SIMULATION

Task 8

You need to deploy a new primary DNS zone named fabrikam.com to DC1. The zone must be signed.

Reveal Solution Hide Solution

HOTSPOT

Your company has a main office and 10 branch offices that are connected by using WAN links. The network contains an Active Directory domain.

All users have laptops and regularly travel between offices.

You plan to implement BranchCache in the branch offices.

In each branch office, you install a server that runs Windows Server and the BranchCache feature.

You register the servers in Active Directory.

You need to configure the laptops to use the local BranchCache server automatically. The solution must minimize administrative effort.

Which two Group Policy settings should you configure? To answer, select the settings in the answer area. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

SIMULATION

Task 3

You need to run a container that uses the mcr.microsoft.com/windows/servercore/iis image on SRV1. Pott 60 on the container must be published to port 5001 on SRV1 and the container must run in the background.

Reveal Solution Hide Solution

You have a server named Server1 that hosts Windows containers. You plan to deploy an application that will have multiple containers. Each container will be You need to create a Docker network that supports the deployment of the application.

Which type of network should you create?

Reveal Solution Hide Solution

HOTSPOT

Your network contains two Active Directory Domain Services (AD DS) forests named contoso.com and fabrikam.com. A two-way forest trust exists between the forests. Each forest contains a single domain.

The domains contain the servers shown in the following table.

You need to configure resources based constrained delegation so that the users. In contoso.com can use Windows Admin Center on Server) to connect to Server?

How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

Explanation:

Reference:

https://docs.microsoft.com/en-us/windows-server/security/kerberos/kerberos-constrained-delegation-overview

https://docs.microsoft.com/en-us/powershell/module/activedirectory/set-adcomputer?view=windowsserver2022-ps

HOTSPOT

Your network contains an Active Directory Domain Services (AD DS) domain.

The domain contains the domain controllers shown in the following table.

You need to configure DC3 to be the authoritative time server for the domain.

Which operations master role should you transfer to DC3, and which console should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

DRAG DROP

You create a new Azure subscription.

You plan to deploy Azure Active Directory Domain Services (Azure AD DS) and Azure virtual machines.

You need to ensure that the virtual machines can join Azure AD DS.

Which three actions should perform in sequence? To answer, move the appropriate actions from the list of action of the answer area and arrange them in the correct order.

Reveal Solution Hide Solution

Correct Answer:

HOTSPOT

You have a Windows Server container host named Server1.

You start the containers on Server1 as shown in the following table.

You need to validate the status of ProcessA and ProcessC.

Where can you verify that ProcessA and ProcessC are in a running state? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains a server named Server1.

On Server 1, you install Windows Admin Center and use Windows Admin Center to remove BUILTlNUsers from the allowed groups.

Vou discover that all users can still sign in to Windows Admin Center.

Vou need to prevent unauthorized users from signing in to Windows Admin Center.

What should you do in Windows Admin Center?

Reveal Solution Hide Solution

You have servers that have the DNS Server role installed.

The servers are configured as shown in the following table.

All the client computers in the New York office use Server2 as the DNS server.

You need to configure name resolution in the New York office to meet the following requirements:

✑ Ensure that the client computers in New York can resolve names from contoso.com.

✑ Ensure that Server2 forwards all DNS queries for internet hosts to 131. 107.100.200.

The solution must NOT require modifications to Server1.

Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution