Does this meet the goal?
Your network contains an Active Directory domain named contoso.com.
The domain contains a computer named Computer1 that runs Windows 10.
Computer1 connects to a home network and a corporate network.
The corporate network uses the 172.16.0.0/24 address space internally.
Computer1 runs an application named App1 that listens to port 8080.
You need to prevent connections to App1 when Computer1 is connected to the home network.
Solution: From Group Policy Management, you create an AppLocker rule.
Does this meet the goal?
Does this meet the goal?
Your network contains an Active Directory domain named contoso.com.
The domain contains a computer named Computer1 that runs Windows 10.
Computer1 connects to a home network and a corporate network.
The corporate network uses the 172.16.0.0/24 address space internally.
Computer1 runs an application named App1 that listens to port 8080.
You need to prevent connections to App1 when Computer1 is connected to the home network.
Solution: From Group Policy Management, you create a software restriction policy.
Does this meet the goal?
Does this meet the goal?
You network contains an Active Directory forest named contoso.com.
All domain controllers run Windows Server 2016 Member servers run either Windows Server 2012 R2 or
Windows Server 2016.
Client computers run either Windows 8.1 or Windows 10.
You need to ensure that when users access files in shared folders on the network, the files are encrypted when
they are transferred over the network.
Solution: You enable SMB encryption on all the computers in domain. Does this meet the goal?
Does this meet the goal?
You network contains an Active Directory forest named contoso.com.
All domain controllers run Windows Server 2016 Member servers run either Windows Server 2012 R2 or
Windows Server 2016.
Client computers run either Windows 8.1 or Windows 10.
You need to ensure that when users access files in shared folders on the network, the files are encrypted when
they are transferred over the network.
Solution: You enable access-based enumeration on all the file shares. Does this meet the goal?
You need to use Desired State Configuration (DSC) to co…
Drag and Drop Question
You have a network that contains several servers that run Windows Server 2016. You need to use
Desired State Configuration (DSC) to configure the servers to meet the following requirements:
– Install the Web Server role
– Start the World Wide Web Publishing service
How should you configure the DSC recourses? (To answer, drag the appropriate values to the
correct locations. Each value may be used once, more than once, or not at all. You may need to
drag the split bar between panes or scroll to view content.)
How should you configure Server1?
Hotspot Question
You have a server named Server1 that runs Windows Server 2016. Server1 has the Windows
Application Proxy role service installed. You need to publish Microsoft Exchange ActiveSync
services by using the Publish New Application Wizard. The ActiveSync services must use
preauthentication. How should you configure Server1? (To answer, select the appropriate options
in the answer area.)
How should you configure the preauthentication method f…
Hotspot Question
You have a server named Server1 that runs Windows Server 2016. Server1 has the Web
Application Proxy role service installed. You need to publish Microsoft Exchange Server 2013
services through the Web Application Proxy. The solution must use preauthentication whenever
possible. How should you configure the preauthentication method for each service? (To answer,
select the appropriate options in the answer area.)
Which cmdlet should you run?
Your network contains an Active Directory forest named contoso.com. You have an Active Directory
Federation Services (AD FS) farm. The farm contains a server named Server1 that runs Windows
Server 2012 R2. You add a server named Server2 to the farm. Server2 runs Windows Server 2016.
You remove Server1 from the farm. You need to ensure that you can use role separation to manage
the farm. Which cmdlet should you run?
Which cmdlets should you run?
Hotspot Question
Your network contains an Active Directory forest named contoso.com. Your company has a custom
application named ERP1. ERP1 uses an Active Directory Lightweight Directory Services (AD LDS)
server named Server1 to authenticate users. You have a member server named Server2 that runs
Windows Server 2016. You install the Active Directory Federation Services (AD FS) server role on
Server2 and create an AD FS farm. You need to configure AD FS to authenticate users from the
AD LDS server. Which cmdlets should you run? (To answer, select the appropriate options in the
answer area.)
What command should you run?
Hotspot Question
You have a Windows Server 2016 failover cluster that has a cluster network named
ClusterNetwork1. You need to ensure that ClusterNetwork1 is enabled for cluster communication
only. What command should you run? (To answer, select the appropriate options in the answer
area.)
