) domain. You are the administrator for this AD DS domain. There are three AD DS sites in the domain. The site names are LondonWeb, NewYorkWeb and SanFranciscoWeb. LondonWeb and NewYorkWeb have a site link between them and NewYorkWeb and SanFranciscoWeb have a site link between them. Transitive links between sites are disabled. Microsoft Windows Server 2008 R2 or Windows Server 2012 R2 is run by the domain controllers (DCs). There are massive changes planned to be made on the domain infrastructure. You want all the changes to be replicated to all domain controllers throughout the organization in the shortest time. What would be your step of action?

You are working for an organization as an administrator who manages a single Active Directory Domain Services (AD DS) domain. There are two domain controllers in the organization’s network and Windows Server 2012 R2 is run on both the DCs. However, one of the DCs is also configured as a Dynamic Host Configuration Protocol (DHCP) server. For each scope on the server, A policy-based assignment is configured. There are reorganized address assignments on your network. There is a scope 11.11.11.0/24 on which you need to deactivate the assigned Policy application. It is unsure of that the scope will used after getting reorganized. Keeping the administrative efforts to the minimum, what step would you take?

Your organization has an Active Directory Domain Services (AD DS) domain which you are managing. The AD DS is operating at the Windows Server 2008 R2 functional level and Windows Server 2012 R2 is run by all domain controllers. You want to test the effectiveness of Classification-Based Encryption for Office Documents and so you plan to deploy Dynamic Access Control (DAC) in a test environment. You are looking forward to base automatic documents encryption on classification requirements. What step would you take?

Your organization has an Active Directory Domain Services (AD DS) domain which you are managing as an administrator. The AD DS has four domain member servers. A physical failover cluster is configured on the four member servers and all member servers run Microsoft Windows Server 2012 R2. You want to support a continuously available file share by configuring the cluster. What would you use? (opt any TWO)

You work for an organization as an administrator. Fi-print.com is the Active Directory Domain Services (AD DS) forest in the company’s network. There are two child domains in the forest named ops.fi-print.com and prod.fi-print.com. Windows Server 2012 R2 or Microsoft Windows Server 2012 is run by all domain controllers. There is a partnership planned between your company and another company. The partner company has a network that is configured as a UNIX realm. The partner company employees will have to access resources in fi-print.com. It should be ensured that they are not able to access any other domain. You should also make sure that users in the fi-print.com forest should have no access to resources in the UNIX realm. You configure trust from fi-print.com by using Active Directory Domains and Trusts. You decide a realm trust must be created. Which of the options is the right thing to do if you want to configure the trust?

Your organization has an Active Directory Domain Services (AD DS) domain. You are managing that AD DS domain as an administrator. Windows Server 2012 R2 or Windows Server 2008 R2 is run on the Domain Controllers (DCs). The domain has member servers running Windows Server 2012 R2 or Windows Server 2008 R2. You are required to deploy the IP Address Management (IPAM) feature on a server that is running Windows Server 2012. You plan to use the IPAM Discovery feature. Can you identify from the options below what types of servers and server roles can be detected automatically by the IPAM Discovery feature? (opt all that apply)

An organization you work for has An Active Directory Rights Management Service (AD RMS) cluster. Windows Server 2012 R2 is run by the servers on which the cluster is configured. The client workstations are all running Windows 7 or Windows 8. Users can classify documents with the help of various AD RMS templates used by the company. One of the templates, TemplateA, was revealed to be unaligned with the security policies, as revealed by a recent security audit. You now have to make sure none of users is able to select that template to protect a document, however, they must be allowed to read the files already protected with the TemplateA. In this situation, what would you choose to use?

You work for an organization as an administrator who is looking after an Active Directory Domain Services (AD DS) domain on the organization’s network. Windows Server 2012 R2 or Microsoft Windows Server 2008 R2 is run by all the domain controllers (DCs). In a failover cluster, with cluster nodes running Windows Server 2012 R2, an enterprise Certificate Authority is deployed. There is a domain user named HankS. Making sure the rights assigned to HankS are minimum, you want to enable him configuration and management of certificate revocation list (CRL) schedules. What would be your step of action?

You are working for an organization as an administrator for an Active Directory Domain Services (AD DS) domain. The domain has two domain controllers that are both running Windows Server 2012. There is a member server named ServerA. Active Directory Certificate Services (AD CS) is installed on ServerA. The server is configured as an Enterprise Certificate Authority (CA). There is another server running Windows Server 2012 R2. This server is currently not a domain member. You need to migrate the Enterprise CA to this server. While replacing the server, the name will remain the same. You back up the public key, the private key, the certificate services registry information (the CAPolicy.inf file), and the certificate services database from ServerA. You need to migrate the CA role to the server running Windows Server 2012 R2. What would be your first step of action?

You work for an organization administering the corporate network’s Active Directory Domain Services (AD DS) domain. There are three AD DS sites configured in the domain, named NewYorkWeb, SanFranciscoWeb and LondonWeb. The DEFAULTIPSITELINK site link is used to configure and all three sites to connect with each other. The replication between domain controllers in the NewYorkWeb and LondonWeb must happen between 00:00 and 04:00, and you are required to provide a solution for this. Also keeping in mind, the solution should let the replication between NewYorkWeb and SanFranciscoWeb happen any time of the day, without any time limits. What should you do?

Your company has an Active Directory Domain Services (AD DS) domain and you work as an administrator for the company’s domain. The main office of the company has an AD DS site by the name of HQ-Site. HQ-Site has one linked subnet object. It is decided by the board of the company to plan for five new branch offices opening across the country. A separate TCP/IP subnet will be allocated to each office. You are required to deploy a domain controller in each location with Windows Server 2012 R2 running on it. As the company offices are increasing, you are required to configure the AD DS environment for all offices. The solution must ensure that users will always authenticate to a domain controller in their local office, unless it is unavailable. What would you do keeping in mind the solution must require as less administrative effort as possible?

Your company has asked you to deploy a high-availability cluster. Servers running Microsoft Windows Server 2012 R2 are decided to be used for the deployment. The company has offices in seven different locations across the country, connected with high-bandwidth connections. You deploy four servers at each two of the sites. If there is a failover from one site to the other, the capacity of these servers allows them to meet all client requirements. You are required to configure automatic failover from one site to the other in case there is a failure. Can you tell us how would the quorum witness be configured?

You are working for an organization as the IT administrator. CLUSTER1 is a cluster you have created and configured. The cluster is configured on servers that have Microsoft Windows Server 2012 R2 running. You plan on configuring the cluster as a file server. The file server is named FILESERVER, and Hyper-V virtual machines (VMs) is hosted by this file server. Can you identify the two PowerShell commands you should run to achieve this? (opt any TWO)

There are five servers that are running Windows Server 2012 R2. Those five servers make an NLB cluster. The cluster has an application for which session data needs to be maintained as long as the user connection is intact. You want one server to handle a specific session’s requests for as long as the session is live. Identify which of the following would you use?

You work for a company that has an Active Directory Domain Services (AD DS) domain. You have the role of an administrator for the domain. The Domain controllers run either Microsoft Windows Server 2012 or Windows Server 2012 R2. A screened subnet is set up as a test environment and a DC running Windows Server 2012 R2 is applied on that subnet. You want to test access control based on claims and compound authentication. The need to enable user claims is a required feature. What would you choose to do?

You are working for a company that has an Active Directory Domain Services (AD DS) domain. You are in the administrator role for that domain. Windows Server 2012 R2 or Microsoft Windows Server 2008 R2 is run of all domain controllers. The client computers are all clients running Windows 7 or Windows 8. A server running Windows Server 2012 has an Enterprise Certificate Authority (CA) deployed on it. You want the clients to renew the certificate with the same key for which you create a new certificate template. You have to make sure all clients are restricted to request a certificate based on this template. What would be your step of action to ensure this?

You work for a company and are managing two servers on the company’s network. The servers are named Server1 and Server2. Microsoft Windows Server 2012 R2 is run on both the servers and Hyper-V role is installed on both. There is a virtual machine (VM) running Microsoft Windows Server 2012 R2. The VM is called VM1 and is hosted on Server1. Hyper-V Replica is configured for VM1. A new Virtual Hard Disk (VHD) is created and attached to VM1. You are required to make sure that the new VHD file created replicates as part of the Hyper-V Replica. What will be your next step of action?

You are working for a company managing a server running Microsoft Windows Server 2012 R2. The server is called Serverl and the server has the Domain Name System (DNS) role installed. There are 16 subnets in the company’s network and the network mask is 255.255.255.128. There is a server hosting a third-party application with each subnet. You create 16 A records named acct.example.com for each application server. You want the IP address of the server that is on the same subnet as the client to be returned by the Serverl. Identify the command you should run.

You work for an organization that has an Active Directory Domain Services (AD DS) domain. The domain is called corp.local for which you work as an administrator. Serverl is a server that runs Windows Server 2012 R2. A Domain Name System (DNS) role is installed in Serverl. The server hosts a secondary zone for corp.local. You are required to make sure Serverl is secure it does not contact other DNS servers to resolve names. What step would you take?

Your company’s network has a Network Load Balancing (NLB) cluster with four nodes. There is a single network adaptor with each node. The company’s network has remote users accessing files and thus the cluster is configured so the VPN traffic coming in for file shares can be handled. Microsoft Windows Server 2012 R2 is run on all the cluster servers. You need to support a multicast application. Load balancing of the application across four nodes is a must. You are required to make sure switch ports in the cluster are the only ones receiving multicast traffic. What would be you step of action?

Awake and Run is a company for which you are working as an administrator. Your company’s network is configured as an Active Directory Domain Services (AD DS) forest. The AD DS forest has three domains and numerous different office locations. The location that you are working from consists of two domain controllers. Both the DCs are running Server Core installations of Windows Server 2012 R2. A company named ABC Bus is acquired by Awake and Run. Users in both the forests must have access to the forest other than their own company’s. It is planned to migrate users from the ABC Bus forest to domains in the Awake and Run forest in a gradual manner. Resources access must not change during migration. You need to establish the trust working from your location. What would be your step of action?

A company you work for is going through a merger with another company. Both the companies have an Active Directory Domain Services forest each with configuration at Windows Server 2012 R2 forest functional level. It is required from you to set up a forest trust between both the companies’ AD DS forests. Forests for both organizations are fully operational right now. Each forest is configured with Active Directory-integrated Domain Name System (DNS) servers authoritative for that forest only. There is no shared root DNS server between the two companies. You are facing an error that says “Partner Forest Not Found” as you attempt to create a forest trust from yours to the partner’s forest. Keeping the DNS records as secure as possible and trying to keep the administrative costs to the minimum, you have to solve this issue. What can you suggest here?

Your company has an Active Directory domain. The domain consists of six sites and two domain controllers in each site. Windows Server 2012 R2 is run on all the DCs. There are changes made to multiple Group Policy objects (GPOs) in SiteA. It is found SiteC and SiteD aren’t don’t have the same settings applied. If you want to know if the GPOs have been replicated to all domain controllers in the domain, what would be the best suitable option here?

ABC Bus is a company having a single Active Directory Domain Services (AD DS) domain. The domain is called abcbus.com. Windows Server 2012 R2 is run on all domain controllers. One of the divisions in ABC Bus is dedicated to medical training. For users who are getting medical training should be using accounts having @meddev.com. User accounts for trainers who perform medical training should have an @meddev.com suffix. You need to apply this as early as possible, keeping in mind the administrative cost is kept to a minimum. What will be your next step of action?

You want to host a Line of Business application for which APPCLUSTER1, a cluster on servers running Microsoft Windows Server 2012 R2 is about to be implemented. Your hardware and software configuration must be on-point to expect Microsoft support if required. MgmtSry is not a member of APPCLUSTER1. MgmtSry is logged on and PowerShell console is opened. Identify the command you should use.

FS1 is a member server in an Active Directory Domain Services (AD DS) domain. FS1 runs Microsoft Windows Server 2012 R2. A storage tier virtual hard disk (VHD) is included in the FS1. The SSD storage tier capacity is planned to be increased. Additional unassigned capacity is available. Can you identify the Powershell cmdlet to be used keeping in mind the administrative costs must be kept to minimum?

You work for a company managing their servers. The company has four servers running Microsoft Windows Server 2012 R2. All servers have identical hardware and local Serial Attached SCSI (SAS) disks. A new Hyper-V failover cluster named Clusterl is being prepared as a part of which all four servers are being configured. Your company asks you to prepare the backup for virtual machines (VMs) hosted on Clusterl. You need to recommend a cluster configuration so VMs are available in case one of the servers fails. What would be your recommendation?