Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
In this section, you"™ll see one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem, and you must determine whether the solution meets the stated goals. Any of the solutions might solve the problem. It is also possible that none of the solutions solve the problem.
Once you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. All client computers run Windows 10.
On Server1, you have the following zone configuration.
Answer : B
Explanation:
The Add-DnsServerTrustAnchor command adds a trust anchor to a DNS server. A trust anchor (or trust "point") is a public cryptographic key for a signed zone.
Trust anchors must be configured on every nonauthoritative DNS server that will attempt to validate DNS data. Trust Anchors have no direct relation to DSSEC validation.
References:
https://docs.microsoft.com/en-us/powershell/module/dnsserver/add-dnsservertrustanchor?view=win10-ps https://technet.microsoft.com/en-us/library/dn593672(v=ws.11).aspx
Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. All client computers run Windows 10.
On Server1, you have the following zone configuration
Answer : B
Explanation:
Example: Export a trust anchor to a file share
This command exports the trust anchor (DS record) for Contoso.com to a file share. A DNS administrator runs this command from the DNS server that hosts the zone Contoso.com and specifies that the zone signing key uses the SHA-1 algorithm to create the DS record.
PS C:\> Export-DnsServerDnsSecPublicKey -ComputerName "DNSDC1.Contoso.com" -ZoneName "Contoso.com" -Path "\\MyDNSKeyShare\keys" -PassThru -
DigestType "Sha1"
Your Network contains one Active Directory domain named contoso.com.
You pilot DirectAccess on the network.
During the pilot deployment, you enable DirectAccess only for a group Contoso\Test Computers.
Once the pilot is complete, you need to enable DirectAccess for all the client computers in the domain.
What should you do?
Answer : D
You have a server named Server1.
You enable BitLocker Drive Encryption (BitLocker) on Server1.
You need to change the password for the Trusted Platform Module (TPM) chip.
What should you run on Server1?
Answer : B
https://technet.microsoft.com/en-us/library/jj603118(v=wps.630).aspx
You have two servers named Server1 and Server2. A firewall exists between Server1 and Server2.
Both servers run Windows Server Update Services (WSUS). Server1 downloads updates from Microsoft update.
Server2 must synchronize updates from Server1.
Which port should to open on the firewall?
Answer : D
Explanation -
On WSUS 6.2 and later (at least Windows Server 2012), port 8530 for HTTP and 8531 for HTTPS
References:
https://technet.microsoft.com/en-us/library/hh852346(v=ws.11).aspx
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com.
You need to identify which server is the schema master.
Solution: You open Active Directory Users and Computers, right-click contoso.com in the console tree, and then click Operations Master.
Does this meet the goal?
Answer : B
Explanation:
This solution only shows the domain FSMO roles, not the forest FSMO roles.
References:
https://blogs.technet.microsoft.com/mempson/2007/11/08/how-to-find-out-who-has-your-fsmo-roles/
This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After your answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com.
You need to identify which server is the schema master.
Solution: From a command prompt, you run netdom query fsmo.
Does this meet the goal?
Answer : A
Explanation:
Windows PowerShell -
Copyright (C) 2016 Microsoft Corporation. All rights reserved.
PS C:\Windows\system32> netdom query fsmo
Schema master dc10.contoso.com
Domain naming master dc10.contoso.com
PDC dc10.contoso.com
RID pool manager dc10.contoso.com
Infrastructure master dc10.contoso.com
The command completed successfully.
References:
https://blogs.technet.microsoft.com/mempson/2007/11/08/how-to-find-out-who-has-your-fsmo-roles/
This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After your answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com.
You need to identify which server is the schema master.
Solution: From Windows PowerShell, you run Get-ADDomainController -Discover -Service 2.
Does this meet the goal?
Answer : B
Explanation:
You have a server named Server1 that runs Windows Server 2016. The Docker daemon runs on Server1.
You need to configure the Docker daemon to accept connections only on TCP port 64500.
What should you do?
Answer : D
Explanation:
The preferred method for configuring the Docker Engine on Windows is using a configuration file. The configuration file can be found at 'C:\ProgramData\Docker
\config\daemon.json'. If this file does not already exist, it can be created.
Note: The Docker Engine can also be configured by modifying the Docker service using the sc config command.
References:
https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-docker/configure-docker-daemon
DRAG DROP -
You have a server named Server1 that runs Windows Server 2016.
On Server1 you use the Basic template to create a new Data Collector Set named CollectorSet1.
You need to configure data collection for the performance counters.
The configuration must support the following requirements:
✑ Data collection must run on a schedule.
✑ Data collection must stop if there is less than 1 GB of free disk space.
What should you modify to meet each requirement? To answer, drag the appropriate settings to the correct requirements. Each setting may be used once, more than once, or nor at all. You may need to drag the Split bar between panes or scroll to view content.
Select and Place:
Answer :
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After your answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com.
You need to identify which server is the schema master.
Solution: You open Active Directory Domains and Trusts, right-click Active Directory Domains and Trust in the console tree, and then click Operations Master.
Does this meet the goal?
Answer : B
Explanation:
This solution only shows the Domain Naming Master.
You have a server named Server1 that runs Windows Server 2016. The Docker daemon runs on Server1.
You need to ensure that members of a security group named Docker Administrators can administer Docker.
What should you do?
Answer : C
Explanation:
References:
https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-docker/configure-docker-daemon
HOTSPOT -
You have a server named Server1 that runs Windows Server 2016 server.
Server1 has the Docker daemon configured and has a container named Container1.
You need to mount the folder C:\Folder1 on Server1 to C:\ContainerFolder in Container1.
Which command should you run? To answer, select the appropriate options in the answer area.
Hot Area:
Answer :
You have a Hyper-V host that runs Windows Server 2016. The host contains a virtual machine named VM1. VM1 has resource metering enabled.
You need to use resource metering to track the amount of network traffic that VM1 sends to the 10.0.0.0/8 network.
Which cmdlet should you run?
Answer : C
Explanation:
References:
https://technet.microsoft.com/itpro/powershell/windows/hyper-v/add-vmnetworkadapteracl
DRAG DROP -
You have a physical server named Server1 that runs Windows Server 2016. Server1 is a Hyper-V host.
On Server1, you create a virtual machine named VM1 that runs Windows Server 2016.
You plan to install the Hyper-V server role on VM1.
You need to ensure that you can configure VM1 to host virtual machines.
How should you compete the Windows PowerShell script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Select and Place:
Answer :
Explanation:
Before you install Hyper-V on the virtual machine , you must provide its virtual processor with access to the virtualization technology on the physical computer
Set-VMProcessor -VMName VM1 -ExposeVirtualizationExtensions $true -Count 2 on the memory page , disable Dynamic Memory
Set-VMMemory -VMName VM1 -DynamicMemoryEnabled $false