NEW QUESTION 1
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You network contains an Active Directory domain named contoso.com. The domain contains a DHCP server named Server1. All client computers run Windows 10 and are configured as DHCP clients.
Your helpdesk received calls today from users who failed to access the network from their Windows 10 computer.
You open the DHCP console as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that all of the Windows 10 computers can receive a DHCP lease. Solution: You activate the scope.
Does this meet the goal?

• A. Yes
• B. No

Answer: A

Explanation: https://technet.microsoft.com/en-us/library/dd183581(v=ws.10).aspx

NEW QUESTION 2
Your company has a testing environment that contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2021. Server1 has IP Address Management (IPAM) installed. IPAM has the following configuration.

The IPAM Overview page from Server Manager is shown in the IPAM Overview exhibit. (Click the Exhibit button.)

The group policy configurations are shown in the GPO exhibit. (Click the Exhibit button.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Answer:

Explanation:

NEW QUESTION 3
You have an Active Directory forest that contains 30 servers and 6,000 Client computers. You deploy a new DHCP server that runs Windows Server 2021. You need to retrieve the list of the authorized DHCP servers. Which command should you run?

• A. Get-DHCPServerDatabase
• B. Netstat -p IP -s -a
• C. Get-DHCPServerInDc
• D. Show-ADAuthenticationPolicyExpression -AllowedToAuthenticateTo

Answer: C

Explanation: To get all authorized DHCP servers in Active Directory, you can use the following PowerShell cmdlet:
Get-DhcpServerinDC

NEW QUESTION 4
Note: This question is part of a series of questions that use the same scenario. For your convenience, the scenario is repeated in each question. Each question presents a different goal and answer choices, but the text of the scenario is exactly the same in each question in this series.
Your network contains an Active Directory domain named contoso.com. The functional level of the domain is Windows Server 2012.
The network uses an address space of 192.168.0.0/16 and contains multiple subnets.
The network is not connected to the Internet.
The domain contains three servers configured as shown in the following table.

Client computers obtain TCP/IP settings from Server3.
You add a second network adapter to Server2. You connect the new network adapter to the Internet. You install the Routing role service on Server2.
Server1 has four DNS zones configured as shown in the following table.

You need to create a zone to ensure that Server1 can resolve single-label names. What should you name the zone on Server1?

• A. . (root)
• B. WINS
• C. NetBIOS
• D. GlobalNames

Answer: D

Explanation: https://technet.microsoft.com/en-us/library/cc816610(v=ws.10).aspx

NEW QUESTION 5
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server named Server1. All client computers run Windows 10.
On Server1, you have the following zone configuration.

You need to ensure that all of the client computers in the domain perform DNSSEC validation for the fabrikam.com namespace.
Solution: From a Group Policy object (GPO) in the domain, you modify the Network List Manager Policies. Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation: Network List Manager Policies are security settings that you can use to configure different aspects of how networks are listed and displayed on one computer or on many computers.
Network List Manager Policies are not related to DNSSEC.
References: https://technet.microsoft.com/en-us/library/jj966256(v=ws.11).aspx

NEW QUESTION 6
You have a DirectAccess Server that is accessible by using the name directaccess.fabrikam.com. On the DirectAccess server, you install a new server certificate that has a subject name of
directaccess.contoso.com, and then you configure DNS records for directaccess.contoso.com
You need to change the endpoint name for DirectAccess to directaccess.contoso.com
What command should you run? To answer, select the appropriate options in the answer area.

Answer:

Explanation:

NEW QUESTION 7
Your network contains an Active Directory domain named contoso.com. The Functional level of the forest and the domain is Windows Server 2008 R2. All servers in the domain run Windows server 2021 standard. The domain contains 100 client computers that run either Windows 8.1 or Windows 10.
The domain contains nine servers that are configured as shown in the following table.

Answer:

Explanation:

NEW QUESTION 8
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solutions, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Server1 that runs Windows Server 2021. Server1 is configured as a VPN server. Server1 is configured to allow domain users to establish VPN connections from 06:00 to 18:00 everyday of the week.
You need to ensure that domain users can establish VPN connections only between Monday and Friday. Solution: From Network Policy Server, you modify the Network Policies on Server1.
Does this meet the goal?

• A. Yes
• B. No

Answer: A

NEW QUESTION 9
Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2021.
Server1 has IP Address Management (IPAM) installed. Server2 has Microsoft System Center 2021 Virtual Machine Manager (VMM) installed.
You need to integrate IPAM and VMM.
Which types of objects should you create on each server? To answer, drag the appropriate object types to the correct servers. Each object type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation: References:
https://technet.microsoft.com/en-us/library/dn783349(v=ws.11).aspx

NEW QUESTION 10
You have multiple servers that run Windows Server 2021 and are configured as VPN servers. You deploy a server named NPS1 that has Network Policy Server (NPS) installed.
You need to configure NPS1 to accept authentication requests from the VPN servers. What should you configure on NPS1?

• A. From RADIUS Clients and Servers, add a remote RADIUS server group.
• B. From Policies, add a connection request policy.
• C. From Policies, add a network policy.
• D. From RADIUS Clients and Servers, add RADIUS clients.

Answer: D

NEW QUESTION 11
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are a network administrator for a company named Contoso, Ltd. The network is configured as shown in the exhibit.

You install the Remote Access server role on Server2. Server2 has the following configured:
Network address translation (NAT)
The DHCP Server server role
The Security Policy of Contoso states that only TCP ports 80 and 443 are allowed from the internet to Server2. You identify the following requirements:
Add 28 devices to subnet2 for a temporary project.
Configure Server2 to accept VPN connections from the internet.
Ensure that devices on Subnet2 obtain TCP/IP settings from DHCP on Server2.
You deploy a computer named ComputerA to Subnet1. ComputerA has an IP address of 10.10.0.129 and a subnet mask of 255.255.255.0.
You plan to use ComputerA to access the resources on Web1.
Which IP address should you use as the default gateway on ComputerA?

• A. 10.10.1.1
• B. 10.10.0.224
• C. 131.107.0.223
• D. 172.16.128.193

Answer: B

NEW QUESTION 12
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an IP Address Management (IPAM) server named IPAM1 that runs Windows Server 2021. IPAM1 manages all of the DHCP servers on your network.
You are troubleshooting an issue for a client that fails to receive an IP address from DHCP.
You need to ensure that from IPAM1, you can view all of the event data for the DHCP leases from the last 24 hours.
Solution: From Task Scheduler, you run the MicrosoftWindowsIPAMAudit task. Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 13
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solutions, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Server1 that runs Windows Server 2021. Server1 is configured as a VPN server. Server1 is configured to allow domain users to establish VPN connections from 06:00 to 18:00 everyday of the week.
You need to ensure that domain users can establish VPN connections only between Monday and Friday. Solution: From Active Directory Users and Computers, you modify the Dial-in Properties of the user accounts. Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 14
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com
You need to create a Nano Server image named Nano1 that will be used as a virtualization host. The windows server 2021 source files are located in drive D.
Solution: You run the following cmdlet.
New-NanoServerImage -Edition Datacenter -DeploymentType Host -Package Microsoft-NanoServerCompute-Package -MediaPath ‘D:’ -TargetPath C:Nano1Nano1.wim -ComputerName Nano1 -DomainName Contoso.com Does this meet the goal?

• A. Yes
• B. NO

Answer: A

NEW QUESTION 15
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com
You need to create a Nano Server image named Nano1 that will be used as a virtualization host. The windows server 2021 source files are located in drive D.
Solution: You run the following cmdlet.
New-NanoServerImage –Edition Datacenter –DeploymentType Host –Package
Microsoft-NanoServerSCVMM-Package –MediaPath ‘D: -TargetPath C:nano1Nano1.wim
–ComputerName Nano1 – Domainname Contoso.com
Does this meet the goal?

• A. Yes
• B. NO

Answer: B

NEW QUESTION 16
You have a remote access server named Server1 that runs Windows Server 2021. Server1 has DirectAccess enabled.
A firewall connects Server1 to the Internet.
You need to configure the firewall to ensure that DirectAccess clients can connect to Server1 by using Teredo, 6to4, and IP-HTTPS.
Which inbound port should be open on the firewall for each transition technology?
To answer, drag the appropriate ports and protocols to the correct transition technologies. Each port and protocol may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 17
You are deploying a small network that has 30 client computers. The network uses the 192.168.1.0/24 address space. All computers obtain IP configurations from a DHCP server named Server1.
You install a server named Server2 that runs Windows Server 2021. Server2 has two network adapters named internal and Internet. Internet connects to an Internet service provider (ISP) and obtains the 131.107.0.10 IP address. Internal connects to the internal network and is configured to use the 192.168.1.250 IP address.
You need to provide Internet connectivity for the client computers. What should you do?

• A. On Server2, select the Internet and Internal network adapters and bridge the connection
• B. From the DHCP console on Server1, authorize Server2.
• C. On Server1, stop the DHCP serve
• D. On the Internal network adapter on Server 2, enable Internet Connection Sharing (ICS).
• E. On Server2 run the New-NetNat –Name NAT1 -InternalIPInterfaceAddressPrefix 192.168.1.0/24 cmdle
• F. Configure Server1 to provide the 003 Router option of 131.107.0.10.
• G. Install the Routing role service on Server2 and configure the NAT routing protoco
• H. Configure Server1 to provide the 003 Router option of 192.168.1.250.

Answer: C

NEW QUESTION 18
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Hyper-V host named Server1 that hosts a virtual machine named VM1. Server1 and VM1 run Windows Server 2021.
The settings for VM1 are configured as shown in the exhibit below.

You need to ensure that you can use the Copy-VMFile cmdlet on Server1 to copy files from VM1.
Solution: You start the Hyper-V Guest Service Interface service on VM1. Does this meet the goal?

• A. YES
• B. NO

Answer: B