Your network contains an Active Directory domain named contoso.com. You are deploying
Microsoft Advanced Threat Analytics (ATA) to the domain. You install the ATA Center on server
named Server1 and the ATA Gateway on a server named Served. You need to ensure that Server2

can collect NTLM authentication events. What should you configure?

Your network contains an Active Directory domain named contoso.com. The domain contains 100
servers. You deploy the Local Administrator Password Solution (LAPS) to the network. You deploy
a new server named FinanceServer5, and join FinanceServer5 to the domain. You need to ensure
that the passwords of the local administrators of FinanceServer5 are available to the LAPS
administrators. What should you do?

Your network contains an Active Directory domain named contoso.com. The domain contains a
server named Serve1, that runs Windows Server 2016. A technician is testing the deployment of
Credential Guard on Server1. You need to verify whether Credential Guard is enabled on Server1.
What should you do?

Your network contains an Active Directory domain named contoso.com. The domain contains two
servers named Server1 and Server2 that run Windows Server 2016. Server1 is configured as a
domain controller. You configure Server1 as a Just Enough Administration (JEA) endpoint. You
configure the required JEA rights for a user named User1. You need to tell User1 how to manage
Active Directory objects from Server2. What should you tell User1 to do first on Server2?

Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution. After you answer a question in this section, you will NOT be able to return
to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com. All servers run Windows
Server 2016. The forest contains 2,000 client computers that run Windows 10. All client computers
are deployed from a customized Windows image. You need to deploy 10 Pnvileged Access
Workstations (PAWs). The solution must ensure that administrators can access several client
applications used by all users.
Solution: You deploy 10 physical computers and configure them as PAWs. You deploy 10 additional
computers and configure them by using the customized Windows image.

Does this meet the goal?

Your network contains an Active Directory domain named contoso.com. The domain contains five
servers. All servers run Windows Server 2016. A new secunty policy states that you must modify
the infrastructure to meet the following requirements:
– Limit the nghts of administrators.
– Minimize the attack surface of the forest.
Support Multi-Factor authentication for administrators.
You need to recommend a solution that meets the new secunty policy requirements. What should
you recommend deploying?

Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution. After you answer a question in this section, you will NOT be able to return
to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains a
computer named Computer1 that runs Windows 10. Computer1 connects to a home network and
a corporate network. The corporate network uses the 172.16.0.0/24 address space internally.
Computerl runs an application named App1 that listens to port 8080. You need to prevent
connections to App1 when Computer1 is connected to the home network.
Solution: From Windows Firewall in the Control Panel, you add an application and allow the
application to communicate through the firewall on a Private network.
Does this meet the goal?

Your network contains an Active Directory domain named contoso.com. The domain contains a
server named Server5 that has the Windows Server Update Services server role installed. You
need to configure Windows Server Update Services (WSUS) on Server5 to use SSI. You install a
certificate in the local Computer store. Which two tools should you use? Each correct answer
presents part of the solution.

Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution. After you answer a question In this section, you will NOT be able to return
to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory forest named contoso.com. All servers run Windows
Server 2016. The forest contains 2,000 client computers that run Windows 10. All client computers
are deployed from a customized Windows image. You need to deploy 10 Privileged Access
Workstations (PAWs). The solution must ensure that administrators can access several client
applications used by all users.
Solution: You deploy one physical computer and configure it as a Hyper-V host that runs Windows
Server 2016. You create 10 virtual machines and configure each one as a PAW.
Does this meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution. After you answer a question In this section, you will NOT be able to return

to it. As a result, these questions will not appear in the review screen.
Yout network contains an Active Directory domain named contoso.com. The domain contains a
computer named Computer1 that runs Windows 10. Computer1 connects to a home network and
a corporate network. The corporate network uses the 172.16.0.0/24 address space internally.
Computer1 runs an application named App1 that listens to port 8080. You need to prevent
connections to App1 when Computer1 is connected to the home network.
Solution: ……
Does this meet the goat?