Windows Server Hybrid Administrator

• #61

  Your on-premises network contains an Active Directory domain named contoso.com. You have an Azure AD tenant. You plan to sync contoso.com with the Azure AD tenant by using Azure AD Connect cloud sync. You need to create an account that will be used by Azure AD Connect cloud sync. Which type of account should you create?

  • Asystem-assigned managed identity.
  • Bgroup managed service account (gMSA).
  • Cuser.
  • DInetOrgPerson.
  উত্তর দেখুন
• #622টি বাছুন

  You have an Azure subscription that contains the following resources: An Azure Log Analytics workspace. An Azure Automation account. Azure Arc. You have an on-premises server named Server1 that is onboaraed to Azure Arc You need to manage Microsoft updates on Server! by using Azure Arc Which two actions should you perform? Each correct answer presents part of the solution.

  • AAdd Microsoft Sentinel to the Log Analytics workspace.
  • BOn Server1, install the Azure Monitor agent.
  • CFrom the Automation account, enable Update Management for Server1.
  • DFrom the Virtual machines data source of the Log Analytics workspace, connect Server1.
  উত্তর দেখুন
• #63

  You have a Windows Server container host named Server1 and an Azure subscription. You deploy an Azure container registry named Registry1 to the subscription. On Server1, you create a container image named image1. You need to store imager in Registry1. Which command should you run on Server1?

  • ABox 1: docker. Box 2: pull.
  • BBox 1: docker. Box 2: push.
  • CBox 1: azcopy. Box 2: push.
  • DBox 1: git. Box 2: pull.
  উত্তর দেখুন
• #64

  Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the users shown in the following table. The domain has the Group Policy Objects (GPOs) shown in the following table. The GPOs are configured as shown in the following table.1. When User2 changes their password, at least 12 characters must be used for the new password.

  • AYes.
  • BNo.
  উত্তর দেখুন
• #65

  Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the users shown in the following table. The domain has the Group Policy Objects (GPOs) shown in the following table. The GPOs are configured as shown in the following table.1. When User1 changes their password, at least eight characters must be used for the new password.

  • AYes.
  • BNo.
  উত্তর দেখুন
• #66

  Your network contains three Active Directory Domain Services (AD DS) forests as shown in the following exhibit. The network contains the users shown in the following table. The network contains the security groups shown in the following table. You can add User2 to Group3 [...].

  • AYes.
  • BNo.
  উত্তর দেখুন
• #67

  Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains a child named east.contoso.com and the servers shown in the following table. You need to create a folder for the Central Store to manage Group Policy template files for the entire forest. What should you name the folder, and on which server should you create the folder?

  • AName: CentralDefinitions. Server: Server1 only.
  • BName: TemplateDefinitions. Server: DC1, DC2, and Server1.
  • CName: CentralDefinitions. Server: DC1 and DC2 only.
  • DName: PolicyDefinitions. Server: DC2 only.
  উত্তর দেখুন
• #68

  User1 can create a new virtual machine in RG1.

  • AYes.
  • BNo.
  উত্তর দেখুন
• #69

  Overview -Company Information - ADatum Corporation is a manufacturing company that has a main office in Seattle and two branch offices in Los Angeles and Montreal. Fabrikam Partnership - ADatum recently partnered with 2 company named Fabrikam, Inc. Fabrikam is a manufacturing company that has a main office in Boston and a branch office in Orlando. Both companies intend to collaborate on several joint projects. Existing Environment - ADatum AD DS Environment - The on-premises network of A. Datum contains an Active Directory Domain Services (AD DS) forest named adatum.com. The forest contains two domains named adatum.com and east.adatum.com and the domain controllers shown in the following table. Fabrikam AD DS Environment - The on-premises network of Fabrikam contains an AD DS forest named fabrikam.com. The forest contains two domains named fabrikam.com and south.fabrikam.com. The fabrikam.com domain contains an organizational unit (OU) named Marketing. Server Infrastructure - The adatum.com domain contains the servers shown in the following table. HyperV1 contains the virtual machines shown in the following table. All the virtual machines on HyperV1 have only the default management tools installed. SSPace1 contains the Storage Spaces virtual disks shown in the following table. Azure Resources - ADatum has an Azure subscription that contains an Azure AD tenant. Azure AD Connect is configured to sync the adatum.com forest with Azure AD. The subscription contains the virtual networks shown in the following table. The subscription contains the Azure Private DNS zones shown in the following table. The subscription contains the virtual machines shown in the following table. All the servers are in a workgroup. The subscription contains a storage account named storage1 that has a file share named share1. Requirements - Planned Changes - ADatum plans to implement the following changes: Sync Data1 to share1. Configure an Azure runbook named Task1. Enable Azure AD users to sign in to Server1. Create an Azure DNS Private Resolver that has the following configurations: Name: Private1 Region: West US Virtual network: VNet1 Inbound endpoint: SubnetB Enable users in the adatum.com domain to access the resources in the south.fabrikam.com domain. Technical Requirements - ADatum identifies the following technical requirements: The data on SSPace1 must be available always. DC2 must become the schema master if DC1 fails. VM3 must be configured to enable per-folder quotas. Trusts must allow access to only the required resources. The users in the Marketing OU must have access to storage1. Azure Automanage must be used on all supported Azure virtual machines. A direct SSH session must be used to manage all the supported virtual machines on HyperV1. You need to ensure that access to storage1 for the Marketing OU users meets the technical requirements. What should you implement?

  • AActive Directory Federation Services (AD FS).
  • BAzure AD Connect in staging mode.
  • CAzure AD Connect cloud sync.
  • DAzure AD Connect in active mode.
  উত্তর দেখুন
• #70

  Overview Fabrikam, Inc. Is a manufacturing company that has a main office In New York and a branch office in Seattle. On-premises Servers The on-premises network contains servers that run Windows Server as shown in the following table. DC1 hosts all the operation master roles. WEB1 and WEB2 run an Internet Information Services (IIS) web app named Webapp1. On-premises NetworkThe New York and Seattle offices are connected by using redundant WAN links. The client computers in each office get IP addresses from their local DHCP server. DHCP! contains a scope named Scope1 that has addresses for the New York office. DHCP2 contains a scope named Scope2 that has addresses for the Seattle office.Group Policy Object (GPOs) The cwp.fabrikam.com domain contains the organizational units (OUs) and custom Group Policy Objects (GPOs) shown in the following table. Requirements: Fabrikam Identifies the following planned changes: Create a single Azure subscription named Sub1 that will contain a single Azure virtual network named Vnet1. Replace the WAN links between the Seattle and New York offices by using Azure Virtual WAN and ExpressRoute. Both on-premises offices will be connected to Vnet1 by using ExpressRoute. Create three Azure file shares named newyorkfiles, seattfefiles, and companyfiles. Create a domain controller named dc3.corp.fabrikam,com in Vnet1. Deploy an Azure Virtual Desktop host pool lo Vnet1. The Azure Virtual Desktop session hosts will be hybrid Azure AD joined. License all servers for Microsoft Defender for servers. Use Azure Policy to enforce configuration management policies on the servers in Azure and on-premises. Networking Requirements Fabrikam identifies the following security requirements: Apply GP04 to the Azure Virtual Desktop session hosts. Ensure that Azure Virtual Desktop user sessions lock after being idle for 10 minutes. Users must be able to control the lockout lime manually from their client computer. Ensure that server administrators request approval before they can establish a Remote Desktop connection to an Azure virtual machine. If the request is approved, the connection must be established within two hours. Prevent user passwords from containing all or part of words that are based on the company name, such as Fab. fabrikam or fsbr! Ensure that all instances of Webapp1 use the same service account. The password of the service account must change automatically every 30 days. Prevent domain controllers from directly contacting hosts on the internet. File Sharing Requirements You need to configure the synchronization of Azure files to meet the following requirements: Ensure that seattlefiles syncs to FS2. Ensure that newyorkfiles syncs to FS1. Ensure that companyfiles syncs to both FS1 and FS2. A custom banned password list: [...].

  • ADC1 only.
  • BAll the domain controllers.
  • CVM1 and VM2.
  • DThe Azure AD tenant.
  উত্তর দেখুন
• #71

  You deploy a single-domain Active Directory Domain Services (AD DS) forest named contoso.com. You deploy five servers to the domain. You add the servers to a group named ITFarmHosts. You plan to configure a Network Load Balancing (NLB) cluster named NLBCluster.contoso.com that will contain the five servers. You need to ensure that the NLB service on the nodes of the cluster can use a group managed service account (gMSA) to authenticate. Which three PowerShell cmdlets should you run in sequence?

  • ABox 1: Add-ADComputerServiceAccount. Box 2: Add-KdsRootKey. Box 3: Set-KdsConfiguration.
  • BBox 1: Set-KdsConfiguration. Box 2: Install-ADServiceAccount. Box 3:Add-ADComputerServiceAccount.
  • CBox 1: Add-ADGroupMember. Box 2: Set-KdsConfiguration. Box 3:New-ADServiceAccount.
  • DBox 1: Add-KdsRootKey. Box 2: New-ADServiceAccount. Box 3: Install-ADServiceAccount.
  উত্তর দেখুন
• #72

  Your network contains two Active Directory forests and a domain trust as shown in the following exhibit. The domain trust has the following configurations: Name: adatum.com. Type: External. Direction: One-way, outgoing. Outgoing trust authentication level: Domain-wide authentication The forests contain the users shown in the following table. The forests contain the network shares shown in the following table. User can be assigned permissions for Share3.

  • AYes.
  • BNo.
  উত্তর দেখুন
• #73

  Your network contains an Active Directory domain named contoso.com. The domain contains group managed service accounts (gMSAs). You have a server named Server1 that runs Windows Server and is in a workgroup. Server1 hosts Windows containers. You need to ensure that the Windows containers can authenticate to contoso.com. Which three actions should you perform in sequence?

  • ABox 1: In contoso.com, generate the Key Distribution Service (KDS) root key. Box 2: On Server1, run New-CredentialSpec. Box 3: On Server1, install and run ccg.exe.
  • BBox 1: In contoso.com, generate the Key Distribution Service (KDS) root key. Box 2: On Server1, run New-CredentialSpec. Box 3: From a domain-joined computer, create the credential spec file and copy it to Server1.
  • CBox 1: In contoso.com, create the gMSA and a standard user account. Box 2: In contoso.com, generate the Key Distribution Service (KDS) root key. Box 3: On Server1, install and run ccg.exe.
  • DBox 1: From a domain-joined computer, create the credential spec file and copy it to Server1. Box 2: In contoso.com, create the gMSA and a standard user account. Box 3: On Server1, run New-CredentialSpec.
  • EBox 1: On Server1, install and run ccg.exe. Box 2: From a domain-joined computer, create the credential spec file and copy it to Server1. Box 3: On Server1, run New-CredentialSpec.
  উত্তর দেখুন
• #74

  You need to configure network communication between the Seattle and New York offices. The solution must meet the networking requirements. What should you configure?

  • AOn a Virtual WAN hub: An ExpressRoute gateway. In the offices: A Site to-Site VPN.
  • BOn a Virtual WAN hub:A virtual network gateway. In the offices: An ExpressRoute circuit connection.
  • COn a Virtual WAN hub:An ExpressRoute gateway. In the offices: An Azure application gateway.
  • DOn a Virtual WAN hub:An ExpressRoute circuit connection. In the offices: An on premises data gateway.
  উত্তর দেখুন
• #75

  Your network contains an Active Directory Domain Services (AD DS) domain named adatum.com. The domain contains a server named Server1 and the users shown in the following table. Server1 contains a folder named D:Folder1. The advanced security settings for Folder 1 are configured as shown in the Permissions exhibit. Folder1 is shared by using the following configurations. The share permissions for Share1 are shown in the following table. User3 can delete files in Share1.

  • AYes.
  • BNo.
  উত্তর দেখুন
• #76

  Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. You create the resources shown in the following table.You create the Group Policy Objects (GPOs) shown in the following table. You configure the Group Policy Preferences shown in the following table. If User3 signs in to Comp1, a shortcut named Link2 will appear on the computer's desktop.

  • AYes.
  • BNo.
  উত্তর দেখুন
• #77

  Contoso, Ltd. is a company that has a main office in Seattle and two branch offices in Los Angeles and Montreal. The network contains an on premises Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains two domains named contoso.com and canada.contoso.com. The forest contains the domain controllers shown in the following table. All the domain controllers are global catalog servers. The network contains the servers shown in the following table. A server named Server4 runs Windows Server and is in a workgroup. Windows Firewall on Server4 uses the private profile. Server2 hosts three virtual machines named VM1, VM2, and VM3. VM3 is a file server that stores data in the volumes shown in the following table. The contoso.com domain has the Group Policies Objects (GPOs) shown in the following table. The forest contains the users shown in the following table. The forest contains the groups shown in the following table. When an administrator signs in to the console of VM2 by using Virtual Machine Connection, and then disconnects from the session without signing out, another administrator can connect to the console session as the currently signed in user. Contoso identifies the following technical requirements: Change the replication schedule for all site links to 30 minutes. Promote Server1 to a domain controller in canada.contoso.com. Install and authorize Server3 as a DHCP server. Ensure that User1 can manage the membership of all the groups in Contoso\OU3. Ensure that you can manage Server4 from Server1 by using PowerShell remoting. Ensure that you can run virtual machines on VM1. Force users to provide credentials when they connect to VM2. On VM3, ensure that Data Deduplication on all volumes is possible. User1 must use a password that has at least 10 characters.

  • AYes.
  • BNo.
  উত্তর দেখুন
• #78

  Which three actions should you perform in sequence to meet the security requirements for Webapp1?

  • ABox 1: Create a standalone managed service account
  • BBox 1:Create the Key Distribution Services (KDS) root key in AD DS. Box 2: Create a group managed service account (gMSA)
  • CBox 1: Create a system-assigned managed identity in
  • DBox 1:Confiqure the lIS application pool to run as
  উত্তর দেখুন
• #79

  Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. You need to identify which server is the PDC emulator for the domain. Solution: From Active Directory Domains and Trusts, you right-click Active Directory Domains and Trusts in the console tree, and then select Operations Master. Does this meet the goal?

  • AYes
  • BNo
  উত্তর দেখুন
• #80

  You have an Azure virtual machine named VM1 that has a private IP address only. You configure the Windows Admin Center extension on VM1. You have an on-premises computer that runs Windows 11. You use the computer for server management. You need to ensure that you can use Windows Admin Center from the Azure portal to manage VM1. What should you configure?

  • Aan Azure Bastion host on the virtual network that contains VM1.
  • Ba VPN connection to the virtual network that contains VM1.
  • Ca network security group 1NSG) rule that allows inbound traffic on port 443.
  • Da private endpoint on the virtual network that contains VM1.
  উত্তর দেখুন

নিজের স্কোর রাখতে, সময়সীমার মক পরীক্ষা দিতে ও AI ব্যাখ্যা পেতে চান? বিনামূল্যে অ্যাকাউন্ট খুলুন