Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains a DNS server named Server1. Server1 hosts a DNS zone named fabrikam.com that was signed by DNSSEC.

You need to ensure that all the member servers in the domain perform DNSSEC validation for the fabrikam.com namespace.

What should you do?

Lösung einblenden Lösung ausblenden

HOTSPOT

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.

The domain contains a server named Server1 that has the DFS Namespaces role service installed.

Server! hosts a domain-based Distributed File System (DFS) Namespace named Files.

The domain contains a tile server named Server2. Seiver2 contains a shared folder named Share1.

Share1 contains a subfolder named Folder 1.

In the Files namespace, you create a folder named Folder! that has a target of \Server2.contoso.comShare1Folder1.

You need to configure a logon script that will map drive letter M to Folder1. The solution must use the path of the DFS Namespace.

How should you complete the command to map the drive letter? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Lösung einblenden Lösung ausblenden

Richtige Antwort:

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.

You need to identify which server is the PDC emulator for the domain.

Solution: From Active Directory Sites and Services, you right-click Default-First-Site-Name in the console tree, and then select Properties.

Does this meet the goal?

Lösung einblenden Lösung ausblenden

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.

The domain contains two servers named Server1 and Server2.

Server1 contains a disk named Disk2. Disk2 contains a folder named UserData. UserData is shared to the Domain Users group. Disk2 is configured for deduplication. Server1 is protected by using Azure Backup.

Server1 fails.

You connect Disk2 to Server2.

You need to ensure that you can access all the files on Disk2 as quickly as possible.

What should you do?

Lösung einblenden Lösung ausblenden

DRAG DROP

Your network contains a single domain Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains a single Active Directory site.

You plan to deploy a read only domain controller (RODC) to a new datacenter on a server named Server1. A user named User1 is a member of the local Administrators group on Server1.

You need to recommend a deployment plan that meets the following requirements:

Ensures that a user named User1 can perform the RODC installation on Server1

Ensures that you can control the AD DS replication schedule to the Server1

Ensures that Server1 is in a new site named RemoteSite1 Uses the principle of least privilege

Which three actions should you recommend performing in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Lösung einblenden Lösung ausblenden

Richtige Antwort:

Explanation:

Box 1.

We need to create a site and subnet for the remote site. The new site will be added to the Default IP Site Link so we don’t need to create a new site link. You configure the replication schedule on the site link.

Box 2.

When we pre-create an RODC account, we can specify who is allowed to attach the server to the prestaged account. This means that the User1 does not need to be added to the Domain Admins group.

Box3.

User1 can connect the RODC to the prestaged account by running the AD DS installation wizard.

Reference: https://mehic.se/2018/01/02/how-to-install-and-configure-read-only-domain-controller-rodc-2016/

HOTSPOT

You have an Azure subscription that contains a virtual network named VNet1. Vnet1 contains three subnets named Subnet1, Subnet2, and Subnet3.

You deploy a virtual machine that has the following settings:

• Name:VM1

• Subnet: Subnet2

• Network interface name: NIC1

• Operating system: Windows Server 2022

You need to ensure that VM1 can route traffic between Subnet1 and Subnet3. The solution must minimize administrative effort.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Lösung einblenden Lösung ausblenden

Richtige Antwort:

HOTSPOT

You have a server named Served that runs Windows Server and has the Hyper-V server role installed.

You build Just Enough Administration (JEA) role capabilities and session configuration files.

You need to limit which Hyper-V module cmdlets helpdesk users can use when administering Server1 remotely.

How should you complete the PowerShell command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Lösung einblenden Lösung ausblenden

Richtige Antwort:

HOTSPOT

You have an Azure subscription and a computer named Computed that runs Windows 11.

From the Azure portal, you deploy a virtual machine named VM1 that runs Windows Server. You configure VM1 to use the default settings.

You need to ensure that you can connect to VM1 by using PowerShell remoting.

Which cmdlet should you run, and what should you use to run the cmdlet? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Lösung einblenden Lösung ausblenden

Richtige Antwort:

SIMULATION

Task 5

You have an application that is copied to a folder named C:app on SRV1. C:app also contains also a Dockerfile for the app.

On SRV1. you need to create a container image for the application by using the Dockerfile. The container image mutt be named app1.

Lösung einblenden Lösung ausblenden

Richtige Antwort:

Explore

To create a container image named app1 for your application using the Dockerfile in the C:app directory on SRV1, follow these steps:

Step 1: Open PowerShell or Command Prompt First, open PowerShell or Command Prompt on SRV1.

Step 2: Navigate to the Application Directory Change to the directory where your application and

Dockerfile are located:

cd C:app

Step 3: Build the Container Image Use the docker build command to create the container image. The

-t flag tags the image with the name app1:

docker build -t app1.

The period. at the end of the command tells Docker to use the Dockerfile in the current directory.

Step 4: Verify the Image Creation After the build process completes, verify that the image app1 has been created successfully by listing all images:

docker images

You should see app1 in the list of images.

Step 5: Use the Image Now, you can use the image app1 to run containers or push it to a container registry if needed.

By following these steps, you’ll have created a Docker container image named app1 using the Dockerfile located in C:app on SRV11. Ensure that Docker is installed on SRV1 and that you have the necessary permissions to execute these commands.

HOTSPOT

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com.

The domain contains the users shown in the following table.

The domain has the Group Policy Objects (GPOs) shown in the following table.

The GPOs are configured to map a drive named H as shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Lösung einblenden Lösung ausblenden

Richtige Antwort: