NEW QUESTION 1
Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Your network contains an Active Directory domain named contoso.com. The functional level of the domain is Windows Server 2012.
The network uses an address space of 192.168.0.0/16 and contains multiple subnets. The network is not connected to the Internet.
The domain contains three servers configured as shown in the following table.

Client computers obtain TCP/IP settings from Server3.
You add a second network adapter to Server2. You connect the new network adapter to the Internet. You install the Routing role service on Server2.
Server1 has four DNS zones configured as shown in the following table.

You need to ensure that when a record is added dynamically to fabrikam.com, only the computer that created the record can modify the record. The solution must allow administrators to modify all of the records in fabrikam.com.
What should you do?

• A. Change fabrikam.com to an Active Directory-integrated zone.
• B. Raise the functional level of the domain.
• C. Modify the security settings of the Fabrikam.com.dns file.
• D. Modify the Start of Authority (SOA) settings of fabrikam.com

Answer: A

Explanation: https://technet.microsoft.com/en-us/library/cc753751(v=ws.11).aspx

NEW QUESTION 2
Scenario:
You are a network administrator for a company named Contoso,Ltd. The network is configured as shown in the exhibit.

You install the Remote Access server role on Server2. Server2 has the following configured.
*Network address translation (NAT)
*The DHCP Server server role
The Security Policy of Contoso states that only TCP ports 80 and 443 are allowed from the internet to server2 You identify the following requirements:
* Add 28 devices to subnet2 for a temporary project.
* Configure Server2 to accept VPN connections from the internet.
* Ensure that devices on Subnet2 obtain TCP/IP settings from DHCP on Server2.
End of Scenario:
You need to identify which subnet mask you must use for subnet2. The solution must minimize the number of available IP addresses on Subnet2.
What subnet mask should you identify? To answer, select the appropriate options in the answer area.

Answer:

Explanation:

NEW QUESTION 3
You have an IP Filters Network Policy Server (NPS) template that is used by an NPS policy. The IP filters are configured as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 4
You have two Hyper-V hosts named Server1 and Server2 that run Windows Server 2021. Server1 and Server2 are connected to the same network.
On Server1 and Server2, you create an external network switch named Switch1. You have the virtual machine shown in the following table.

All three virtual machines are connected to Switch1.
You need to prevent applications in VM3 from being able to capture network traffic from VM1 or VM2. The solution must ensure that VM1 retains network connectivity.
What should you do?

• A. Configure network virtualization for VM1 and VM2.
• B. Modify the subnet mask of VM1 and VM2.
• C. On Server2, configure the VLAN ID setting of Switch1.
• D. On Server2, create an external switch and connect VM3 to the switch.

Answer: A

Explanation: https://blogs.technet.microsoft.com/networking/2021/10/26/network-virtualization-with-ws2021-sdn/

NEW QUESTION 5
Your network contains an Active Directory domain named contoso.com. The domain contains a Hyper-V host named Server1 that runs Windows Server 2021.
Server1 hosts four machines that are members of the domains. The virtual machines are configured as sown in the following table.

Which virtual machines can you manage by using PowerShell Direct?

• A. Only VM2
• B. VM1, VM2, and VM4
• C. only VM4
• D. VM1, VM2, and VM3

Answer: B

NEW QUESTION 6
Your network contains an Active Directory domain named contoso.com. The domain contains a domain-based Distributed File System (DFS) namespace named Namespace1 that has access-based enumeration enabled. Namespace1 has a folder named Folder1. Folder1 has a target of \Server1Folder1.
The permissions for folder1 are configured as shown in the following table.

Access-based enumeration is disabled for the share of Folder1.
You need to ensure that both User1 and User2 can see Folder1 When they access\Contoso.comNameSpace1. What should you do?

• A. Disable access-based enumeration for Namespace1.
• B. Run the Set-DfsnFolder cmdlet.
• C. Run the Set-DfsFolderTarget cmdlet.
• D. Deny User1 the read DFS permission to Folder1.

Answer: A

NEW QUESTION 7
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1 that runs Windows Server 2021 and has the DNS Server role installed. Automatic scavenging of state records is enabled and the scavenging period is set to 10 days.
All client computers dynamically register their names in the contoso.com DNS zone on Server1.
You discover that the names of multiple client computers that were removed from the network several weeks ago can still be resolved.
You need to configure Server1 to automatically remove the records of the client computers that have been offline for more than 10 days.
Solution: You set the Time to live (TTL) value of all of the records in the zone. Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation: https://technet.microsoft.com/en-us/library/cc958972.aspx

NEW QUESTION 8
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. All client computers run Windows 10.
On Server1, you have the following zone configuration.

You have the following subnets defined on Server1.

You need to prevent Server1 from resolving queries from DNS clients located on Subnet4. Server1 must resolve queries from all other DNS clients.
Solution: From Windows PowerShell on Server1, you run the Add-DnsServerQueryResolutionPolicy cmdlet. Does this meet the goal?

• A. Yes
• B. No

Answer: A

Explanation: https://technet.microsoft.com/en-us/itpro/powershell/windows/dns-server/add-dnsserverqueryresolutionpolicy

NEW QUESTION 9
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solutions, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Server1 that runs Windows Server 2021. Server1 is configured as a VPN server.
Server1 is configured to allow domain users to establish VPN connections from 06:00 to 18:00 everyday of the week.
You need to ensure that domain users can establish VPN connections only between Monday and Friday.
Solution: From Routing and Remote Access, You configure the Properties of Server1. Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 10
Your network contains an Active Directory domain named contoso.com. The domain contains three servers named Server1, Server4, and Server5 that run Windows Server 2021.
Distributed File System (DFS) is deployed as shown in the DFS Configuration exhibit. (Click the Exhibit button.)

You configure the replication schedule for \Contoso.comNamespace1Folder1 as shown in the Replication Schedule exhibit. (Click the Exhibit button.)

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphics.

Answer:

Explanation: The Replicated Folder (Folder1) refers to the name of the DFS target, not the name of the local folder. It does not matter if the local folder name does not match the name of the DFS target. Therefore, replication will work as normal according to the configured schedule.

NEW QUESTION 11
Scenario:
You are a network administrator for a company named Contoso,Ltd. The network is configured as shown in the exhibit.

You install the Remote Access server role on Server2. Server2 has the following configured.
*Network address translation (NAT)
*The DHCP Server server role
The Security Policy of Contoso states that only TCP ports 80 and 443 are allowed from the internet to server2 You identify the following requirements:
* Add 28 devices to subnet2 for a temporary project.
* Configure Server2 to accept VPN connections from the internet.
* Ensure that devices on Subnet2 obtain TCP/IP settings from DHCP on Server2.
End of Scenario:
What should you do to meet the DHCP connectivity requirement for Subnet2?

• A. Install the Routing role service on Server2.
• B. Install the IP address Management (IPAM) Server feature on Server2.
• C. Install the Routing role service on Server1.
• D. Install the DHCP Server server role on Server1.

Answer: C

NEW QUESTION 12
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
Refer to exhibit:

Server1 has two virtual machines named VM1 and VM that run Windows Server 2021. VM1 connects to Private VM2 has two network adapters.
You need to ensure that VM1 connects to the corporate network by using NAT.
Solution: You connect VM1 to Internal1. You run the New-NetNatIpAddress and the New-NetNat cmdlets on Server1. You configure VM1 to use VM2 as the default gateway.
Does this meet the goal?

• A. Yes
• B. No

Answer: A

NEW QUESTION 13
You are implementing IPv6 addressing for your company by using the following specifications:
The global address space is 2001:db8:1234.
The company has 100 locations worldwide.
Each location has up to 300 subnets.
64 bits will be used for hosts.
You need to identify how many bits to use for the locations and the subnets.
How many bits should you identify? To answer, drag the appropriate amounts to the correct targets. Each amount may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 14
You network contains an Active Directory named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2021.
Server1 has IP Address Management (IPAM) installed. Server2 has the DHCP Server role installed. The IPAM server retrieves data from Server2.
The domain has two users named User1 and User2 and a group named Group1. User1 is the only member of Group1.
Server1 has one IPAM access policy. You edit the access policy as shown in the Policy exhibit. (Click the Exhibit button.)

The DHCP scopes are configured as shown in the Scopes Exhibit. (Click the Exhibit button.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Answer:

Explanation: https://technet.microsoft.com/en-us/library/dn268500(v=ws.11).aspx

NEW QUESTION 15
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Server1 that has the Network Policy and Access Services server role installed. You create a Shared Secret Network Policy Server (NPS) template named Template1.
You need to view the shared secret string used for Template1.
Solution: From the Network Policy Server console, you export the configuration, and you view the exported XML file.
Does this meet the goal?

• A. Yes
• B. No

Answer: A

NEW QUESTION 16
You are implementing a secure network. The network contains a DHCP server named Server1 that runs Windows Server 2021.
You create a DHCP allow filter that contains all of the computers on the network that are authorized to receive IP addresses.
You discover that unauthorized computers can receive an IP address from Server1.
You need to ensure that only authorized computers can receive an IP address from Server1. Solution: You run the following command.
Set-DhcpServerv4FilterList -ComputerName Server1 -Allow False -Deny True Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation: References:
https://docs.microsoft.com/en-us/powershell/module/dhcpserver/add-dhcpserverv4filter?view=win10-ps

NEW QUESTION 17
Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Start of the repeated scenario
Your network contains an Active Directory domain named contoso.com. The functional level of the domain is Windows Server 2012.
The network uses an address space of 192.168.0.0/16 and contains multiple subnets. The network is not connected to the Internet.
The domain contains three servers configured as shown in the following table.

Client computers obtain TCP/IP settings from Server3.
You add a second network adapter to Server2. You connect the new network adapter to the Internet. You install the Routing role service on Server2.
Server1 has four DNS zones configured as shown in the following table.

End of the repeated scenario
You need to ensure that when computers query for records in tailspintoys.com, the query results are based on the subnet of the computer that generates the query.
What should you do?

• A. Enable DNS round robin.
• B. Configure DNS policies.
• C. Create zone delegation records.
• D. Modify the Priority settings of each resource record.

Answer: B

NEW QUESTION 18
You have a server named Server1 that runs Windows Server 2021. Server1 is a Hyper-V host.
You have two network adapter cards on Server1 that are Remote Direct Memory Access (RDMA)-capable. You need to aggregate the bandwidth of the network adapter cards for a virtual machine on Server1. The
solution must ensure that the virtual machine can use the RDMA capabilities of the network adapter cards.
Which command should you run first? To answer, select the appropriate options in the answer area.

Answer:

Explanation: https://technet.microsoft.com/en-us/library/mt403349.aspx