A. Configure client computers in the Contoso forest to use the Tailspin Toys DNS server as the alternate DNS server.
B. Create a new conditional forwarder and store it in Active Directory. Replicate the new conditional forwarder to all DNS servers in the Contoso forest.
C. Create a new application directory partition in the Contoso forest. Enlist the directory partition for all DNS servers.
D. Create a new host (A) record in the GlobalNames folder on one of the DNS servers in the Contoso forest. Configure the host (A) record by using the Tailspin Toys domain name and the IP address of the DNS server in the Tailspin Toys forest.

A.Configure all access points as RADIUS clients to the Remediation Servers.
B.Configure all access points as RADIUS clients to the Network Policy Server （NPS）.
C.Create a Network Policy that defines Remote Access Server as a network connection method.
D.Create a Network Policy that specifies EAP-TLS as the only available authentication method.

A.Create a Group Policy object （GPO） that enables Security Center and link the policy to the domain.
B.Create a Group Policy object （GPO） that enables Security Center and link the policy to the Domain Controllers organizational unit （OU）.
C.Create a Group Policy object （GPO） and set the Require trusted path for credential entry option to Enabled. Link the policy to the domain.
D.Create a Group Policy object （GPO） and set the Require trusted path for credential entry option to Enabled. Link the policy to the Domain Controllers organizational unit （OU）.

A. Disable the root hints.
B. Enable BIND secondaries.
C. Configure a forwarder to the caching DNS server.
D. Configure a GlobalNames host (A) record for the hostname of the caching DNS server.

A.Enable automatic updates on each client.
B.Enable the Security Center on each client.
C.Quarantine clients that do not have all available security updates installed.
D.Disconnect the connection until the required updates are installed.

A. Enable forwarding to your ISPs DNS servers.
B. Disable the root hints on the DNS server.
C. Disable the netmask ordering option on the DNS server.
D. Configure Reverse Lookup Zones for the IP subnets on the network.

A.Apply an IPsec NAP policy.
B.Configure a NAP policy for 802.1X wireless connections.
C.Configure VPN connections to use MS-CHAP v2 authentication.
D.Restrict Dynamic Host Configuration Protocol （DHCP） clients by using NAP

A.Windows Deployment Services server role and Deployment Server role service.
B.Windows Deployment Services server role and Transport role Service.
C.Network Policy and Access Services server role and Routing and Remote Access Services role service.
D.Network Policy and Access Services server role and Host Credential Authorization Protocol role.

A. Restart the IPsec Policy Agent service on Server1.
B. Assign the Client (Respond Only) IPsec policy to Server1.
C. Assign the Server (Request Security) IPsec policy to Server1.
D. Assign the Client (Respond Only) IPsec policy to all client computers.

A.Add Group1 to the RAS and IAS Servers group.
B.Add Group1 to the Network Configuration Operators group.
C.Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 1.
D.Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 3.

A. From the Services snap-in, disable the IP Helper.
B. From the Services snap-in, disable the Netlogon service.
C. From Windows Firewall, enable the Block all connections option on the Public Profile.
D. From Windows Firewall, enable the Block all connections option on the Domain Profile.