Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server
named Server1. All client computers run Windows 10.
On Server1, you have the following zone configuration.image:Img132-195.jpg
You need to prevent Server1 from resolving queries from DNS clients located on Subnet4. Server1 must
resolve queries from all other DNS clients.
Solution: From Windows PowerShell on Server1, you run the Add-DnsServerQueryResolutionPolicy cmdlet.
Does this meet the goal?

Your network contains an Active Directory domain named contoso.com.
The domain contains a DNS server named Server1.
All client computers run Windows 10.
On Server1, you have the following zone configuration.

Server1 must resolve queries from all other DNS clients.
Solution: From Windows Firewall with Advanced Security on Server1, you create an inbound rule.
Does this meet the goal?

Your network contains an Active Directory domain named contoso.com. The domain contains a DNS server
named Server1. All client computers run Windows 10.
On Server1, you have the following zone configuration.

resolve queries from all other DNS clients.
Solution: From the Security setting of each zone on Server1, you modify the permissions.
Does this meet the goal?

HOTSPOT
Your network contains an Active Directory forest named contoso.com.
The forest contains an Active Directory Federation Services (AD FS) farm.
You install Windows Server 2016 on a server named Server2.
You need to configure Server2 as a node in the federation server farm.
Which cmdlets should you run? To answer, select the appropriate options in the answer area.
Hot Area:

You have a Hyper-V host named Server1 that runs Windows Server 2016.
Server1 has a virtual machine named VM1 that uses a single VHDX file.
VM1 is configured shown in the following table:

You plan to use VM1 as a virtual Machine Template to deploy shielded virtual machines.
You need to ensure that VM1 can be used to deploy shielded virtual machines.
What should you run?

Each question is independent of the other questions in this series.
Information and details provided in a question apply only to that question.
You have three servers named Server1, Server2. Server3 that run Windows Server 2016 Server1 and Server2
have the Hyper-V server role installed.
Server3 has the iSCSI Target Server role service installed.You need to create a Hyper-V cluster.
Which tool should you use first?

You have an Active Directory domain named Contoso com.
The domain contains servers named Server1 and Server2 that run Windows Server 2016.
You install the Remote Access server role on Server1.
You install the Network Policy and Access Services server role on Server2.
You need to configure Server1 to use Server2 as a RADIUS server.
What should you do?

DRAG DROP
You are deploying DirectAccess to a server named DA1.
DA1 will be located behind a firewall and will have a single network adapter.
The intermediary network will be IPv4.
You need to configure firewall to support DirectAccess.
Which firewall rules should you create for each type of traffic? To answer, drag the appropriate ports and
protocols to the correct traffic types. Each port and protocol may be used once, more than once, or not at all.
You may need to drag the split bar between panes or scroll to view content.
Select and Place:

DRAG DROP
You have a server named Server1 that runs Windows Server 2016.
You plan to deploy Internet Information Services (IIS) in a Windows container.
You need to prepare Server1 for the planned deployment.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of
actions to the answer area and arrange them in the correct order.
Select and Place:

You have a server named Served that runs Windows Server 2016.
Server1 will be used as a VPN server.
You need to configure Server1 to support VPN Reconnect.
Which VPN protocol should you use?