DRAG DROP

You have a server named Server1.

You plan to use Storage Spaces to expand the storage available to Server1. You attach eight physical disks to Server1. Four disks are HDDs and four are SSDs.

You need to create a volume on Server1 that will use the storage on all the new disks. The solution must provide the fastest read performance for frequently used files.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Lösung einblenden Lösung ausblenden

Richtige Antwort:

Explanation:

Reference:

https://redmondmag.com/articles/2018/07/31/storage-spaces-windows-server-2016-1.aspx

https://redmondmag.com/articles/2018/08/02/storage-spaces-windows-server-2016-2.aspx

HOTSPOT

Your network contains an Active Directory Domain Services (AD DS) domain named adatum.com.

The domain contains a server named Server1 and the users shown in the following table.

Server1 contains a folder named D:Folder1.

The advanced security settings for Folder1 are configured as shown in the Permissions exhibit. (Click the Permissions tab.)

Folder1 is shared by using the following configurations:

The share permissions for Share1 are shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Lösung einblenden Lösung ausblenden

Richtige Antwort:

Explanation:

To access files in a shared folder, you need to be granted permissions on the folder (NTFS permissions) AND permissions on the share. The most restrictive permission of the folder permissions and share permissions apply.

Box 1: Yes

Group1 has Read access to Folder1 and Change access to Share1. Therefore, User1 can read the files in Share1.

Box 2: No

Group3 has Full Control access to Share1. However, Group3 has no permissions configured Folder1.

Therefore, User3 cannot access the files in Share1.

Box 3: Yes

Group2 has write permission to Folder1. However, Group2 has no permission on Share1. Therefore, users in Group2 cannot access files in the shared folder.

Access Based Enumeration when enabled hides files and folders that users do not have permission to access. However, Access Based Enumeration is not enabled on Share1. This is indicated by the FolderEnumerationMode C Unrestricted setting. Therefore, the share will be visible to User2 even though User2 cannot access the shared folder.

You have an Azure Active Directory Domain Services (Azure AD DS) domain named contoso.com.

You need to provide an administrator with the ability to manage Group Policy Objects (GPOs). The solution must use the principle of least privilege.

To which group should you add the administrator?

Lösung einblenden Lösung ausblenden

HOTSPOT

Your on-premises network contains an Active Directory Domain Services (AD DS) domain. The domain contains the servers shown in the following table.

The domain controllers do NOT have internet connectivity.

You plan to implement Azure AD Password Protection for the domain.

You need to deploy Azure AD Password Protection agents.

The solution must meet the following requirements:

• All Azure AD Password Protection policies must be enforced.

• Agent updates must be applied automatically.

• Administrative effort must be minimized.

What should you do? To answer select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Lösung einblenden Lösung ausblenden

Richtige Antwort:

You need to ensure that VM3 meets the technical requirements.

What should you install first?

Lösung einblenden Lösung ausblenden

DRAG DROP

You have a server named Server1 that runs Windows Server and has the Active Directory Federation Services role installed.

You plan to deploy Web Application Proxy to a server named Server2.

You export the Active Directory Federation Services (AD FS) certificate from Server1.

Which actions should you perform on Server2 in sequence? To answer, drag the appropriate actions to the correct order. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTF: Each correct selection is worth one point.

Lösung einblenden Lösung ausblenden

Richtige Antwort:

You have a server named Server1 that runs Windows Server.

The disks on Server1 are configured as shown in the following exhibit.

You need to convert volume E to ReFS.

The solution must meet the following requirements:

• Preserve the existing data on volume E.

• Minimize administrative effort.

What should you do first?

Lösung einblenden Lösung ausblenden

Your network contains an Active Directory Domain Services (AD DS) domain.

The domain contains the offices shown in the following table.

You need to deploy a Network Policy Server (NPS) named NPS1 to enforce network access policies for all remote connections.

What is the minimum number of RADIUS clients that you should add to NPS1?

Lösung einblenden Lösung ausblenden

HOTSPOT

Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains a child domain named east.contoso.com.

in the contoso.com domain, you create two users named Admin1 and Admin2.

You need to ensure that the users can perform the following tasks:

• Admin1 can create and manage Active Directory sites.

• Admin2 can deploy domain controller to the easl.conloso.com domain.

The solution must use the principle of least privilege.

To which group should you add each user? To answer, select the appropriate options in the answer area. NOTE Each correct selection is worth one point.

Lösung einblenden Lösung ausblenden

Richtige Antwort:

Explanation:

Reference: https://docs.microsoft.com/en-us/windows-server/remote/remote-access/ras/multisite/configure/step-2-configure-the-multisite-infrastructure

Your network contains an Active Domain Services (AD DS) forest. The forest contains three domains.

Each domain contains 10 domain controllers.

You plan to store a DNS zone in a custom active Directory partition.

You need to create the Active Directory partition for the zone. The partition replicate to only four of the domain controllers.

What should you use?

Lösung einblenden Lösung ausblenden