NEW QUESTION 1
HOTSPOT
Your network contains an Active Directory forest. The forest contains two sites named Site1 and Site2. Site1 contains 10 domain controllers. Site1 and Site2 connect to each other by using a WAN link.
You run the Active Directory Domain Services Configuration Wizard as shown in the following graphic.

Server3 is the only server in Site2.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

Answer:

Explanation: Box1: stop and start the Active Directory Domain Services (AD DS) Box 2: Can log on if they have previously logged on.
By selectively caching credentials, RODCs address some of the challenges that enterprises can encounter in branch offices and perimeter networks (also known as DMZs) that may lack the physical security that is commonly found in datacenters and hub sites.

NEW QUESTION 2
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2021.
Server1 has IP Address Management (IPAM) installed. IPAM is configured to use the Group Policy based provisioning method. The prefix for the IPAM Group Policy objects (GPOs) is IP.
From Group Policy Management, you manually rename the IPAM GPOs to have a prefix of IPAM. You need to modify the GPO prefix used by IPAM.
What should you do?

• A. Click Configure server discovery in Server Manager.
• B. Run the Set-IpamConfiguration cmdlet.
• C. Run the Invoke-IpamGpoProvisioning cmdlet.
• D. Click Provision the IPAM server in Server Manage

Answer: B

Explanation: The Set-IpamConfiguration cmdlet modifies the configuration for the computer that runs the IPAM server.
The -GpoPrefix<String> parameter specifies the unique Group Policy object (GPO) prefix name that IPAM uses to create the group policy objects. Use this parameter only when the value of the ProvisioningMethod parameter is set to Automatic.
References:
https://technet.microsoft.com/en-us/library/jj590816.aspx

NEW QUESTION 3
HOTSPOT
You have an Active Directory domain named Contoso.com. The domain contains Hyper-V hosts named Server1 and Server2 that run Windows Server 2021. The Hyper-V hosts are configured to use NVGRE for network virtualization.
You have six virtual machines that are connected to an external switch. The virtual machines are configured as shown.

To which virtual machine or virtual machines can VM1 and VM3 connect? To answer, select the appropriate options in the answer area.

Answer:

Explanation: The GRE keys must match.
To separate the traffic between the two virtualized networks, the GRE headers on the tunneled packets include a GRE Key that provides a unique Virtual Subnet ID for each virtualized network. References:
https://blogs.technet.microsoft.com/keithmayer/2012/10/08/step-by-step-hyper-v-networkvirtualization- 31-days-of-favorite-features-in-winserv-2012-part-8-of-31/

NEW QUESTION 4
You have a server named Served that runs Windows Server 2021. Server1 will be used as a VPN server. You need to configure Server1 to support VPN Reconnect. Which VPN protocol should you use?

• A. PPTP
• B. L2TP
• C. SSTP
• D. lKEv2

Answer: D

Explanation: An IKEv2 VPN provides resilience to the VPN client when the client either moves from one wireless hotspot to another or switches from a wireless to a wired connection.
This ability is a requirement of VPN Reconnect

NEW QUESTION 5
HOTSPOT
Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2021.
Server1 has IP Address Management (IPAM) installed. Server2 has the DHCP Server role installed. The IPAM server retrieves data from Server2.
You create a domain user account named User1.
You need to ensure that User1 can use IPAM to manage DHCP.
Which command should you run on Server1? To answer, select the appropriate options in the answer area.

Answer:

Explanation:

NEW QUESTION 6
DRAG DROP
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2021.
You install IP Address Management (IPAM) on Server1.
You need to manually start discovery of servers that IPAM can manage in contoso.com.
Which three cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.

Answer:

Explanation: Step 1: Invoke-IpamServerProvisioning Choose a provisioning method
The Invoke-IpamGpoProvisioning cmdlet creates and links three group policies specified in the Domain parameter for provisioningrequired access settingson the server roles managed by the computer running the IP Address Management (IPAM) server.
Step 2: Add-IpamDiscoveryDomain Configure the scope of discovery
The Add-IpamDiscoveryDomain cmdlet adds an Active Directory discovery domain for an IP AddressManagement (IPAM) server. A discovery domain is a domain that IPAM searches to find infrastructure servers. An IPAM server uses the list of discovery domains to determine what type of servers to add. By default, IPAM discovers all domain controllers, Dynamic Host Configuration Protocol (DHCP) servers, and Domain Name System (DNS) servers.
Step 3: Start-ScheduledTask Start server discovery
To begin discovering servers on the network, click Start server discovery to launch the IPAM ServerDiscovery task or use the Start-ScheduledTask command.

NEW QUESTION 7
Your network contains three Hyper-V hosts. You add all of the hosts to a cluster.
You need to create highly available storage spaces that connect to directly attached storage on the hosts.
Which cmdlet should you use?

• A. Update-ClusterVirtualMachineConfiguration
• B. Enable-ClusterStorageSpacesDirect
• C. Set-StoragePool
• D. Add-ClusterDisk

Answer: B

Explanation: The Enable-ClusterStorageSpacesDirect cmdlet enables highly available Storage Spaces that use directly attached storage Storage Spaces Direct (S2D) on a cluster.

NEW QUESTION 8
You need to implement network virtualization.
On which object should you configure the virtual subnet ID?

• A. Virtual switch
• B. Hyper-V server
• C. VM
• D. Virtual network adapter

Answer: A

NEW QUESTION 9
You have a virtual machine named VM1 that runs Windows Server 2021, VM1 hosts a service that requires high network throughput.
VM1 has a virtual network adapter that connects to a Hyper-V switch named vSwitch1. vSwitch1 has one network adapter. The network adapter supports Remote Direct Memory Access (RDMA), the single root I/O virtualization (SR-IOV) interface, Quality of Service? (QoS), and Receive Side Scaling (RSS).
You need to ensure that the traffic from VM1 can be processed by multiple networking processors. Which Windows PowerShell command should you run on the host of VM1?

• A. Set-NetAdapterRss
• B. Set-NetAdapterRdma
• C. Set-NetAdapterQos
• D. Set-NetAdapterSriov

Answer: D

NEW QUESTION 10
You have a failover cluster named Cluster1.
A virtual machine named VM1 is a highly available virtual machine that runs on Cluster1. A custom application named App1 runs on VM1.
You need to configure monitoring on VM1. If App1 adds an error entry to the Application event log, VM1 should be automatically rebooted and moved to another cluster node.
Which tool should you use?

• A. Resource Monitor
• B. Failover Cluster Manager
• C. Server Manager
• D. Hyper-V Manager

Answer: B

Explanation: Do you have a large number of virtualized workloads in your cluster? Have you been looking for a solution that allows you to detect if any of the virtualized workloads in your cluster are behaving abnormally? Would you like the cluster service to take recovery actions when these workloads are in an unhealthy state? In Windows Server 2012/2021, there is a great new feature, in Failover Clustering called “VM Monitoring”, which does exactly that – it allows you monitor the health state of applications that are running within a virtual machine and then reports that to the host level so that it can take recovery actions.
VM Monitoring can be easily configured using the Failover Cluster Manager through the following steps:
References:
https://blogs.msdn.microsoft.com/clustering/2012/04/18/how-to-configure-vm-monitoring-inwindows- server-2012/

NEW QUESTION 11
You have a Hyper-V host named Server1 that runs Windows Server 2021. Server1 hosts a virtual machine named VM1 that runs Windows Server 2021.
On VM1, Dynamic Memory is disabled, MAC spoofing is enabled fen the virtual network adapter, and checkpoints are disabled.
You need to ensure that you can install the Hyper-V server role on VM1. What should you do?

• A. Shut down VM1 run the Set-VMProcessor cmdlet, and then start VM1.
• B. Disable Hyper-V integration services for VM1, and then restart VM1.
• C. Configure VM1 to use standard checkpoints.
• D. Shut down VM1, enable Dynamic Memory on VM1, and then start VM1.

Answer: A

NEW QUESTION 12
DRAG DROP
You have a file server named Server1 that runs Windows Server 2021.
You need to create a report that lists all of the sharp permissions assigned to the security principals on Server1.
How should you complete the command? To answer, drag the appropriate cmdlets to the correct targets. Each cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation: PS C:UsersUser1> Get-SmbShare Name ScopeName Path Description
---- --------- ---- -----------
ADMIN$ * C:Windows Remote Admin C$ * C: Default share
IPC$ * Remote IPC Users * C:Users
References: https://technet.microsoft.com/en-us/library/jj635704(v=wps.630).aspx PS C:UsersUser1> Get-SmbClientConfiguration ConnectionCountPerRssNetworkInterface : 4
DirectoryCacheEntriesMax : 16
DirectoryCacheEntrySizeMax : 65536
DirectoryCacheLifetime : 10 EnableBandwidthThrottling : True EnableByteRangeLockingOnReadOnlyFiles : True EnableLargeMtu : True
EnableMultiChannel : True DormantFileLimit : 1023 EnableSecuritySignature : True ExtendedSessionTimeout : 1000
FileInfoCacheEntriesMax : 64
FileInfoCacheLifetime : 10
FileNotFoundCacheEntriesMax : 128
FileNotFoundCacheLifetime : 5
KeepConn : 600
MaxCmds : 50
MaximumConnectionCountPerServer : 32 OplocksDisabled : False RequireSecuritySignature : False SessionTimeout : 60
UseOpportunisticLocking : True WindowSizeThreshold : 8
References: https://technet.microsoft.com/en-us/library/jj635708(v=wps.630).aspx

NEW QUESTION 13
You have a server named Server1 that runs Windows Server 2021. Server1 has four SCSI disks and a storage pool named Pool1 that contains three disks.
You create a virtual disk named Disk 1 that uses a mirrored layout.
You create a partition named Partition1 that uses all of the available space on Disk 1. You need to extend Partition1.
What should you do first?

• A. From Windows PowerShell, run the Resize-VirtualDisk cmdlet.
• B. From Windows PowerShell, run the Resize-StorageTier cmdlet.
• C. From Windows PowerShell, run the Expand-IscsiVirtualDisk cmdlet.
• D. From Disk Management, modify the properties of Partition1.

Answer: A

NEW QUESTION 14
You have a server named Server1 that runs Windows Server 2021.
The disk configuration for Server1 is shown in the exhibit. (Click the Exhibit button.)

You add Server1 to a cluster.
You need to ensure that you can use Disk 1 for Storage Spaces Direct. What should you do first?

• A. Set Disk 1 to offline.
• B. Convert Partition (E:) to ReFS.
• C. Convert Disk 1 to a dynamic disk.
• D. Delete Partition (E:).

Answer: D

Explanation: The disks used in Storage Spaces Direct cannot contain existing partitions.

NEW QUESTION 15
You have a server named Server1 that runs Windows Server 2021. Server1 is located on the perimeter network, and only inbound TCP port 443 is allowed to connect Server1 from the Internet. You install the Remote Access server role on Server1.
You need to configure Server1 to accept VPN connections over port 443. Which VPN protocol should you use?

• A. PPTP
• B. L2TP
• C. SSTP
• D. lKEv2

Answer: C

Explanation: References:
https://www.thomasmaurer.ch/2021/10/how-to-install-vpn-on-windows-server-2021/ https://www.lukasberan.com/2021/12/how-to-configure-sstp-vpn-on-windows-server/

NEW QUESTION 16
DRAG DROP
Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server2 that run Windows Server 2021.
Server1 has IP Address Management (IPAM) installed. Server2 has Microsoft System Center 2021 Virtual Machine Manager (VMM) installed.
You need to integrate IPAM and VMM.
Which types of objects should you create on each server? To answer, drag the appropriate object types to the correct servers. Each object type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation: Server 1 (IPAM): Access Policy
VMM must be granted permission to view and modify IP address space in IPAM, and to perform remote management of the IPAM server. VMM uses a “Run As” account to provide these permissions to the IPAM network service plugin. The “Run As” account must be configured with appropriate permission on the IPAM server.
To assign permissions to the VMM user account
In the IPAM server console, in the upper navigation pane, click ACCESS CONTROL, right-click Access Policies in the lower navigation pane, and then click Add AccessPolicy.
Etc.
Server 2 (VMM) #1: Network Service Server 2 (VMM) #2: Run As Account
Perform the following procedure using the System Center VMM console. To configure VMM (see step 1-3, step 6-7)

Etc. References:
https://technet.microsoft.com/en-us/library/dn783349(v=ws.11).aspx

NEW QUESTION 17
Your network contains an Active Directory forest. The forest contains two domains named litwareinc.com. The contoso.com domain contains two domain controllers named LON-DC01 and LON-DC02. The domain controllers are located in a site named London that is associated to a subnet of 192.168.10.0/24.
You discover that LON-DC02 is not a global catalog server. You need to configure LON-DC02 as a global catalog server. What should you do?

• A. From Active Directory Sites and Service
• B. modify the NTDS Settings object of the London site.
• C. From the properties of the LON-DC02 computer account in Active Directory Users and computers, modify the City attribute.
• D. From Active Directory Sites and Services, modify the properties of the 192.168.10.0/24 IP subnet.
• E. From the properties of the LON-DC02 computer account in Active Directory Users and Computers, modify the NTDS settings.

Answer: D

NEW QUESTION 18
You have a test environment that includes two servers named Server1 and Server2. The severs run Windows Server 2021. You need to ensure that you can implement SMB Direct between the servers. Which feature should the servers support?

• A. Remote Direct Memory Access (RDMA)
• B. Multipath I/O (MPIO)
• C. virtual machine queue (VMQ)
• D. single root I/O virtualization (SR-IOV)

Answer: A

Explanation: https://technet.microsoft.com/en-us/library/jj134210%28v=ws.11%29.aspx?f=255&MSPPError=- 2147217396